Summary paper by Taylor Wessing (51 pages), which keeps getting updated.
https://deutschland.taylorwessing.com/documents/get/1859/ubersicht-behordlicher-stellungnahmen-zur-dsgvo.pdf
[protecting people by good design, solid security, efficient processes and trusted services]