GDPR Record of Processing (ROPA) Template

A structured record of processing activities you can complete for each activity, covering the purpose, lawful basis, categories of data and data subjects, recipients, transfers, retention and security measures.

What’s inside

• A field-by-field record for one processing activity
• Prompts for purpose, lawful basis and data categories
• Sections for recipients, transfers, retention and security measures