Your Records of Processing Activities (RoPA) under GDPR Article 30, built from the suppliers and assets you’ve already added, and the DPIA template you attach to an activity.
Quick summary
The Data Processing register is your RoPA, the record GDPR’s Article 30 requires.
DPIAs aren’t in this register: generate one from a template under Documents → Templates, then attach it to its activity.
Where data leaves the UK, the transfer mechanism isn’t optional in practice, though the field lets you skip it: a processing record showing an international transfer with none recorded is a finding waiting to happen.
Click Privacy & Security in the sidebar, then Data Processing.
2
Accept a suggestion, or start from scratch
Suggested Activities offers supplier-derived purposes and generic ones covering payroll, recruitment, marketing and more. Click Add on one that fits, or Add Activity to describe your own.
3
Describe the activity
Enter the Activity name and description, set the Role (Data Controller or Data Processor), and link the Information Asset it uses.
The Data Processing Activities register, listing activities with their Role and linked Information Assets.
4
Record the processing detail
Add data subjects, data categories, the legal basis and a retention period. Flag Third Country Transfers too, because it’s the field the warning above is about.
Third Country Transfers, Article 6 Lawful Basis and Retention Period, in the activity's detail view.
5
Add optional supporting detail
Both are optional but worth completing: Related documents, such as a data protection impact assessment (DPIA) or a retention schedule, and the security measures protecting the processing.
Assuric has no DPIA register: you create a DPIA as a regular document from its template.
1
Find the template
In Documents, open the Templates tab, search Data Protection Impact and find [TEMPLATE] Data Protection Impact Assessment - Supplier under Assuric Templates.
The Templates tab, searched for the DPIA template. It's listed under Assuric Templates, typed DPIA and tagged to DSPT, DTAC and GDPR.
2
Click Create from template
On that row, click Create from template and fill in the dialog as for any document. The document type and frameworks come pre-filled.
The Create from Template dialog for the DPIA template, with document type pre-filled as DPIA and the template's frameworks carried across.
3
Click Create
Work through the new DPIA in your Documents list, then attach it to its activity as a related document.
What we recommendAdd your suppliers first, so the suggestions above fill in most of the register. Then keep it to activities that involve personal data, as your supplier list includes things that never touch it.
