There was a grace period for compliance for companies found in violation, because that determination was made after it came into force, not before.

You can't find a company to violate a regulation that's not in force, and it's reasonable to give a company in violation of complex piece of law (that's never been tested) some period to comply.

But that doesn't mean the law is not already in force.