Section 33: Other definitions

Data Protection Act 2018 · 2018 c. 12View on legislation.gov.uk

Part 3: Law enforcement processing — CHAPTER 1: Scope and definitions

This section defines certain other expressions used in this Part.

"Employee", in relation to any person, includes an individual who holds a position (whether paid or unpaid) under the direction and control of that person.

"Personal data breach" means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

"Profiling" means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to an individual, in particular to analyse or predict aspects concerning that individual's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

"Recipient", in relation to any personal data, means any person to whom the data is disclosed, whether a third party or not, but it does not include a public authority to whom disclosure is or may be made in the framework of a particular inquiry in accordance with the law.

"Restriction of processing" means the marking of stored personal data with the aim of limiting its processing for the future.

"Sensitive processing" has the meaning given in section 35(8).

"Third country" means a country or territory outside the United Kingdom.

Sections 3 and 205 include definitions of other expressions used in this Part.

About this text

This legislation text comes from legislation.gov.uk. Contains public sector information licensed under the Open Government Licence v3.0. These source and reuse terms cover the legislation text, not Remedy's commentary.

Reuse reviewed 21 August 2026 under Open Government Licence v3.0.