12. Definitions of DPA terms

 

Data Subject

Data subject means an individual who is the subject of personal data.

 

Personal Data

Personal data covers both facts and opinions about a living individual.  Facts would include name, address, date of birth, marital status or current bank balance.

Results in examinations, details of driving offences, record of medications prescribed and financial credit rating are further examples of facts that could relate to an individual.

Personal opinions such as political or religious views are also deemed to be personal data.

 

Data Controller

A data controller means a person (by themselves or with other people) who determines the purpose for which - and the manner in which - any personal data is processed.

The data controller is therefore the person who decides what to do with the data once it has been entered onto the system.

This term comprises not only individuals but also organisations such as companies and other corporate and unincorporated bodies of persons.

(Previously called Data User in the older version of the Act)

 

Information Commissioner

The Information Commissioner is the person who enforces the Data Protection Act.

(Previously called the Data Protection Commissioner under the 1984 Act.)