Processing is any operation performed on personal data, from collection through storage and use to erasure.
A comprehensive concept
Art. 4(2) GDPR lists as examples collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure, alignment or combination, restriction, erasure or destruction.
This means that practically any handling of personal data is processing, even simply reading it on screen. It makes no difference whether the operation is automated or manual.
Limits of the scope
Processing by natural persons in the course of a purely personal or household activity is excluded, for example a private address book. Manual processing outside filing systems does not fall under the GDPR either.
Legal provisions
- Art. 4(2) GDPR
- Definition of processing.
- Art. 2 GDPR
- Material scope and household exemption.
- Art. 6 GDPR
- Lawfulness of processing.
Related terms.
Personal data Personal data means any information relating to an identified or identifiable natural person. Art. 4(1) GDPR 
Automated processing Automated processing is any processing of personal data carried out wholly or partly by means of data processing systems. Art. 2(1) GDPR Collection of personal data Collection is the obtaining of personal data about a person and at the same time the first step of any processing. Art. 4(2) GDPR Transmission of personal data Transmission is the disclosure of personal data to a recipient by passing it on or making it available for retrieval. Art. 4(2) GDPR
All terms from A to Z Automated processing Automated processing is any processing of personal data carried out wholly or partly by means of data processing systems. Art. 2(1) GDPR Collection of personal data Collection is the obtaining of personal data about a person and at the same time the first step of any processing. Art. 4(2) GDPR Transmission of personal data Transmission is the disclosure of personal data to a recipient by passing it on or making it available for retrieval. Art. 4(2) GDPR 