Obligations & assessments
Records of processing activities
RoPA · ROPA
GDPRGDPR Art. 30
A written inventory, kept by controllers and processors, of what personal data they process, for what purposes, about whom, who receives it, how long it's kept and how it's secured.