Little in GDPR is completely new, lots of it has been in national law or previous EU legislation before, and the entities responsible for enforcement aren't new, so you can look at past privacy enforcement actions as at least some precedent.