Create or update a processing activity
Manually create a processing activity or update a processing activity that is automatically created out of a privacy screening assessment. You can also update a processing activity that is created from an entity record. When you update a processing activity, you can fill in the relevant details about the personal data that is being processed.
Before you begin
Role required: sn_privacy.analyst (who owns the processing activity) or sn_privacy.manager
About this task
You can create a processing activity in two ways:
- Manually create a processing activity for a business application or process that handles personal data.
- Update a processing activity that was automatically created when a privacy screening assessment determined that personal data is being processed. Screening assessments include automation rules that create processing activities based on specific responses. To configure automation in your assessment template, refer to Post-assessment automations.
Procedure
- Navigate to one of the following.
|
Action |
Procedure |
|---|---|
|
To create a new processing activity |
|
|
To update a processing activity |
|
|
Field |
Description |
|---|---|
|
Name |
Name of the processing activity. |
|
Processing activity purpose |
Business justification or reason for using an application or a process that stores personal data. |
|
Number |
Number of the processing activity. This field is automatically set. |
|
Privacy analyst |
Analyst responsible for the processing activity. |
|
Business unit |
Business unit of the processing activity. |
|
Department |
Department of the processing activity. |
|
Processing activity type |
Context of the processing activity such as a business application or a business process. |
|
Entity |
Entity of the processing activity. |
|
Applies to record |
Reference record used to create the processing activity record. |
|
Owned by |
Owner of the processing activity. |
|
Data processing role |
Defines if a processing activity is a data controller or a data processor. |
|
Processing activity status |
Status of the processing activity. The choices are as follows:- Implementing
|
|
Processing activity category |
Category to which the processing activity belongs for example, customer care, finance, and so on. |
|
Compliance score |
Privacy compliance score calculated based on all the controls mapped to this processing activity. |
|
Process owner |
Any user, with the sn_privacy.business_user role, from the list of key stakeholders who has the editing privileges for the processing activity.Note: The user selected in this field can update the this field and select a new process owner. Updating this field is only possible when the processing activity is in the Discover or Review state. |
|
Data subject | |
|
Data storage type |
Format in which the personal information is stored. The choices are as follows:- Digital
|
|
Data storage locations |
Physical location of where the personal information is stored. |
|
Data retention period (in days) |
Number of days for which personal information must be retained. |
|
Data subject type |
User type related to the personal information that is being used and processed. The choices are as follows:- Customers
|
|
Data subject range |
Range of users for whom the personal information is being processed. |
|
Contains special category data? |
This field is automatically set to either Yes or No. If any information object associated with the processing activity is classified as special category data, then this field is automatically set to Yes. |
|
Obtain special category data? |
Does this processing activity process any special category data such as racial, ethnic, political information? The choices are as follows:- Yes
|
|
Activity | |
|
Additional comments |
Additional information about the processing activity. |
|
Work notes |
Internal notes not visible to the external people. |
What to do next
Send a privacy assessment to a processing activity owner to collect more information on why and how the processing activity is using personal information. For more information, see Send a privacy assessment from a processing activity.
Parent Topic:Using Privacy Management
--- title: Create or update a processing activity description: Manually create a processing activity or update a processing activity that is automatically created out of a privacy screening assessment. You can also update a processing activity that is created from an entity record. When you update a processing activity, you can fill in the relevant details about the personal data that is being processed. locale: en-US canonical_url: https://www.servicenow.com/docs/r/governance-risk-compliance/privacy-workspace/create-processing-activity.html release: brazil product: Privacy Workspace classification: privacy-workspace topic_type: task last_updated: "2026-09-10" reading_time_minutes: 3 breadcrumb: [Use, Privacy Management, Governance, Risk, and Compliance] --- # Create or update a processing activity Manually create a processing activity or update a processing activity that is automatically created out of a privacy screening assessment. You can also update a processing activity that is created from an entity record. When you update a processing activity, you can fill in the relevant details about the personal data that is being processed. ## Before you begin Role required: sn\_privacy.analyst \(who owns the processing activity\) or sn\_privacy.manager ## About this task You can create a processing activity in two ways: - Manually create a processing activity for a business application or process that handles personal data. - Update a processing activity that was automatically created when a privacy screening assessment determined that personal data is being processed. Screening assessments include automation rules that create processing activities based on specific responses. To configure automation in your assessment template, refer to [Post-assessment automations](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/governance-risk-compliance/smart-assessment-engine/impact-automation.md). ## Procedure 1. Navigate to one of the following. <table id="choicetable_kjs_yc1_sqb"><thead><tr><th align="left" id="d423085e81"> Action </th><th align="left" id="d423085e84"> Procedure </th></tr></thead><tbody><tr><td id="d423085e90"> **To create a new processing activity** </td><td> 1. Navigate to **All** > **Privacy Management** > **Processing activities** > **All processing activities**. 