Processing

In data protection law, processing is deliberately broad. It includes collecting, recording, organising, storing, using, adapting, combining, disclosing, transmitting, making available, archiving, anonymising and deleting personal data. The term covers manual and automated operations, whether performed by a controller, processor or public authority. Because almost every data-related activity qualifies, Swiss compliance analysis usually asks whether principles such as purpose limitation, proportionality, transparency, security and respect for data subject rights are met for each processing context.