46In the second place, as regards the concept of ‘processing’, as defined in Article 4(2) of the GDPR, it should be noted that, by using the expression ‘any operation’, the EU legislature intended to give that concept a broad scope by using a non-exhaustive list of operations applied to personal data or sets of personal data, which cover, among others, collection, recording, storage or also consultation (see, to that effect, judgment of 4 May 2023, Österreichische Datenschutzbehörde and CRIF, C‑487/21, EU:C:2023:369, paragraph 27).
Source: EUR-Lex, © European Union, 1998-2026. Reuse authorised under Decision 2011/833/EU.