ABSTRACT

Article 30 of the General Data Protection Regulation (GDPR) requires controllers and processors, and their representatives, to maintain records in relation to their data processing activities and compliance.