Record of Processing Activity

Record of processing activities kept by a data controller should include:

  • Name and contact details of the data controller.
  • The purpose of processing the data.
  • Categories of the data subjects and types of personal data.
  • Categories of data recipients, including those who have already received a user’s data and those who will receive a user’s data in the future .
  • Transfers of data to a third country or an international organization.
  • Time limits for erasure of different categories of data.
  • A general description of technical and organizational security measures.