3 Data Protection Act, 2018 - 5. ............................................... (d) the alignment, combination, correction, erasure or destruction of personal data; “public body” includes– (a) Parliament or any committee of Parliament; (b) the Cabinet as constituted under the Constitution; (c) a ministry, a department or a division of the ministry or a constituency office of a minister, wherever located; (d) a local authority; (e) a public statutory corporation or body; (f) a body corporate or an incorporated public body established for a public purpose, which is owned or controlled by the State; (g) an embassy, consulate or mission of the Saint Christopher and Nevis or an office of the Saint Christopher and Nevis situate outside Saint Christopher and Nevis whose functions include the provision of diplomatic or consular services for or on behalf of Saint Christopher and Nevis; (h) any other body designated by the Minister by Regulations made under this Act, to be a public body for the purposes of this Act. “sensitive personal data” means any personal data consisting of information as to the physical or mental health or condition of a data subject, his or her sexual orientation, his or her political opinions, his or her religious beliefs or other beliefs of a similar nature, the commission or alleged commission by him or her of any offence or any other personal data as the Minister may determine by order published in the Gazette. 3. Objects of Act. The objects of this Act are to safeguard personal data processed by public bodies and private bodies in an era in which technology increasingly facilitates the processing of personal data by balancing the necessity of – (a) processing personal data by public bodies and private bodies; and (b) safeguarding personal data from unlawful processing by public bodies and private bodies; to promote transparency and accountability in the processing of personal data. 4. Application of Act. (1) With respect to a private body this Act applies to a person who processes or who has control over or authorises the processing of any personal data in respect of commercial transactions. (2) Subject to subsection (1), this Act applies to a person in respect of personal data if–