The Processing Activities module maintains a register of all personal data processing operations, similar to GDPR's Record of Processing Activities (ROPA) but with Nigeria-specific fields.
Key Fields
- Activity Name & Purpose — What data is being processed and why
- Legal Basis — One of the six lawful bases (consent, contract, legal obligation, vital interests, public task, legitimate interests)
- Data Categories & Subjects — Types of personal data and categories of data subjects
- DCPMI Category — The tiered classification (UHL, EHL, or OHL) for the processing activity
- DPCO Engaged — Whether a licensed Data Protection Compliance Organisation is engaged
- International Transfers — Whether data is transferred outside Nigeria
- Technical & Organisational Measures — Security safeguards in place
Linked Records
Processing activities can be linked to DPIAs and cross-border transfers, providing a complete view of your data processing landscape.