First steps, templates, etc.
Accountability and a process template.
Data processing resources must be protected.
What are the rules?
What are the GDPR rules? When is it legal?
Who is the data controller and who is the data processor?
Rules for data transfers to outside the EU/EEA.
Employee training, licensing, etc.