GDPR-30-08 Documentation 30 — Records of processing activities

Controller record must include data retention time limits

Description

Where possible, the controller's processing record must include the envisaged time limits for erasure of different categories of personal data.

Sign in to view the full obligation text, AI-generated applicability analysis, evidence checklists, and compliance mapping.

Controller must maintain record of processing activities

Controller's representative must maintain record of processing activities

Controller record must contain contact details and organizational information

Controller record must contain purposes of processing

Controller record must describe data subjects and personal data categories

Controller record must list recipients of personal data

Controller record must document international transfers

Controller record must describe technical and organisational security measures

Processor must maintain record of processing activities

Processor's representative must maintain record of processing activities

ReguLume automatically maps regulatory obligations to your system inventory, identifies compliance gaps, and generates remediation plans.

Get Started