> the UK made sure to implement a clone of GDPR in UK law before leaving the EU/EEA.

I suggest instead that the UK government have deliberately extracted themselves from the EU's version of GDPR, by cloning it.

The UK is now an external "third country" in terms of EU GDPR, and has a data border with the EU - whereas Norway sits within EU GDPR.