Companies can achieve GDPR compliance by implementing various measures, such as conducting data protection impact assessments, appointing a data protection officer, and obtaining lawful grounds for data processing. Consulting with a privacy professional is recommended.