Definitions
PERSONAL DATA PROTECTION CODE
Legislative Decree no. 196 of 30 June 2003
Main definitions
Processing
Processing shall mean any operation, or set of operations, carried out with or without the help of electronic or automated means, concerning the collection, recording, organisation, keeping, interrogation, elaboration, modification, selection, retrieval, comparison, utilization, interconnection, blocking, communication, dissemination, erasure and destruction of data, whether the latter are contained or not in a data bank.
Personal data
Personal data shall mean any information relating to natural persons that are or can be identified, even indirectly, by reference to any other information including a personal identification number.
Identification data
Identification data shall mean personal data allowing a data subject to be identified directly.
Sensitive data
Sensitive data shall mean personal data allowing the disclosure of racial or ethnic origin, religious, philosophical or other beliefs, political opinions, membership of parties, trade unions, associations or organizations of a religious, philosophical, political or trade-unionist character, as well as personal data disclosing health and sex life.
Anonymous data
Anonymous data shall mean any data that either in origin or on account of its having been processed cannot be associated with any identified or identifiable data subject.
Data controller
Data controller shall mean any natural or legal person, public administration, body, association or other entity that is competent, also jointly with another data controller, to determine purposes and methods of the processing of personal data and the relevant means, including security matters.
Data processor
Data processor’ shall mean any natural or legal person, public administration, body, association or other agency that processes personal data on the controller’s behalf;.
Persons in charge of the processing
Persons in charge of the processing shall mean the natural persons that have been authorised by the data controller or processor to carry out processing operations.
Data subject
Data subject shall mean any natural person that is the subject of the personal data.
Communication
Communication’ shall mean disclosing personal data to one or more identified entities other than the data subject, the data controller’s representative in the State’s territory, the data processor and persons in charge of the processing in any form whatsoever, including by making available or interrogating such data;.
Dissemination
Dissemination shall mean disclosing personal data to unidentified entities, in any form whatsoever, including by making available or interrogating such data.
Data bank
Data bank shall mean any organised set of personal data, divided into one or more units located in one or more places.
Garante
Garante shall mean the authority referred to in Section 153 as set up under Act no. 675 of 31 December 1996.
Minimum measures
Minimum measures shall mean the technical, informational, organizational, logistics and procedural security measures affording the minimum level of protection which is required by having regard to the risks mentioned in Section 31 of the Legislative Decree no. 196 of 30 June 2003.
Electronic means
Electronic means shall mean computers, computer software and any electronic and/or automated device used for performing the processing.
Computerised authentication
Computerised authentication shall mean a set of electronic tools and procedures to verify identity also indirectly.
Authentication credentials
Authentication credentials shall mean the data and devices in the possession of a person, whether known by or uniquely related to the latter, that are used for computer authentication.
Password
Password shall mean the component of an authentication credential associated with and known to a person, consisting of a sequence of characters or other data in electronic format.
Authorisation profile
Authorisation profile shall mean the information uniquely associated with a person that allows determining the data that may be accessed by said person as well as the processing operations said person may perform.
Authorisation system
Authorisation system” shall mean the tools and procedures enabling access to the data and the relevant processing mechanisms as a function of the requesting party’s authorisation profile.
Electronic mail
Electronic mail shall mean any text, voice, sound or image message sent over a public communications network, which can be stored in the network or in the recipient’s terminal equipment until it is collected by the recipient.
Public communications network
Public communications network shall mean an electronic communications network used wholly or mainly for the provision of publicly available electronic communications services which support the transfer of information between network termination points.