who needs to maintain a record of processing