Privacy · HR glossary

Records of Processing Activities

Records of processing activities document how an organisation handles personal data. Under GDPR, the required record can include purposes, data categories, recipients, retention and relevant security information.

Example

An employer records payroll processing separately from recruitment, identifying the information involved, service providers and applicable retention arrangements.

What to keep in mind

These records are different from individual consent forms or system logs. Requirements and exceptions depend on the applicable law, and records need updating when processes or data flows change.

Further reading

← Browse all HR terms