FORMAL ANSWER

A personal data processing area is a list of locations, buildings, rooms or parts of rooms forming an area in which personal data are processed.

PRACTICAL ANSWER

In practice, a personal data processing area is any place where personal data are located. The processing area therefore includes an archive where data are stored, a work computer and hard drives of external hosting servers. The processing area must be clearly and precisely defined in the security policy, so it is worth defining it thoroughly and keeping it updated, especially when personal data are to be processed outside the original processing area.

MORE:

• We discuss the most important concepts and principles in the guide: Rules for personal data protection