Since 25 May 2018, the General Data Protection Regulation imposes stricter accountability obligations on private and public actors. You will be required to constantly ensure that the rules set out in the Regulation are followed and must be able to document your compliance with these rules at all times.
Main principles
Lawfulness of processing
Privacy by design and privacy by default
Processors
Security of personal data
Data breaches
International transfers of personal data
Comply with the rights of data subjects
Data Protection Impact Assessment
Records of processing activities
Documentation and accountability