Ireland: Published Guidance on Records of Processing Activities (RoPA) under Article 30 GDPR

On 19 April 2023, the Irish Data Protection Commission published a Guidance Note entitled “Records of Processing Activities (RoPA) under Article 30 GDPR”. The Guidance outlines how to comply with the requirement set in Article 30 of the GDPR concerning the obligation of data controllers and processors to maintain a detailed record identifying the activities the organisation carries out using personal data. More specifically, the Guidance lists the “Do’s and Don’ts” for data controllers and processors when preparing and maintaining a RoPA and provides examples of good RoPA practices.