automated

The Digital Personal Data Protection Act defines the term automated to mean any digital process that is capable of operating automatically for the purpose of processing data. This means the process must be digital in nature, rather than a physical or manual mechanical action. The definition is drawn broadly to capture a wide range of technology. It specifically notes that the digital process can operate automatically either in response to direct instructions given to it, or otherwise. This ensures that the term covers both systems that require a specific command or trigger to start processing data, as well as systems that run continuously or independently in the background without direct prompts. The core requirement is simply that the digital process has the capability to function automatically to process data. By defining it this way, the law focuses on the nature of the digital process and its purpose, rather than exactly how the process is initiated.

Key points

• The term refers exclusively to a digital process. (2(b))
• The process must be capable of operating automatically. (2(b))
• The automation can happen in response to instructions given or otherwise. (2(b))
• The ultimate purpose of the digital process must be for processing data. (2(b))

Common misreadings

• Assuming automated only applies to processes that run completely without human input, when the definition explicitly includes processes operating automatically in response to instructions given.
• Assuming the term covers physical or mechanical automation, when the text specifically limits it to a digital process.