Register for documenting overview of personal data processing activities. 

Record of Processing Activities (ROPA) is a requirement for compliance with General Data Protection Regulations (GPPR) and this form is setup to allow this to be completed as simply as possible with just the key data held here;

• Description of the Personal Data including category, processing operation and purpose
• Use of the data including who has access and any sharing
• Where stored / held & Protection – Security Controls in place
• Responsibility
• Legal Basis for processing and Condition of processing (if special category data)
• Details of Data Protection Impact Assessment  (DPIA)

This simple approach allows this to be completed without too much detail as the DPIA or Record of Processing Form can also be completed if further detail is required.