2
Data Protection Act, 2018 - 5.
“data subject” means a natural or legal person who is the subject of personal data;
“data user” means a person who either alone or jointly or in common with other
persons processes any personal data or has control over or authorises the
processing of any personal data, but does not include a data processor;
“document” means any medium in which data is recorded, whether printed or on tape
or film or by electronic means or otherwise and also means any map, diagram,
photograph, film, microfilm, video-tape, sound recording, or machine readable
record or any record which is capable of being produced from a machinereadable record by means of equipment or a programme, or a combination of
both, which is used for that purpose by the public body or private body which
holds the record; equipment or a programme, or a combination of both, which is
used for that purpose by the public body or private body which holds the record;
“Information Commissioner” means the Commissioner appointed pursuant to
section 35 of the Freedom of Information Act;
“Minister” means the Minister with responsibility for justice;
“personal data” means any information in respect of commercial transactions,
which–
(a) is being processed wholly or partly by means of equipment operating
automatically in response to instructions given for that purpose;
(b) is recorded with the intention that it should wholly or partly be processed
by means of such equipment; or
(c) is recorded as part of a relevant filing system or with the intention that it
should form part of a relevant filing system,
that relates directly or indirectly to a data subject, who is identified or
identifiable from that information or from that and other information in the
possession of a data user, including any sensitive personal data and expression
of opinion about the data subject;
“private body” means a body, excluding a public body, that–
(a) carries on any trade, business or profession, but only in that capacity; or
(b) has legal personality;
“processing”, in relation to personal data, means collecting, recording, holding or
storing the personal data or carrying out any operation or set of operations on
the personal data, including–
(a) the organisation, adaptation or alteration of personal data;
(b) the retrieval, consultation or use of personal data;
(c) the disclosure of personal data by transmission, transfer, dissemination
or otherwise making available; or