Register of Data Processing Activities
The solution to easily document all the data processing activity within your organization
for GDPR
for LGPD
for FADP
Create your record of processing activity: add processing activities from 2000+ pre-made options, divide them by area, assign processors and members, document legal bases and other GDPR-required records.
Not sure what you need? Getting started guide
Please create a new site first or navigate to the flow page of your existing site and activate the product there. For any assistance, contact support.
Watch our video overview
The requirements
In order to comply with privacy laws, especially the GDPR, companies need to keep a record of how they store and use the data they collect from users. In particular, they must document in writing:
Security measures
Legal basis for processing
Data transfer outside of the EU, if any
The parties that you share the data with, both inside and outside of your organization
How it works
1. Define areas
Areas are perimeters within which data processing activities are homogeneous. Examples of areas are your website, mobile app, physical stores, employees, recruiting, manufacturing facility etc.
2. Add processing activities to each area
For each area, you can add processing activities out of a list of 2000+ pre-made ones. For instance, you'll add “Payroll processing” to your “employees” area, or “Google Analytics” to your “website” area.
3. Add details about each processing activities
For each processing activity, add your data retention policy, security measures, legal basis for processing etc.
Features and benefits
-
Easily compile your record of data processing activity -
Easily make your organization GDPR compliant
-
Add areas to granularly describe your processing activity
-
Seamlessly integrated with all the iubenda compliance solutions
-
Easy to use and comes with 2000+ pre-made processing activities you can add to your areas
-
Manage multiple projects with a single account
-
Describe the details of your data processing activity
-
Define security measures for each data processing activity
-
Define retention policy for each data processing activity
-
Define all the GDPR data processing details
-
Assign members to areas and to processing activities
-
Define roles for each member (Controller, Processor, member of the controller's organization, subject)
-
On the Roadmap
Create and export reports -
On the Roadmap
Automated Data Protection Impact Assessment (DPIA) -
On the Roadmap
Generate and manage data processing agreements with processors, employees and members in general -
On the Roadmap
Generate and manage internal privacy documentation
Trusted by over 140,000 clients in 100+ countries
“If you, like me, are part of a smart team and hate updating your privacy policy every time you add some code to your site, then iubenda is for you. It's ridiculously affordable, and super easy to use.”
Please create a new site first or navigate to the flow page of your existing site and activate the product there. For any assistance, contact support.
FAQ
Is the Register of Data Processing Activities Tool only for companies trying to comply with the GDPR?
Even though the GDPR is a common reason to put more effort into internal privacy management, our tool is not exclusively made for application under the GDPR. It can also be used for internal privacy management in general, even by companies who do not have any users/customers within the EU.
How does the Register of Data Processing Activities tool work?
The Register of Data Processing Activities tool makes the complex task of managing internal privacy a simple and straightforward one. The tool lets you define specific ares of data processing, add processing activities and members involved in the processing to each area and also lets you add all necessary details related to the processing activities. This makes it simple for you to comply with requirements (including but not limited to the GDPR), and track and manage the data you collect, the purposes for collection, all parties involved, company details — including data of employees — and more.
Documentation and Guides
Not sure what you need?
Read our Getting Started Guide
Chat with us live or contact support
Or join us at our next webinar to get an overview of the legal requirements and ask live questions
All our products are WCAG Level AAA Compliant
Part of a 360° compliance solution
A complete set of solutions to make your website or app compliant with the law, across multiple languages and legislations
Privacy and Cookie Policy Generator
Create your privacy and cookie policy in minutes.
Customizable from 2000+ clauses, available in up to 27 languages and automatically updated if the law changes, our generator allows you to create a legal document in minutes and seamlessly integrate it with your website or app.
Privacy Controls and Cookie Solution
Manage consent preferences for the ePrivacy, GDPR, CPRA (CCPA amendment) and LGPD. Integrated with the IAB TCF and CCPA Compliance Framework.
Our solution allows you to display a fully customizable cookie banner/consent banner, collect cookie consent, implement prior blocking (including auto-blocking), set advertising preferences, and more.
iubenda is a Google certified CMP with TCF and Google Consent Mode support
Terms and Conditions Generator
Create your terms and conditions in minutes.
Customizable from hundreds of combinations, available in up to 15 languages, powerful and precise — our solution is capable of handling even the most complex, individual scenarios. Optimized for e-commerce, marketplace, SaaS, apps and more.
Whistleblowing Management Tool
Provide an easy-to-use internal reporting channel as required by the EU Whistleblower Directive for organizations with 50+ employees. Instantly generate your forms to embed or print.
Collect and manage whistleblower reports from employees and other individuals connected to your organization while safeguarding their identities and ensuring confidentiality. Tailored for EU businesses and global organizations dedicated to ethical transparency.
Consent Database
Collect GDPR & LGPD consent, document opt-ins and CPRA (CCPA amendment) opt-outs via your web forms.
Our solution smoothly integrates with your consent collection forms, syncs with your legal documents and includes a user-friendly dashboard for reviewing consent records of your activities.
Register of Data Processing Activities
Document all the data processing activity within your organization.
To comply with privacy laws, and particularly the GDPR, companies need to record how they store and use the data they collect from their users. Our solution allows you to easily document all the data processing activities within your organization.
Enterprise
Hundreds of enterprises rely on iubenda for their online compliance throughout multiple properties and legislations.
Looking for custom documents?
Our international network of lawyers can provide you with tailored documents and a full compliance review.
Become a Certified Partner
iubenda's Partner Program is designed for agencies and web professionals seeking to expand their expertise and assist their clients in making their websites, apps and data processing activities compliant with the law.