The requirement that the data has to be 'generated or processed' makes clear that the providers have no obligation to generate new data - for example by requiring their users to provide personal data such as a social security number-to buy a pre-paid cell phone.