I know GDPR is tricky, but I’d imagine any prominent tools are taking it into account today.
Listmonk seems to have good privacy options:
Another self-hosted open source solution is https://sendportal.io/. There’s an indication here that features include GDPR compliance, but I haven’t dug for details.