I am trying to be on top of the legal stuff. I did start EU first with GDPR compliance and expanding to the UK was kind of low effort. Comparatively little changes are required. I might expand on that in a future article.. all that legal stuff was quite a bit of effort but I got lucky with my lawyer choice and felt very supported from them at reasonable cost.
There is also Data Act, AI Act. Not difficult to comply with but lawyer probably needs to look the papers over