50 Personal Data Protection Act, No. 9 of 2022 “local authority” means, a Municipal Council, Urban Council or a Pradeshiya Sabha and includes any authority created or established by or under any law to exercise, perform and discharge powers, duties and functions corresponding or similar to the powers, duties and functions exercised, performed or discharged by any such Council or Sabha; “Minister” means, the Minister assigned the subject of data protection under Article 44 or 45 of the Constitution; “personal data” means, any information that can identify a data subject directly or indirectly, by reference to– (a) an identifier such as a name, an identification number, financial data, location data or an online identifier; or (b) one or more factors specific to the physical, physiological, genetic, psychological, economic, cultural or social identity of that individual or natural person. “personal data breach” means, any act or omission that results in accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed; “personal data revealing racial or ethnic origin” means, any personal data including photographs that may indicate or be related to the race or ethnicity of a natural person; “prescribed” means, prescribed by regulations made under this Act;