Kenya
Answer ... (a) Data processing
Any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as:
- collection, recording, organisation or structuring;
- storage, adaptation or alteration;
- retrieval, consultation or use;
- disclosure by transmission, dissemination or otherwise making available; or
- alignment or combination, restriction, erasure or destruction.
(b) Data processor
A natural or legal person, public authority, agency or other body which processes personal data on behalf of the data controller.
(c) Data controller
A natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purpose and means of processing of personal data.
(d) Data subject
An identified or identifiable natural person who is the subject of personal data.
(e) Personal data
Any information relating to an identified or identifiable natural person.
(f) Sensitive personal data
Data revealing a natural person’s:
- race;
- health status;
- ethnic social origin;
- conscience;
- beliefs;
- genetic data;
- biometric data;
- property details;
- marital status;
- family details, including the names of his or her children, parents, spouse or spouses;
- sex; or
- sexual orientation.
(g) Consent
Any manifestation of express, unequivocal, free, specific and informed indication of the data subject’s wishes by a statement or by a clear affirmative action, signifying agreement to the processing of personal data relating to the data subject.
Kenya
Answer ...
- Biometric data: Personal data resulting from specific technical processing based on physical, physiological or behavioural characterisation, including blood typing, fingerprinting, DNA analysis, earlobe geometry, retinal scanning and voice recognition.
- Third party: A natural or legal person, public authority, agency or other body, other than the data subject, data controller, data processor or person that, under the direct authority of the data controller or data processor, is authorised to process personal data.
-
Health data: Data relating to the physical or mental health of the data subject, including:
-
- records regarding the past, present or future state of the data subject’s health;
- data collected in the course of registration for, or provision of health services; and
- data which associates the data subject with the provision of specific health services.