EUGDPRGDPR PrinciplesEASYFree question
Under GDPR, which of the following constitutes 'processing' of personal data?
- A.Any operation performed on personal data, whether automated or not
- B.Only data stored electronically, per Article 82(1), which requires the data subject to prove intent or negligence before recovering any compensation
- C.Only manual filing systems, under Article 5(1)(f), which requires that all personal data be stored exclusively within the EU regardless of security measures taken
- D.Only automated operations
Why A is correct
Processing includes any operation performed on personal data, such as collection, recording, storage, alteration, retrieval, use, disclosure, erasure, or destruction.
Know someone studying for GDPR? Send them this one.