2. Click **New**. </td></tr><tr><td id="d423085e126"> **To update a processing activity** </td><td> 1. Navigate to **All** > **Privacy Management** > **Privacy Workspace** > **List** > **My items** > **Processing activities**. 2. Open the processing activity that you want to update. </td></tr></tbody> </table>2. On the form, fill in the fields. <table id="table_FloorForm"><thead><tr><th> Field </th><th> Description </th></tr></thead><tbody><tr><td> Name </td><td> Name of the processing activity. </td></tr><tr><td> Processing activity purpose </td><td> Business justification or reason for using an application or a process that stores personal data. </td></tr><tr><td> Number </td><td> Number of the processing activity. This field is automatically set. </td></tr><tr><td> Privacy analyst </td><td> Analyst responsible for the processing activity. </td></tr><tr><td> Business unit </td><td> Business unit of the processing activity. </td></tr><tr><td> Department </td><td> Department of the processing activity. </td></tr><tr><td> Processing activity type </td><td> Context of the processing activity such as a business application or a business process. </td></tr><tr><td> Entity </td><td> Entity of the processing activity. </td></tr><tr><td> Applies to record </td><td> Reference record used to create the processing activity record. </td></tr><tr><td> Owned by </td><td> Owner of the processing activity. </td></tr><tr><td> Data processing role </td><td> Defines if a processing activity is a data controller or a data processor. </td></tr><tr><td> Processing activity status </td><td> Status of the processing activity. The choices are as follows:- **Implementing** - **In Production** - **Pilot** - **Retired** - **Under Evaluation** </td></tr><tr><td> Processing activity category </td><td> Category to which the processing activity belongs for example, customer care, finance, and so on. </td></tr><tr><td> Compliance score </td><td> Privacy compliance score calculated based on all the controls mapped to this processing activity. </td></tr><tr><td> Process owner </td><td> Any user, with the sn\_privacy.business\_user role, from the list of key stakeholders who has the editing privileges for the processing activity.**Note:** The user selected in this field can update the this field and select a new process owner. Updating this field is only possible when the processing activity is in the **Discover** or **Review** state. </td></tr><tr><td class="sub-head" colspan="2"> Data subject </td></tr><tr><td> Data storage type </td><td> Format in which the personal information is stored. The choices are as follows:- **Digital** - **Paper** - **Both** </td></tr><tr><td> Data storage locations </td><td> Physical location of where the personal information is stored. </td></tr><tr><td> Data retention period \(in days\) </td><td> Number of days for which personal information must be retained. </td></tr><tr><td> Data subject type </td><td> User type related to the personal information that is being used and processed. The choices are as follows:- **Customers** - **Employees** - **Others** </td></tr><tr><td> Data subject range </td><td> Range of users for whom the personal information is being processed. </td></tr><tr><td> Contains special category data? </td><td> This field is automatically set to either **Yes** or **No**. If any information object associated with the processing activity is classified as special category data, then this field is automatically set to **Yes**. </td></tr><tr><td> Obtain special category data? </td><td> Does this processing activity process any special category data such as racial, ethnic, political information? The choices are as follows:- **Yes** - **No** </td></tr><tr><td class="sub-head" colspan="2"> Activity </td></tr><tr><td> Additional comments </td><td> Additional information about the processing activity. </td></tr><tr><td> Work notes </td><td> Internal notes not visible to the external people. </td></tr></tbody> </table>3. Click **Save**. ## What to do next Send a privacy assessment to a processing activity owner to collect more information on why and how the processing activity is using personal information. For more information, see [Send a privacy assessment from a processing activity](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/governance-risk-compliance/privacy-workspace/send-privacy-asmt-from-pa.md). **Parent Topic:**[Using Privacy Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/governance-risk-compliance/privacy-workspace/using-privacy-mgmt.md)
| title | Create or update a processing activity |
| description | Manually create a processing activity or update a processing activity that is automatically created out of a privacy screening assessment. You can also update a processing activity that is created from an entity record. When you update a processing activity, you can fill in the relevant details about the personal data that is being processed. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/governance-risk-compliance/privacy-workspace/create-processing-activity.html |
| release | brazil |
| product | Privacy Workspace |
| classification | privacy-workspace |
| topic_type | task |
| last_updated | 2026-09-10 |
| reading_time_minutes | 3 |
| breadcrumb | UsePrivacy ManagementGovernanceRiskand Compliance |