CLAIM-2026-08-27-09

GDPR Article 30(1)(b) requires a controller's record of processing activities to contain the purposes of the processing.

Why it matters

An authorization trail records which principal was permitted to reach which resource. It does not record why, which is what the Article asks for.