2 July, 2024
We are excited to introduce two new updates in this release:
- Eight cards added to the Records of Processing Activity (RoPA) tab in the Privacy Dashboard.
- Six cards added to the Data Protection Impact Assessment (DPIA) tab in the Privacy Dashboard.
Records of processing activity (RoPA) cards on the privacy dashboard
RoPA by Status
- Options
- Open
- Closed
- Data pulled from the record of processing status.

RoPAs by Review Status
- Options:
- In Progress
- Ready to Review
- Reviewed
- To be Started
- No Selection
- Data pulled from the Processing Review tab on the RoPA form.
- Question: Review status

RoPAs by DPIA Screening Status
- Options:
- Recommended
- May Not be Required
- Insufficient Selections
- Data pulled from the Processing Risk tab on the RoPA form.
- Question: DPIA screening

RoPAs by Data Subjects
- Data pulled from the Processing Description tab on the RoPA form.
- Question: Who are the data subjects?

RoPAs by Personal Data
- Data pulled from the Processing Description tab on the RoPA form.
- Question: Personal Data

RoPAs by Special Category Data
- Data pulled from the Processing Description tab on the RoPA form.
- Question: Special Category Data

Open Processing Activities by Areas
- Options:
- Open
- Data pulled from the status of a processing activity within each area.

Processing Activity Involves
- Options:
- Evaluation or scoring of the data subject
- Automated decision making
- Systematic monitoring
- Vulnerable monitoring
- Vulnerable data subjects
- Special category data
- Processing on a large scale
- Matched or combined data
- Transferring data from the country where it was collected
- Modern technological or organisational solutions
- Loss or hindrance of any rights
- Data pulled from the Processing Risk tab on the RoPA form.
- Question: Does the processing activity involve any of the following?

Data protection impact assessment (DPIA) cards on the privacy dashboard
DPIAs by Approval Status
- Options:
- Not approved until all risks have been mitigated
- Accept residual risks subject to mitigating actions completed within 30 days
- Accept residual risks
- Approved with no further action
- Approved with no further actions required
- Not approved until further details obtained
- Data pulled from the Review & Approval tab on the DPIA form.
- Question: Approval status

DPIAs by International Transfer
- Data pulled from the Processing Description tab within the DPIA form.
- Question: Where will it be transferred / accessed?
High Risk to Data Subjects
- Options:
- Yes
- No
- Don't Know
- No Selection
- Data pulled from the DPIA Screening tab within the DPIA form.
- Question: Is the processing likely to result in a high risk to data subjects?
DPIA Required as Per Supervisory Authority
- Options:
- Yes
- No
- Don't Know
- No Selection
- Data pulled from the DPIA Screening tab within the DPIA form.
- Question: Has this type of processing been identified as requiring a DPIA by a relevant supervisory authority or regulator?
DPIAs by Personal Data Refresh/Collection Frequency
- Options:
- We will not
- We already have it
- One off new collection
- Daily
- Weekly
- Monthly
- Annually
- Ad-hoc (occasional)
- As required(frequent)
- Other
- No selection
- Data pulled from the Processing Description tab within the DPIA form
- Question: How frequently will you refresh and collect the personal data?
Open DPIAs by Processing Activities
- Data pulled from the DPIA Screening tab within the DPIA form.
- Question: Processing Activity