Data protection and the regulatory framework: preparing for EU GDPR and the consequences of Brexit