Are admin audit logs personal data too?

Often yes (who viewed whom). They follow retention and access rules in the map. Security teams still need them — balance is contractual.

Educational and evidentiary material for procurement and IT evaluators. Adapt with your legal, privacy, and information-security counsel. Commercial terms, SLAs, and certificate serials are confirmed in the bid — not invented on this page.