Buy our seminar
Buy our whole seminar series
Buy our consulting services
Buy our audit
Buy our certification
Buy our whitepaper
Buy our software products
Use our free online assessment, then 1-7. (And 8 again, there's no escape).
...but you'll just get exhausted. Instead:
Realize that nobody knows how the regulations will be interpreted, that anyway you're dependent on your service providers to comply, and just go mañana like a right proper señor developer. Bigger fish will fry before you, and then you have case law.
I actually like the GDPR - "personal info as commodity" has gone too far - but until we know what compliance looks like in actual, deployed, systems, we're just guessing.