Glossaire
Les notions du RGPD que les équipes sécurité et IT rencontrent au quotidien, définies simplement, avec l'article dont elles proviennent.
Nos guides sont pour l'instant publiés en anglais. Les traductions françaises arrivent.
- Anonymisation
- Irreversibly transforming data so no person is identifiable by any means reasonably likely to be used, taking it outside GDPR scope (Recital 26).
- Controller
- The person or body that, alone or jointly with others, determines the purposes and means of processing personal data (GDPR Article 4(7)).
- Data protection by design and by default
- The GDPR Article 25 duty to build data protection into systems from the design stage and to process only necessary data by default.
- Data protection officer (DPO)
- The person designated under GDPR Articles 37 to 39 to advise on and monitor data protection compliance within an organisation.
- Data protection impact assessment (DPIA)
- A documented assessment of processing likely to result in a high risk to individuals, required by GDPR Article 35 before processing starts.
- Legitimate interests
- A GDPR lawful basis (Article 6(1)(f)) for processing necessary for legitimate interests, unless overridden by the rights of the data subject.
- Personal data breach
- A breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data.
- Personal data
- Any information relating to an identified or identifiable natural person, directly or indirectly, as defined in GDPR Article 4(1).
- Processor
- A person or body that processes personal data on behalf of the controller, under its documented instructions (GDPR Article 4(8)).
- Pseudonymisation
- Processing personal data so it can no longer be attributed to a person without additional information kept separately and protected (Art. 4(5)).
- Records of processing activities (RoPA)
- The written inventory of processing activities that controllers and processors must maintain under GDPR Article 30.
- Standard contractual clauses (SCCs)
- Model contract clauses adopted by the European Commission, used for international transfers (Art. 46) and controller-processor contracts (Art. 28).
- Supervisory authority
- An independent public authority established by an EU Member State to monitor and enforce the GDPR, such as the CNIL in France.