For better or worse, preparing for the General Data Protection Regulation is a do-it-yourself exercise for advertisers in the absence of stronger direction from regulators.
https://digiday.com/marketing/gdpr-looming-key-compliance-questions-still-remain/