Don't use people personal data and dont allow others to spy on your users (ads, analytics,..) and you wont need to do anything.
Work in best interest of your users and you will be compliant. I don't think that this is harder than food safety regulations.
By the way, the technology is changing fast and a strictly defined law with "do" and "don't"s would be downplayed in weeks. that's why GDPR is conceptual (and thats why everyone is pissed off, as they can't downplay it - how many sites have you seen that are giving you a fair cookie choice?)
Work in best interest of your users and you will be compliant. I don't think that this is harder than food safety regulations.
By the way, the technology is changing fast and a strictly defined law with "do" and "don't"s would be downplayed in weeks. that's why GDPR is conceptual (and thats why everyone is pissed off, as they can't downplay it - how many sites have you seen that are giving you a fair cookie choice?)