Records of processing activities
Art. 30
-
Last updated
Mandatory
Catalog reference
Maintain a written record of your processing activities — purposes, categories of data subjects and data, recipients, transfer safeguards, retention periods, and a general description of security measures. Keep it current and available to the supervisory authority on request.
Narrative — how we satisfy this requirement
The records of processing list each activity as controller and as processor, and the Data Protection Officer reviews them every year.