The law came into effect on the 14th of April. The 'enforceable' does not mean it comes into a effect, it means that regulators have their powers unlocked to go after offenders.
> Yes, but that was a different law. It required different things.
It actually required a lot of the same things, but because companies decided to ignore it it was revised.
"It was adopted on 14 April 2016, and after a two-year transition period, becomes enforceable on 25 May 2018."
Source: https://en.wikipedia.org/wiki/General_Data_Protection_Regula...
>And before that one there was another one.
Yes, but that was a different law. It required different things.