Definition: Process of turning data into a form that does not identify individuals and where identification is not likely to take place. (The process is irreversible so the data is likely removed from...

Definition: Current, former, and prospective individual consumers contracted to receive products or services. Commentary:

Definition: Jurisdictions that were deemed to provide an adequate level of protection to personal data by the European Commission. These include Andorra, Argentina, Canada, Faeroe Islands, Guernsey, I...

Definition: A rule or set of rules that defines expected actions for achieving compliance with associated policies. Commentary: Standards are audited for compliance.

Definition: High level directive that expresses goals and represents management expectations for legal, regulatory and/or organizational requirements. Commentary: Policies are aligned to the principle...

Definition: A statement of belief or foundational concepts that provide guidance for decision making and behaviors. Commentary: Principles may originate from the organization, legal or regulatory sour...

Definition: Recommended best practices that: 1) Support implementation of a standard or interpretation of policy requirements; or 2) address areas not covered by existing policy documents Commentary: ...