A big part of GDPR compliance for firms with fewer than 250 employees is the requirement for Codes of Conduct.
I have been commissioned to write Codes of Conduct, rules and guidelines specifically for Open Source developers to help them to understand their role as Data Processors in a post GDPR world.
Contact me if you’d like this for your business or development team, to assist with your compliance effort.