A RoPA (Record of Processing Activities), or data map, is the foundation of robust privacy compliance. It shows what data you collect, how it’s used, shared, and retained, and is a requirement for most organisations to meet privacy obligations.

In Europe and the UK, GDPR mandates a formal RoPA, while US state laws such as California’s CCPA/CPRA and Colorado’s CPA expect businesses to maintain data inventories serving a similar purpose. Regulators expect these records to be accurate and up to date, and frequently request them at the outset of investigations or audits.

A clear, well-maintained data map is therefore critical to demonstrating accountability, particularly as AI and emerging technologies add new layers of complexity to data use.

We do the mapping for you: Our privacy specialists gather the information and build your records.

Select your platform: We can load your record into your existing system, or you can use our purpose-built RoPA hosting platform at a fraction of the cost, saving you from expensive subscriptions for a bloated system you’ll barely use.

Enjoy compliant records with expert support: Benefit from clear, accurate, and easy-to-update data maps with the backing of Shoosmiths’ leading Privacy team to ensure ongoing maintenance and compliance.

How RoPA360 can help

RoPA360 is a simple, cost-effective way to stay on top of your data maps without overloading your team with the labour-intensive mapping process.

Collect | Map | Report | Sustain

We handle the heavy lifting , running questionnaires and interviews to capture accurate data from the start.

We can build on existing work or automate collection across your organisation, and can map everything onto your chosen platform, whether that’s your existing provider or Shoosmiths’ cost-effective in-house solution.

We'll calibrate it around your business model to deliver a clear data inventory for compliance, risk assessment, and day-to-day management. You'll receive scalable reports and dashboards with real-time visibility into risks, helping you make informed decisions and meet privacy requirements like RoPAs and DPIAs.

We provide ongoing support to keep your data map current and adaptable as your business and regulations evolve.