GDPR and Brexit. The General Data Protection Regulation applies to all companies based in the EU and those with EU citizens as customers. It has an extraterritorial effect, so non-EU countries are also affected. Even though the UK is planning to leave the EU, the UK will still need to comply with the GDPR.