Similar, but from another angle:

When deleting members, provide an option to delete attached personal content, in particular, blogs, and personal galleries, but possibly other submissions.

We do have support for deleting user data in the warnings system, if Commandr is installed.

We should have this on the delete member page too.

We don't have support for zipping it up.

It all needs clearly documenting in the legal tutorial.

What is personal data? I found this reference:
"The GDPR applies to personal data. This is any information that can directly or indirectly identify a natural person, and can be in any format."

I've opened a number of new issues related to EU privacy guidelines.

Good articles:

https://techblog.bozho.net/gdpr-practical-guide-developers/

https://news.ycombinator.com/item?id=16508435