Use this register to document what, why, and how you process personal data. It is a working aid — adapt it to your operations and review with counsel.
| # | Data category / subject | Purpose of processing | Lawful basis | Recipients | Storage location | Retention | Cross‑border transfer? |
|---|---|---|---|---|---|---|---|
| 1 | |||||||
| 2 | |||||||
| 3 | |||||||
| 4 | |||||||
| 5 |
Data categories examples: customer contact data, employee data, supplier data, visitor/website analytics.
Lawful basis examples: consent, contract performance, legal obligation, legitimate interests.
Keeping this register current is a practical way to demonstrate an operating compliance program.