Personal Data Protection 13 Interpretation 4. In this Act, unless the context otherwise requires— “credit reporting agency” has the meaning assigned to it in the Credit Reporting Agencies Act 2010 [Act 710]; “this Act” includes regulations, orders, notifications and other subsidiary legislation made under this Act; “register” means the Register of Data Users, Register of Data User Forums or Register of Codes of Practice; “personal data” means any information in respect of commercial transactions, which— (a) is being processed wholly or partly by means of equipment operating automatically in response to instructions given for that purpose; (b) is recorded with the intention that it should wholly or partly be processed by means of such equipment; or (c) is recorded as part of a relevant filing system or with the intention that it should form part of a relevant filing system, that relates directly or indirectly to a data subject, who is identified or identifiable from that information or from that and other information in the possession of a data user, including any sensitive personal data and expression of opinion about the data subject; but does not include any information that is processed for the purpose of a credit reporting business carried on by a credit reporting agency under the Credit Reporting Agencies Act 2010; “sensitive personal data” means any personal data consisting of information as to the physical or mental health or condition of a data subject, his political opinions, his religious beliefs or other beliefs of a similar nature, the commission or alleged commission by him of any offence or any other personal data as the Minister may determine by order published in the Gazette; “prescribed” means prescribed by the Minister under this Act and where no mode is mentioned, means prescribed by order published in the Gazette;