I had just posted this GDPR guide with steps to implement the mandatory data protection:
"If you’re not sure about their compliance, time to act. You’ll need to contact them and make sure they confirm they’re GDPR complaint. That image needs to be 100% completed."