A contract with a data processor is essential in order to remain compliant with the regulation, however you may have entered into a contract prior to the commencement of the new rules.  In these circumstances it is recommended that a contract addendum is agreed between all parties, to retrospectively add the required contractual obligations to the current contract.

It is recommended that you create a contract addendum specifying all of the data protection contractual clauses and issue this in full to the parties to the contract where there is any shortfall in the current contract.