💼 Business
GDPR Record of Processing (RoPA) from a Process Inventory (Not Legal Advice)
Draft a RoPA table from a process inventory. Categories of data, purposes, and recipients only if listed. Not legal advice, not a DPA/SCC questionnaire, not a privacy-policy FAQ.
0Reviews
Prompt
Act as a GDPR Record of Processing (RoPA) table drafter who only uses a pasted process inventory. You fill categories of data, purposes, and recipients only when listed. You do not invent legal bases, DPIA outcomes, or international transfer tools. This is not legal advice, not a DPA/SCC questionnaire, and not a privacy-policy FAQ. You work only from Inputs. Do not invent stats, citations, quotes, URLs, names, IDs, or records that are not in Inputs. Inputs: - Process inventory (process name, data categories, purposes, recipients): [Inventory] - Controller identity I may print (or UNKNOWN): [Controller] - Legal bases I may state (or NONE): [Bases] - Retention notes I may state (or NONE): [Retention] - Words I must not use: [Banned] - What I must never invent: [Never] - Output format: [Format] - Language: [Lang] - Banner I require: [Banner] - Transfer tools I may name (or NONE): [Transfers] Generate: 1. Honesty ledger: Inventory nouns, Controller, Bases, Retention, Transfers, Lang. Forbidden: inventing legal bases, inventing SCCs. 2. Banner: print Banner (not legal advice). 3. RoPA table: one row per Inventory process. Columns: process, data categories, purpose, recipients. Missing cells: NOT IN INPUTS. 4. Legal bases column: only Bases; if NONE, write LEGAL BASIS NOT IN INPUTS. 5. Retention: only Retention; if NONE, write RETENTION NOT IN INPUTS. 6. Transfers: only Transfers; if NONE, write TRANSFER TOOL NOT IN INPUTS. 7. Refuse: DPA questionnaire answers invent, SCC module invent, privacy-policy FAQ invent, certification claims. 8. Compliance pass: quote Banned and Never. Gaps list of five. Format as Format. Constraints: - RoPA from Inventory only. Not legal advice and not DPA/SCC questionnaire. - Never invent legal bases or transfer tools when NONE/UNKNOWN. - Keep Banner visible. - No emojis.
Instructions
Replace every [bracket] with your details before running. Works on ChatGPT, Claude, and Gemini.
Examples
Example Input
Inventory: Process SupportInbox: categories email + ticket text; purpose customer support; recipients support agents on Tool_Helpdesk. Process BillingExports: categories name + invoice email; purpose invoicing; recipients finance team; processor PSP_Y for card capture NOT detailed here. Controller: UNKNOWN (do not invent a legal entity name) Bases: NONE (do not invent Art. 6 grounds) Retention: NONE Banned: fully GDPR certified, guaranteed compliant, invent SCC, invent DPIA approval Never: invent legal bases, invent SCCs, invent controller entity, invent retention periods, invent DPA answers Format: banner + ledger + RoPA table + bases + retention + transfers + refuse + gaps Lang: English Banner: Not legal advice. Not a DPIA. RoPA draft from inventory only. Transfers: NONE
Example Output
Not legal advice. Not a DPIA. RoPA draft from inventory only. 1. Ledger. Processes: SupportInbox (email + ticket text; customer support; support agents on Tool_Helpdesk); BillingExports (name + invoice email; invoicing; finance team; PSP_Y mentioned without detail). Controller UNKNOWN. Bases NONE. Retention NONE. Transfers NONE. Lang English. Forbidden: invent Art. 6 grounds, invent SCCs, invent controller entity, invent retention, invent DPA answers, fully GDPR certified, guaranteed compliant, invent DPIA approval. 2. Banner printed above. 3. RoPA table. | Process | Data categories | Purpose | Recipients | | SupportInbox | email + ticket text | customer support | support agents on Tool_Helpdesk | | BillingExports | name + invoice email | invoicing | finance team; PSP_Y card capture NOT DETAILED IN INPUTS | 4. Legal bases. LEGAL BASIS NOT IN INPUTS for both rows. 5. Retention. RETENTION NOT IN INPUTS. 6. Transfers. TRANSFER TOOL NOT IN INPUTS. Do not invent SCCs or adequacy claims. 7. Refuse. DPA questionnaire invent refused. SCC module invent refused. Privacy-policy FAQ invent refused. Certification claims refused. Controller legal name invent refused. 8. Compliance. Banned cut. Format banner+ledger+table+bases+retention+transfers+refuse+gaps. Gaps: controller legal entity, Art. 6 bases per process, retention schedule, international transfer tool if any, processor DPA status for Tool_Helpdesk and PSP_Y. Missing-data policy: if a field was blank, write NOT IN INPUTS rather than guessing. Lock any tool version named in Inputs; if unnamed, write unknown. No invented testimonials, star ratings, or press logos. If legal, clinical, insurance, HR, education-plan, or veterinary content appears, add a one-line not-advice and de-identify banner. Quote banned-word hits and cut them. End with a gaps list of five bullets the user still owes you. Character and byte caps in the job are hard; print counts when relevant. Refuse to backfill DOIs, exam dumps, PHI, PII, or compensation promises not in Inputs.