By law, you are required to know and understand everything about the data you use and hold. This includes – but isn’t limited to – the type of data you obtain and how. The use of that data. The storage and safeguarding of the data. And, the processes in-place determining the management of the data.
ROPAs (Records of Processing Activities) are applicatble to both one-man bands and large organisations, across every industry. The only ealy difference is the volume of; types of; and purpose of the data.
In short, if you use or hold data, you need a ROPA.