A new system called RoPA Manager automates the extraction of Records of Processing Activities to comply with Vietnam's upcoming data protection laws effective in 2026. It addresses data sovereignty concerns by combining lexical and dense-vector search with locally deployed large language models. The approach was validated against a benchmark of 32 organizations and over 4,000 reference values to ensure accuracy in automated field extraction.
- Combines tsvector lexical ranking with dense-vector search and Reciprocal Rank Fusion for robust retrieval.
- Deploys LLMs locally to ensure compliance with strict data sovereignty and residency requirements.
- Validated on a Vietnamese benchmark covering 77 processing activities across 12 field groups.
- Reduces labor-intensive manual preparation required for GDPR-like regulatory records.