---
sourceDocument: Yokohama Governance, Risk, and Compliance
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/yokohama/governance-risk-compliance

 Release :

    - yokohama

ft:locale :

    - en-US

ft:publication_title :

    - Yokohama Governance, Risk, and Compliance

ft:clusterId :

    - grc

bundleId :

    - grc

workflow :

    - Technology


---

# Create or update a processing activity

# Create or update a processing activity {#ariaid-title1}

* Release version: Yokohama
* 
* Updated July 31, 2025
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read

Manually create a processing activity or update a processing activity that is
automatically created out of a privacy screening assessment. You can also update a
processing activity that is created from an entity record. When you update a processing
activity, you can fill in the relevant details about the personal data that is being
processed.

## Before you begin

Role required: sn_privacy.analyst (who owns the processing activity) or sn_privacy.manager

## Procedure

1. Navigate to one of the following.

   | Action | Procedure |
   | To create a new processing activity | 1. Navigate to AllPrivacy ManagementProcessing activitiesAll processing activities. 2. Click New. {#create-processing-activity__ol_vyw_3fc_sqb} |
   | To update a processing activity | 1. Navigate to AllPrivacy ManagementPrivacy WorkspaceListMy itemsProcessing activities. 2. Open the processing activity that you want to update. {#create-processing-activity__ol_ywl_sfc_sqb} |
   |-|-|

   {#create-processing-activity__choicetable_kjs_yc1_sqb}
2. On the form, fill in the fields.  
   {#create-processing-activity__table_FloorForm__entry__2}

   | Field | Description |
   |-|-|
   | Name | Name of the processing activity. |
   | Processing activity purpose | Business justification or reason for using an application or a process that stores personal data. |
   | Number | Number of the processing activity. This field is automatically set. |
   | Privacy analyst | Analyst responsible for the processing activity. |
   | Business unit | Business unit of the processing activity. |
   | Department | Department of the processing activity. |
   | Processing activity type | Context of the processing activity such as a business application or a business process. |
   | Entity | Entity of the processing activity. |
   | Applies to record | Reference record used to create the processing activity record. |
   | Owned by | Owner of the processing activity. |
   | Data processing role | Defines if a processing activity is a data controller or a data processor. |
   | Processing activity status | Status of the processing activity. The choices are as follows: * Implementing * In Production * Pilot * Retired * Under Evaluation {#create-processing-activity__ul_f3r_kc4_3qb} |
   | Processing activity category | Category to which the processing activity belongs for example, customer care, finance, and so on. |
   | Compliance score | Privacy compliance score calculated based on all the controls mapped to this processing activity. |
   | Process owner | Any user, with the sn_privacy.business_user role, from the list of key stakeholders who has the editing privileges for the processing activity. Note: The user selected in this field can update the this field and select a new process owner. Updating this field is only possible when the processing activity is in the Discover or Review state. |
   | Data subject ||
   | Data storage type | Format in which the personal information is stored. The choices are as follows: * Digital * Paper * Both {#create-processing-activity__ul_bbw_5c4_3qb} |
   | Data storage locations | Physical location of where the personal information is stored. |
   | Data retention period (in days) | Number of days for which personal information must be retained. |
   | Data subject type | User type related to the personal information that is being used and processed. The choices are as follows: * Customers * Employees * Others {#create-processing-activity__ul_xkk_zc4_3qb} |
   | Data subject range | Range of users for whom the personal information is being processed. |
   | Contains special category data? | This field is automatically set to either Yes or No. If any information object associated with the processing activity is classified as special category data, then this field is automatically set to Yes. |
   | Obtain special category data? | Does this processing activity process any special category data such as racial, ethnic, political information? The choices are as follows: * Yes * No {#create-processing-activity__ul_hxd_ch1_sqb} |
   | Activity ||
   | Additional comments | Additional information about the processing activity. |
   | Work notes | Internal notes not visible to the external people. |
   [Table 1. New processing activity form]

   {#create-processing-activity__table_FloorForm}
3. Click Save.
{#create-processing-activity__steps_xss_gjv_gqb}

*[\>]: and then