Gdpr compliance does not exist and is a long living fad sold by consultancy companies. To make sure you align with gdpr regulations: Just do not store personal data of customers. Never. Most important things to know https://nocomplexity.com/gdpr-principles/