GDPR and CCPA concepts, anonymization, consent, bias in data, data governance roles and responsible data use.
34 cards · basic cards · AI-written, checked twice. Edit anything.
- What is the General Data Protection Regulation (GDPR)?
Show answer
EU regulation establishing rules for data protection and privacy of individuals- What is the California Consumer Privacy Act (CCPA)?
Show answer
US state law giving California residents rights over their personal information- Define the GDPR right to access
Show answer
Individual's right to obtain confirmation of whether their data is being processed and receive a copy- What is the right to be forgotten under GDPR?
Show answer
Right allowing individuals to request erasure of their personal data under certain conditions- What must a data controller and processor establish between them?
Show answer
A data processing agreement (DPA) defining their respective responsibilities- Define personal data
Show answer
Information relating to an identified or identifiable natural person- Distinguish a data controller from a data processor
Show answer
Controller determines purposes and means of processing; processor processes data on controller's behalf- What is legitimate interest as a legal basis for processing?
Show answer
Legal basis allowing processing when neither consent nor contract applies, if interests are balanced against individual rights- What is the data minimization principle?
Show answer
Collect only data that is adequate, relevant and limited to what is necessary for the purpose- Define purpose limitation
Show answer
Principle that personal data collected for specified purposes cannot be repurposed without new legal basis- How must businesses provide an opt-out option under CCPA?
Show answer
Via a Do Not Sell My Personal Information link conspicuously displayed on the business website- What is the CCPA right to deletion?
Show answer
Consumers can request deletion of personal information collected from them, subject to legal exceptions- What is GDPR's data breach notification timeline?
Show answer
Organizations must notify affected individuals and supervisory authorities within 72 hours of discovering a breach- Define anonymization
Show answer
Irreversible process of removing personal identifiers so individuals cannot be identified- What is de-identification?
Show answer
Technique removing identifying information to dissociate data from individuals
FlashKeepers