3 Terms relating to the processing of personal data
3 Terms relating to the processing of personal data

(1)     This section defines some terms used in this Act.

(2)     “Personal data” means any information relating to an identified or identifiable living individual (subject to subsection (14)(c)).

(3)     “Identifiable living individual” means a living individual who can be identified, directly or indirectly, in particular by reference to—

(a)     an identifier such as a name, an identification number, location data or an online identifier, or

(b)     one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of the individual.

(4)     “Processing”, in relation to information, means an operation or set of operations which is performed on information, or on sets of information, such as—

(a)     collection, recording, organisation, structuring or storage,

(b)     adaptation or alteration,

(c)     retrieval, consultation or use,

(d)     disclosure by transmission, dissemination or otherwise making available,

(e)     alignment or combination, or

(f)     restriction, erasure or destruction,

(subject to subsection (14)(c) and sections 5(7), 29(2) and 82(3), which make provision about references to processing in the different Parts of this Act).

(5)     “Data subject” means the identified or identifiable living individual to whom personal data relates.