The Government has published a Procurement Policy Notice (PPN) that sets out compliance requirements for the forthcoming GDPR in this respect. Although aimed particularly at central government, it may also be relevant to other public bodies. Guidance is provided in respect of reviewing existing contracts, ascertaining duties and obligations and suggested clauses are included, which may be of use.
https://www.gov.uk/government/uploads/system/uploads/attachment_data/file/669655/17.docx__1_.pdf
This topic will be covered in the forthcoming CENTRIC Supplementary Guide ‘Controller and Processor Relationships’.