If, like many, you are still pondering where to even begin on the journey to GDPR star status – start with your contracts!
The GDPR introduces far more stringent obligations to be imposed in writing on data processors than current data protection laws in Europe. There is no short cut ie you can’t just rely on an applicable law clause. The ‘new style’ processor clauses actually have to go into the contract.
This means that for any new processor contracts you are negotiating that will run beyond 25 May 2018, these clauses need to go into the contract now.