How can it not become law? Is there anyone against it?

At the end of the day laws like GDPR are only as useful as their enforcement. The UK has never been very good at this – even before Brexit – and EU consumer protection laws were widely ignored in the UK even well before Brexit because they were never enforced. I never had particular high hopes the GDPR would be enforced in any meaningful way in the UK, Brexit or no Brexit.