I asked a GDPR consultant we hired about backups. The answer was basically that the letter of the law requires data to be deleted from backups, but people aren't going to do that, and there is some language about "reasonable" effort or something like that.
This might be useful: http://www.davidfroud.com/does-right-to-erasure-include-back...