Hacker News Reader

Actual quote of the GDPR: (171) Directive 95/46/EC should be repealed by this Regulation. Processing already under way on the date of application of this Regulation should be brought into conformity with this Regulation within the period of two years after which this Regulation enters into force. [...]

I can't say for sure what's the scope, but I stand by my point that PART of it have a delay to get into conformity.

View on HN

As mentioned, GDPR has been in force for 2 years - Friday is the end of the grace period. But, as I referenced in another comment, it doesn't just "end" tomorrow, the expectation is that you have a plan in place to address future privacy issues and that you're acting in good faith.

If you're not compliant, but aren't deliberately not compliant, and are active in trying to address that, and report anything you might be breaching, then they're not going to go after you like hounds (in the UK at least).

The ICO seems to be a fair and reasonable body, they just now have some extra teeth.

The GDPR was adopted in 2016. The two year grace period in your quote ends on the 25th.

Reply on news.ycombinator.com