The Processing Activities module maintains a register of all personal data processing operations, similar to GDPR's Record of Processing Activities (ROPA) but with Nigeria-specific fields.
Key Fields
- Activity Name & Purpose - What data is being processed and why
- Legal Basis - One of the six lawful bases (consent, contract, legal obligation, vital interests, public task, legitimate interests)
- Data Categories & Subjects - Types of personal data and categories of data subjects
- DCPMI Category - The tiered classification (UHL, EHL, or OHL) for the processing activity
- DPCO Engaged - Whether a licensed Data Protection Compliance Organisation is engaged
- International Transfers - Whether data is transferred outside Nigeria
- Technical & Organisational Measures - Security safeguards in place
Linked Records
Processing activities can be linked to DPIAs and cross-border transfers, providing a complete view of your data processing landscape.