Data Fiduciary

Any person or organisation that, alone or with others, determines the purpose and means of processing personal data. This is the Act's primary duty-holder, similar in spirit to a 'data controller' under other data protection laws.

Example: A bank that decides why and how it collects and uses customer KYC data is acting as a Data Fiduciary.