Provide for Guide using DPV for ROPA

[coolharsh55]

The GDPR Article 30 requires keeping records of processing activities (ROPA) involving personal data, where the information to be maintained in such records includes purpose, personal data categories, technical and organisational measures utilised, and others. This GUIDE-GDPR-ROPA will provide guidance to implement machine-readable ROPAs using the DPV. The scope as of now does not include providing tools or libraries for the creation of ROPA or interfaces or other means to work with this information.

This will be based on existing specifications developed using DPV called Data Processing Catalogue (DPCat) - see peer-reviewed article by DPVCG members Paul Ryan, Rob Brennan, and Harshvardhan J. Pandit.