What is a processing directory and do I need one?

The record of processing activities within the meaning of the GDPR provides for written documentation and an overview of procedures in which personal data is processed. Companies with fewer than 250 employees do not have to keep a record of processing activities in accordance with Art. 30 para. 5 GDPR. However, there is an exception if your company processes personal data more than occasionally, if the data is particularly sensitive or if there is a risk to the rights and freedoms of the data subjects.