The Information Commissioner has published draft guidance on the contractual clauses to be in place between data controllers and data processors under the GDPR and their respective liabilities. The GDPR, coming into force in May 2018, requires specific written contractual provisions to be in place between data controllers and data processors.

As the publication is draft guidance, the ICO are requesting feedback on the guidance by 10 October 2017. We plan to submit our views as part of the consultation and encourage all our readers to do the same.