Consent Artefact
OPERATIONAL / EDITORIAL TERMA verifiable digital record of the consent provided by a Data Principal.
Data Controller
OPERATIONAL / EDITORIAL TERMA GDPR term equivalent in concept to a Data Fiduciary in the DPDP Act.
Data Flow Map
OPERATIONAL / EDITORIAL TERMA visual or tabular representation of how personal data moves through an organizationΓÇÖs systems and to third parties.
Data Inventory
OPERATIONAL / EDITORIAL TERMA comprehensive record of the personal data an organization collects, processes, stores, and shares.
Data Minimisation
OPERATIONAL / EDITORIAL TERMThe practice of collecting only the personal data that is strictly necessary for a specified purpose.
Data Retention Schedule
OPERATIONAL / EDITORIAL TERMAn operational policy defining how long different categories of data are kept and when they are destroyed.
Data Subject
OPERATIONAL / EDITORIAL TERMA GDPR term often colloquially used to mean Data Principal, though not officially used in the DPDP Act.
Purpose Limitation
OPERATIONAL / EDITORIAL TERMThe principle that data should only be processed for the specific purpose for which consent was obtained.
Vendor Risk Assessment
OPERATIONAL / EDITORIAL TERMThe process of evaluating the privacy and security posture of third-party Data Processors.