The Data Protection Act only applies to information used to identify an individual or their personal details while GDPR extends that scope to have location data, genetic information, online identification markers, and many more.