Privacy and Data Rights
Adequacy Decision
An adequacy decision is an official finding that another country offers essentially equivalent data-protection standards.
Read full definitionShouldEye Trust Intelligence Glossary
Privacy and Data Rights Terms
Controllers, processors, lawful bases, data-subject rights, and privacy-transfer concepts.
Educational information only. ShouldEye does not provide legal, banking, or individualized financial advice. Dispute rights, deadlines, and outcomes depend on your payment method, card network, issuer, processor, jurisdiction, and the facts of your case. Legal Disclaimers
49 published definitions in this topic.
Privacy and Data Rights
Anonymization
Anonymization irreversibly transforms personal data so the individual is no longer identifiable.
Read full definitionPrivacy and Data Rights
Behavioral Advertising
Behavioral advertising selects ads using observed past behavior such as browsing, apps, or purchases.
Read full definitionPrivacy and Data Rights
Binding Corporate Rules
Binding corporate rules (BCRs) are approved internal data-protection policies for transfers within a multinational group.
Read full definitionPrivacy and Data Rights
Biometric Data
Biometric data is personal data from specific technical processing of physical, physiological, or behavioral characteristics.
Read full definitionPrivacy and Data Rights
Breach Notification
Breach notification is the required notice to regulators and/or affected people after a personal-data breach.
Read full definitionPrivacy and Data Rights
Consent
Consent is a freely given, specific, informed, and unambiguous indication of agreement to processing.
Read full definitionPrivacy and Data Rights
Cross-Border Data Transfer
A cross-border data transfer moves personal data to another country or international organization.
Read full definitionPrivacy and Data Rights
Data Breach
A data breach is a security incident leading to accidental or unlawful destruction, loss, alteration, or unauthorized disclosure of or access to personal data.
Read full definitionPrivacy and Data Rights
Data Broker
A data broker collects and sells or licenses personal information about people, often without a direct consumer relationship.
Read full definitionPrivacy and Data Rights
Data Broker Registration
Data broker registration is a legal requirement for certain brokers to register with a state or public registry.
Read full definitionPrivacy and Data Rights
Data Controller
A data controller decides the purposes and means of processing personal data.
Read full definitionPrivacy and Data Rights
Data Deletion Request
A data deletion request is a consumer or data-subject ask that an organization delete personal data.
Read full definitionPrivacy and Data Rights
Data Localization
Data localization requires storing or processing certain data within a country’s borders.
Read full definitionPrivacy and Data Rights
Data Minimization
Data minimization means processing only personal data that are adequate, relevant, and limited to what is necessary.
Read full definitionPrivacy and Data Rights
Data Processor
A data processor processes personal data on behalf of a controller under instructions.
Read full definitionPrivacy and Data Rights
Data Protection Impact Assessment
A data protection impact assessment (DPIA) analyzes high-risk personal-data processing and mitigations before it proceeds.
Read full definitionPrivacy and Data Rights
Data Protection Officer
A data protection officer (DPO) is an expert role advising on and monitoring data-protection compliance where required.
Read full definitionPrivacy and Data Rights
Data Subject
A data subject is the identified or identifiable person whose personal data are processed.
Read full definitionPrivacy and Data Rights
De-Identification
De-identification is removing or obscuring identifiers so data are less likely to identify a person.
Read full definitionPrivacy and Data Rights
Explicit Consent
Explicit consent is a clear affirmative statement agreeing to a specific high-risk processing activity.
Read full definitionPrivacy and Data Rights
Global Privacy Control
Global Privacy Control (GPC) is a browser or device signal that indicates a user is opting out of certain data sale and sharing.
Read full definitionPrivacy and Data Rights
Lawful Basis
A lawful basis is a GDPR legal ground that must justify personal-data processing.
Read full definitionPrivacy and Data Rights
Legitimate Interest
Legitimate interest is a GDPR lawful basis for processing when the controller’s interests are not overridden by the person’s rights.
Read full definitionPrivacy and Data Rights
Personal Data
Personal data is information that relates to an identified or identifiable individual.
Read full definitionPrivacy and Data Rights
Personally Identifiable Information
Personally identifiable information (PII) is data that can identify a specific individual, alone or combined with other information.
Read full definitionPrivacy and Data Rights
Precise Geolocation
Precise geolocation is data that locates a device or person within a small geographic radius.
Read full definitionPrivacy and Data Rights
Privacy by Default
Privacy by default means the strictest practical privacy settings apply automatically without user action.
Read full definitionPrivacy and Data Rights
Privacy by Design
Privacy by design means building data-protection safeguards into systems from the start, not bolted on later.
Read full definitionPrivacy and Data Rights
Privacy-Enhancing Technology
Privacy-enhancing technology (PET) is tooling that reduces personal-data exposure while enabling a task.
Read full definitionPrivacy and Data Rights
Pseudonymization
Pseudonymization replaces identifying fields with codes while keeping additional information separately to allow re-linking.
Read full definitionPrivacy and Data Rights
Purpose Limitation
Purpose limitation means personal data are collected for specified purposes and not reused incompatibly.
Read full definitionPrivacy and Data Rights
Retention Period
A retention period is the defined time personal data are kept before deletion or anonymization.
Read full definitionPrivacy and Data Rights
Right of Access
The right of access lets a person obtain confirmation of processing and a copy of their personal data.
Read full definitionPrivacy and Data Rights
Right to Be Forgotten
The right to be forgotten is popular language for erasure or de-listing of personal data from search or processing.
Read full definitionPrivacy and Data Rights
Right to Correction
The right to correction lets a person have inaccurate personal data corrected.
Read full definitionPrivacy and Data Rights
Right to Deletion
The right to deletion lets a person request that an organization delete personal data in defined circumstances.
Read full definitionPrivacy and Data Rights
Right to Object
The right to object lets a person stop certain processing, including direct marketing and some legitimate-interest uses.
Read full definitionPrivacy and Data Rights
Right to Opt Out
A right to opt out lets a consumer direct a business to stop selling, sharing, or using personal data for targeted advertising as defined by law.
Read full definitionPrivacy and Data Rights
Right to Portability
The right to portability lets a person receive personal data in a structured, commonly used, machine-readable format and transmit it elsewhere.
Read full definitionPrivacy and Data Rights
Right to Restrict Processing
The right to restrict processing lets a person limit how an organization uses personal data in specific disputes or situations.
Read full definitionPrivacy and Data Rights
Sale of Personal Data
Sale of personal data is exchanging personal information for monetary or other valuable consideration, as defined by applicable law.
Read full definitionPrivacy and Data Rights
Sensitive Personal Data
Sensitive personal data is personal information that poses heightened risk if misused, often subject to stricter rules.
Read full definitionPrivacy and Data Rights
Sharing of Personal Data
Sharing of personal data is disclosing personal information to third parties, including for cross-context behavioral advertising under some US laws.
Read full definitionPrivacy and Data Rights
Special Category Data
Special category data is GDPR’s list of especially sensitive personal data types needing extra conditions to process.
Read full definitionPrivacy and Data Rights
Standard Contractual Clauses
Standard contractual clauses (SCCs) are pre-approved contract terms used to safeguard international personal-data transfers.
Read full definitionPrivacy and Data Rights
Storage Limitation
Storage limitation means personal data are kept in identifiable form no longer than needed for the purposes.
Read full definitionPrivacy and Data Rights
Targeted Advertising
Targeted advertising shows ads based on personal data about a person’s preferences or behavior over time.
Read full definitionPrivacy and Data Rights
Universal Opt-Out Mechanism
A universal opt-out mechanism is a single technical signal that communicates privacy opt-outs to many businesses at once.
Read full definition