Processing Operation
Definition
A specific action or activity performed on personal data, forming part of the broader concept of data processing. Processing operations include individual activities such as collection (gathering data from sources), recording (storing data in systems), organization (arranging data in structured format), structuring (imposing organization on data), storage (retaining data over time), adaptation or alteration (modifying data), retrieval (accessing stored data), consultation (reviewing or examining data), use (employing data for specific purposes), disclosure (revealing data to recipients), dissemination (distributing data widely), making available (providing access to data), alignment or combination (merging datasets), restriction (limiting how data can be processed), erasure (deleting data), or destruction (permanently removing data). Each processing operation must serve a specified purpose, have a lawful basis, and comply with data protection principles. Organizations must document all processing operations in their records of processing activities (Article 30) and ensure appropriate safeguards for each operation type.
Applicable Laws & Regulations
- 1GDPR Article 4(2) (Processing definition)
- 2GDPR Article 30 (Records of processing activities)
- 3GDPR Article 5 (Processing principles)