Chapter 17

Question 1

Data Subject:

Answer 1

A natural person who is the subject of the personal data.

Question 2

Data damage:

Answer 2

Alteration, deletion, deterioration, erasure, relocation, suppression of data or making data temporarily or
permanently unavailable.

Question 3

Access to information system:

Answer 3

Gaining control or ability to use any part or whole of an information system whether or not through infringing any security measure.

Question 4

Personal data:

Answer 4

Any information that relates directly or indirectly to a data subject, who is identified or identifiable from that information or from that and other information in the possession of a data controller, including any sensitive personal data. Provided that anonymized, encrypted or pseudonymized data which is incapable of identifying an
individual is not personal data.

Question 5

Access to data:

Answer 5

Gaining control or ability to use, copy, modify or delete any data held in or generated by any device or information system.

Question 6

Unauthorised access:

Answer 6

Access to an information system or data which is not available for access by general public, without
authorization or in violation of the terms and conditions of the authorization.

Question 7

Sensitive personal data:

Answer 7

Data relating to access control (username and/or password), financial information such as
bank account, credit card, debit card, or other payment instruments, and, passports, biometric data, and physical,
psychological, and mental health conditions, medical records, and any detail pertaining to an individual’s ethnicity,
religious beliefs, or any other information for the purposes of this Act and rules made thereunder.

Question 8

Consent of the data subject:

Answer 8

Any freely given, specific, informed and unambiguous indication of the data subject’s
wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the collecting, obtaining and processing of personal data relating to him or her.

Question 9

Critical infrastructure:

Answer 9

Critical elements of infrastructure namely assets, facilities, systems, networks or processes the loss or compromise of which could result in:
- major detrimental impact on the availability, integrity or delivery of essential services including those services, whose
integrity, if compromised, could result in significant loss of life or casualties, taking into account significant economic or social impacts; or
- significant impact on national security, national defence, or the functioning of the state. (The Government may also designate any private or Government infrastructure in accordance with the above objectives, as critical infrastructure.)