Most compliance professionals and in-house lawyers will be well aware that in GDPR terms the 'big day' is fast approaching. Some boards may by now have been persuaded this really should be at the top and not the bottom of the risk register. Others may be taking a more 'wait and see' approach ie wait and see who actually gets fined and how much. Then there will be a few who wasted no time, got their GDPR readiness plan in place and are already well on their way to passing the 25 May 2018 finishing line with 'GDPR star' status. If, like many, you are still pondering where to even begin on the journey to GDPR star status - start with your contracts!