Not evident in the statement is the inconvenient fact that diverging too far from the EU’s data protection regime — the General Data Protection Directive — could have consequences for UK businesses which regularly share data with units based in the EU or its economic area.