19/20a Do you understand what Processing of Personal Information means?

"Processing" means doing any of the following with personal information:

  • obtaining it
  • recording it
  • storing it
  • updating it
  • sharing it

Processing generally only refers to activities that are undertaken:

  • often / periodically or
  • as part of procedure

Examples of processing personal data:

Processing is any action you take with someone's personal information that is part of your procedure. It's likely you are engaging in some form of processing. 

Here are a few examples that might relate to you.

people123.png email.png info2.png
A customer emails your company.

Their email address is now stored in your inbox.

You are therefore processing their information.


employee_1.png folder_1.png info2.png
Your employees provide you with the information required by HR or payroll

You store their personal information in a file or computer folder 

You are therefore processing personal information.

Processing does not have to be digital. It also includes analogue forms of recording "personal information", so even writing a phone number down is considered as the processing of personal information.

question_1123.png edit_1asdf.png info2.png
A customer calls your company and asks to be called back when an item is available.

To do this, your procedure is to note down a copy of their name and phone number.

You are therefore processing personal information.


"Processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;"