Record of Processing Activity
Record of processing activities kept by a data controller should include:
- Name and contact details of the data controller.
- The purpose of processing the data.
- Categories of the data subjects and types of personal data.
- Categories of data recipients, including those who have already received a user’s data and those who will receive a user’s data in the future .
- Transfers of data to a third country or an international organization.
- Time limits for erasure of different categories of data.
- A general description of technical and organizational security measures.