Privacy Subjects directory — reusable programs/systems and their GDPR Art.30 ROPA records
Last updated: July 12, 2026 by Steve
Privacy Subjects
Open Subjects from the top toolbar (needs assessment-view) to browse the searchable directory of reusable privacy subjects — the durable programs, systems, initiatives, data-sharing arrangements, process changes, and technology adoptions your assessments and incidents run against. It is used by the privacy and security office to keep one shared record per subject.
Browsing the Directory
Subjects are shown as cards. Each card shows:
- The subject type
- The subject's own status
- Assessment and incident counts
- The next-review date
Click a card to open the subject detail — see Privacy Subject Details.
(screenshot placeholder — capture: the Subjects directory with several subject cards showing type, status, assessment/incident counts, and next-review date)
Creating a Subject
- Click New subject (needs create permission).
- Capture the identity — name, type, status, business owner, lead program manager, and description.
- Complete the full ROPA record.
You can also inline-create a subject by typing a new name in the subject box while creating an assessment.
(screenshot placeholder — capture: the New subject dialog with the identity fields and ROPA record section)
Exporting the ROPA Register
Click Export ROPA to produce the PDF Record-of-Processing register across all subjects.