Reporting Act, 2007(Act 726) to carry out credit bureau activities; “data” means information which (a) is processed by means of equipment operating automatically in response to instructions given for that purpose, (b) is recorded with the intention that it should be processed by means of such equipment, (c) is recorded as part of a relevant filing system or with the intention that it should form part of a relevant filing system, or (d) does not fall within paragraph (a),(b) or (c) but forms part of an accessible record; “data controller” means a person who either alone, jointly with other persons or in common with other persons or as a statutory duty determines the purposes for and the manner in which personal data is processed or is to be processed; “data protection principles” means the principles set out in sections 17 to 26 of this Act; “data processor” in relation to personal data means any person other than an employee of the data controller who processes the data on behalf of the data controller; “data protection functions” means functions that relate to the protection of personal data in the course of data processing; “data subject” means an individual who is the subject of personal data; “enactment” includes an enactment passed after the commencement of this Act; “data supervisor” means a professional appointed by a data controller in accordance with section 58 to monitor the compliance by the data controller in accordance with the provisions of the Act; “examination” includes any process for determining the knowledge, intelligence, skill or ability of a candidate by reference to the candidate’s performance in a test, work or other activity; “exempt manual data” means information in respect of which a controller is not required to register before manual processing or use; “foreign data subject” means data subject information regulated by laws of a foreign jurisdiction sent into Ghana from a foreign jurisdiction wholly for processing purposes; “ good cause” means any failure to comply with or a violation of any of the data protection principles, enforcement or other notices issued by the Commission; “good practice” means the practice in the processing of personal data in a way that the likelihood of causing substantial damage or distress is reduced; “government department” includes a Ministry, Department or Agency and a body or authority exercising statutory functions on behalf of the State; “health professional “ means a registered medical practitioner or a recognised traditional healer or any person who is registered to provide health services under any law for the time being in force; “information notice” means notice given by the Commission pursuant to a