I am reliably informed that this act is an EU directive and so when we leave the EU next March it will no longer apply.

This is incorrect as the UK Government confirmed they would adopt the GDPR regulations in 2016, before the regulation was implemented, and the terms of GDPR have been incorporated into the UK’s Data Protection Act 2018.