(iv) a firm, (v) (vi) an association of persons or a body of individuals, whether incorporated or not, the State, and (vii) every artificial juridical person, not falling within any of the preceding subclauses; (29) “Personal data”means data about or relating to a natural person who is directly or indirectly identifiable, having regard to any characteristic, trait, attribute or any other feature of the identity of such natural person, or any combination of such features, or any combination of such features with any other information; (30) “Personal data breach” means any unauthorised or accidental disclosure, acquisition, sharing, use, alteration, destruction, loss of access to, of personal data that compromises the confidentiality, integrity or availability of personal data to a data principal; (31) “Prescribed”means prescribed by rules made by the Central Government under this Act; (32) “Processing”in relation to personal data, means an operation or set of operations performed on personal data, and may include operations such as collection, recording,organisation, structuring, storage, adaptation, alteration, retrieval, use, alignment or combination, indexing, disclosure by transmission, dissemination or otherwise making available, restriction, erasure or destruction; (33) “Profiling”means any form of processing of personal data that analyses or predicts aspects concerning the behaviour, attributes or interest of a data principal; (34) “Re-identification”meansthe process by which a data fiduciary or data processor may reverse a process of de-identification; (35) “Sensitive Personal Data”means personal data revealing, related to, or constituting, as may be applicable— (i) passwords; (ii) (iii) financial data; health data; (iv) official identifier; (v) sex life; (vi) sexual orientation; (vii) biometric data; (viii) genetic data; (ix) transgender status; (x) intersex status; (xi) caste or tribe; 5