Data Protection Workshop 3

Records of Processing Activities

Build the central inventory of how your organisation processes personal data
One slide per task, each with an explanation and a practical example
The basis for almost every following workshop: notices, retention, requests, risks and vendors

Europe

Latin America

Asia-Pacific

Jurisdiction selected: Singapore — Personal Data Protection Act 2012 (PDPA), amended in 2020

The processing activities of all departments recorded in ResGuard
Data, data subjects, recipients and systems documented for each activity
A specific purpose and legal basis for every activity, and documented consent processes
Retention periods, transfers, owners and a review cycle in place