Information Asset Register (IAR) and ROPA Awareness Workshop

Overview
Care providers are legally required under the Data Protection Act (2018) and UK GDPR to maintain clear records of what personal and sensitive data they hold, why they hold it, and who they share it with. Many providers remain unaware of the Record of Processing Activities (ROPA) requirement and its serious legal implications, especially around Article 6 (lawful basis) and Article 9 (special category data).

This workshop will guide you through the importance of both the Information Asset Register (IAR) and ROPA, helping you to meet compliance obligations and protect your staff, residents, and organisation.

Learning Outcomes
By the end of the session, you will:

• Understand the legal requirements for IAR & ROPA under GDPR/DPA.
• Be able to identify and record personal and special category data.
• Recognise the lawful bases for processing data (Articles 6 & 9).
• Learn how SMEs in the North West care sector can achieve compliance.
• Gain confidence in setting up and maintaining your own IAR & ROPA.