Glossar
Die DSGVO-Begriffe, denen Security- und IT-Teams täglich begegnen, verständlich erklärt und mit dem jeweiligen Artikel.
Unsere Leitfäden erscheinen derzeit auf Englisch. Übersetzungen sind in Arbeit.
- Anonymisation
- Irreversibly transforming data so no person is identifiable by any means reasonably likely to be used, taking it outside GDPR scope (Recital 26).
- Controller
- The person or body that, alone or jointly with others, determines the purposes and means of processing personal data (GDPR Article 4(7)).
- Data protection by design and by default
- The GDPR Article 25 duty to build data protection into systems from the design stage and to process only necessary data by default.
- Data protection officer (DPO)
- The person designated under GDPR Articles 37 to 39 to advise on and monitor data protection compliance within an organisation.
- Data protection impact assessment (DPIA)
- A documented assessment of processing likely to result in a high risk to individuals, required by GDPR Article 35 before processing starts.
- Legitimate interests
- A GDPR lawful basis (Article 6(1)(f)) for processing necessary for legitimate interests, unless overridden by the rights of the data subject.
- Personal data breach
- A breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data.
- Personal data
- Any information relating to an identified or identifiable natural person, directly or indirectly, as defined in GDPR Article 4(1).
- Processor
- A person or body that processes personal data on behalf of the controller, under its documented instructions (GDPR Article 4(8)).
- Pseudonymisation
- Processing personal data so it can no longer be attributed to a person without additional information kept separately and protected (Art. 4(5)).
- Records of processing activities (RoPA)
- The written inventory of processing activities that controllers and processors must maintain under GDPR Article 30.
- Standard contractual clauses (SCCs)
- Model contract clauses adopted by the European Commission, used for international transfers (Art. 46) and controller-processor contracts (Art. 28).
- Supervisory authority
- An independent public authority established by an EU Member State to monitor and enforce the GDPR, such as the CNIL in France.