Article 24 › 1

Member States shall provide for controllers to maintain a record of all categories of processing activities under their responsibility. That record shall contain all of the following information: (a) the name and contact details of the controller and, where applicable, the joint controller and the data protection officer; (b) the purposes of the processing; (c) the categories of recipients to whom the personal data have been or will be disclosed including recipients in third countries or international organisations; (d) a description of the categories of data subject and of the categories of personal data; (e) where applicable, the use of profiling; (f) where applicable, the categories of transfers of personal data to a third country or an international organisation; (g) an indication of the legal basis for the processing operation, including transfers, for which the personal data are intended; (h) where possible, the envisaged time limits for erasure of the different categories of personal data; (i) where possible, a general description of the technical and organisational security measures referred to in Article 29(1).

1 national measure recorded under this provision, in 1 form — sign in to view the analysis.

← 24 · All articles · 2 →

Source: EUR-Lex CELLAR · retrieved 2026-08-27