GDPR is a hundred articles of legalese, and to understand what it means to be compliant you probably need an understanding of EU legal context as well. Services of people who can do that do cost a lot.