# ROPA generator
> Source: https://legalcode.md/skills/legalcode-ropa-generator | [HTML version](https://legalcode.md/skills/legalcode-ropa-generator)

Generate Article 30 Records of Processing Activities (RoPA) for controllers and processors under GDPR, UK GDPR, Swiss FADP, and Brazil LGPD.

Generate Article 30 Records of Processing Activities (RoPA) for controllers and processors under GDPR, UK GDPR, Swiss FADP, and Brazil LGPD. Use when creating or auditing a processing register, onboarding a new business unit into a data inventory, assessing ROPA completeness before a supervisory authority audit, building a department-by-department data inventory, or integrating data mapping outputs into a supervisory-authority-ready ROPA format. Supports controller RoPA (Art. 30(1)) and processor RoPA (Art. 30(2)) with distinct mandatory-field coverage, Art. 30(5) SME exemption screening, multi-regime jurisdictional overlays, and machine-readable export hooks. Produces both summary and detailed ROPA formats with completeness scoring and prioritized remediation.

This skill generates, audits, and completes Records of Processing Activities (RoPAs) as required under GDPR Article 30, UK GDPR Article 30, Swiss FADP Article 12, and Brazil LGPD Article 37. It supports the full ROPA lifecycle — from initial exemption screening through department-by-department discovery, mandatory-field population, completeness assessment, and supervisory-authority-ready output. **Covers:** - Art. 30(5) exemption screening before building the ROPA - Controller RoPA (Art. 30(1)) with all 13 mandatory field categories - Processor RoPA (Art. 30(2)) with all 11 mandatory field categories - Department-by-department discovery questionnaire for data inventory - Legal basis assignment and special category / criminal data documentation - Recipient, sub-processor, and third-country transfer mapping - Retention schedule assignment with trigger-and-period specificity - Technical and Organisational Measures (TOM) description at ROPA depth - GREEN / YELLOW / RED completeness classification per processing activity - LIA and DPIA cross-reference tracking - Multi-regime compliance overlays (EU GDPR / UK GDPR / Swiss FADP / Brazil LGPD) - Machine-readable export hooks for ROPA management tools - Maintenance calendar and real-time update trigger system - Supervisory authority submission readiness checklist **Does not:** - Replace a Data Protection Impact Assessment (see `legalcode-dpia-generator`) - Conduct a full data mapping discovery exercise (see `legalcode-data-mapping-workflow`) ...

## Jurisdictions

Global



---
*Legalcode -- legalcode.md*