How can a small (1-2 person) company correctly implement the GDPR?
The first thing you need to do is to know what personal data your company processes, where are stored and secured. You need to know your business.Then, you need to verify if data subjects are informed through privacy notice and they can exercise their rights.You should also verify if you took any technical and organizational security measures to protect personal data in your company and if your suppliers and data processors are compliant with GDPR requirements.
Also, what tools are available for a Marketing agency to provide its clients with GDPR implementation?
There is plenty of tools in the market that help you with GDPR implementation. However, you should be aware that there is not a one-button solution that makes your company compliant with GDPR. Compliance is a process you need to implement in your company and periodically verify and update. Advisera developed GDPR Toolkit in order to make small and medium companies easily comply with GDPR requirements.