Maintenance of Records of Processing Activities by the Data Controller

The data controller must maintain a record of processing activities under its responsibility. This record must include: the name and contact details of the data controller and, where applicable, the joint data controller, the representative of the data controller, and the data protection officer; the purposes of the processing; a description of the categories of data subjects and the categories of personal data; the categories of recipients to whom the personal data have been or will be disclosed; where applicable, transfers of personal data to third countries or international organisations and documentation of suitable safeguards; where possible, the envisaged time limits for erasure of the different categories of data; and where possible, a general description of the technical and organisational security measures.

Citation