Simplify the "processing" definition.

[jyasskin]

We define processing as

An actor processes data if it carries out operations on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, sharing, dissemination or otherwise making available, selling, alignment or combination, restriction, erasure or destruction.

This is probably drawn from some legal definition, but it's pretty opaque to this non-lawyer reader. Is there a simple summary that captures the essense?

[darobin]

I think that this is multiple legal definitions, filtered through standards committee. Having said that, there's a reason why every single legal definition I can think of involves lists: it's hard to define this other than as "literally anything you can do with the data".

I'm tempted to not overthink this. There's a reason we moved these definitions to an annex, you probably only need to read them if you're getting into the nitty-gritty, and if you're getting into the nitty-gritty you can read a list I think.