GDPR Article 30

Article 30: GDPR Process Activity Register

0 out of 7 steps completed0%
7 Lessons

About this Course

Approximate Time to Completion: 1 hour
Instructor: Tudor Borlea, Presales Engineer, Collibra

In this course, we will review Article 30 of the GDPR, which deals with records of processing activities. It demands that each controller and, where applicable, the controller’s representative shall maintain a record of processing activities under its responsibility. Collibra has built a framework that covers the needs of GDPR Article 30 with the addition of several registries. The registries include the process register, which records the processing activities. The purpose register, which contains a list of purposes for processing activities, these purposes need to be in a language which is both understandable by the business and also as legal expressed as possible. You can also visualize purposes in a hierarchical manner, which displays a full taxonomy of purposes that you can implement in Collibra and then link these purposes to processing activities.

The applications registry deals with the list of applications in the company. We can very easily link these applications to processing activities to understand exactly which application deals with which set of processing activities, and what is the nature of the data flowing through these applications. The legal entities registry deals with the full list of legal entities, both internal and external to the company.

Finally, we will also address the visualizations available specifically for GDPR, the data lifecycle visualization which simply looks at how a processing activity flows through the various steps of the data lifecycle, from collection to distribution, usage, archiving and disposal or erasure.

Disclaimer: The courses, articles, videos, documents, etc. on this website are offered only for general informational and educational purposes. They are not offered as and do not constitute legal advice or legal opinions. Certification with or receipt of this training does not provide or ensure any legal or other compliance certification and does not ensure that the user will be in compliance with any laws, including GDPR or any other privacy laws.

You might be interested in these courses:

Course Materials