AI Summary of Article 4 Definitions
This Regulation establishes key definitions pertinent to the processing of personal data, outlining the responsibilities of different entities involved in such processing, including controllers and processors. It delineates 'personal data' as any information relating to an identifiable individual, covering a broad range of identifiers and attributes.
Key concepts include 'processing', which encompasses a variety of operations on personal data, and 'profiling', involving automated processing for evaluating personal aspects. Additionally, it defines critical terms such as 'consent', 'personal data breach', and 'supervisory authority', providing a comprehensive framework for data protection compliance.
Article 4 Definitions
For the purposes of this Regulation:
(1) "personal data" means any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
(2) "processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
(3) "restriction of processing" means the marking of stored personal data with the aim of limiting their processing in the future;