The GDPR (General Data Protection Regulation) is the EU law governing how organisations collect, use, store and share personal data about people in the EU. It sets duties for businesses and gives individuals enforceable rights.
PCI DSS (Payment Card Industry Data Security Standard) is the security standard for organisations that store, process or transmit payment card data. It sets controls to protect cardholder information from theft and misuse.
A background check verifies facts about a job candidate, such as identity, work history, education and references, before or during hiring. Criminal or credit checks are included only where local law allows, and with the candidate's knowledge.
Data anonymization is transforming data so that individuals cannot reasonably be identified from it, even when it is combined with other available information. Teams use it to share health or customer records with researchers, or to build realistic test datasets, without exposing personal details.
Data privacy is the set of practices and controls governing how personal data is collected, used, shared, stored and deleted. It follows the law and what people were told.
A data processing agreement (DPA) is a contract with a supplier that handles personal data on your behalf. It sets out what the supplier may do with that data and how it must be protected.
Data residency is the requirement or decision to store and process data in a specific country or region. It is driven by law, regulation, contracts or customer expectations, and shapes how cloud and AI systems are deployed.
A clear proven process, that delivers
You've seen our ideas - now go deeper.
Discover more insights, guides, and engineering practice.