Recognizing personal data is the crucial first step in complying with Accenture Policy and data privacy laws. The following related concepts are also important to understand.
The "data controller" is the organization or entity that decides how personal data will be collected, and how it may be used or disclosed. Accenture is the data controller only of Accenture-owned personal data, such as data about employees, vendors, and website users.
A "data processor" is an organization or entity that processes personal data on behalf of, and according to the instructions of, a data controller. Accenture is the data processor with respect to data owned by our clients, such as client employee information or client customer data.
"Data processing" is any operation performed on data, including:
collection;
manipulation, such as data matching, integration, and migration;
recording;
storage;
retrieval or searching;
alteration;
disclosure;
transmission and
destruction.
Anything done with personal data is considered "processing" and must be carried out in compliance with local data privacy laws.