https://www.theverge.com/2018/5/22/17378688/gdpr-general-data-protection-regulation-eu

The General Data Protection Regulation will go into effect on May 25th, and no one is ready — not the companies and not even the regulators.

After four years of deliberation, the General Data Protection Regulation (GDPR) was officially adopted by the European Union in 2016. The regulation gave companies a two-year runway to get compliant, which is theoretically plenty of time to get shipshape. The reality is messier. Like term papers and tax returns, there are people who get it done early, and then there’s the rest of us.