Re: "The UK enacted GDPR through the Data Protection Act 2018 (DPA2018)"
"So you UK citizens can't invoke GDPR protection any longer - they need to refer exactly to their own DPA"
As they always have, GDPR is not a law in itself it is enacted into law by the various states in the EU, such as the Republic of Ireland, Germany, France etc and as such the DPA has not changed. The difference now is the highest court for appeal will be the UK's House of Lords not the European Court of Justice.
"Still UK can change it at its will now, without being bound to GDPR any longer."
I think that was one of the points of Brexit (agree or not) the control of your own laws. So yes the UK could weaken or strengthen the DPA, just as any EU changes with the GDPR would no longer have to be enacted by the UK.
But at present the DPA is the same DPA as before brexit so Max Schrem achievements to 30/12/31 should apply automatically to UK now.
Biting the hand that feeds IT
