In simple terms, processing means pretty much any operation you can perform on personal data: collecting it, using it, making it available to or sharing it with others, storing it etc.
Here are a few suggested tips, based on our own experience with Data Subject Access Requests (DSARs). This is based on DSARs under the EU General Data Protection Regulation (GDPR), but we hope our tips may be useful in other jurisdictions too.
