Overnight is rather exaggerated. GDPR (which the above case is about) was approved in 2016, became enforceable in 2018, the major legal case that provided that

Overnight is rather exaggerated. GDPR (which the above case is about) was approved in 2016, became enforceable in 2018, the major legal case that provided that kind of interpretation landed in 2020, and now a concrete (very high profile) enforcement is actually happened in 2022.