(h) (i) (27) (28) (29) (30) (31) (32) (33) 3. (1) (2) (3) (4) the commission or alleged commission of an offence; any proceedings for an offence committed or alleged to have been committed, the disposal of such proceedings or the sentence of any court in the proceedings; (j) communications data, including content and metadata; or (k) any other personal data as the Commission may determine to be sensitive personal data. “third party” means person other than the data subject, data controller, data processor or persons who, under the direct authority of the data controller or data processor, are authorized to process personal data; “third party jurisdiction” means a country other than Ethiopia, and an international organization and its subordinate bodies governed by public international law, or any other body which is set up by, or on the basis of, an agreement between two or more countries; “traffic data” means any data relating to a communication by means of a computer system and generated by the system that form part in the chain of communication, indicating the communication’s origin, destination, route, time, date, size, duration, or type of underlying service; “Commission” means the Ethiopian Personal Data Protection Commission; “House” means the House of Peoples’ Representative of the Federal Democratic Republic of Ethiopia; “person” means a physical or legal person; and Any expression in the masculine gender shall include the feminine. Scope of Application This Proclamation shall apply to the processing of personal data, wholly or partly, by automated means and to any processing otherwise than by automated means where the personal data form part of a filing system or are intended to form part of a filing system. Except as otherwise provided, this Proclamation applies to a data controller or data processor in respect of any personal data only if: (a) it is established in Ethiopia and the data are processed in the context of that establishment, or (b) It is not established in Ethiopia, but uses equipment in Ethiopia for processing the data otherwise than for the purposes of transit through Ethiopia and has a representative established in Ethiopia. For the purpose of the application of sub-Article (2) lit. (a) of this Article, this Proclamation shall apply to private and public institutions of the federal and regional governments, including the city administrations of Addis Abeba and Dire Dawa, which have the power and function to process personal data. Notwithstanding the provisions of sub-Article (1) to (3) of this Article, this Proclamation shall not apply to processing of personal data: (a) by an individual in the course of purely personal or household activity; (b) which involves the exchange of information between government agencies where such exchange is required on a need-to-know basis; 4