body permanently established on the territory [of the concerned country], who
takes the place of the data controller in the accomplishment of the obligations set
forth in this law;
“data subject” refers to any individual who is the subject of the processing of
personal information and who is identified or identifiable;
“de-identify” in relation to personal information of a data subject, means to delete
any information that (a) Identifies the data subject;
(b) Can be used or manipulated by a reasonably foreseeable method to identify
the data subject; and
(c) Can be linked by a reasonably foreseeable method to other information that
identifies the data subject;
“electronic mail” or “email” means any text, voice, sound or image message which is
sent over a public communications network and can be stored in the network or in
the recipient’s terminal equipment until it is collected by the recipient;
“enforcement notice” means a notice issued under section 46;
“explicit consent” means any voluntary, specific and informed consent
communicated expressly by spoken or written word in terms of which a data subject
agrees to the processing of personal information relating to a data subject;
“filing system” means a set or collection of personal data records, structured either
by reference to individuals or criteria relating to individuals, in a way that specific
information relating to a particular individual is readily accessible;
“identifiable person” is an individual who can be identified, directly or indirectly, in
particular by reference to an identification number or to one or more factors specific