Personal Data Protection Act GN. NO. 395B (Contd) Cap. 13 the conduct of a data controller or data processor prepared in accordance with section 65; “court” means the court of competent jurisdiction; “data processor” means a natural person, legal person or public body which processes personal data for and on behalf of the controller and under the data controller’s instruction, except for the persons who, under the direct authority of the controller, are authorised to process the data and it includes his representative; “data subject” means the subject of personal data which are processed under this Act; “Director General” means the Director General of the Commission appointed under section 11; “data controller” means a natural person, legal person or public body which alone or jointly with others determines the purpose and means of processing of personal data; and where the purpose and means of processing are determined by law, “data controller” is the natural person, legal person or public body designated as such by that law and it includes his representative; “recipient” means a natural person, legal person, public body or any other person who receives personal data from a data controller; “health professional” means a person providing health care services and recognised as such by the relevant law; “child” has the meaning ascribed to it under the Child Act; “third party” means any natural or legal person, or public body other than(a) the data subject; (b) the data controller or data processor; and (c) any person who is authorised to process personal data; “document” means any medium in which data is recorded, whether printed or on tape or film or by 6