Definition: The act of converting data to encoded information that can only be converted back to its original form with the use of a unique key Commentary: The data in its original form is referred to...

Definition: The removal of a data asset from all places in which it is stored Commentary: Disposal may or may not entail destruction. Disposal will ensure the data can no longer be accessed by normal ...

Definition: A function within an organization that is accountable for the some dimension of controls that apply across all areas of the organization. Commentary: Control functions a typically a second...

Definition: A collection of software components that enables its user to access the master boot record of a computer or device Commentary: The master boot record identifies how and where an operating ...

Definition: The process of obscuring, redacting, or transforming certain elements in data in order to prevent the identification of parties or inappropriate disclosure of private information that may ...

Definition: Jurisdictions that are deemed to provide an adequate level of protection to personal data by the governing authority under data protection laws applicable to the awarding jurisdiction. Com...

Definition: Any natural or legal person, agency or other body that processes personal data on behalf of the Data Controller Commentary: In some jurisdictions, there is no distinction between Data proc...

Definition: Is defined by the GDPR as any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in par...

Definition: Legitimate Interest is a clear and specific benefit or outcome which is recognised as a lawful basis for the processing of personal data, subject to such processing being necessary to achi...

Definition: Defining personal data, as distinct from personal information, or personally-identifiable information. Personal data is defined in the GDPR. Article 4(1) states that personal data “means...