GDPR processing register — free pre-filled example (Excel)
Last updated: 23 July 2026
In short
Is a processing register mandatory for an association?
For almost any organisation that structurally processes personal data — which every association with a membership list does — yes. GDPR Art. 30 requires a record of processing activities; the small-organisation exemption falls away once you process structurally or special data.
Almost every association must keep a processing register (GDPR Art. 30). This free Excel template comes pre-filled with the activities you probably have.
Review the rows, pick the right legal basis per activity from the dropdown and add your own activities. You'll be GDPR-ready on paper within an hour.
Downloads
The files are in Dutch — they follow the Dutch rules for associations and foundations.
What's inside?
- Pre-filled with membership admin, dues collection, newsletter, images, volunteers, finance and website
- All Art. 30 columns: purpose, data subjects, data, legal basis, recipients, retention, security, transfers outside the EEA
- Dropdown with the 6 GDPR legal bases
- Empty rows to add your own activities
- Notes on retention duties (e.g. 7 years for finance)
Stay current when regulations change
Leave your email address and receive the updated version whenever the rules change (such as WBTR or ANBI amendments). A few emails per year at most, no newsletter.