GDPR legislation requires every organization to maintain a central personal data register. This is an overview of all processing of personal data within your organization.
Setting up this GDPR data processing register is certainly not a one-time task. The register must always be kept up-to-date and contain additional information related to the processing operations.