How to conduct a comprehensive ROPA
The need to maintain comprehensive record of processing activities only "increases with the business' size and complexity of its processing activities," BP Data Privacy Counsel Helga Turku, CIPP/E, writes. Turku recommends building a ROPA that is "user-friendly and easy to maintain." To accomplish this, she said a comprehensive ROPA should include leveraging "existing processes to capture processing activities systematically" and creating "a standard naming convention."Full story