“Processing” means any operation or set of operations that are performed on personal information or on sets of personal information, whether or not by automated means.