6. How should we notify customers of these new rights?

The European Commission has a website with guidance for its citizens on GDPR.