7 terms
A data protection officer is the independent expert role under the GDPR that advises an organization on data protection and monitors its compliance.
A DPA, or data processing agreement, is the contract that governs how a SaaS vendor processes personal data on behalf of its customer.
A DPIA, or data protection impact assessment, is the GDPR process for assessing and reducing high privacy risks of planned personal data processing.
The EU-U.S. Data Privacy Framework lets EU personal data flow to self-certified U.S. organizations under a 2023 GDPR adequacy decision without extra safeguards.
The GDPR is the European Union regulation that governs how organizations process personal data, setting principles, legal bases, rights and fines.
A legal basis under the GDPR is one of six lawful grounds that a controller must identify before processing personal data for a specific purpose.
Legitimate interest is the GDPR legal basis that allows processing needed for a genuine interest when a documented balancing test favors the controller.