There is no clear definition of what ‘large scale’ means, therefore the definition is in some respects open to interpretation. However, if we were to consider large scale we should take into account:
- the volume of data
- the number of individuals concerned
- the variety of data;
- the duration of the processing; and
- the geographical extent of the processing.
The UK supervisory authority provides the following as examples of large scale processing:
- a hospital (but not an individual doctor) processing patient data;
- tracking individuals using a city’s public transport system;
- a fast food chain tracking real-time location of its customers;
- an insurance company or bank processing customer data;
- a search engine processing data for behavioural advertising; or
- a telephone or internet service provider processing user data.
Individual professionals processing patient or client data are not processing on a large scale.