Huh, I stand corrected, thank you. Looks like the primary difference is then in requiring that consent be freely-given, clarifying that consent is specific to a purpose, and requiring that consent be retractable.
Consent was already required to be freely given under the DPD. Agree on the two other points, it seems that GDPR clarified this–I thought it was already covered by the DPD.