It looks like the the EC managed to publish their guidance before the GDPR comes into effect, as opposed to after it comes into effect. Not quite enough notice for large organizations, but if you're that large, no doubt you've already started the necessary preparations. If you're a smaller organization, then you should take a look at the official tools. Either way, I'm very surprised that they actually published this before the GDPR comes into effect in May.
Flashy infographic summary for small business owners: http://ec.europa.eu/justice/smedataprotect/index_en.htm
Collection of official documents with full details:
Data protection – Better rules for small business
Better rules for small business. Stronger rules on data protection from 25 May 2018 mean citizens have more control over their data and business benefits from a level playing field. One set of rules for all companies operating in the EU, wherever they are based. Find out what this means for your SME.