What's interesting is that I've had to meet many of those already for California's COPPA and previous privacy laws, so I'm quite confused at why people are acting like this is all brand new and never existed before...
As an aside that checklist is misleading. Some of the requirements they list expressly don't apply to small businesses, for example you don't need a DPO unless you're over 250 employees.