ROPA

Records of Processing Activities (ROPA) document what personal data an organisation processes, for what purposes, on what legal basis, with whom it is shared, and for how long it is retained. Maintaining accurate records is a core accountability measure and the backbone of demonstrating DPDPA compliance.