Records of PII disclosure to third parties
The organization should record disclosures of PII to third parties, including what PII has been disclosed, to whom and when. ... - Licensed content not shown -
30.1.d: Article(30)(1)(d): Each controller and, where applicable, the controller's representative, shall maintain a record of processing activities under its responsibility. That record shall contain all of the following information: (d) the categories of recipients to whom the personal data have been or will be disclosed including recipients in third countries or international organisations
Art.37: The controller and processor must record their personal data processing operations performed, especially when based on legitimate interest.