Privacy & GDPR (not that again!)

Just wondering how any freelance Event Managers have been managing the process leading up to today? I have clients who have issued new contracts with specific criteria for GDPR & Cyber Essentials.