Processing Activity,Data Principal Category,Personal Data Fields,Specified Purpose,Basis Under Act,Source,System or Location,Processor or Recipient,Cross-border Transfer,Retention Trigger,Retention Period,Control Owner,Security Controls,Erasure Evidence,Review Notes
Example - Customer enquiry,Prospective customer,"Name; email; message",Respond to enquiry,Consent or applicable legitimate use,Website form,Email mailbox,Hosting and email providers,Assess,Enquiry closure,12 months,Compliance,"Access control; TLS",Deletion log,Replace example before use