Altova GDPR Compliance Database

The Processing Activities page (screenshot below) is accessed from the Overview page. The page lists all the data processing activities across the data controller's organization, and enables you to manage the list of processing activities. Here, new processing activities can be added (click New Processing Activity), existing processing activities can be edited (click the Edit icon of a processing activity), and existing processing activities can be deleted (click the Delete icon of a processing activity).

When you add a new processing activity or edit a processing activity, a page containing the processing activity's details is displayed (see below). On the Processing Activity page (see below), you can edit the definition of the processing activity.

Create/edit a processing activity

The definition of a processing activity is shown in the screenshot below.

It consists of the following:

•The name and a description of the processing activity

•A list of persons responsible for deciding features and users of the processing activity; click Add Person and select a person.

•A list of roles (within departments) that have access rights to the processing activity; click Add Access Rights and select a department and department role.

•A list of all the data categories used by the processing activity; click Add Category and select a data category. For each data category, you must select a value for each mandatory data usage classification so as to describe how the processing activity processes that particular data category. If a data usage classification has been configured to accept multiple values, you can select more than one value for that classification. The screenshot below shows how a data category is defined within a processing activity; the list of usage classifications start with the Data Transfer usage classification; values are selected in the respective combo box.

•A list of external data processors that are involved with this processing activity. Click Add Processor, then select an existing data processor and assign it a role (as data controller or data processor). Alternatively, you can define a new data processor that will be added to the list of existing data processors.

Relationships with other metadata

A processing activity has the following relationships with other metadata: