Compliance

Data Fiduciary

Entity that determines purpose and means of processing personal data.

Definition

An entity that alone or jointly with others determines the purpose and means of processing digital personal data and thereby bears obligations under the Act (notice, purpose limitation, data minimisation, retention, security and breach reporting); the Act also contemplates designation of certain fiduciaries as 'significant' with enhanced duties.