lexiara

2.

LED

Member States shall provide for each processor to maintain a record of all categories of processing activities carried out on behalf of a controller, containing: the name and contact details of the processor or processors, of each controller on behalf of which the processor is acting and, where applicable, the data protection officer; the categories of processing carried out on behalf of each controller; where applicable, transfers of personal data to a third country or an international organisation where explicitly instructed to do so by the controller, including the identification of that third country or international organisation; where possible, a general description of the technical and organisational security measures referred to in Article 29(1).

· All articles ·

Source: EUR-Lex (Cellar) · retrieved 2026-09-25 · Text as adopted (Official Journal); later amendments are not incorporated in this text.