Workflow PA

Rough overview of the general PA workflow

What is a processing activity?

A legal definition of the term can be found in Art. 4 of the GDPR, where the term "processing" is defined as follows:

• any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means. This means that any operation or process which in any way processes personal data, whether the data is only stored or used for analysis, is a processing activity.

PAs can be clustered as registers in HITGuard.

How is a PA created?

Practitioners can create new PAs under My tasks > PAs and send them to Experts and Professionals for review and approval. Experts and Professionals can freely create new processing activities.

How is a PA edited/reviewed?

Experts and Professionals can edit PAs themselves or send them to an advisor for editing, who then fills everything in. In any case, the PA is reviewed and approved by an Expert or Professional.

How does the updating of PAs work?

Practitioners can create a new version of a processing activity under My tasks > PAs and send it to Experts and Professionals for review and approval. Experts and Professionals can freely create new versions of processing activities and send them to the advisor for editing or edit, review, and approve them themselves.

Who receives an e-mail when?

Advisor:

• Receives an e-mail when the editing of a PA is requested.
• Receives an e-mail when the editing is no longer needed (e.g., the PA has been closed in the meantime).
• Receives an e-mail when the answering needs to be reworked.

Additional links

Find more on the creation of processing activities here.
Find more on the work with PAs for Practitioners here.