Record of processing activities

UK GDPR Article 30 requires every controller to keep a record of its processing activities — what data is processed, why, about whom, and for how long. The law requires us to keep it; nothing requires us to publish it. We publish a summary anyway, because a register you can't see protects no one.

Each row below comes straight from an application's own declaration, refreshed daily. The full detail for any application is one click away on the applications page.