Records of PII disclosure to third parties

The organization should record disclosures of PII to third parties, including what PII has been disclosed, to whom and when. ... - Licensed content not shown -

GDPR (EU)

30.1.d: Article(30)(1)(d): Each controller and, where applicable, the controller's representative, shall maintain a record of processing activities under its responsibility. That record shall contain all of the following information: (d) the categories of recipients to whom the personal data have been or will be disclosed including recipients in third countries or international organisations

LGPD (BRA)

Art.37: The controller and processor must record their personal data processing operations performed, especially when based on legitimate interest.