Records of processing activities and lawful basis Details

Domain

Summary

Taking stock of what information you have, where it is and what you do with it. Defining appropriate lawful basis for processing.

Overview

It’s a legal requirement to document your processing activities. Taking stock of what information you have, where it is and what you do with it makes it much easier for you to improve your information governance and comply with other aspects of data protection law (such as creating a privacy notice and keeping personal data secure). It is a clear way to show what you are doing in line with the accountability principle and we may require you to provide these records to us. Your processing won’t be lawful without a valid lawful basis so you must justify your choice appropriately.

Detailed Description

Reference/Support Links

Governing bodies/Certifiers/Legislation Links