A data controller is the person or organization that decides why and how personal data is processed and carries primary legal responsibility…
Data masking replaces sensitive values with realistic but fictitious or obscured ones so data can be used for testing, support or analytics…
Data minimization is the privacy principle that personal data must be adequate, relevant and limited to what is necessary for a clearly…
Data privacy is the right and practice of controlling how personal information is collected, used, shared and kept, and the rules that…
A data processor is an organization that processes personal data on behalf of a data controller, following its documented instructions, not its…
A data protection officer is the independent expert role under the GDPR that advises an organization on data protection and monitors its…
Decentralized identity is a digital identity model in which people hold their own credentials and prove claims without a central identity provider.
Device fingerprinting is a tracking technique that identifies a browser or device by combining many configuration attributes instead of storing a cookie.
Differential privacy is a mathematical guarantee that limits how much any single person's data can change the published output of an analysis…
A DPA, or data processing agreement, is the contract that governs how a SaaS vendor processes personal data on behalf of its…
A DPIA, or data protection impact assessment, is the GDPR process for assessing and reducing high privacy risks of planned personal data…
A DSAR, or data subject access request, is a person's formal request to learn what personal data an organization holds about them…