! No. 6 Data Protection (d) where it does not fall under paragraphs (a) (b) or (c), forms part of an accessible record; or (e) is recorded information which is held by a public entity and does not fall within any of paragraphs (a) to (d). “Data Commissioner” means the person appointed under section 6; “data controller” means a natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purpose and means of processing of personal data; “data processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the data controller; “data subject” means an identified or identifiable natural person who is the subject of personal data; “encryption” means the process of converting the content of any readable data using technical means into coded form; “filing system” means any structured set of personal data which is readily accessible by reference to a data subject or according to specific criteria, whether centralised, decentralised or dispersed on a functional or geographical basis; “health data” means data related to the state of physical or mental health of the data subject and includes records regarding the past, present or future state of the health, data collected in the course of registration for, or provision of health services, or data which associates the data subject to the provision of specific health services; “identifiable natural person” means a person who can be identified directly or indirectly, by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social or social identity; “national security organs” has the meaning assigned to it under Article 239 of the Constitution; “person” has the meaning assigned to it under Article 260 of the Constitution; 2019