Definitions of the terms used in Data Protection legislation

Data protection legislation applies only to personal data about a living, identifiable individual.

Some personal data comes under the heading of special categories of personal data. This type of data is subject to further regulations under current data protection legislation and can only be processed under certain circumstances

A data subject is an individual who is the subject of personal data

Data processing includes reading, amending, storing and deleting data

A data controller is an organisation that has full authority to decide how and why personal data is to be processed, and that has the overall responsibility for the data. This includes deciding on use, storage and deletion of the data.

A data processor is an organisation that processes personal data on behalf of another organisation