Whether in or out of EU ( and we're in for at least two more years), GDPR comes into effect May 2018 and effects all UK businesses.
Better resurrect those plans if you want to continue trading.
See:
- "UK's Institute of Directors worried about cybersecurity"
- "Cyber Security is about more than just technology"
One in four businesses in the UK say they have cancelled all preparations for the EU General Data Protection Regulation in the misunderstanding that it will not apply after Brexit, new research reveals.
http://www.information-age.com/1-4-uk-businesses-cancelled-preparations-gdpr-123465421/