Article 28 — Records of processing activities

Controllers, Processors and representatives must maintain prescribed written records of processing and make them available to the Commissioner on request.

Interpretation and application must be checked against the official text and current version.