Introducing the new ROPA Report in Wordsmith

A ROPA isn't really creative work. It's a transformation of information you already have in the business into a different format. The hard part has always been the extraction.

Historically, this has always been in the heads of your stakeholders around the business, and you have had to carry out interviews to get at it. From my work in the data protection and building tools in this space, most, if not all of the relevant information for a ROPA also lives in vendor DPAs, due diligence questionnaires, privacy policies, and the call notes filed away after a stakeholder meeting during vendor onboarding. And often it can be more detailed, and much richer.

The irony to me is that we’ve got all this detailed documentation which is used once for Vendor DD and then shelved (or lost). Pulling it out by hand used to take longer than sitting down for an interview, so privacy teams interviewed stakeholders as the primary means for a ROPA.

With AI, that has now changed.