Data Protection Workshop 3

Records of Processing Activities

Build the central inventory of how your organisation processes personal data
One slide per task, each with an explanation and a practical example
The basis for almost every following workshop: notices, retention, requests, risks and vendors

Europe

Latin America

Asia-Pacific

Jurisdiction selected: Peru — Law 29733 on Personal Data Protection and its Regulation (Supreme Decree 016-2024-JUS)

The processing activities of all departments recorded in ResGuard
Data, data subjects, recipients and systems documented for each activity
A specific purpose and legal basis for every activity, and documented consent processes
Retention periods, transfers, owners and a review cycle in place