Glossary

Accountability principle Accuracy Adequacy decision Anonymisation Anonymous data Assessment on TISAX® Availability

BCRs (Binding Corporate Rules) Biometric data Business Continuity Management

Collection of personal data Compliance Confidentiality Consent Continuous improvement Control Cookies Critical Infrastructure (CI) Cross-border data transfers

Data breach Data concerning Health Data Controller Data minimisation Data processing agreement (DPA) Data Processor Data protection (definition) Data Protection Act (DPA) Data protection audit Data protection concept Data protection declaration Data protection impact assessment Data protection incident Data protection inventory Data protection law Data protection management Data Protection Officer (DPO) Data protection principles Data security Data security measures Data source Data Space Data subject Data transmission (external) Digital Service Providers (DSPs) Direct advertising

EDPB Encryption

Fair and Transparent Processing File system

Genetic Data

Information asset Information Commissioner’s Office (ICO) Information Security Information security controls Information Security Management System (ISMS) Information security policy Integrity Integrity and confidentiality (security) International transfers safeguard ISO 27001 ISO 27001 audit

Joint controllers

Lawfulness, fairness and transparency Legitimate interest

NIS2 Non-essential cookies Notification of the data subject of a personal data breach

Opt-in Opt-out Order processing agreement (AVV)

PDCA cycle Penetration Testing Privacy Policy Privacy shield Privacy-by-default Profiling Pseudonymisation Purpose limitation

Recipient Recital Record of Processing Activities (ROPA) Representative Resilience Restriction of processing Retention obligation Retention Periods Right of access Right of rectification Right to data portability Right to erasure Right to information Right to object Right to rectification Right to restrict processing Rights related to automated decision making including profiling Risk Risk assessment Risk management Risk management plan Risk mitigation

Security Incidents Sensitive Data Special categories of personal data Standard Contractual clauses Storage limitation Storage Limitation Principle Strictly Necessary Cookies Subject access requests Supervisory authority

Technical and organisational measures Territorial Scope Third country Third party Third party cookies Threat TISAX® TISAX® assessment level 1 TISAX® assessment level 2 TISAX® assessment level 3 TISAX® label Transparency

UK-GDPR

Vulnerability Vulnerability management

Whistleblowing Whistleblowing Directive Withdrawal of consent