"The UK enacted GDPR through the Data Protection Act 2018 (DPA2018)"
Still UK can change it at its will now, without being bound to GDPR any longer.
So you UK citizens can't invoke GDPR protection any longer - they need to refer exactly to their own DPA - and if they are afraid of data being sent to US, again, they can't invoke any "European" protection. Max Schrem achievement won't apply automatically to UK now.
You're on your own now - it's what you wanted, isn't it?
Biting the hand that feeds IT
