R

ResGuard Data Protection Workshop 3 — Records of Processing Activities

PDF Previous 1 / 8 Next

Data Protection Workshop 3

Records of Processing Activities

Build the central inventory of how your organisation processes personal data
One slide per task, each with an explanation and a practical example
The basis for almost every following workshop: notices, retention, requests, risks and vendors

Europe

European Union (GDPR) Germany Austria Spain Cyprus Malta Switzerland

Latin America

Peru Colombia Mexico Chile

Asia-Pacific

Singapore Malaysia

Jurisdiction selected: Mexico — Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), new law in force since 21 March 2025

After this workshop you have

The processing activities of all departments recorded in ResGuard
Data, data subjects, recipients and systems documented for each activity
A specific purpose and legal basis for every activity, and documented consent processes
Retention periods, transfers, owners and a review cycle in place

Agenda — one slide per task

1. Identify processing activities
2. Data categories, data subjects and data flows
3. Purposes and legal basis
4. Consent management
5. Retention periods and transfers
6. RoPA review and maintenance
7. Workshop review and close-out