Modify an information object on a processing activity

  • Release version: Washingtondc
  • Updated February 1, 2024
  • 1 minute to read

    • Add details such as justification for storing data to an information object after you add it to the processing activity. Adding details enables you to define how the personal data is being processed.

    Before you begin

    Role required: sn_privacy.analyst (who owns the processing activity) or sn_privacy.manager

    About this task

    As a privacy analyst, you must provide details how personal data is being used in a given processing activity. Adding relevant details to an information object helps you achieve this objective.

    Procedure

    1. Navigate to All > Privacy Workspace > Processing activities > All processing activities.
    2. Select and open the processing activity that contains the information object you want to modify.
    3. Click the [PI] Information objects related list.
    4. Open the information object that you want to modify.
    5. On the Information object to processing activity form, fill in the fields.
      Field Description
      Information object Name of the information object. This field is automatically set.
      Processing activity Name of the processing activity the information object is part of. This field is automatically set.
      Data classification Category of the data class. For example, Highly Sensitive. This field is automatically set. This field is defined when you set up the information object library.
      Type of data Type of personal data. The choices are the following:
      • General personal information: Examples are: Name, phone number, address.
      • Special Category: Examples are: Political opinions, religious beliefs, and so on.
        Note:
        If any information object associated to a processing activity is categorized as Special category, the Contains special category data? field on the processing activity form is automatically set to Yes.
      • Criminal Conviction: Examples are court verdicts, information about legal proceedings and so on.
      Lawful basis for processing Reason for processing personal data.
      • None
      • Legal Obligation
      • Legitimate Interests
      CRUD operations Operations that can be performed on the processing activity. The choices are the following:
      • Create
      • Read
      • Update
      • Delete
      Upstream processing activity Source of inheriting data in the processing activity. For example, you can select the application from where the data in this processing activity is populated.
      Downstream processing activity Specify where the data is sent.
      Justification for storing this data Reasons for storing and using the personal data.
    6. Click Save.