Data Protection & Governance Glossary

Plain-language definitions for teams responsible for protecting sensitive data and proving their safeguards.

Browse by category

Browse A-Z

Showing 305 terms

A

APEC Cross-Border Privacy Rules (CBPR)

Access Provisioning

Accountability Framework

Accountability Principle

Ad Hoc Contractual Clauses

Adequacy Decision

Appropriate Safeguards

Approved Certification Mechanism for Transfers

Archival Storage

Article 29 Working Party

Asymmetric Encryption

B

Breach Notification Threshold

Breach Register

Break-Glass Access

Business Glossary

D

Data Aggregation

Data Categorization

Data Certification

Data Certification Workflow

Data Collection

Data Democratization

Data Destruction

Data Expiration

Data Governance Act

Data Governance Charter

Data Governance Council

Data Governance Framework

Data Governance Maturity Model

Data Governance Operating Model

Data Governance Policy

Data Governance Roles and Responsibilities

Data Handling Requirements

Data Marketplace

Data Minimization at Rest

Data Observability

Data Privacy Framework Principles

Data Protection Act

Data Protection by Design and by Default

Data Quality Dimensions

Data Quality Metrics

Data Quality Monitoring

Data Quality Rule

Data Quality Rules

Data Quality Score

Data Reconciliation

Data Remediation

Data Retention Matrix

Data Sanitization

Data Sensitivity

Data Sensitivity Scoring

Data Sharing Agreement

Data Standardization

Data Timeliness

Data Transfer Impact Assessment

Data Trustworthiness

Data Uniqueness

Data Validation

De-Identification

Decision Rights

Defensible Disposal

Demonstrable Compliance

Digital Markets Act

Digital Services Act

Digital Signature

Discretionary Access Control

Do Not Sell or Share

Domain Data Steward

Dynamic Data Masking

Dynamic Data Masking Policy

E

End-of-Life Data

Essential Equivalence

European Data Protection Supervisor

Extraterritorial Scope

ePrivacy Directive

F

FTC Act Section 5

Fair Information Practice Principles

Federated Governance

Fitness for Purpose

Flow-Down Clauses

Format-Preserving Encryption

Freely Given Consent

G

Global Differential Privacy

Global Privacy Control

Governance Reporting

Granular Consent

H

Health Breach Notification Rule

High-Risk Processing

I

Immutable Logging

Independent Assessment

Individual Participation

Information Governance

Information Lifecycle Management

Information Types

Informational Self-Determination

Informed Consent

Integrity and Confidentiality

International Data Transfer Agreement

J

Joint Controller

Just-in-Time Notice

K

Key Performance Indicators

L

Large-Scale Processing

Law Enforcement Directive

Lawfulness, Fairness and Transparency

Layered Privacy Notice

Legal Obligation

Legitimate Interests

Legitimate Interests Assessment

Lei Geral de Proteção de Dados Pessoais

Likelihood and Impact

Local Differential Privacy

M

Mandatory Access Control

Message Authentication Code

N

Necessity and Proportionality Assessment

Notice and Choice

Notification to Affected Individuals

Notification to Supervisory Authority

O

Openness Principle

Q

S

SIG Questionnaire

Screening Assessment

Secure Deletion

Security Assertion Markup Language

Sensitive Data Opt-In

Sensitivity Label

Sensitivity Levels

Single Source of Truth

Structured Data

Subject Rights Request

Subprocessor Register

Supervisory Authority

Supplementary Measures

Symmetric Encryption

Systematic Monitoring

T

Tag-Based Masking

Technical and Organisational Measures

Threshold Assessment

Time-to-Live (TTL)

Trans-Atlantic Data Flows

Transfer Risk Assessment

Transparency Notice

Trusted Execution Environment

Trusted Third Party

U

UK General Data Protection Regulation

Universal Opt-Out Mechanism

Unstructured Data

V

Vendor Risk Assessment Questionnaire

Vendor Security Rating

Verifiable Consumer Request

Virginia Consumer Data Protection Act

Vital Interests

Z

Zero-Knowledge Proof