This example document contains an outline recommended by WordPress in response to the new GDPR laws.  The highlighted text explains what content needs to be in each section of the TOS, and should be removed before publishing.

Since each site is unique and uses data in its own way, a one-size-fits-all  TOS doesn’t exist. For your own protection, if your site goes live, your privacy policy needs to list in detail what data you collect about your users and how it is used or passed on to third-party services, such as advertisers or analytics.