[22nd December 2023] REPUBLIC OF SEYCHELLES Data Protection Act SUPPLEMENT TO OFFICIAL GAZETTE 632 ACT Interpretation 2. In this Act unless context otherwise requires — “biometrics” means personal data resulting from specific technical processing relating to the physical, physiological or behavioral characteristics of a natural person, which allows or confirms the unique identification of that natural person; “Chief Executive Officer” means the Chief Executive Officer appointed under section 41 of the Access to Information Act; “Commission” means the Information Commission established under section 36 of the Access to Information Act; “consent” means an informed, freely given and unambiguous agreement to the processing of personal information by a data subject; “data controller” means an individual or legal entity which alone, or jointly with others, determines the purposes and means of processing personal data and has decision making power with respect to the processing; “data processor” means any natural or legal person who processes personal data for or on behalf of a data controller; “data protection impact assessment” means a tool to identify and assess privacy risks arising from the development life cycle of a program or system; “data subject” means any natural person whose personal data is being collected, processed, stored or further distributed; “designated officers” means officers or individuals tasked by the Commission to conduct an investigation or audit; “genetics” means personal data relating to the inherited or acquired genetic characteristics of a natural person which give unique information about the physiology or the health of that