The ECB has put together a great summary article on the topic: https://i.emlfiles4.com/cmpdoc/7/7/7/0/3/1/files/48179_ecb-gdpr---club-guidance.pdf