GDPR seems likely to be challenging to identify needs AND requirements... check out this article over at ITPro Today ...
SECURITY>RISK AND COMPLIANCE - Cloud Users Can’t Ignore GDPR Requirements - Cloud vendors can provide some assurance around meeting GDPR requirements, but only if you ask the right questions and get it in writing. - Nicole Henderson | Apr 05, 2018
http://www.itprotoday.com/risk-and-compliance/cloud-users-can-t-ignore-gdpr-requirements
If your business has moved workloads to the cloud, the people who did the moving likely went through the painstaking process of ensuring that any contracted vendors meet various regulatory requirements around storing customer data. But with the General Data Protection Rules (GDPR) set to go into effect at the end of next month, it is a good idea for IT pros to take a second look at the contracts they have with their cloud providers because those contracts must align with GDPR requirements.