Completely agree. We're working on an idea to handle the boring stuff as part of YC's Startup School 2019. GDPR, HIPAA, CCPA, PCI, etc. compliance + penetration testing and risk assessments.
We'll be building it at: https://secquity.com or if anyone has any specific questions, feel free to reach out at info@secquity.com