GDPR Article 30 RoPA Template

GDPR · Article 30

Records of Processing Activities under GDPR Art. 30 — capture controller, purpose, lawful basis, data subjects, recipients, transfers, retention, and security measures per processing activity.

GDPR

Art. 30(1) fields

Art. 30(3) representative

Saved to browser only — this template does not persist to the portfolio yet.

Controller & DPO

Required by GDPR Art. 30(1)(a) and (1)(b). The controller is the single point of accountability for each processing activity below.

Controller name *

Controller contact (email) *

EU representative (only required if controller is outside the EU — Art. 27)

Joint controllers (Art. 26) — one per line

Leave the field empty if there are no joint controllers.

DPO contact *