Name and contact details

Name
Address
Email
Telephone

Link to contract with controller Name and contact details of controller

 Processor
Data Protection Officer (if applicable)
Name
Address
Email
Telephone

Article 30 Record of Processing Activities

Name and contact details of controller's

Categories of processing
representative (if applicable)
 Representative (if applicable)
Name
Address
Email
Telephone

Activities

Names of third countries or international Safeguards for exceptional transfers of

organsations that personal data are personal data to third countries or
transferred to (if applicable) international organisations (if applicable)
General description of technical and
organisational security measures (if
possible)
 Name and contact details
Name Example processor
Address Street, city, postcode
Email Email address
Telephone Tel. number

Link to contract with controller Name and contact details of controller

Link Controller A - Address, Email, Tel. Number

Link Controller B - Address, Email, Tel. Number

Link Controller B - Address, Email, Tel. Number

Link Controller B - Address, Email, Tel. Number

 Processor
Data Protection Officer (if applicable)
Name Example DPO
Address Street, city, postcode
Email Email address
Telephone Tel. number

Article 30 Record of Processing Activities

Name and contact details of controller's

representative (if applicable) Categories of processing

N/A Payroll

N/A Payroll

N/A Bookkeeping

N/A Cloud storage

 Representative (if applicable)
Name N/A
Address N/A
Email N/A
Telephone N/A

Activities

Names of third countries or international Safeguards for exceptional transfers of

organsations that personal data are personal data to third countries or
transferred to (if applicable) international organisations (if applicable)

N/A N/A

N/A N/A

N/A N/A

Canada N/A
General description of technical and
organisational security measures (if
possible)

Encrypted storage

Encrypted storage

Encrypted storage

Encrypted storage, access controls

 Notes
Use this template to document the processing activities you undertake
as a processor.
Headings highlighted green are required areas of documentation under
Article 30 of the GDPR.
The heading highlighted blue is an optional area of documentation that is
not required under Article 30 of the GDPR.
Instructions

1.   Complete your organisation’s name and contact details in cells B3-B6.

2.   Complete your data protection officer’s name and contact details (if
applicable) in cells D3-D6.
3.   Complete your representative’s name and contact details (if
applicable) in cells F3-F6.

4. Document your organisation’s processing activities, starting in cell

A10, and working from left to right. Where necessary use multiple rows
for each processing activity in order to be as granular as possible (see
example tab).
Guidance
For more detailed guidance on documentation, please see the Guide to
GDPR on our website.