Lessons can be learned in the financial services sector from the rush to update contracts to account for the General Data Protection Regulation (GDPR) taking effect earlier this year.
https://www.out-law.com/en/articles/2018/november/gdpr-the-controller-v-processor-debate-in-financial-services/