Help
What RoPA records
Each record answers: what personal data is processed, why, for whom, where, by whom and under what controls. Keep entries short and factual.
What PRISM fills in automatically
- Systems, repositories and data sources
- Personal-data categories and classification
- Data locations, flows and cross-border indicators
- Potential processors and risk indicators
What you must decide
- Purpose of processing and business justification
- Legal basis under DPDP
- Final retention period and DPIA determination
- Approval of the record
Other OneConsent modules
Discovery lives in PRISM; vendors, consent, DSR and DPIA are handled by their own OneConsent modules and are linked from a processing activity.