Auth0 also has a nice assessment tool:
auth0.com/gdpr-assessment/

And this piece - although for the financial market - has some great examples and info on the matter:
www.bankinghub.eu/banking/fin…

There is not a single place that has THE definition though..