Records of Processing Activities Template - ROPA

A document to help you achieve transparency and accountability in the handling of personal data.

Descarga tu plantilla

Purpose of the document

	Get your company to centralise the activities related to the processing of personal data within your organisation.
	Help your company demonstrate transparency and accountability in the handling of personal data.
	Identifies risks and responds in an effective manner to requests from data protection authorities and data subjects

What is the record of processing activities?

The registration of processing activities in the GDPR imposes on companies and other entities the task of documenting the flows of personal data circulating within them. This requirement replaced the previous obligation to register files in the General Data Protection Register (which in Spain was done with the Spanish Data Protection Agency).

Download

When is it mandatory?

The recording of processing activities is compulsory for both the data controller and the processor when any of these requirements are met:

	The company or organization has more than 250 employees.
	The company, organization (with less than 250 employees), or self-employed person carries out treatments that: -May entail a risk to the rights and freedoms of the persons concerned - Do not be occasional - Include special categories of personal data - Processing of personal data relating to convictions and offences is carried out..