The ICO has also opened a consultation on draft guidance on contracts and liabilities between controllers and processors under the GDPR. The guidance explains to controllers, what they must include in contracts and sets out what responsibilities and liabilities processors have under the GDPR. The consultation closes on 10 October 2017.