22a Documentation

It is essential you provide information about your data processing activities to the individuals whom you are processing data on.

For employees or contractors, this may be detailed in their contracts. 

For customers and or website visitors this would need to be provided publicly as your privacy policy and sighted in your terms of use documentation. 

Essentially this is all about transparency, providing individuals with a declaration of what you will do with their data.