There's a lot of GDPR consultants milking your company's cash for this. Also probably a lot of articles on privacy law across the world, available free. For sa

There's a lot of GDPR consultants milking your company's cash for this. Also probably a lot of articles on privacy law across the world, available free. For sales tax/VAT around the world, for example, avalara.com has comprehensive information and monthly newsletters for free. Generally, you can't go wrong by just doing the right thing. GDPR is nothing excessive. Businesses that weren't being awful before GDPR are probably in the clear after GDPR too; they just need to update their privacy policies. Not to mention: if you can't afford a consultant, you probably aren't large enough to be targeted by the regulators on tiny bits either. If you're acting in good faith, at least the European regulators will cut you a break and just tell you what to improve, without penalty, if you're ever flagged.