It’s easy to make your own RoPA now with the Chino.io template.
Why doing it? It’s a good way to show people that you care about their data privacy.And it’s also a key requirement under the GDPR to be open with people about how you use their data.
Use this template to document the processing activities you undertake as a controller.
Headings highlighted green are required areas of documentation under Article 30 of the GDPR or Schedule 1 of the Data Protection Act 2018.
Headings highlighted blue are optional areas of documentation that are not required under Article 30 of the GDPR or Schedule 1 of the Data Protection Act 2018.
1. Complete your organisation’s name and contact details in cells B3-B6.
2. Complete your data protection officer’s name and contact details (if applicable) in cells D3-D6.
3. Complete your representative’s name and contact details (if applicable) in cells F3-F6.
4. Document your organisation’s processing activities, starting in cell A10, and working from left to right. Where necessary use multiple rows for each processing activity in order to be as granular as possible (see example tab).
For more detailed guidance on documentation, please see the Guide to GDPR on our website.