Comment by pnenp

I think "make GDPR compliant" should come much later. Most new businesses fail. In that case, any time you spent on GDPR will have been a waste.