2.
Member States shall provide for each processor to maintain a record of all categories of processing activities carried out on behalf of a controller, containing: the name and contact details of the processor or processors, of each controller on behalf of which the processor is acting and, where applicable, the data protection officer; the categories of processing carried out on behalf of each controller; where applicable, transfers of personal data to a third country or an international organisation where explicitly instructed to do so by the controller, including the identification of that third country or international organisation; where possible, a general description of the technical and organisational security measures referred to in Article 29(1).
← art_24__para_1__point_i__text_1 · All articles · art_24__para_2__text_1 →
Source: EUR-Lex (Cellar) · retrieved 2026-09-25 · Text as adopted (Official Journal); later amendments are not incorporated in this text.