{"id":310,"date":"2019-08-19T14:04:09","date_gmt":"2019-08-19T14:04:09","guid":{"rendered":"http:\/\/www.dataprotectionconsultant.it\/EN\/?p=310"},"modified":"2020-05-11T14:19:32","modified_gmt":"2020-05-11T14:19:32","slug":"records-of-processing-activities","status":"publish","type":"post","link":"https:\/\/www.dataprotectionconsultant.it\/EN\/records-of-processing-activities\/","title":{"rendered":"Records of processing activities"},"content":{"rendered":"

\"\"<\/a> \"\"<\/a><\/p>\n

 <\/p>\n

 <\/p>\n

Records of processing activities<\/strong><\/span><\/p>\n

The Record of processing activities<\/strong><\/span><\/p>\n

The Record of processing activities introduced by the GDPR shall describe the framework of processing carried out, giving details on many characteristics and obligations relating to data processing operations<\/span>. The Record of processing activities is a very useful means to support an analysis of the implications of any processing whether existing or planned. The Record facilitates the factual assessment of the risk<\/a><\/span><\/span> of the processing activities performed by a controller or a processor<\/a><\/span><\/span> on individuals\u2019 rights, and the identification and implementation of appropriate security measures to safeguard personal data<\/span> \u2013 both key components of the principle of accountability<\/a><\/span><\/span> contained in the GDPR. It should be kept up to date.<\/strong><\/span><\/p>\n

The Record shall be in writing<\/span>, including an electronic form<\/span>. Both controllers and processors<\/a><\/span> are obliged to draw up the Record of processing activities. The Record shall be made available to the supervisory authority on request.<\/strong><\/span><\/p>\n

The maintenance and updating of the Record of processing activities meet the principle of accountability<\/a><\/span><\/span> which demands to take on responsibility for compliance of the GDPR in all its requirements.<\/strong><\/span><\/p>\n

There are also derogations from the obligation to maintain the Record of processing activities.<\/strong><\/span><\/p>\n

What the Records of processing activities should contain<\/strong><\/span><\/p>\n

The GDPR prescribes that controllers shall provide all of the following information:<\/strong><\/span><\/p>\n

1. the name and contact details of the controller, of the representative in the State<\/a><\/span> (where applicable) and of the Data Protection Officer<\/span><\/span><\/a> (if appointed)<\/strong><\/span><\/p>\n

2. the purposes of the processing<\/strong><\/span><\/p>\n

3. the categories of data and the categories of data subjects <\/strong><\/span><\/p>\n

4. the categories of the recipients<\/a><\/span><\/span> to whom data have been or will be disclosed (including recipients in third countries or international organisations) <\/strong><\/span><\/p>\n

5. where applicable, transfers of personal data to third countries<\/a><\/span> (with identification of the country) and the documentation of suitable safeguards for such transfers<\/strong><\/span><\/p>\n

6. the envisaged time limits for erasure of the different categories of data<\/strong><\/span><\/p>\n

7. a general description of the technical and organisational security measures.<\/strong><\/span><\/p>\n

If considered useful, additional information may be added to better describe the processing activities.<\/strong><\/span><\/p>\n

Processors<\/a><\/span><\/span> shall maintain a Record of processing activities which is quite similar to what prescribed for controllers, with details which are, of course, related to the processing carried out on each specific controller\u2019s behalf<\/span>.<\/strong><\/span><\/p>\n

In order to facilitate this obligation to micro, small and medium-sized organisations, the supervisory authorities have made available examples \u2013 not compulsory \u2013 to draw up the Records of processing activities. The Italian supervisory authority has issued a downloadable template in PDF<\/a><\/span><\/span> and Excel<\/a><\/span><\/span> format (Italian version).<\/strong><\/span><\/p>\n

 <\/p>\n

To learn more, click here<\/a>,<\/span><\/span> read FAQs<\/a><\/span><\/span> or contact me<\/span><\/span><\/a>.<\/strong><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

    Records of processing activities The Record of processing activities The Record of processing activities introduced by the GDPR shall describe the framework of processing carried out, giving details on many characteristics and obligations relating to data processing operations. The Record of processing activities is a very useful means to support an analysis of … <\/p>\n

Continue reading “Records of processing activities”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/posts\/310"}],"collection":[{"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/comments?post=310"}],"version-history":[{"count":15,"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/posts\/310\/revisions"}],"predecessor-version":[{"id":1107,"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/posts\/310\/revisions\/1107"}],"wp:attachment":[{"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/media?parent=310"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/categories?post=310"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/tags?post=310"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}