consumer protection legislation
Same as pretty much all of our recent consumer protection legislation.
There is a difference here. The consumer protection stuff is an EU directive, which means that national parliaments are required to transpose it into national law. Some enact laws that go further than the directive, as the UK did for consumer protection. UK consumer protections go beyond the EU-mandated minima.
GDPR is a Regulation, it is an EU law that is binding as-is on all EU members without any national legislation being required.