Privacy Glossary

Clear definitions for privacy teams working on GDPR, DSAR, and data mapping programs.

Browse by category

Browse A-Z

Showing 303 terms

A

Ability to Restore Availability and Access

Accidental or Unlawful Destruction

Accountability Documentation

Adherence to Approved Certification

Administrative Arrangement

Age of Digital Consent

Allocation of Responsibilities

Amicable Settlement

Appropriate Policy Document

Appropriate Technical and Organisational Measures

Approved Code of Conduct Adherence

Archiving in the Public Interest

Arrangement Between Joint Controllers

Article 10 Criminal Data

Article 27 Representative

Article 28 Contract

Assessment of Appropriate Level of Security

Assessment of Necessity and Proportionality

Assessment of Risks to Rights and Freedoms

Authorisation by Competent Supervisory Authority

Automated Individual Decision-Making

Availability Breach

Availability to the Supervisory Authority

B

Ban on Processing

Behavioural Data

Binding Decision of the Board

Biometric Data for Unique Identification

Biometric Identification

Breach Containment

Breach Severity Assessment (ENISA Methodology)

C

Categories and Approximate Number of Data Subjects

Categories and Approximate Number of Records

Categories of Recipients

Certification Mechanism Adherence

Certification as Element of Compliance

Certification for Transfers

Charter of Fundamental Rights

Child's Consent

Children's Data

Clear Affirmative Act

Commission Implementing Decision (EU) 2021/914

Commission Nationale de l'Informatique et des Libertés

Compatibility Assessment

Compatible Purpose

Compelling Legitimate Grounds

Compelling Legitimate Interests Transfer

Competence of the Lead Authority

Competence of the Lead Supervisory Authority

Complaint-Handling Procedure

Concerned Supervisory Authority

Concise, Transparent, Intelligible Form

Conditions Lifting the Prohibition

Conditions for Consent

Confidentiality Breach

Confidentiality, Integrity, Availability and Resilience

Consent Not Freely Given

Consistency Mechanism

Consistency Opinion

Consultation with the DPO

Contract with the Data Subject

Controller-Processor Relationship

Cooperation and Mutual Assistance

Corrective Powers

Cost of Implementation

Criminal Convictions and Offences

Cross-Border Breach Notification

Cross-Border Data Flow

Cross-Border Processing

D

Data Anonymisation Techniques

Data Concerning Health

Data Concerning Sex Life or Sexual Orientation

Data Concerning a Person's Sex Life

Data Localisation

Data Made Manifestly Public by the Data Subject

Data Processed on a Large Scale

Data Processing Documentation

Data Protection Act 2018

Data Protection Audit

Data Protection Impact Assessment Register

Data Protection Management System

Data Retention Limitation Control

Data Revealing Racial or Ethnic Origin

Data-Oriented Strategies

Default Settings

Delayed Notification With Reasons

Demonstrate Consent Was Given

Demonstrating Compliance With Principles

Derogation Under National Law

Description of Categories of Data Subjects

Designation of a DPO

Determination of Purposes and Means of Processing

Direct Identifier

Directive 95/46/EC

Dispute Resolution by the Board

Documentation Obligation

Documented Instructions

E

EU-US Privacy Shield

Ease of Withdrawal

Effective, Proportionate and Dissuasive Sanctions

Employment Law Basis

Encryption Rendering Data Unintelligible

Enforceable Data Subject Rights and Effective Legal Remedies

Enforcement Notice

Erasure and Destruction

Essence of the Right

Establishment in the Union

European Data Protection Supervisor

Evaluation or Scoring

Exemptions and Restrictions

Exercise of Official Authority

Explicit Consent to Transfer

Extraterritorial Effect

F

Factual Influence

Fundamental Right to Data Protection

Further Processing

G

General Description of Security Measures

Genetic Data Definition

Government Access Requests

Grounds for Lawful Processing

Group of Undertakings

H

Health Data Definition

High Risk to Individuals

Household Exemption

I

ISO/IEC 29100 Privacy Framework

Imbalance of Power

Importer Local Law Assessment

Independence of the DPO

Indication of Wishes

Information Asset Register

Information Commissioner

Information Society Services Consent

Information to Be Provided

Innovative Use of Technology

Integrity Breach

Interoperability

Investigatory Powers

J

Joint Controllers

Joint Controllership Arrangement

Joint Investigations

Joint Operations

Journalistic Exemption

K

Key Performance Indicators for Privacy

L

Lead Supervisory Authority

Legal Claims Basis

Legally Binding and Enforceable Instrument

Legitimate Interest of a Third Party

Likely Consequences of the Breach

Likely to Result in a Risk

M

Machine-Readable Format

Main Establishment

Manifestly Unfounded or Excessive Request

Matching or Combining Datasets

Meaningful Information About the Logic

Measures Taken or Proposed

Measures to Address the Risks

Member State Additional Conditions

Minimisation by Design

Modalities for Exercising Rights

Modular Standard Contractual Clauses

Mutual Assistance

N

Nature of the Breach

Nature, Scope, Context and Purposes

Necessary Cookies

Necessary for the Purposes

Non-Essential Means

Not Repetitive Transfer

Notification Not Required Exceptions

Notification Obligation Regarding Rectification or Erasure

Notification Without Undue Delay

O

Occasional Transfer

Official Authority

Ongoing Review of the DPIA

Organisational Measures

Overriding Interests

P

Performance of a Contract

Phased Notification

Point of Contact for Data Subjects

Political Opinions

Power to Order Rectification or Erasure

Pre-Contractual Steps

Presented Distinguishable From Other Matters

Preventing Data Subjects From Exercising a Right

Preventive or Occupational Medicine Basis

Privacy Champions Network

Privacy Design Strategies

Privacy Engineering Objectives

Privacy Management Programme

Privacy Metrics and Reporting

Privacy Operating Model

Privacy Operating Procedures

Privacy Risk Register

Privacy and Electronic Communications Regulations

Privacy by Design Governance

Privacy-Preserving Techniques

Process for Regularly Testing and Evaluating

Process-Oriented Strategies

Processing by Not-for-Profit Body

Processing on Behalf of a Controller

Prohibition on Processing Special Categories

Public Health Interest

Public Interest

Public Interest Task

Publicly Accessible Area Monitoring

Publicly Available Data

Purposes of the Processing

Q

Quasi-Identifier

S

Safeguards for Automated Decisions

Scientific or Historical Research Purposes

Security Incident Management

Security of Processing

Separate Consent for Distinct Purposes

Social Security and Social Protection Basis

State of the Art

State of the Art Consideration

Statement or Clear Affirmative Action

Sub-Processor Onward Transfer

Substantial Public Interest

Suitable and Specific Measures

Suspension of Data Flows

Systematic Description of Processing

T

Tasks of the DPO

Technical Measures

Territorial Scope

Third-Party Processor

Third-Party and Vendor Risk Management

Time Limits for Erasure

Trade Union Membership

Transparency Information

Transparency Obligations

Turnover-Based Fines

Two-Tier Fine Structure

U

Unauthorised Disclosure or Access

Union or Member State Law

W

Whitelist of Processing Not Requiring a DPIA

Application Security Isn’t Optional Anymore.