Today involving data processors for processing personal data and outsourcing of business processes is a necessity for companies of practically any size and in any industry. Companies should therefore be aware of new rules, duties and risks imposed by the GDPR.