Skip to content
  • There are no suggestions because the search field is empty.

Understanding the Article 30 Record of Processing Activities

Your Record of Processing Activities (RoPA) is your official documentation under Article 30 of the GDPR. It’s a required register of how personal data is processed across your organisation.

The platform automatically generates a Record of Processing Activities (RoPA) document based on your completed processing activities. This document fulfils the Article 30 GDPR requirement and can be presented to your supervisory authority upon request.

How do I access my RoPA?

To access your generated RoPA, navigate to Records of Processing Activities in the main menu. The platform automatically compiles your RoPA from all completed processing activities. Select the relevant RoPA entry and click Download or View to open the document.

What does the generated RoPA document cover?

Your Article 30 RoPA contains:

  • Name and purpose of each processing activity
  • Categories of data subjects and personal data
  • Recipients of data (e.g. vendors, joint controllers)
  • Retention periods and legal basis
  • Technical and organisational security measures

ropa-overview

The RoPA follows GDPR’s official structure and terminology

Which GDPR articles require a RoPA?

This document is required by:

  • Article 30(1) for data controllers
  • Article 30(2) for data processors

It should be available upon request by your supervisory authority.


Related Articles