Records of processing
CIPP/E glossary · Last reviewed: · By Victor Humenhuk (CIPP/E certified)
Records of processing - The Article 30 documentation that replaced the old notification/registration regime; kept internally, not filed, but produced to the DPA on request.
In the CIPP/E body of knowledge, Records of processing comes up under Ch 11.4 - Records & cooperation; IAPP Training · Module 10 - BoK IV.B.
Records of processing in context
- Instead they must keep detailed ==records of processing== under [[Article 30]], in writing (including electronic), made available to the DPA ==on request==. (Documentation and records of processing (Article 30))
- In practice [[accountability]] means data protection by design and default, [[DPIAs]], records of processing and appointing a [[DPO]] where needed. (Module 10 · Accountability defined (Article 24))
- [[Records of processing]] (==Article 30==) apply to organisations with ==250+ employees==, OR - regardless of size - where processing is ==likely to result in a risk==, is ==not occasional==, or includes ==special-category / criminal-conviction data==, so they reach many small organisations too. (Module 10 · Records of processing (Article 30))
Where Records of processing is covered in the CIPP/E study notes
Related terms
- Article 30
- Article 31
- Processor
Test yourself on Records of processing
Recognising a definition is not the same as applying it in an exam scenario. Work through the free CIPP/E practice questions, or read the full CIPP/E study guide - every study note is free.