Which term is not within the scope of the Data Privacy Act?

Which term is not within the scope of the Data Privacy Act?

• A. Intermediary
• B. Profiling
• C. Third party
• D. Security incident

Answer: (A)

The Data Privacy Act focuses on who controls and who processes personal data, and on the ways personal data can be used or protected. It covers activities like profiling (automated processing to assess individuals), sharing data with third parties, and handling security incidents involving personal data. An intermediary, however, is typically a service provider that only transmits, hosts, or facilitates data without deciding the purposes or means of processing. Since they don’t determine how personal data is used, they’re not the primary subject of the Act’s processing obligations. They may be regulated by other laws, but they’re not within the Act’s core scope as data controllers or processors are.

The Data Privacy Act focuses on who controls and who processes personal data, and on the ways personal data can be used or protected. It covers activities like profiling (automated processing to assess individuals), sharing data with third parties, and handling security incidents involving personal data. An intermediary, however, is typically a service provider that only transmits, hosts, or facilitates data without deciding the purposes or means of processing. Since they don’t determine how personal data is used, they’re not the primary subject of the Act’s processing obligations. They may be regulated by other laws, but they’re not within the Act’s core scope as data controllers or processors are.