It appears to me that they are prepared because they warn about it. But my bank does not follow the rules so the payment goes through without strong authenticat

It appears to me that they are prepared because they warn about it. But my bank does not follow the rules so the payment goes through without strong authentication. Good to know that they warn at least 10 days. If that is constant and not dependent on some algorithm. I could not find any information how fast they stop your server and whether data would get locked first or deleted immediately.