When do small organisations have to keep a record of processing activities?
If you process personal data as an organisation, it is often mandatory under the General Data Protection Regulation (GDPR) to keep a record of processing activities. A misunderstanding that exists among a lot of people is that the obligation of a record of processing activities only applies to bigger companies. This is not true. Also smaller organisations need to comply with this obligation.
