Records of processing (Art 30)

Working record Data protection

Check a record of processing activities holds every field Art 30(1) requires of a controller.

0 of 7

Controller record fields Name and contact details of the controller, any joint controller, representative and DPO UK GDPR Art 30(1)(a) Purposes of the processing UK GDPR Art 30(1)(b) Categories of data subjects and of personal data UK GDPR Art 30(1)(c) Categories of recipients, including in third countries UK GDPR Art 30(1)(d) Transfers to third countries or international organisations, and the safeguards used UK GDPR Art 30(1)(e) Envisaged time limits for erasure, where possible UK GDPR Art 30(1)(f) General description of technical and organisational security measures, where possible UK GDPR Art 30(1)(g)

Good practice links Lawful basis and, for special category data, the condition relied on UK GDPR Art 6, Art 9; DPA 2018 Sch 1 Part 4 Appropriate policy document referenced where DPA 2018 Sch 1 requires one DPA 2018 Sch 1 Part 4

Result: Fields missing. The regulator can ask for the record at any time (Art 30(4)).

Where this applies

Sources

Primary UK GDPR (Regulation (EU) 2016/679 as it applies in the UK) legislation.gov.uk
Primary Data Protection Act 2018 (c. 12) legislation.gov.uk