The DPO (or designate) will establish and maintain a log of privacy audits. At a minimum, the log will capture the recommendations arising from internal privacy audits, the individual(s) responsible for addressing each recommendation, the date each recommendation was or is expected to be addressed and the manner in which each recommendation was or is expected to be addressed.