In reply to Chris Cree.

Tim’s hypothetical scenario above notwithstanding

Chris, I have news for you. It's not a typo. It's already happening.

Businesses are already writing contracts that require service providers to comply with GDPR.