ISO 27701
EN
Records of PII disclosure to third parties
The organization should record disclosures of PII to third parties, including what PII has been disclosed, to whom and when. ... - Licensed content not shown -
GDPR (EU)
30.1.d: Article(30)(1)(d): Each controller and, where applicable, the controller's representative, shall maintain a record of processing activities under its responsibility. That record shall contain all of the following information: (d) the categories of recipients to whom the personal data have been or will be disclosed including recipients in third countries or international organisations
LGPD (BRA)
Art.37: The controller and processor must record their personal data processing operations performed, especially when based on legitimate interest.