Maintaining records of processing under the GDPR

Under Article 30 of the GDPR, data controllers and data processors are required to maintain appropriate records of processing activities. According to the article, the records that should be kept include:

  • The categories of processing
  • The contact details for your Data protection officer (if relevant)
  • The contact details for your EU representative (if relevant). 

Contact information for a Data protection officer (DPO) or an EU representative may not be applicable to your business. For example, some businesses are exempt from the requirement to appoint a DPO. Learn more about whether you need to appoint a DPO

Read full article

Rate this article