Comment by outsideoflife

That sort of depends if you were complying with the UK Data Protection Act (1998), or any of the other European acts stemming from the 1995 directive, already. GDPR is only an incremental step from there. It would appear that lots of people considered the DPA as optional, yes GDPR is quite a bit of work for them.