Cyber Security and Data Protection 5 10 15 20 25 30 35 40 45 50 factors specific to his or her physical, physiological, mental, economic, cultural or social identity; “Minister” means the Minister responsible for information and communications technologies; “personal information” means information relating to a data subject, and includes— (a) the person’s name, address or telephone number; (b) the person’s race, national or ethnic origin, colour, religious or political beliefs or associations; (c) the person’s age, sex, sexual orientation, marital status or family status; (d) an identifying number, symbol or other particulars assigned to that person; (e) fingerprints, blood type or inheritable characteristics; (f) information about a person’s health care history, including a physical or mental disability; (g) information about educational, financial, criminal or employment history; (h) opinions expressed about an identifiable person; (i) the individual’s personal views or opinions, except if they are about someone else; and (j) personal correspondence pertaining to home and family life; “processing” refers to any operation or set of operations which are performed upon data, whether or not by automatic means, such as obtaining recording or holding the data or carrying out any operation or set of operations on data, including— (a) organisation, adaptation or alteration of the data; (b) retrieval, consultation or use of the data; or (c) alignment, combination, blocking, erasure or destruction of the data; “recipient” a natural or legal person, agency or any other body to whom personal information is disclosed by a data controller, whether a third party or not; however, persons who receive personal information in the framework of a particular legal inquiry shall not be regarded as recipients; “sensitive data” refers to— (a) information or any opinion about an individual which reveals or contains the following— (i) racial or ethnic origin; (ii) political opinions; (iii) membership of a political association; (iv) religious beliefs or affiliations; (v) philosophical beliefs; (vi) membership of a professional or trade association; (vii) membership of a trade union; (viii) sex life; (ix) criminal educational, financial or employment history; (x) gender, age, marital status or family status; (b) health information about an individual; (c) genetic information about an individual; or (d) any information which may be considered as presenting a major risk to the rights of the data subject; 5