Contract and consent management is indispensable when handling sensible data. The following points should be on your checklist:

• Conclusion of data processing agreements (data contracts)
• Obtaining consent in accordance with the GDPR (for personal data)
• Documentation of consent and compliance with purpose limitation