A01 chaf6542 06 se fm indd

data 

subject

’ can contact the data controller or a representative.

● 

Before data processing ‘the data subject has given his consent’ or the processing must 

be necessary either for a ‘contract to which the data subject is a party’ (for example as 

part of a sale of a product) or because it is required by other laws.

Personal data

Any information about 

an individual stored by 

companies concerning 

their customers or 

employees.

Data controller

Each company must 

have a defined person 

responsible for data 

protection.

Data subject

The legal term to refer to 

the individual whose data 

are held.

M04_CHAF6542_06_SE_C04.indd   142

7/23/14   12:18 PM

---

143

Chapter 4  E‑environment

● 

Sensitive personal data require particular care,

–   the racial or ethnic origin of the data subject;

–   political opinions;

–   religious beliefs or other beliefs of a similar nature;

–   membership of a trade union;

–   physical or mental health or condition;

–   sexual life;

–   the commission or alleged commission or proceedings of any offence.

● 

No other laws must be broken in processing the data.