which uk act of parliament was created to incorporate gdpr