On 31st January 2020, the United Kingdom formally left the European Union. However, by virtue of the Withdrawal Agreement signed, the United Kingdom has ceased to be a member of the European Union but must continue to apply the General Data Protection Regulation (GDPR) in matters of personal data protection, to all data of data subjects outside the United Kingdom, that have been processed prior to the end of the transitional period (which ends, a priori, on 31st December 2020). This implies that, for the purpose of exporting data, the situation in the United Kingdom is comparable to that of a Member State, so that during the transition period the current GDPR is applicable; However, the situation will be completely different after the end of the transition period that will require both the United Kingdom and the European Union to prepare a new generation legal framework to meet the challenges in terms of personal data protection that the Current globalised environment demands, which will have the projected New Association Agreement between the European Union and the United Kingdom as a reference.