Businesses can comply with the GDPR by obtaining explicit consent, clearly communicating purposes for data use, implementing data protection measures, appointing a Data Protection Officer, and adhering to the GDPR principles.