An already uncertain framework for protecting users was jolted by Brexit.