Glossary · Data protection
Records of Processing Activities (RoPA)
The documented inventory of an organisation's personal data processing activities, required by the GDPR.
Put the term into practice: Data protection management
Records of Processing Activities are a structured inventory of how an organisation processes personal data. Each record covers the purposes, categories of data and data subjects, recipients, transfers, retention periods, and security measures.
Maintaining a RoPA is a GDPR accountability requirement for most organisations and is one of the first things a supervisory authority will ask to see.
