If your a business with over 250 employees you should be keeping a record of your processing activities under article 30 of GDPR regulations. This spreadsheet will help you track personal data held on data subjects broken down by department, function and legal basis for holding the data.