Personal Data Protection and Safeguarding Draft Act e) June 2019 Reparations for damages and harm of data processing Section Two: Definition Article 2: Definition of terms: a) b) Personal data consists of data that, on its own or together with other data, directly or indirectly, identifies the individual subject of the data by reference to an identifier. Sensitive personal data includes personal data that reveals the tribal or ethnic roots, political, religious or philosophical opinion, hereditary details or health information of an individual. c) Processing means any manual or automatic operation on private data including (but not limited to) creation, registration, reception, collection, keeping, separation, change, analysis, classifying, structuring, adapting, saving, sharing, sending, distribution and presenting, publishing and making it accessible and erasure. d) Controller is an individual who determines all or part of aims, mechanism, conditions, specifications and tools of one or several processing operations on private data held by the processor. Ratifications or decisions of relevant authorities in regulation, supervision and adjudication of private data processing does not count as ‘controlling,’ except in cases where it pertains to individuals. e) Processor is the individual who acts on behalf of the controller. If there is no controller or processing can’t be attributed to him or her, the processor can also be known as controller. f) Special supervisor is an individual who, following an edict issued by the commission, will have the authority to supervise processing of private data. Section Three: Scope of application of the law Article 3: Individuals to whom the law is applicable in this law are the following: ARTICLE 19 – Free Word Centre, 60 Farringdon Rd, London EC1R 3GA – www.article19.org – +44 20 7324 2500 Page 39 of 58