The Information Commissioner’s Office (ICO) requires all Data Controllers to have documented processes and procedures in place, as well as making the relevant privacy notices and policies available to stakeholders.  Although it is not statutory to publish documents relating to GDPR on your website, we would strongly recommend that you do so.  This document contains a list of the key documents for showing compliance with GDPR, along with suggestions as to how they should be shared.