Personal Data Protection
15
“requestor”, in relation to a data access request or data correction
request, means the data subject or the relevant person on behalf
of the data subject, who has made the request;
“data processor”, in relation to personal data, means any
person, other than an employee of the data user, who processes
the personal data solely on behalf of the data user, and does not
process the personal data for any of his own purposes;
“processing”, in relation to personal data, means collecting,
recording, holding or storing the personal data or carrying out any
operation or set of operations on the personal data, including—
(a) the organization, adaptation or alteration of personal
data;
(b) the retrieval, consultation or use of personal data;
(c) the disclosure of personal data by transmission, transfer,
dissemination or otherwise making available; or
(d) the alignment, combination, correction, erasure or destruction
of personal data;
“registration” means the registration of a data user under
section 16;
“data user” means a person who either alone or jointly or in
common with other persons processes any personal data or has
control over or authorizes the processing of any personal data,
but does not include a data processor;
“relevant data user”, in relation to—
(a) an inspection, means the data user who uses the personal
data system which is the subject of the inspection;
(b) a complaint, means the data user specified in the
complaint;
(c) an investigation—
(i) in the case of an investigation initiated by a
complaint, means the data user specified in the
complaint;
(ii) in any other case, means the data user who is the
subject of the investigation;