What is the Records of processing activities?
The GDPR establishes certain documentation obligations for data controllers and processors. According to Article 30.1 of the Regulation, each controller, and where applicable, their representative, must maintain a record of the processing activities carried out under their responsibility. Although, according to Article 30.2 of the GDPR, processors also have this obligation, the application is currently designed for data controllers.
The only exceptions to this obligation are data controllers or processors with fewer than 250 employees who carry out processing that does not pose a risk to the rights and freedoms of data subjects, unless such risk is occasional, and who do not include special categories of personal data or personal data relating to criminal convictions and offenses.
In addition to being an obligation for data controllers, maintaining this record of processing activities serves to demonstrate compliance with the GDPR and prove its fulfillment (principle of proactive responsibility).
What does the application allow?
The application allows users to register different processing activities, as well as modify and delete them when necessary. It also allows users to generate a document of the processing activities included in the record, which can be published if required.
Furthermore, the application developed by the Catalan Data Protection Authority allows for the inclusion in the record of processing activities of additional information beyond that required by Article 30.1 of the GDPR. In this case, the fields can be filled in or left blank.
New Record Software v 2.0
Attention: If you have v 1.0 installed (before July 2021), carefully read the software installation instructions to avoid data loss.
