Records of information requests
Article 17
Member States shall ensure that records are kept relating to requests for information pursuant to this Directive. Those records shall contain at least the following information: (a) the name and contact details of the organisation and of the staff member requesting the information and, as far as possible, of the recipient of the results of the query or search; (b) the reference to the national case in relation to which the information is requested; (c) the subject matter of the requests; and (d) any executing measures of such requests. The records shall be kept for a period of five years after their creation and shall be used solely for the purpose of checking the lawfulness of the processing of personal data. The authorities concerned shall make all records available to the national supervisory authority upon its request.