{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":17951,"path":"governance-risk-compliance/privacy-workspace/create-processing-activity.md","title":"Create or update a processing activity","bundle":null,"doc_type":null,"release":"australia","body":"\n# Create or update a processing activity\n\nManually create a processing activity or update a processing activity that is automatically created out of a privacy screening assessment. You can also update a processing activity that is created from an entity record. When you update a processing activity, you can fill in the relevant details about the personal data that is being processed.\n\n## Before you begin\n\nRole required: sn\\_privacy.analyst \\(who owns the processing activity\\) or sn\\_privacy.manager\n\n## About this task\n\nYou can create a processing activity in two ways:\n\n- Manually create a processing activity for a business application or process that handles personal data.\n- Update a processing activity that was automatically created when a privacy screening assessment determined that personal data is being processed. Screening assessments include automation rules that create processing activities based on specific responses. To configure automation in your assessment template, refer to [Post-assessment automations](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/smart-assessment-engine/impact-automation.md).\n\n## Procedure\n\n1. Navigate to one of the following.\n\n\n
\n\nAction\n\n\n\nProcedure\n\n
\n\n**To create a new processing activity**\n\n\n\n1. Navigate to **All** > **Privacy Management** > **Processing activities** > **All processing activities**.\n2. Click **New**.\n\n\n
\n\n**To update a processing activity**\n\n\n\n1. Navigate to **All** > **Privacy Management** > **Privacy Workspace** > **List** > **My items** > **Processing activities**.\n2. Open the processing activity that you want to update.\n\n\n
2. On the form, fill in the fields.\n\n\n
\n\nField\n\n\n\nDescription\n\n
\n\nName\n\n\n\nName of the processing activity.\n\n
\n\nProcessing activity purpose\n\n\n\nBusiness justification or reason for using an application or a process that stores personal data.\n\n
\n\nNumber\n\n\n\nNumber of the processing activity. This field is automatically set.\n\n
\n\nPrivacy analyst\n\n\n\nAnalyst responsible for the processing activity.\n\n
\n\nBusiness unit\n\n\n\nBusiness unit of the processing activity.\n\n
\n\nDepartment\n\n\n\nDepartment of the processing activity.\n\n
\n\nProcessing activity type\n\n\n\nContext of the processing activity such as a business application or a business process.\n\n
\n\nEntity\n\n\n\nEntity of the processing activity.\n\n
\n\nApplies to record\n\n\n\nReference record used to create the processing activity record.\n\n
\n\nOwned by\n\n\n\nOwner of the processing activity.\n\n
\n\nData processing role\n\n\n\nDefines if a processing activity is a data controller or a data processor.\n\n
\n\nProcessing activity status\n\n\n\nStatus of the processing activity. The choices are as follows:- **Implementing**\n- **In Production**\n- **Pilot**\n- **Retired**\n- **Under Evaluation**\n\n\n
\n\nProcessing activity category\n\n\n\nCategory to which the processing activity belongs for example, customer care, finance, and so on.\n\n
\n\nCompliance score\n\n\n\nPrivacy compliance score calculated based on all the controls mapped to this processing activity.\n\n
\n\nProcess owner\n\n\n\nAny user, with the sn\\_privacy.business\\_user role, from the list of key stakeholders who has the editing privileges for the processing activity.**Note:** The user selected in this field can update the this field and select a new process owner. Updating this field is only possible when the processing activity is in the **Discover** or **Review** state.\n\n
\n\nData subject\n\n
\n\nData storage type\n\n\n\nFormat in which the personal information is stored. The choices are as follows:- **Digital**\n- **Paper**\n- **Both**\n\n\n
\n\nData storage locations\n\n\n\nPhysical location of where the personal information is stored.\n\n
\n\nData retention period \\(in days\\)\n\n\n\nNumber of days for which personal information must be retained.\n\n
\n\nData subject type\n\n\n\nUser type related to the personal information that is being used and processed. The choices are as follows:- **Customers**\n- **Employees**\n- **Others**\n\n\n
\n\nData subject range\n\n\n\nRange of users for whom the personal information is being processed.\n\n
\n\nContains special category data?\n\n\n\nThis field is automatically set to either **Yes** or **No**. If any information object associated with the processing activity is classified as special category data, then this field is automatically set to **Yes**.\n\n
\n\nObtain special category data?\n\n\n\nDoes this processing activity process any special category data such as racial, ethnic, political information? The choices are as follows:- **Yes**\n- **No**\n\n\n
\n\nActivity\n\n
\n\nAdditional comments\n\n\n\nAdditional information about the processing activity.\n\n
\n\nWork notes\n\n\n\nInternal notes not visible to the external people.\n\n
3. Click **Save**.\n\n\n## What to do next\n\nSend a privacy assessment to a processing activity owner to collect more information on why and how the processing activity is using personal information. For more information, see [Send a privacy assessment from a processing activity](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/privacy-workspace/send-privacy-asmt-from-pa.md).\n\n**Parent Topic:**[Using Privacy Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/privacy-workspace/using-privacy-mgmt.md)\n\n"}}