Generating an Article 30 Report (Hub)

Overview Generating the Report Customizing the Report

Overview

The Article 30 report provides a structured record of processing activities required under Article 30 of the GDPR. You generate it from the Business Processes page in the Data Mapping & Risk Manager (DMRM), with options to customize which data appears, include visual data flow elements, and save your settings as defaults for future downloads.

This article explains how to generate and customize an Article 30 report.

What you can do

✓Generate an Article 30 report for one or more business process records

✓Filter report data by data protection authority jurisdiction

✓Customize which sections, fields, and columns appear in the report

✓Include a Data Flow Chart and/or Global Map

✓Save report settings as your personal default for future downloads

📋 Note: When the selected business process record uses a Type 3 template with two Owning Organizations and data recipients listed in one of the two locations, the following fields are populated automatically:

Field	Data Pulled
Countries data are transferred to	Names of the countries where the data recipients and systems are located
Organizations data are transferred to	Name of the recipient company entity, or name of the owner of the third-party system

Generating an Article 30 Report

To generate an Article 30 report, follow these steps:

1

In the left navigation panel, hover over the Data Mapping & Risk Manager icon, and then select Business Processes.

2

Select one or more business process records.

3

In the top-right corner of the page, click the Download button (1), and then select Article 30 Report (2).

4

In the Report Customization modal, configure the following options as needed, and then click Download.

•Report scope (3) — If only one record is selected, choose what information appears in the report:

Show all information globally — Displays all data across all jurisdictions. This is the default setting.

Show information relevant to a particular data protection authority — Filters the report to a specific jurisdiction.

•Customize Data (4) — Click to customize which sections, fields, and columns appear in the report. See Customizing the Article 30 Report below for details.

•Data Flow Chart / Global Map — Select whether to include a Data Flow Chart, a Global Map, or both. This option may not be applicable to all records.

📋 Note: Click Save as Default to save your current settings for future downloads of this report. This setting applies only to you and only to the specific business process records you selected.

Customizing the Article 30 Report

After clicking Customize Data in the Report Customization modal, the following options are available:

•Section, field, and column visibility — Toggle the visibility icon (1) next to any section, field, or table column to show or hide it in the report.

•Processors section (2) — Displays the names of organizations acting as processors. This section is hidden by default. Use the toggle to make it visible in the report.

•Contact information source (3) — Select where the contact information displayed in the report should come from.

📋 Note: If the Select this entity as the Reporting Organization for the Article 30 Report (1) setting is enabled during business process record creation, and the Include in A30 Report toggle is set to Yes (2), the names of the Data Protection Officers and EU Representatives of the owning organizations are listed on the Article 30 report.

The screenshot below shows an example of an Article 30 report page displaying the name of an added EU Representative:

TrustArc Data Mapping & Risk Manager  ·  Generating an Article 30 Report  ·  support.trustarc.com