From GDPR to UK GDPR: What, if anything, has changed four years on?