“System operations that process personally identifiable information (PII). A system/product/service data lifecycle operation including, but not limited to collection, retention, logging, generation, transformation, use, disclosure, sharing, transmission, and disposal.” Source: NIST Glossary. 2020. https://csrc.nist.gov/glossary/term/Data_Actions
