Record Keeping
What is Record Keeping?
The systematic creation, maintenance, and disposal of records documenting data processing activities as required by privacy regulations.
Terms that appear alongside record keeping
Each of these is named in at least one of the same controls as record keeping. The number is how many controls name both.
- compliance 21 shared controls
- due diligence 9 shared controls
- audit 9 shared controls
- consent 7 shared controls
- gdpr 6 shared controls
- governance 6 shared controls
- accountability 6 shared controls
- policy 5 shared controls
Frameworks that govern record keeping
What the standards actually require on record keeping
Requirements naming record keeping across 6 standards, quoted from the control text.
Identical in substance to IS.I.OR.245: archived and traceable records of any exemption approval and its assessment (5 years after loss of validity), contracts (5 years after amendment or termination), key processes, risks and treatments, reported incidents and...
easa-part-is-information-security-in-aviation::IS.D.OR.245 · IS.D.OR.245 Record-keeping →Financial institutions are required by law to keep, for at least five years, all necessary records on domestic and international transactions sufficient to reconstruct individual transactions including amounts and currencies and to serve as evidence for prosec...
fatf-40-recommendations::R.11 · R.11 Record-keeping →The verifier and the CSP keep records of authentication events, successful and failed, sufficient to analyse patterns of online guessing, to support dispute resolution and to give the relying party the audit trail its reliance needs, retained under policy.
iso-iec-29115-2013-entity-authentication-assurance-framework::8.3.2 · 8.3.2 Record-keeping (authentication) →High-risk AI systems shall technically allow for the automatic recording of events (logs) over the lifetime of the system, ensuring a level of traceability appropriate to the intended purpose;
EUAI-Art.12 · Record-keeping (logs) →Procedures for keeping documents and records shall be set up and maintained, and the documents behind the inventory's design, development and upkeep shall be kept so that it can be verified, handled under the organization's information management procedures.
iso-14064-greenhouse-gas-accounting-and-verification-parts-1-3::1:8.2 · 8.2 Document retention and record keeping →Screen all clients and transactions in real time against UN Security Council and federal lists with regularly updated automated systems; freeze associated assets immediately on a match and prevent any movement;
uae-virtual-asset-regulatory-authority-vara-regulations::CRM-III.H · Compliance and Risk Management Rulebook III.H to III.J: Targeted financial sanctions, AML record keeping and enforcement →Questions people ask about record keeping
What is Record Keeping?
Why is Record Keeping important for compliance?
Which compliance frameworks address Record Keeping?
Where can I learn more about Record Keeping?
See how Record Keeping applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.