DPIA Tool

The Record of Processing Activities (ROPA) is requirement of most organisations as defined in article 30 of the GDPR. Even if not required by law the ROPA forms the baseline for data protection compliance as it allows an organisation to evidence where personal data is used and identifies data usage risk. By establishing a small network of data champions your organisation can determine where data is processed. This allows your Data Protection Officer (DPO or equivalent) to obtain a holistic view and provides the ability to demonstrate compliance. Identify where your risks are at a glance, identify which department, supplier or activity requires further remediation and receive recommendations for next steps. The data sharing assessment allows allows you to understand where personal data is shared with your suppliers.

Create and maintain your record of data processing activities with ease and in accordance with article 30 of the GDPR. Use the dashboard to track your progress, identify risks and determine priorities. The dashboard is the perfect starting point for all privacy professionals. Perform data protection impact assessments to identify privacy risks and to take appropriate measures to minimize them. Handle your incidents and data breaches with a clear workflow that guides you through the process from beginning to end. ‍Send out questionnaires to your vendors to periodically assess their compliance with your data processing agreements. ‍Create a clear overview of all the data subject requests your organization has received and monitor their progress. ‍Use the privacy, information security and data management scans to establish how your organization is doing in these areas and receive recommendations for improvement.