Section 33 Other definitionsI1

This section defines certain other expressions used in this Part.

F1“Consent” of the data subject to the processing of personal data means a freely given, specific, informed and unambiguous indication of the data subject’s wishes by which the data subject, by a statement or by a clear affirmative action, signifies agreement to the processing of the personal data (and see section 40A).

“Employee”, in relation to any person, includes an individual who holds a position (whether paid or unpaid) under the direction and control of that person.

“Personal data breach” means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

“Profiling” means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to an individual, in particular to analyse or predict aspects concerning that individual's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

“Recipient”, in relation to any personal data, means any person to whom the data is disclosed, whether a third party or not, but it does not include a public authority to whom disclosure is or may be made in the framework of a particular inquiry in accordance with the law.

“Restriction of processing” means the marking of stored personal data with the aim of limiting its processing for the future.

F2“Sensitive processing” has the meaning given in section 35(8).

“Third country” means a country or territory F3outside the United Kingdom.

Sections 3 and 205 include definitions of other expressions used in this Part.