(a) (i) is capable of being processed by means of equipment operating automatically in response to instructions given for that purpose; and (ii) is recorded with the intent of it being processed by such equipment; or (b) is recorded as part of a relevant filing system or intended to be part of a relevant filing system; "data controller" means a person who, either alone or jointly with any other person, makes a decision with regard to the purposes for which and in the manner in which any personal data are, or are to be, processed; “data matching procedure” means any procedure, whether manually or by means of any electronic or other device, whereby personal data collected for one or more purposes in respect of 10 or more data subjects are compared with personal data collected for any other purpose in respect of those data subjects where the comparison – (a) is for the purpose of producing or verifying data that; or (b) produces or verifies data in respect of which it is reasonable to believe that it is practicable that the data, may be used, whether immediately or at any subsequent time, for the purpose of taking any adverse action against any of those data subjects; "data processor" means a person, other than an employee of the data controller, who processes the data on behalf of the data controller; "data protection principles" means the data protection principles specified in the First Schedule; "data subject" means a living individual who is the subject of personal data; “direct marketing” means the communication of any advertising or marketing material which is directed to any particular individual;