Yes, as I said, by putting it in the employment contract when applying for a job.
Honestly it's hilarious how some people view GDPR. They think CEOs lose sleep at night worrying about it, that they might go to jail for it, or have to pay 100M Euro fine for a breach of it. It's simply not the case.
The reality of EU directives and regulations are very different to how they are sold. Many people fall prey to the marketing