GDPR & Generative AI: A Guide for the Public Sector