The documentation obligation requires companies and organizations to document and provide evidence of their data processing activities. This includes keeping records of processing activities, documenting consents and recording data protection incidents.
