And can just help me with the full form of all so that some audience was new to the privacy, they can get a visibility about this.

Sure, sure.

So ROPA is record of processing activity.

So any processing that happens, wherever PII gets involved, you need to collect some basic information like description of what is that processing activity.

For example, background verification could be a processing activity, right? So the processing activity description will say that the background data of this background verification will be done for this particular employee.

That would be it.

now background verification may not be an agreement there you need to take consent also because there is a lot of sensitive data coming into the picture so the basis would be basically consent right then you have to manage the consents and all what are the informations you'll be collecting whom will you be giving it to the third party vendors right retention retention another thing there is a lot of places where you just process the data and then you forget about it especially when you give it to the vendors right you need to have an agreement with the vendor also that Within 90 days, the BGV needs to be done.

But DPO and all that, they might take a reference with the architect and all that and be able to create a flow, right? Because it has a lot of technicalities and everything.