The records of processing activities map the company’s processes in processing personal data. There are specific requirements for this record of processing activities, and these are outlined in article 30.  By law, everyone who processes personal data must have this record of processing activities updated and maintained.