GPDR is essentially some guidelines published by OCDE in 1980 turned into law. So yes we should already be operating like that from the start.
I get the feeling that to some countries GPDR is not a big deal and to others is a nightmare, depending on the business culture.