European Data Protection Supervisor register of processing operations

The EDPS has a legal obligation to keep a register of processing operations which have been notified to him for prior checking. This register is open to public inspection and contains the following information: ◦name and address of the controller as well as the part of the organisation in charge of the processing; ◦purpose or purposes of the processing; ◦category or categories of data subjects; ◦legal basis of the processing; ◦recipients or categories of recipients of the data; ◦general indication of the time limits for blocking and erasure; ◦proposed transfers of data; ◦security measures taken in compliance with Article 22 of the Regulation. For reasons of transparency, all information is included in the public register, apart from the security measures which, for obvious reasons, can not be published.