Term: Processing

Processing refers to any operation that can be done with personal data, such as collecting, recording, storing, using, or deleting it.

Common examples of processing include:

• Collecting information through forms, surveys, or website tracking
• Recording data in databases or spreadsheets
• Organizing information by categories or user profiles
• Storing data on servers or cloud platforms (including app hosting and even website hosting for non profits and for profits)
• Structuring data for analysis or reporting purposes
• Adapting or altering information to suit business needs
• Retrieving data for specific purposes
• Consulting stored information for decision-making
• Using personal data for marketing, service delivery, or other business functions
• Disclosing information to third parties, including sharing or transferring data
• Combining data from multiple sources
• Restricting access to certain information
• Erasing or destroying data when no longer needed

Hosting as Processing

Hosting personal data is explicitly considered a form of processing. When an organization hosts data on their servers or uses third-party hosting services (such as cloud providers), they are engaging in data processing activities. This applies whether the hosting is temporary or long-term, and regardless of whether the data is actively being used or simply stored.

Legal Implications

Under most data protection regulations (such as GDPR, CCPA, and similar laws), any form of processing, including hosting, requires a lawful basis such as consent, contractual necessity, or legitimate interest. Organizations must ensure appropriate security measures are in place for all processing activities and may need to document these activities in their data processing records.