Records of Processing
About the record of processing
The information collected in the record of processing is the core of the data privacy law documentation system. It must remain available at all times in the event it is requested by the Data Protection Authority.
The record of processing is about who processes what personal data, where, why, and how.
Creating a record of processing
To generate a record of processing in the form of a Word document:
1. Select ROPA.
2. Select a processing activity and from the Reports drop-down button select Record of Processing.
A Word document is generated. The contents is as follows:
• Introduction: it describes data subject rights, the principle of data transfers and security measures.
• List of all processing activities
• Detailed description of the processing activity selected
• Data protection role
• Sensitive activities
• Legal basis
• Data categories and Data subject categories
• Notice and consent management
• Data subject rights
• Transfers to third parties
See Data Transfers.• Security measures
See Data Transfers.• Sub-processing elements
• Attachments