(10) Identifiable person: (a) is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his/her physical, physiological, mental, economic, cultural or social identity. (b) To determine whether a person is identifiable, account should be taken of all the means reasonably likely to be used either by the controller or by any other person to identify the said person. (11) Genetic data: refers to any personal information stemming from a Deoxyribonucleic acid (DNA) analysis. (12) Health professional: refers to any individual determined as such by Zimbabwean law. (13) Personal information:information relating to a data subject, and includes— (a) the person's name, address or telephone number; (b) the person's race, national or ethnic origin, colour, religious or political beliefs or associations; (c) the person's age, sex, sexual orientation, marital status or family status; (d) an identifying number, symbol or other particulars assigned to that person; (e) fingerprints, blood type or inheritable characteristics; (f) information about a person’s health care history, including a physical or mental disability; (g) information about educational, financial, criminal or employment history; (h) opinions expressed about an identifiable person; (i) the individual’s personal views or opinions, except if they are about someone else; and (j) personal correspondence pertaining to home and family life. (14) Processing: refers to any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as obtaining, recording or holding the data or carrying out any operation or set of operations on data, including –. (a) organization, adaptation or alteration of the data; (b) retrieval, consultation or use of the data; or (c) alignment, combination, blocking, erasure or destruction of the data. Draft Data Protection Bill Version 1.0 7