Definition of phrases

Some of the phrases you will read about during this course.

It is important to understand the definitions of the phrase.

Personal Data – The definition used in the law is; Personal data’ means any information relating to an identified or identifiable living natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Special Category Data (formally known as Sensitive Data) is; Data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation

Data Subject – That’s you….Me….or any identifiable natural person (Living)

Processing – How your data is used by organisations…the law says; ‘Processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Processor – is the person or organisation that uses your data, the law says: ‘Processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

Controller – is the person or organisation that decides what they are going to do with your data, it says in the law: ‘Controller’ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.