The answer to the question what a processing record costs is never a single fixed amount. The costs depend on three choices: do you maintain the record yourself with a template, do you use a system that fills and monitors it for you, or do you have it drawn up by an advisor. Maintaining it yourself costs no money but does cost time, a subscription to a system usually costs a fixed amount per month, and advice is typically charged by the hour.
What ultimately determines the price is not the law itself – the GDPR prescribes no tariff, only an obligation to document processing – but the scope of your own situation: how many processing activities you have, how many SaaS tools you use, and whether you only want a list or also the monitoring of processor agreements and the statutory timelines included.
Where the amount comes from
A processing record is in essence an overview: which personal data you process, for what purpose, through which tools, and how long you retain them. Drawing that up costs mainly time: you must go through your own business operations, from payroll administration to the webshop. That time is the first and unavoidable cost item, regardless of which route you choose.
After that comes the question whether you do that inventory once or keep it current on an ongoing basis. A record that is never updated after it is drawn up loses its value as soon as you acquire a new tool or switch a processor. That maintenance burden is where most companies underestimate the costs. In the knowledge base with explanations by topic you will find the statutory basis, with the reference in the GDPR itself.
Maintaining it yourself: no invoice, but time
An Excel sheet or Word document costs nothing to acquire. The bill comes at another moment: with every change in your tooling, every new type of data processing, or every question from a customer or supervisory authority, you must yourself check whether the record is still accurate. For a sole proprietor with a limited number of processing activities that is manageable. For a company with multiple departments, an HR system, a CRM and a webshop, that time investment grows quickly, and it is precisely there that the gaps arise that only come to light during an inspection or a request from a data subject.
A system that fills and monitors the record
The second route is a subscription to a system that fills the record from a library of well-known SaaS tools, and that automatically includes the processor agreements and the statutory timelines. The price of that is a fixed, transparent amount per month instead of unpredictable hours. What determines the level is usually the number of processing activities and the functionality used: the record only, or also the document set and the monitoring around it. The current overview can be found at the pricing page and what is included in it. The knowledge base, the check on a processor agreement and the decision tree for a data breach remain free to consult without an account.
When an advisor is needed
There are situations where a record alone is not enough: complex processing, sensitive data on a large scale, or doubt about the lawful basis. Then bespoke legal advice is a real part of the costs, in addition to the record itself. A system like gdpria.eu provides guidance and structure based on the GDPR and the guidelines of the EDPB and the Dutch Data Protection Authority, with the reference included, but does not decide for you and is not a substitute for a lawyer or the supervisory authority when the situation gives reason to do so.
What the amount ultimately yields you
The cost of a processing record is therefore not a single figure, but the sum of time, functionality and, sometimes, advice. What you get in return is a current overview that you can directly show to a customer, an insurer or in a procurement process, instead of something you have to reconstruct under time pressure. On the page that explains where the information comes from explains how the link between the legislation and the processing record is created.
Would you like to see what this means for your own business before you record anything? First, explore the free topics in the knowledge base, or create a business account to have the processing record filled directly from your own tools.