As mentioned, GDPR has been in force for 2 years - Friday is the end of the grace period. But, as I referenced in another comment, it doesn't just "end" tomorro

As mentioned, GDPR has been in force for 2 years - Friday is the end of the grace period. But, as I referenced in another comment, it doesn't just "end" tomorrow, the expectation is that you have a plan in place to address future privacy issues and that you're acting in good faith. If you're not compliant, but aren't deliberately not compliant, and are active in trying to address that, and report anything you might be breaching, then they're not going to go after you like hounds (in the UK at least). The ICO seems to be a fair and reasonable body, they just now have some extra teeth.