Sample data processing map

Copyright © 2025 LexisNexis
Published by a LexisNexis Risk & Compliance expert
Precedents

Sample data processing map

Copyright © 2025 LexisNexis

Published by a LexisNexis Risk & Compliance expert

Precedents
imgtext

    1. 1

      Identify and document why the organisation processes Personal data

      Rather than trawling the organisation for personal data in an unfocused way, think about what your organisation does that may involve Processing personal data.

      Identifying the reasons for or purposes of processing data is often fairly straightforward. Drawing a diagram or visual map can help the thought process. A sample is shown below:

    1. 2

      Document the various activities that take place to achieve each ‘purpose of processing’

      Again, it can be helpful to draw diagram or visual map. This is illustrated below, using the ‘staff Administration’

Powered by Lexis+®
Jurisdiction(s):
United Kingdom
Key definition:
Processing definition
What does Processing mean?

Processing means obtaining, recording, holding, or carrying out any operation on personal data. It includes organisation or alteration; retrieval or use; disclosure and anonymisation, blocking or destruction. Most operations in relation to personal data will constitute processing.

Read more readmore

Popular documents

If a multinational company with entities in a number of EU states has registered a data protection

If a multinational company with entities in a number of EU states has registered a data protection officer (DPO) with the Information Commissioner’s Office (ICO), does it need to register a DPO in the other EU states where it has entities or is registration in one country sufficient?Under Article 37

Can I charge a fee for dealing with a data subject access request?

Can I charge a fee for dealing with a data subject access request?The General Data Protection Regulation (GDPR) provides for enhanced rights for data subjects including providing rights of rectification, erasure and restriction of processing, data portability, a right to object to processing and a

Can a limited company make a subject access request? Can a director of a limited company ask for

Can a limited company make a subject access request? Can a director of a limited company ask for recordings of calls with us? If yes, what personal data must we provide?This Q&A draws on the Information Commissioner’s Office’s (ICO’s) guidance on business-to-business marketing, which may or may

Data subject access request form

Data subject access request formPlease complete this form if you wish to request access to your personal data. You do not have to use this form, but it will help us to deal with your request as quickly and effectively as possible if you do.You can also use this form if you are requesting access to