GDPR Records of Processing Activities Guide: Building an Article 30 Register
Article 30 asks for a document, not a judgement call. This guide covers the mandatory fields for controllers and processors, the narrow exemption in Article 30(5), and the maintenance routine that keeps a register defensible.
Read article