Conduct a comprehensive data inventory for [CompanyName] and produce a Records of Processing Activities (ROPA) aligned to [Regulation] across [Region] for the [BusinessUnit] function. Identify systems, data categories, processing purposes, lawful bases, retention, processors, transfer locations, and technical/organizational measures. Flag gaps and propose remediation actions prioritized by risk and effort.
Output format:
Executive summary (≤200 words).
Risk-ranked gap list (bulleted).
Markdown table named ROPA with columns: Processing Activity, System/Application, Data Categories, Purpose, Lawful Basis, Controller/Processor, Recipients/Transfers, Retention, TOMs, Residual Risk (Low/Med/High).
90-day remediation roadmap as a numbered plan with owners and milestones.
Use [Timeframe] as the assessment lookback period and assume current policies are in draft unless specified.