Translations:De GDPR en archiefzorg: wat is er nog mogelijk?/18/en

Article 30: Records of processing activities

Another significant innovation in the GDPR is the Records of processing activities (article 30). Organisations are obliged to maintain a record of the processing activities that take place under their responsibility. This record must contain all of the contact details for the data controller, the purposes of the processing, a description of the categories of data subjects and controllers, the envisaged time limits for erasure where possible, and the technical and organisational security measures where applicable.