Check the EDPB opinion that was released recently. It states quite clearly what can bu done.