The documentation obligation requires companies and organisations to document and provide evidence of their data processing activities. This includes keeping records of processing activities, documenting consents and recording data protection incidents.
