Data Protection Impact Assessment

GDPR

General Data Protection Regulation — EU legislation governing the collection and processing of personal data of EU residents.

CCPA

California Consumer Privacy Act — a US state law enhancing privacy rights and consumer protection for California residents.

Privacy by Design

An approach to systems engineering that takes privacy into account throughout the entire engineering process.

An organisation's ability to build, assure, and review its technological integrity to ensure it can withstand all types of ICT-related disruptions and threats.

The system of policies, rules, and processes by which activities are directed, controlled, and managed.

The concept that data is subject to the laws and governance structures of the country where it is collected or processed.

Evaluating the potential risks of engaging with a vendor including security, financial, and operational concerns.

The application of ethical principles and moral standards to business activities, decisions, and relationships.

An independent assurance function that evaluates the effectiveness of an organisation's internal controls and governance.

A legal concept giving individuals the right to request deletion of their personal data from organisations' records.

The formal process of documenting and communicating security incidents, breaches, or compliance violations.