All 99 Articles Chapter 4: Controller and Processor
Most organisations must keep an internal record of their processing activities — the 'ROPA' — describing what data they process, why, who they share it with and how long they keep it.
Read the official text on EUR-LexRelated articles
Practical guidance
These summaries are a plain-English orientation only and are not a substitute for the official text of the Regulation or for legal advice.
Need to apply Article 30?
Our data-protection lawyers turn the text into a plan.