That's not true; the GDPR is not a Directive, but a Regulation, meaning the actual text applies directly, it's not transposed by the national legislators.

https://en.wikipedia.org/wiki/Regulation_(European_Union)