# Data Protection Act 2018, Paragraph 41


A record maintained by the controller, or the controller's representative, under Article 30 of the UK GDPR in respect of the processing of personal data in reliance on a condition described in paragraph 38 must include the following information—
(a) which condition is relied on,
(b) how the processing satisfies Article 6 of the UK GDPR (lawfulness of processing), and
(c) whether the personal data is retained and erased in accordance with the policies described in paragraph 39(b) and, if it is not, the reasons for not following those policies.

---
Source: https://www.legislation.gov.uk/ukpga/2018/12/schedule/1/paragraph/41 (the official version)
Page: https://openlegislation.uk/data-protection-act-2018/schedule-1/paragraph-41
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.