Documenting Your Processing Activities

The GDPR contains explicit provisions about documenting your processing activities. You must maintain records on several things such as processing purposes, data sharing and retention.

We can provide you with a template and advise on how to do this.

The ICO guidance states that:

• The GDPR contains explicit provisions about documenting your processing activities.
• You must maintain records on several things such as processing purposes, data sharing and retention.
• You may be required to make the records available to the ICO on request.
• Documentation can help you comply with other aspects of the GDPR and improve your data governance.
• Controllers and processors both have documentation obligations.
• For small and medium-sized organisations, documentation requirements are limited to certain types of processing activities.
• Information audits or data-mapping exercises can feed into the documentation of your processing
• Records must be kept in writing.
• Most organisations will benefit from maintaining their records electronically. Records must be kept up to date and reflect your current processing activities.

Looking for Privacy Notice Help?

Buy Your Privacy Notice Online