Record Of Processing Activities Template

Keeping a record of your processing activities is not a one off exercise.

Record of processing activities template. The records referred to in paragraphs 1 and 2 shall be in writing including in electronic form. Identification is for identifying the organisation and dpo if applicable. From 25 may 2018 onwards the general data protection regulation gdpr will require each data controller and data processor to keep a record of all processing activities under their responsibility. The controller or the processor and where applicable the controllers or the processors representative shall make the record available to the supervisory authority on request.

Maintaining written including electronic records of processing activities is a gdpr requirement under article 30 applying to controllers processors with 250 employees and in limited cases to those with fewer than 250 persons. Lists includes sample values to assist in filling in the registry. Registry is where the details about the various processing activities are filled in. So you should treat the record as a living document that you update as and when necessary.

Records of processing activities art. Article 30 belgium record of processing activities template by patrick van eecke and buki owa the belgian data protection authority recently published a template that can be used by organisations for meeting their article 30 record of processing activities obligation. The information you document must reflect the current situation as regards the processing of personal data. The name and contact details of the controller and where applicable the joint controller.

Selecting the next to a row will unhide fields related to that row. The template includes 5 tabs. Maintaining a record of data processing activities under the gdpr this slide deck from squire patton bogs partner annette demmel offers an overview of article 30 of the gdpr including examples of what a record of processing may look like the information that must be included in processing records and when organizations are required to keep records. Selecting the above a column will unhide fields related to each column.

Each controller and where applicable the controllers representative shall maintain a record of processing activities under its responsibility. Article 30 of the gdpr outlines the records of processing activities that controllers and processors need to maintain in a written and electronic format. Administrative fines up to 10 000 000 eur or in the case of an undertaking up to 2 of the total worldwide annual turnover of the preceding financial year whichever is higher art. That record shall contain all of the following information.

This means that where you are collecting storing sharing using or transferring some sort of personal data you consider and record the details of how it meets the data protection principles.