6 terms
A data controller is the person or organization that decides why and how personal data is processed and carries primary legal responsibility for it.
Data minimization is the privacy principle that personal data must be adequate, relevant and limited to what is necessary for a clearly defined purpose.
Data privacy is the right and practice of controlling how personal information is collected, used, shared and kept, and the rules that protect it.
A data processor is an organization that processes personal data on behalf of a data controller, following its documented instructions, not its own goals.
Personal data is any information relating to an identified or identifiable natural person, the central concept that triggers data protection obligations.
PII, personally identifiable information, is any data that can identify a specific person on its own or when linked with other available information.