Understanding and Applying the General Data Protection Regulation (GDPR): Responsibility of Data Controller or Processor -- Maintaining a Record of Processing Activities
Almost every company generates a large amount of customer or employee data across a wide variety of areas and categories. In order to ensure compliance, the GDPR mandates that each data controller or processor maintain a record of processing activities. (Record-keeping, Exceptions to the Record-Keeping Requirement)