What records of processing activity do I need to keep? #GDPR

You must be able to demonstrate that you are processing personal data in accordance with these principles. This will require you to keep records of the activities you undertake and show that you have considered whether the activity complies with each of the requirements.

The data protection principles are largely the same as those under the existing legislation, but under the GDPR, you must now show that you are complying with these. You also need to be able to show that you are processing data lawfully.

View our GDPR page for more information