What kind of privacy/data protection rules do we have to implement?

Hello, we are located in the UK with early users in Europe and a broad potential user base in Europe, US and Asia. Especially with regards to Brexit, what kind of privacy/data protection regulations should we apply to our business? Should we still implement EU rules?