[2003.] Data Protection (Amendment) Act 2003. [No. 6.] body established by or under statute or a candidate S.2 for election to, or a holder of, elective political office;’’, (iv) by the substitution of the following definition for the definition of ‘‘personal data’’: ‘‘‘personal data’ means data relating to a living individual who is or can be identified either from the data or from the data in conjunction with other information that is in, or is likely to come into, the possession of the data controller;’’, and (v) by the substitution of the following definition for the definition of ‘‘processing’’: ‘‘‘processing’, of or in relation to information or data, means performing any operation or set of operations on the information or data, whether or not by automatic means, including— (a) obtaining, recording or keeping the information or data, (b) collecting, organising, storing, altering or adapting the information or data, (c) retrieving, consulting or using the information or data, (d) disclosing the information or data by transmitting, disseminating or otherwise making it available, or (e) aligning, combining, blocking, erasing or destroying the information or data;’’, (b) by the insertion of the following subsections after subsection (3): ‘‘(3A) A word or expression that is used in this Act and also in the Directive has, unless the context otherwise requires, the same meaning in this Act as it has in the Directive. (3B) (a) Subject to any regulations under section 15(2) of this Act, this Act applies to data controllers in respect of the processing of personal data only if— (i) the data controller is established in the State and the data are processed in the context of that establishment, or (ii) the data controller is established neither in the State nor in any other state that is a contracting party to the EEA Agreement but makes use of equipment in the State for processing the data otherwise than for the purpose of transit through the territory of the State. 7