Article 30 of the General Data Protection Regulation (GDPR) requires us to have a record of data processing in place.
The Information Commissioner's advice is that the following information is required to be included:
We have 5 registers in place as a consequence of our GDPR preparation activities. These are as follows;
Each of our departments has also adopted a series of retention schedules.
We consider that taken collectively these registers and schedules provide the information that is required to be documented under Article 30. For the avoidance of any doubt however, we wish to respond to the bulleted paragraphs as follows:
Browser does not support script.