Audit Trail

An audit trail records security- and privacy-relevant events: authentications, access to personal data, changes to records, consent grants and withdrawals, DSR fulfilments, exports and deletions. GDPR Article 32's accountability principle, DPDP Rule 13's SDF data-audit duty and PDPA's Accountability Obligation all turn on the Fiduciary's ability to produce evidence of what happened. Without an audit trail, 'we complied' is a claim the regulator cannot test.

Technically, the trail is append-only (write-once, read-many) with cryptographic integrity so events cannot be altered or back-dated. Retention is bounded by both minimums (DPDP Rule 8(3) requires at least one year of processing logs) and maximums (storage limitation under GDPR and PDPA — the trail is itself personal data about the actor). Design logs around stable internal identifiers (account_id, event_type) rather than embedded personal data in every row, so the trail can be pseudonymised in place when the identity-retention mandate expires.