Data protection and security

Records of processing activities (ROPA)

  • Data protection and security

Definition

A written record an organisation is required to keep, under data protection law, describing what personal data it processes, why, and who it is shared with.

Also called

ROPA, Records of processing activities

For your role

Choose your role to see what this term means in your work.

Why it matters

Most organisations are legally required to keep one and show it on request.

Where it is used

Data protection compliance and audits.