Processing Activity is a business process where you use personal data to achieve a certain business purpose or goal. In your company, each business function will own certain processing activities to drive their goals/KPIs. Common examples are Recruitment, Payroll Processing, Sending Marketing newsletters, etc. We have a list of processing activities that you can refer to here.

Basic Details:

Use this section to capture details on the activity including the group company that owns this process, the business function it belongs to, and the stakeholder who owns the process.

Field

Field Type

Description

Activity Name*

Text

Enter the name of the processing activity here

Description

Text

Describe the processing activity in detail

Business Function

Single-Select

Link the business function who owns the process. Use Add New in case your function is not on the list.

Business Process Owner

Single-Select

Link the stakeholder in your company who owns the process. You can leverage automation to send this owner review assessment at a specified frequency.

Managing Entity

Single-Select

The legal entity which owns this process. This becomes relevant if you have multiple group companies.

Usually, you can get basic information easily initially, and then you can use assessments to get more detailed information related to a processing activity from business & IT owners. Use this template to get the basic details in excel & import it on our product using the import button.

Data Processing Details:

Field

Field Type

Description

Purpose of Processing

Multi-Select

Select the purposes of processing relevant to the activity. Use, Add New for adding a new purpose.

Automated Decision Making

Single-Select

Logic of Automated Decision Making

Dependent & Text

Gets enabled when you select Yes in Automated Decision Making. Explain the logic used in automated decision-making here.

Volume of Individuals

Single-Select

Use this to prioritize between various activities

Retention Schedule

Text

Explain the retention schedule for this activity in detail here.

Profiling

Single-Select

Yes/No

Direct Marketing

Single-Select

Yes/No

Teams with Access

Single-Select

Select all stakeholders, departments, teams inside your company who can access data in this activity

Regulatory Information

GDPR

Field

Field Type

Description

Legal Basis of Processing

Single-Select

Select the legal basis of processing

Legitimate Interests

Dependent, Multi-Select

Gets enabled when you select Legitimate Interest as Legal Basis of Processing.

Conditions for Processing of Special Categories of Personal Data

Single-Select

Gets enabled when you associate a data element that is special category data as defined in GDPR to this processing activity.

Conditions for Processing Criminal Offences Data

Text

Gets enabled when you associate criminal offences personal data as defined in GDPR to this processing activity.

Applicable Individual Rights

Single-Select

Select the applicable individual rights for this processing activity.

Did this answer your question?