Use one word for one claim.

The person described by the Act as determining the purpose and means of processing personal data, alone or with others. Read the official definition and applicability context.

The individual to whom the personal data relates, with Act-specific treatment where the individual is a child or a person with disability who has a lawful guardian.

A person who processes personal data on behalf of a Data Fiduciary. The real operating boundary should be reflected in system and processor records.

A framework role whose registration and obligations must be read from the corrected final Rules and current official records.

Use the exact statutory definition for legal decisions. In engineering, incident triage should preserve scope, time, systems and confirmed facts.

A designation with additional duties where applicable. This site does not determine or imply that an organisation has been designated.

A stable record describing an implementation objective, owner, system pattern, evidence, test and failure mode. It is not a provision or certification.

A retrievable record that supports review of a decision or control operation, while still requiring scope and quality assessment.

A generic direction to primary text that explicitly does not claim a provision-level mapping.

Used here only when the cited commencement instrument places the relevant provision group in force by the as-of date.

Final text with a named future commencement date that has not arrived as of the ledger date.

A visible evidence or applicability gap. Unknown must not be silently converted into pass, fail or zero.