GDPR Record of Processing Activities Generator
Fill in one activity → get a clean Article 30 RoPA entry you can drop into your compliance register. Repeat for each activity. No signup, nothing leaves your browser.
Generated record
Need a published policy too? Use the free privacy notice generator. Cover your contracts with the free Article 28 DPA generator, check your public pages with the free EAA scanner, or see all free tools — and browse the GDPR e-book and template kit. This document is a draft and does not constitute legal advice.
Why keep a record of processing activities
- It is legally required. GDPR Article 30 obliges controllers and processors to maintain written records of every processing activity. Failing to produce one during an inspection is itself a violation, with fines up to €10 million or 2% of global turnover.
- It drives everything else. Your RoPA tells you where DPAs are needed, what your privacy notices must say, how long data may be kept and where breach notifications would have to go. It is the backbone document of practical GDPR work.
- It is the first thing auditors ask for. Supervisory authorities, enterprise clients doing vendor assessments and certification bodies all start with "show us your records".
Prefer to work in your own document? Download the free RoPA template.
The record says what you process. It cannot tell you whether the site agrees.
This generator is free, and it writes the whole record: your role, one processing activity with its purpose and lawful basis, the categories of data subjects and data, recipients and transfers, retention and security. Nothing is held back for a licence.
What a record cannot do is find out whether the site still matches it — and section 3 is where that goes wrong first, because recipients and transfers go stale. EUComply Pro opens your live URL and reports what the page actually loads: whether a privacy link exists in the footer at all, whether Google Analytics or a Meta pixel loads without a consent banner, whether a form posts over plain HTTP, and whether the response carries HSTS and a CSP header. That is 18 server-side checks, and the free scanner already runs the 15 accessibility checks — 33 checks in all — and the report comes as a PDF you can send to a client. $79/year per website.