I have yet to see a GDPR article with concrete , worked out example cases. I think EU should have published such a guide out. The law is more vague than a gospel.