[detaro]

the key word is General Data Protection Regulation. Regulations are law, and apply directly, no local implementation needed (except for "interfaces", e.g. in the case of GDPR changes to existing laws to clarify how they interact with GDPR and to make exceptions GDPR explicitly allows the states to make)

Directives are the ones that only direct the states to enact laws implementing them.

[DanBC]

But in the case of GDPR the UK has also implemented the DPA 2018 which implements GDPR.

[pdpi]

Ah awesome. Thanks for the clarification.