There is no certification to pass or anything. You just have to keep it in mind when creating your business. It's too easy to just abuse data and then claim that it's too late to fix.

I've been through several startups after GDPR went into effect, it's really not a problem.