I agree that living up to standards, and specifically the engineering / operations efforts improvements to do them, is valuable. However, it's not hard to imag

I agree that living up to standards, and specifically the engineering / operations efforts improvements to do them, is valuable. However, it's not hard to imagine automated flows for verifying this. In this case, specifying endpoints and providing automation scripts for doing GPDR flows takes care of most of it. A lot of these are converging on the same check boxes, so get rid of the people and $ aspect. A team should be able to put together COTS OSS, run on a cheapo cloud, and test as part of CI/CD . We need to reach the point properly configured RoR/Django on docker + some sidecars (ELK, autotls, ..) can do that.