Art. 31 (1) Organic Law 3/2018 obligates controllers and processors to inform their Data Protection Officer (only if appointed) about any modifications of the respective processing records.
According to Art. 31 (2) Organic Law 3/2018, public entities enlisted in Art. 77 (1) Organic Law 3/2018 have to publish their processing records.
Guidelines of the supervisory authorities
A list of the AEPD’s processing records are available at: (link).
