An organisation's records of processing activities list purposes and data categories but omit categories of recipients and international transfers. What Art. 30 expectation is most clearly unmet?
Select an answer to reveal the explanation.
Short Explanation
A processing map with blank 'who gets the data' and 'where it leaves the EEA' boxes is like a shipping log that forgets destinations. Article 30 expects recipients and transfers on the record—not just purposes and categories.
Full Explanation
Article 30 records of processing must include, among other elements, categories of recipients and transfers of personal data to third countries or international organisations (including documentation of safeguards where applicable). Omitting recipients and transfers leaves the record incomplete for accountability and supervisory review. Favourite colours and naming every viewer are not Art. 30 requirements.