---
name: gdpr-data-processing-record
description: "Create a GDPR Article 30 Record of Processing Activities (ROPA) entry. Use when the user wants help with GDPR Data Processing Record. Related topics: legal, compliance, gdpr."
---

# GDPR Data Processing Record

Create a GDPR Article 30 Record of Processing Activities (ROPA) entry.

## How to use this skill

1. Ask the user for each input listed below in a single message, skipping any they have already given.
2. Where options are listed, offer them, but accept other answers too.
3. Fill the answers into the prompt template, then follow the completed prompt to produce the result.

## Inputs

- **Activity Name** (free text, e.g. "")
- **Data Controller Name** (free text, e.g. "Your organisation name")
- **Controller Contact / DPO** (free text, e.g. "Name and email")
- **Processing Purpose** (longer free text)
- **Categories of Data Subjects** (choose any: Customers, Employees, Website visitors, Job applicants, Suppliers, Children, Other)
- **Categories of Personal Data** (choose any: Name & contact details, Financial data, Health data, Location data, Online identifiers (cookies/IP), Biometric data, Special category data)
- **Data Retention Period** (free text, e.g. "")
- **Legal Basis for Processing** (choose one: Consent, Contract performance, Legal obligation, Vital interests, Public task, Legitimate interests)
- **Is data transferred outside the EEA** (choose one: Yes, No)
- **Security measures** (choose any: Encryption, Access controls, Pseudonymisation, Regular audits, Staff training)

## Prompt template

## Introduction
Generate a compliant GDPR Article 30 Record of Processing Activities (ROPA) entry for a specific data processing activity.

## Processing Activity Details
- Activity Name: {{Activity Name}}
- Data Controller Name: {{Data Controller Name}}
- Controller Contact / DPO: {{Controller Contact / DPO}}
- Processing Purpose: {{Processing Purpose}}

## Data Details
- Categories of Data Subjects: {{Categories of Data Subjects}}
- Categories of Personal Data: {{Categories of Personal Data}}
- Data Retention Period: {{Data Retention Period}}

## Legal Basis & Risk
- Legal Basis for Processing: {{Legal Basis for Processing}}
- Is data transferred outside the EEA: {{Is data transferred outside the EEA}}
- Security measures: {{Security measures}}

---

Source: [GDPR Data Processing Record on PromptBuild](https://promptbuild.io/prompt/S2b0pSmDnUr6VvUvnWCQ/gdpr-data-processing-record)