RoPA — Record of Processing Activities for Jira - Unicis.Tech OÜ Docs

The Record of Processing Activities (RoPA) for Jira helps organizations comply with Article 30 of the GDPR by maintaining a structured inventory of personal data processing activities directly within Jira Cloud.

Organizations processing personal data are required by the GDPR to keep an Article 30 Record of Processing Activities. This record provides a clear overview of: what personal data is processed, the purposes, categories of data subjects and their data, and the security measures in place. RoPA helps organizations verify GDPR compliance, detect risks to personal data, and respond to data subject inquiries.

Demo

Watch the demo video on Vimeo: https://vimeo.com/743451134 (1

minutes)

Features

• Overview dashboard for all Records of Processing Activities
• Unlimited records — no limit on how many you can create
• Edit, change, and view records with a full audit activity log
• Delete RoPA records without removing the associated Jira ticket
• Add unlimited documents as attachments to Jira tickets

Requirements

• Atlassian Jira Cloud (not available for Server or Data Center)
• Requires read, write, manage, and storage access to your Jira account
• All data is stored in your Atlassian Cloud instance — not shared with Unicis

Installation

Install from the Atlassian Marketplace.

After installation, grant the required permissions. Unicis RoPA requires storage, manage, write, and read access to your Jira account — however, data stays within your Atlassian Cloud instance.

Configuration

1. Click Apps in the top Confluence/Jira header → Manage your apps
2. On the side panel under APPS, click Register of Procedures Settings
3. Click Add Project and select the project from the dropdown
4. Assign a Data Protection Officer (DPO) for the project

Available actions per project:

• Edit — change the project or reassign to a different DPO
• Delete — remove the project from RoPA

Dashboard

The RoPA dashboard provides an overview of all records for the selected Jira project:

Column	Description
Register of Procedures	Processing activity name/identifier
Status	Current status of the record
Assigned DPO	Data Protection Officer
Review	Review status of the process
Data Transfer	Indicator of cross-border data transfers
Special Category	Whether special category personal data is involved
Actions	Edit / Delete

Add a Record

1. Open a Jira issue/ticket
2. Click … (three dots, top-right corner) → Register Record of Processing Activities
3. Complete all 5 steps by clicking Next (required fields are marked with a red star)

Steps:

1. Description / Stakeholders
2. Purpose and Categories
3. Recipients
4. Transfer
5. Security Measures / TOMs (Technical and Organisational Measures)

Edit

Two ways to edit a record:

1. Via the dashboard by clicking the Edit icon
2. Via the Jira issue by clicking … → Register Record of Processing Activities

View

Click View Register of Procedures on the Issue Panel to see a tabbed view of all five steps and their recorded data:

1. Description / Stakeholders
2. Purpose and Categories
3. Recipients
4. Transfer
5. Security Measures / TOMs

Delete

Click the trash bin icon on the dashboard to delete a record.

Activity Logs

Access logs by opening the Jira ticket → Activity → Records of Processing Activities.

Log format examples:

[Author] created the Record of Processing Activities (M/DD/YYYY H:MM AM/PM)
[Author] updated the Category of Personal Data (M/DD/YYYY H:MM AM/PM)
  Video data → Audio data

Logged events:

• Created
• Updated
• Deleted

Pricing

See the Atlassian Apps pricing page.

Permissions

RoPA performs the following actions on behalf of the user:

• Read and write to app storage (App Storage scope)
• Create and manage Jira issues
• Create and edit issues in Jira, post comments, create worklogs, and delete issues
• Manage project settings and create project-level objects (versions, components)
• View active user profile
• View Jira project and issue data

Technical Details

Built on Atlassian Forge UI Kit components using:

• ProjectPage
• IssueAction
• IssuePanel
• IssueActivity
• AdminPage

Required OAuth scopes:

read:jira-work
write:jira-work
manage:jira-project
storage:app