After several years of work, the European Federation of CROs (EUCROF) is close to the finalisation of a GDPR Code of Conduct for clinical vendors. This Code sets out the practical terms of compliance with the GDPR, in the specific field of clinical research and particularly Clinical Research Service Providers.