What good privacy evidence looks like
Useful privacy evidence shows what data exists, why it is processed, who touches it, how long it is retained, and what happens when something goes wrong.
Data inventory and lawful-basis records
DPIA or risk assessment evidence for higher-risk processing
Processor and third-party review trail
Breach response and notification workflow
