Processing category assets categorize data processing activities according to the actions taken during the process.
Examples:
- Retrieval
- Storage
- Erasure or destruction
- Archiving
Keep in mind the following important points when considering Processing Category assets:
- For business processes that rely on data subject consent as the legal basis for processing personal data, consent must be obtained at the moment the data is collected or recorded.
- Processing categories must align with the specified purposes for processing personal data. For example, if your purpose for carrying out a business process is to sell personal information, the related processing category must be Disclosure or Dissemination.
- Processing categories represent the different processes deployed in the lifecycle of data. As such, they also play a role in pure data lifecycle management and risk management.
- Risk and privacy regulations do not apply to all processing categories in the same way. For example, GDPR applies differently to data archiving processes.