GDPR Glossary

What is Records of Processing Activities?

GDPR Glossary Also known as: ROPA, Article 30 records

The internal inventory of your processing activities that most organisations must maintain under Article 30.

A ROPA documents what personal data you process, why, who you share it with, transfers, retention and security measures — the map of your processing.

Most organisations with 250+ employees must keep one, and in practice it is expected wherever processing is regular or higher-risk.

In the Regulation

Art. 30 Records of processing activitiesArt. 5 Principles relating to processing of personal data

Related terms

AccountabilityThe principle that you must not only comply with the GDPR but be able to demonstrate it with records and policies.Data Processing AgreementThe mandatory written contract that must be in place between a controller and a processor.

Need this applied to your business?

Our data-protection lawyers turn GDPR terms into a working plan.

Get advice
All GDPR terms