Policies and records
Privacy policies, records of processing and the documents the GDPR expects you to keep, explained in plain language.
Policies and recordsRecord of processing activities (Article 30): does a small business need one?What a GDPR record of processing activities contains, who must keep one, how the Article 30(5) exemption for small organisations really works and how to build a useful register.12 October 2026 · 4 min readPolicies and recordsWhat to include in a GDPR privacy policy (checklist)The information Articles 13 and 14 of the GDPR require in a privacy policy, as a checklist, with what each item means in practice and the mistakes to avoid.6 October 2026 · 5 min read