Automated Extraction of Records of Processing Activities (RoPA) Using Hybrid RAG and Locally Deployed Large Language Models
Researchers built RoPA Manager to extract Vietnam data-protection records using hybrid RAG and local LLMs.
Vietnam's Personal Data Protection Law and Decree 356/2025, effective January 1, 2026, require organizations to maintain Records of Processing Activities. RoPA Manager automates extraction with lexical tsvector ranking, dense-vector search, Reciprocal Rank Fusion, and locally deployed LLMs. A Vietnamese benchmark covers 32 organizations, 77 activities, and 4,338 reference values, with end-to-end token coverage of 50.04-55.25%. On a 24 GB GPU, Qwen3.5-27B-GPTQ-Int4 showed no significant difference from DeepSeek-V4-Flash, while Gemma-4-31B was significantly worse.
38