I wonder how Brexit fits into EU regulations.
However, there were data protection acts in 1998 and 1984, and it seems unlikely the general principle of access to personal data -- which was there before GDPR -- would be removed.
Brexit allows them to start again on that side of the Atlantic, albeit on a smaller scale.