Glossary
Short definitions for privacy, risk, and compliance terms used across Core GRC.
Glossary for South Africa (1 item)
Sub-processor
A company a processor engages to carry out part of the processing it performs for a controller.
JamesRecord of processing activities (ROPA)
A written inventory of how an organisation processes personal data, required by GDPR Article 30.
JamesOpt-out preference signal (GPC)
A browser setting, such as Global Privacy Control, that tells websites a user has opted out of the sale or sharing of their personal information.
JamesData subject access request (DSAR)
A request from an individual to see the personal information an organisation holds about them and how it is used.
JamesData protection impact assessment (DPIA)
A documented review of planned processing that identifies risks to individuals and how to reduce them, required by GDPR Article 35 for high-risk processing.
James
Ready to run risk and privacy in one place?
See the modules that match your program in a short demo. Start with one, add more when you need them.