Audience
Organizations in need of a privacy impact assessment solution
About ProvePrivacy
The Record of Processing Activities (ROPA) is requirement of most organisations as defined in article 30 of the GDPR. Even if not required by law the ROPA forms the baseline for data protection compliance as it allows an organisation to evidence where personal data is used and identifies data usage risk. By establishing a small network of data champions your organisation can determine where data is processed. This allows your Data Protection Officer (DPO or equivalent) to obtain a holistic view and provides the ability to demonstrate compliance. Identify where your risks are at a glance, identify which department, supplier or activity requires further remediation and receive recommendations for next steps. The data sharing assessment allows allows you to understand where personal data is shared with your suppliers.