Processing is defined in the Law as one or more operations carried out in any form or by any means, with the purpose of collecting, recording, copying, storing, organising, revising, utilising, using, transmitting, distributing, publishing, linking to other Data, making available, transferring, displaying, concealing its identity, encoding, destroying, registering, erasing, modifying, describing, or disclosing by any and all possible means.

Therefore, 'collection' of data is within the scope of Processing.

According to Article (7) of the Law, processing must meet the following requirements:

• The purpose of Processing must be lawful, specific, and clear.
• It must be aligned with the purposes for which the Data was collected.
• It must be conducted through legal means.
• It must be based on accurate, truthful, and up-to-date Data.
• It must not lead to identifying the Data subject after fulfilling its purpose.
• It must not cause harm to the Data Subject or directly or indirectly affect their rights.
• It must be carried out in a manner that ensures the confidentiality and integrity of the information and prevents any unauthorised alterations.