Description
This is the first document you should complete in your organisation. You need to understand what data you are storing, where, what legal reason and for how long- this is essential to understanding all other areas of GDPR.
This document can be completed before you look to complete the Records of Processing Activities (RoPA) – both are legal requirements under GDPR.
It is advisable to book additional guidance to complete this document.
