Records of processing
Records of processing render for any date from field data classes, Purposes, recipients and retention.
Satisfies
| Criterion | Text |
|---|---|
| GDPR Art.30 | Each controller and processor keeps a record of its processing activities. |
| SOC2 P6.7 | The entity gives data subjects, on request, an accounting of the personal information it holds and its disclosures. |
Implemented by
Test
| Step | Rule |
|---|---|
| Kind | Detective: it finds the failure after it happens. |
| Select | Every Purpose and personal field in force on the requested date. |
| Assert | The rendered record lists each one with its data class, recipients and retention. |
Owner
Example
An auditor asks for a recruiting SaaS's records of processing as of last quarter. They render for that date with each field's data class, recipients and retention.