# Record of processing activities

PrivacyBuilt Editorial | Educational working model | 3 November 2026

Use one row per processing activity. Confirm Article 30 fields for your role and any applicable exceptions. Add contact details, joint-controller or representative details where required. Do not place real personal records in this register.

## Working fields

- Activity id: [complete / validate]
- Activity name: [complete / validate]
- Controller or processor: [complete / validate]
- Owner: [complete / validate]
- Purpose: [complete / validate]
- Lawful basis if applicable: [complete / validate]
- Data categories: [complete / validate]
- Individual categories: [complete / validate]
- Recipients: [complete / validate]
- Transfer locations and safeguards: [complete / validate]
- Retention rule: [complete / validate]
- Security measures: [complete / validate]
- Review date: [complete / validate]

## Review and adoption

- Assign an owner and approver.
- Link official sources and operational evidence.
- Record exceptions, review triggers and a review date.
- Store completed copies in an approved restricted environment.