There’s a related recent query in the forum of MayFirst, about GDPR coverage on a US site.
I posted a comment there, and the thread has some links that may help us with document examples, when we settle down - soon? - to create protocols for GDPR coverage of our Canadian servers and of WebTV as a data processor for GDPR covered data.