| Availability |
Odoo Online
Odoo.sh
On Premise
|
| Odoo Apps Dependencies |
Discuss (mail)
|
| Lines of code | 309 |
| Technical Name |
odoo_opendqv_gdpr |
| License | LGPL-3 |
| Website | https://github.com/OpenDQV/OpenDQV |
OpenDQV â GDPR Article 30 ROPA
Write-time enforcement for your Record of Processing Activities
The problem this solves
UK and EU GDPR Article 30 requires every data controller to maintain a Record of Processing Activities (ROPA). Odoo has no built-in mechanism to enforce completeness at save time.
A ROPA entry can be saved with no lawful basis, no retention period, or with consent selected but no consent mechanism recorded â silently, with no validation error. That is an ICO audit failure waiting to happen.
This module closes that gap. Every ROPA entry is validated against the
OpenDQV gdpr_processing_record contract
before it reaches the database.
What it adds
- A dedicated gdpr.processing.record model covering all Article 30(1) fields
- Write-time validation â missing or invalid fields raise a clear error before the record is committed
- Conditional field enforcement: consent fields required when lawful basis is consent; LIA fields required for legitimate interests; special category basis required when processing special category data; transfer safeguard required when international transfer is flagged
- Odoo chatter and activity tracking on every ROPA entry â full audit trail of who changed what and when
- Tree view with Awaiting DPO Review filter
- Form view with conditional field visibility â only relevant fields shown based on lawful basis and data type
Article 30 fields covered
| Section | Fields |
|---|---|
| Identity | Record name, controller name |
| Processing | Purpose, lawful basis, data categories, data subjects, recipients, retention period |
| Consent (conditional) | Consent mechanism, consent timestamp, withdrawal mechanism |
| Legitimate interests (conditional) | LIA completed, LIA date |
| Special category data (conditional) | Special category flag, Article 9(2) basis, data types |
| International transfers (conditional) | Transfer flag, safeguard mechanism |
| DPO audit trail | Reviewed by, review date |
Fully opt-in
- Validation is off by default â set
ENABLE_OPENDQV_VALIDATION=trueto enable - If
opendqvis not installed, the validation step skips silently â no error, no breaking change - Zero impact on existing Odoo data
Requirements
- Odoo 17.0
pip install opendqv>=1.4.0(PyPI) â required for validation enforcement- Set
ENABLE_OPENDQV_VALIDATION=truein your Odoo environment
OpenDQV is open source (MIT). Source and documentation: github.com/OpenDQV/OpenDQV
Please log in to comment on this module