Definition
Article 30 of the GDPR requires the controller (and the processor) to maintain a record of the processing activities carried out under their responsibility, specifying purposes, categories of data, recipients, retention periods, transfers and security measures.
Context & regulatory framework
Except in limited cases (organisations with fewer than 250 employees whose processing is neither risky nor systematic), every organisation must maintain this record and make it available to the French supervisory authority (CNIL) on request.
How we support you
Data Comply One supports you on Article 30 of the GDPR with a complete compliance management platform and the expertise of our teams (DPO, CISO, consultants). The goal: help you reach and maintain compliance, calmly, at your own pace.
Want to know more about Article 30 of the GDPR?
By submitting this form, you agree that your data will be processed by Data Comply One to handle your request. To find out more, see our privacy policy.