{"id":429,"date":"2019-08-22T08:38:46","date_gmt":"2019-08-22T08:38:46","guid":{"rendered":"http:\/\/www.dataprotectionconsultant.it\/EN\/?p=429"},"modified":"2020-05-25T09:02:17","modified_gmt":"2020-05-25T09:02:17","slug":"faq-records-of-processing-activities","status":"publish","type":"post","link":"https:\/\/www.dataprotectionconsultant.it\/EN\/faq-records-of-processing-activities\/","title":{"rendered":"Faq &#8211; Records of processing activities"},"content":{"rendered":"<p><a href=\"http:\/\/www.dataprotectionconsultant.it\/faq-registro-delle-attivita-di-trattamento\/\"><img decoding=\"async\" loading=\"lazy\" class=\"alignright wp-image-43\" src=\"http:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/flag-italia-trasparente.jpg\" alt=\"\" width=\"50\" height=\"50\" srcset=\"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/flag-italia-trasparente.jpg 225w, https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/flag-italia-trasparente-100x100.jpg 100w, https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/flag-italia-trasparente-150x150.jpg 150w\" sizes=\"(max-width: 50px) 100vw, 50px\" \/><\/a><a href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/faq-records-of-processing-activities\/\"><img decoding=\"async\" loading=\"lazy\" class=\"alignright wp-image-44\" src=\"http:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/flag-uk-trasparente.png\" alt=\"\" width=\"50\" height=\"50\" srcset=\"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/flag-uk-trasparente.png 225w, https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/flag-uk-trasparente-100x100.png 100w, https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/flag-uk-trasparente-150x150.png 150w\" sizes=\"(max-width: 50px) 100vw, 50px\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p><img decoding=\"async\" loading=\"lazy\" class=\"size-medium wp-image-49 aligncenter\" src=\"http:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faq-300x136.jpg\" alt=\"\" width=\"300\" height=\"136\" srcset=\"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faq-300x136.jpg 300w, https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faq-600x272.jpg 600w, https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faq.jpg 617w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/p>\n<p style=\"text-align: center;\"><span style=\"font-size: 18pt; color: #ff0000;\"><strong>Records of processing activities<\/strong><\/span><\/p>\n<p style=\"text-align: center;\"><img decoding=\"async\" loading=\"lazy\" class=\"aligncenter wp-image-370\" src=\"http:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faccina-dubbiosa-2.jpg\" alt=\"\" width=\"50\" height=\"50\" srcset=\"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faccina-dubbiosa-2.jpg 150w, https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faccina-dubbiosa-2-100x100.jpg 100w\" sizes=\"(max-width: 50px) 100vw, 50px\" \/><span style=\"color: #ff0000; font-size: 14pt;\"><strong>Who should maintain the Records of processing activities: the controller, the processor or the DPO?<\/strong><\/span><\/p>\n<p style=\"text-align: justify;\"><span style=\"color: #000000;\"><strong>The GDPR is very clear on this point: each controller shall maintain a Record of processing activities carried out under its responsibility. Besides, each processor shall maintain a Record of all the categories of processing activities carried out on behalf of a controller. However, nothing prevents the controller or the processor from assigning the DPO with the task of maintaining the Records of processing activities. The controller and the processor can surely seek advice of the DPO when accomplishing the obligation.<\/strong><\/span><img decoding=\"async\" loading=\"lazy\" class=\"aligncenter wp-image-45\" src=\"http:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faccina-ok-trasparente.jpg\" alt=\"\" width=\"60\" height=\"50\" \/><\/p>\n<hr \/>\n<p style=\"text-align: center;\"><img decoding=\"async\" loading=\"lazy\" class=\"aligncenter wp-image-370\" src=\"http:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faccina-dubbiosa-2.jpg\" alt=\"\" width=\"50\" height=\"50\" srcset=\"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faccina-dubbiosa-2.jpg 150w, https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faccina-dubbiosa-2-100x100.jpg 100w\" sizes=\"(max-width: 50px) 100vw, 50px\" \/><span style=\"color: #ff0000; font-size: 14pt;\"><strong>What format should the Records of processing activities have? Is there a standard model?<\/strong><\/span><\/p>\n<p style=\"text-align: justify;\"><strong><span style=\"color: #000000;\">The Records of processing activities shall be kept in writing, in any format, including electronic format. The supervisory authorities can make available standard models, especially to facilitate this obligation to micro, small and medium-sized companies, organisations or entities, but they are not compulsory.<\/span><img decoding=\"async\" loading=\"lazy\" class=\"aligncenter wp-image-45\" src=\"http:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faccina-ok-trasparente.jpg\" alt=\"\" width=\"60\" height=\"50\" \/><\/strong><\/p>\n<hr \/>\n<p style=\"text-align: center;\"><img decoding=\"async\" loading=\"lazy\" class=\"aligncenter wp-image-370\" src=\"http:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faccina-dubbiosa-2.jpg\" alt=\"\" width=\"50\" height=\"50\" srcset=\"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faccina-dubbiosa-2.jpg 150w, https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faccina-dubbiosa-2-100x100.jpg 100w\" sizes=\"(max-width: 50px) 100vw, 50px\" \/><span style=\"color: #ff0000; font-size: 14pt;\"><strong>Should the Record of processing activities be published or sent to the supervisory authority?<\/strong><\/span><\/p>\n<p style=\"text-align: justify;\"><strong><span style=\"color: #000000;\">It shall be kept by the controller and the processor and does not have to be published. It shall be made available to the supervisory authority on request.<\/span><img decoding=\"async\" loading=\"lazy\" class=\"aligncenter wp-image-45\" src=\"http:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faccina-ok-trasparente.jpg\" alt=\"\" width=\"60\" height=\"50\" \/><\/strong><\/p>\n<hr \/>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"color: #000000;\"><strong>To learn more, click <span style=\"text-decoration: underline;\"><span style=\"color: #0000ff;\"><a style=\"color: #0000ff;\" href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/records-of-processing-activities\/\">here<\/a><\/span><\/span> or <a style=\"color: #000000;\" href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/contacts\/\"><span style=\"text-decoration: underline;\"><span style=\"color: #0000ff; text-decoration: underline;\">contact me<\/span><\/span><\/a>.<\/strong><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>&nbsp; &nbsp; Records of processing activities Who should maintain the Records of processing activities: the controller, the processor or the DPO? The GDPR is very clear on this point: each controller shall maintain a Record of processing activities carried out under its responsibility. Besides, each processor shall maintain a Record of all the categories of &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/www.dataprotectionconsultant.it\/EN\/faq-records-of-processing-activities\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Faq &#8211; Records of processing activities&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/posts\/429"}],"collection":[{"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/comments?post=429"}],"version-history":[{"count":10,"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/posts\/429\/revisions"}],"predecessor-version":[{"id":432,"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/posts\/429\/revisions\/432"}],"wp:attachment":[{"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/media?parent=429"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/categories?post=429"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/tags?post=429"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}