Elasticsearch and GDPR

Author here; I'd love to get some discussion around the topic, as I'm sure someone else must have thought about this, or comparable issues with other systems.