ProvePrivacy Ltd

Record of Processing Activities The Record of Processing Activities (ROPA) is requirement of most organisations as defined in article 30 of the GDPR. Even if not required by law the ROPA forms the baseline for data protection compliance as it allows an organisation to evidence where personal data is used and identifies data usage risk. By establishing a small network of data champions your organisation can determine where data is processed. This allows your Data Protection Officer (DPO or equivalent) to obtain a holistic view and provides the ability to demonstrate compliance.