ABSTRACT
Chapter 8 is designed to help the reader with their documentation task. It is important for a business to keep a record of the activities that are being carried out indeed it is mandatory under GDPR for most organisations to do so. This will inevitably need to include a document that describes the process you have in place to protect personal data. Companies who keep a record of what data they hold, why it is held and who it is shared with are better able to manage their data and can more easily demonstrate that they are working in compliance with the legislation. Even if it is not compulsory for you to document your processing activities because of your size it is considered good practice to do so. The various tools data maps, flow charts, questionnaires and databases are all discussed and detailed case studies are used to explain the process further. On the book’s companion website, there are blank editions of the forms and guides contained in this chapter. These are free for the reader to download and complete themselves.
