I read somewhere very recently that because GDPR was enacted before, that it still applied there. I'd appreciate it if someone confident in their legal knowledge could correct or confirm this claim.