GDPR Basic Pack (RoPA + DPA + Policy)
The 3 documents a data protection authority asks for first, in one pack: Records of Processing Activities, Data Processing Agreement (DPA), and Privacy Policy.
What's included
- RoPA — Records of Processing Activities (Excel, with examples already filled in)
- DPA — Data Processing Agreement (Word, to sign with your vendors)
- Privacy Policy — ready to publish on your website (Word)
- Joint implementation PDF guide
- Legal Notice
Why this pack exists
These three documents aren't independent: the RoPA identifies which vendors process data on your behalf, the DPA is the contract you need signed with each of them, and the privacy policy is what you communicate publicly about all that processing. Buying them as a pack ensures the three stay aligned from day one, instead of building them separately and finding inconsistencies during an audit.
Frequently asked questions
How is this different from buying just the RoPA?
The standalone RoPA covers only the processing record. This pack adds the Data Processing Agreement (DPA) — needed with any vendor that processes data on your behalf — and a publishable Privacy Policy for your website.
Do I need all three even as a freelancer or small business?
Yes. GDPR doesn't exempt based on company size — it exempts based on the type and volume of processing, which in practice almost any business with customers, employees, or vendors already exceeds.
What format is it delivered in?
Editable Word and Excel for the three documents, a joint implementation PDF guide, and the Legal Notice.