GDPR was introduced into law throughout the EU, including the UK in 2016. We have been 'enjoying' a transition period before it came into force.
The ICO says it is now 'regulating' though they wish to be a pragmatic regulator. So all that preparation and work has put you in the right place.
There will be a raft of other data related legislation to be digested covering all manner of things, particularly those which were explicitly not covered by GDPR.