Definition: An identified or identifiable natural person – i.e., a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification nu...

Definition: Employees mean current, former and prospective staff including full or part-time workers, interim or casual workers, salaried workers, consultants, contractors or temporary workers whether...

Definition: A DPIA is an assessment of the impact of envisaged processing operations on the protection of personal data. Commentary: Under the GDPR, a DPIA must be carried out where a type of processi...

Definition: EU General Data Protection Regulation, or Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016. Commentary:

Definition: Contractual clauses approved by the European Commission, which can be included in controller-to-controller or controller-to-processor contracts in order to allow for the international tran...

Definition: Personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, data concerning health or sex life, sexual orientation, gen...

Definition: A natural or legal person, public authority, agency or another body that, alone or jointly with others, determines the purposes and means of the processing of personal data. Commentary:

Definition: Currently, Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, N...

Definition: An agreement between a service provider and a service consumer, minimally covering quality, availability, responsibilities. Commentary:

Definition: An interested participant (e.g., data producer, data consumer, supporting process) in the data ecosystem. Commentary: