CCPA

GDPR

General Data Protection Regulation — EU legislation governing the collection and processing of personal data of EU residents.

Privacy by Design

An approach to systems engineering that takes privacy into account throughout the entire engineering process.

Data Protection Impact Assessment

A process required under GDPR for assessing the risks of personal data processing activities and identifying measures to mitigate those risks before implementation.

A systematic evaluation of the potential effects and risks of an AI system before and during its deployment.

An individual responsible for overseeing an organisation's data protection strategy and regulatory compliance.

The concept that data is subject to the laws and governance structures of the country where it is collected or processed.

An automated approach to maintaining regulatory compliance through real-time monitoring, policy enforcement, and evidence collection integrated into development and operations pipelines.

A document defining the permitted use of an organisation's IT resources and networks.

The process of verifying the identity, suitability, and risks of customers in financial transactions.

The process of checking individuals and entities against government-issued lists of sanctioned parties.

The systematic process of evaluating potential risks in an organisation's operations, projects, or investments.