Understanding the Article 30 Record of Processing Activities
Your Record of Processing Activities (RoPA) is your official documentation under Article 30 of the GDPR. It’s a required register of how personal data is processed across your organisation.
The platform automatically generates a Record of Processing Activities (RoPA) document based on your completed processing activities. This document fulfils the Article 30 GDPR requirement and can be presented to your supervisory authority upon request.
How do I access my RoPA?
To access your generated RoPA, navigate to Records of Processing Activities in the main menu. The platform automatically compiles your RoPA from all completed processing activities. Select the relevant RoPA entry and click Download or View to open the document.
What does the generated RoPA document cover?
Your Article 30 RoPA contains:
- Name and purpose of each processing activity
- Categories of data subjects and personal data
- Recipients of data (e.g. vendors, joint controllers)
- Retention periods and legal basis
- Technical and organisational security measures

The RoPA follows GDPR’s official structure and terminology
Which GDPR articles require a RoPA?
This document is required by:
- Article 30(1) for data controllers
- Article 30(2) for data processors
It should be available upon request by your supervisory authority.
Related Articles