While there may not be a grace period I think that the law allows some leeway with regards to the time it takes to become fully compliant. If you're audited but

While there may not be a grace period I think that the law allows some leeway with regards to the time it takes to become fully compliant. If you're audited but are not fully compliant it should be enough if you can show how you are working to correct the problems that you have. If for example data is stored in an inappropriate way but you've not yet had time to migrate it you will not be fined if you can show how you are working towards correcting the problem. IANAL and that.