If I am a processor of personal data what must I record? #GDPR

Processors are required to keep certain records which you as the data controller may be asked to make available to the Information Commissioners Office. More information is available on the ICO website. Processors must also be able to demonstrate that they either return or destroy personal data once the processing that they have been instructed to, or as per your contract with them.

View our GDPR page for more information