The UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (GDPR) all explain how to protect the personal data of your customers, clients and even colleagues. They control how personal data is collected, processed, stored and used. These two regulations are almost word for word identical to each other.
When thinking about data protection, both the DPA 2018 and the relevant GDPR should be referenced.