Governance

business operator handling personal information

An entity engaged in handling personal information in the course of business.

Definition

A person or organization that handles personal information in the course of conducting business activities and thereby falls within the Act's regulatory scope, triggering duties such as security measures, recordkeeping, breach reporting, supervisory arrangements for contractors, and compliance with cross‑border transfer rules.