Free GDPR Article 30
RoPA Template
A ready-to-use CSV template with ICO-aligned guidance notes and 2 worked examples.
No account required · Opens in Excel or Google Sheets
What's included
The template covers all mandatory Article 30 fields — formatted for easy import into your own systems or to hand straight to your DPO.
10-column Article 30 structure
All mandatory fields: processing purpose, data categories, recipients, legal basis, retention, security measures, and third-country transfers.
2 worked examples
Employee recruitment and customer account management rows — filled in so you can see exactly what good looks like.
ICO-aligned guidance row
Every column has an inline explanation so you know precisely what to enter — no separate instruction sheet needed.
Opens in Excel or Google Sheets
Plain CSV with no macros or proprietary formatting. Works everywhere and is easy to share with your DPO or auditor.
Get the template
Download instantly, or join the waitlist below for compliance tips too.
Download Template (CSV)Frequently asked questions
- Who needs a Record of Processing Activities?
- Under Article 30 of UK GDPR and EU GDPR, controllers with 250 or more employees must maintain a RoPA. Smaller organisations are also required to keep one if their processing is not occasional, involves special-category data, or could result in a risk to data subjects. In practice, most businesses that handle personal data regularly should maintain one.
- Is this template compliant with UK GDPR?
- The template is structured to meet the minimum fields prescribed by Article 30 UK GDPR and is aligned with ICO guidance. However, it is a starting point — your organisation's specific processing activities, legal bases, and retention periods need to be reviewed by a qualified DPO or legal adviser.
- How is this different from just using Clarium?
- The template is a spreadsheet you fill in manually — useful if you're just getting started or have a very small number of processing activities. Clarium automates the whole process: paste a description of a process, and AI populates all Article 30 fields, creates a visual data-flow map, and keeps your register updated as your operations change.
- How many rows will I need?
- One row per distinct processing activity. A processing activity is a specific purpose for which you use personal data (e.g., 'Employee Recruitment', 'Customer Billing', 'Marketing Email' are each separate activities). Most SMBs have 15–40; larger organisations often have 80+.
Automate your entire RoPA with AI
Paste a process description and Clarium populates all Article 30 fields, generates a visual data-flow map, and keeps your register audit-ready — in seconds.
No credit card required · Free plan available