Records of processing activities
Art. 30
-
Last updated
Mandatory
Catalog reference
Maintain a written record of your processing activities — purposes, categories of data subjects and data, recipients, transfer safeguards, retention periods, and a general description of security measures. Keep it current and available to the supervisory authority on request.
Narrative — how we satisfy this requirement
The records of processing list each activity as controller and as processor, and the Data Protection Officer reviews them every year.
Review
On trackNext review is 10/27/2027 — no urgency right now.
- Review cadence
- Every 365 days
- Last reviewed
- Next review due