PDPA defines “processing” as the collection, recording, handling, storing, organizing, modifying, disclosing and destroying of personal data information. By only reading or accessing information is already considered as “processing”. Example of activities that is considered as “processing” include:

1. Collection of data using forms, via phone or the website;
2. Data publication;
3. Selling of data;
4. Using data for administrative purposes;
5. Using data for marketing purposes;
6. Recording of data;
7. Disclosing of data to other organizations; or
8. Destroying of data.