Data protection is a key battleground in determining the EU and UK future relationship beyond the end of the transition period, when the UK will be treated as a 'third country'. Businesses that have adapted to comply with GDPR will now need to assess their compliance with both the EU and UK data protection regimes.