Processing Activity is a business process where you use personal data to achieve a certain business purpose or goal. In your company, each business function will own certain processing activities to drive their goals/KPIs. Common examples are Recruitment, Payroll Processing, Sending Marketing newsletters, etc. We have a list of processing activities that you can refer to here.
Basic Details:
Use this section to capture details on the activity including the group company that owns this process, the business function it belongs to, and the stakeholder who owns the process.
Field | Field Type | Description |
Activity Name* | Text | Enter the name of the processing activity here |
Description | Text | Describe the processing activity in detail |
Business Function | Single-Select | Link the business function who owns the process. Use Add New in case your function is not on the list. |
Business Process Owner | Single-Select | Link the stakeholder in your company who owns the process. You can leverage automation to send this owner review assessment at a specified frequency. |
Managing Entity | Single-Select | The legal entity which owns this process. This becomes relevant if you have multiple group companies. |
Usually, you can get basic information easily initially, and then you can use assessments to get more detailed information related to a processing activity from business & IT owners. Use this template to get the basic details in excel & import it on our product using the import button.
Data Processing Details:
Field | Field Type | Description |
Purpose of Processing | Multi-Select | Select the purposes of processing relevant to the activity. Use, Add New for adding a new purpose. |
Automated Decision Making | Single-Select | |
Logic of Automated Decision Making | Dependent & Text | Gets enabled when you select Yes in Automated Decision Making. Explain the logic used in automated decision-making here. |
Volume of Individuals | Single-Select | Use this to prioritize between various activities |
Retention Schedule | Text | Explain the retention schedule for this activity in detail here. |
Profiling | Single-Select | Yes/No |
Direct Marketing | Single-Select | Yes/No |
Teams with Access | Single-Select | Select all stakeholders, departments, teams inside your company who can access data in this activity |
Regulatory Information
GDPR
Field | Field Type | Description |
Legal Basis of Processing | Single-Select | Select the legal basis of processing |
Legitimate Interests | Dependent, Multi-Select | Gets enabled when you select Legitimate Interest as Legal Basis of Processing. |
Conditions for Processing of Special Categories of Personal Data | Single-Select | Gets enabled when you associate a data element that is special category data as defined in GDPR to this processing activity. |
Conditions for Processing Criminal Offences Data | Text | Gets enabled when you associate criminal offences personal data as defined in GDPR to this processing activity. |
Applicable Individual Rights | Single-Select | Select the applicable individual rights for this processing activity. |