The processing activities register for municipalities

The processing activities register is a structured inventory of all data processing activities within an entity, covering their purpose, legal basis, categories of data and data subjects, recipients, and retention periods. The LPrD revision makes it mandatory for Vaud public bodies, replacing the previous file register.

For a municipality, the register covers a wide range of domains: civil status, residents management, schools, social affairs, police, human resources, video surveillance, and online services. Building it starts with a mapping of existing processing activities, then documenting each one using a common framework. The register is a living document, updated with each new processing activity.