It has a significant impact on any businesses in the UK that handles customer data. It impacts both data controllers (those who own the data) and data processors (anyone who handles it on your behalf). The GDPR was designed to put control in the hands of the customer and to give them far greater rights over who hold their data and how it is used.