Data Protection [No. 3 of 2021 95 “pseudonymisation” means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, where that additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data is not attributed to an identified or identifiable natural person; “public body” has the meaning assigned to the words in the Public Finance Management Act, 2018; “recipient” means a person to whom data is disclosed, including an employee or agent of a data controller, a data processor or an employee or agent of a data processor in the course of processing the data for the data controller, but does not include a person to whom disclosure is or may be made as a result of, or with a view to, a particular inquiry by or on behalf of that person made in the exercise of any power conferred by law; “Register” means the Register kept and maintained under section 80; “sensitive personal data” means personal data which by its nature may be used to suppress the data subject’s fundamental rights and freedoms and includes (a) the race, marital status, ethnic origin or sex of a data subject; (b) genetic data and biometric data; (c) child abuse data; (d) a data subject’s political opinions; (e) a data subject’s religious beliefs or other beliefs of a similar nature; (f) whether a data subject is a member of a trade union; or (g) a data subject’s physical or mental health, or physical or mental condition; “third party” means a person other than— (a) a data subject; (b) a data controller, or (c) a data processor or other person authorised to process data on behalf of data controller or data processor. Act No. 1 of 2018