Privacy records
Your records.
A connected picture.
Keep processing, responsibilities and privacy decisions together, with the context your team needs.
Processing activity · Supplier payments
Know the data. Keep the context.
Review pointPolicy says five years. Practice says seven. Confirm the retention decision.
Find the record you need
Bring clarity to each part of the work.
Processing activities
Record what personal data you use, why you use it and which teams are responsible.
Lawful basis
Describe the use of personal data before selecting the basis you intend to rely on.
Consent
Record the purpose, wording and context of the choice a person made.
Privacy requests
Bring the request, correspondence and responsible team together.
Privacy complaints
Record the complaint and correspondence in one place.
Privacy notices
Use your processing records to explain purposes, recipients and retention.
Children’s data
Identify activities that may involve children’s personal data.
Suppliers & processors
Record each supplier’s role and the processing it supports.
International transfers
Record where personal data goes and who receives it.
Privacy responsibilities
Connect people to the activities and privacy decisions they own.
Security measures
Describe the security measures your organisation relies on.
Retention
Record how long each information category should be kept.
Privacy incidents
Keep the incident account and supporting information in one place.
Privacy assessments
Describe the activity and the privacy risks your team is considering.
DPO appointment
Keep the appointment details and supporting information together.
NDPC registration
Bring classification, registration and supporting records together.
Regulatory correspondence
Bring the request, relevant dates and supporting documents together.
Record history
Review the history attached to your privacy records.
Document requests
Keep the requester, document and supporting context together.