(10) Identifiable person:
(a) is one who can be identified, directly or indirectly, in
particular by reference to an identification number or to one
or more factors specific to his/her physical, physiological,
mental, economic, cultural or social identity.
(b) To determine whether a person is identifiable, account
should be taken of all the means reasonably likely to be used
either by the controller or by any other person to identify the
said person.
(11) Genetic data: refers to any personal information stemming
from a Deoxyribonucleic acid (DNA) analysis.
(12) Health professional: refers to any individual determined as
such by Zimbabwean law.
(13) Personal information:information relating to a data subject,
and includes—
(a) the person's name, address or telephone number;
(b) the person's race, national or ethnic origin, colour, religious or
political beliefs or associations;
(c) the person's age, sex, sexual orientation, marital status or
family status;
(d) an identifying number, symbol or other particulars assigned to
that person;
(e) fingerprints, blood type or inheritable characteristics;
(f) information about a person’s health care history, including a
physical or mental disability;
(g) information about educational, financial, criminal or
employment history;
(h) opinions expressed about an identifiable person;
(i) the individual’s personal views or opinions, except if they are
about someone else; and
(j) personal correspondence pertaining to home and family life.
(14) Processing: refers to any operation or set of operations
which is performed upon personal data, whether or not by
automatic means, such as obtaining, recording or holding the
data or carrying out any operation or set of operations on data,
including –.
(a) organization, adaptation or alteration of the data;
(b) retrieval, consultation or use of the data; or
(c) alignment, combination, blocking, erasure or destruction of
the data.
Draft Data Protection Bill Version 1.0
7