The significant data fiduciary shall maintain accurate and up-to-date records of the following, in such form and manner as may be specified by regulations, namely:—
- important operations in the data life-cycle including collection, transfers,and erasure of personal data to demonstrate compliance as required under section 10;
- periodic review of security safeguards under section 24;
- data protection impact assessments under section 27; and
- any other aspect of processing as may be specified by regulations.