About this glossary
Our data protection policy contains many terms related to data protection and regulation. This glossary attempts to collect all of these terms and their definitions in one convenient page.
Where possible, we adopt UK ICO's terms, but we may occasionally refer to a term as it is defined in the EU GDPR, or in other jurisdiction-specific policies as needed.
Rather than repeating the definitions of these terms here in the policy, we link to their third party definitions. Please inform the DPO if any of the links no longer work.
Definitions
Adequacy regulation
https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/international-transfers-after-uk-exit/#adequacy
Appropriate safeguards
https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/international-transfers-after-uk-exit/#appropriate
Consent
https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/consent/
Contract basis
https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/lawful-basis-for-processing/contract/
Cookies
https://ico.org.uk/for-organisations/guide-to-pecr/cookies-and-similar-technologies/
Note that the above definition is simply the UK ICO definition of cookie. We apply our own, more stringent definition; see our cookie policy for details.
Data controller
https://ico.org.uk/for-organisations/data-protection-fee/legal-definitions-fees/#controller
For more details, see:
https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/key-definitions/controllers-and-processors/
Data processing
https://ico.org.uk/for-organisations/data-protection-fee/legal-definitions-fees/#processing
Data processing agreement
UK ICO refer to this as a *contract*, but in practice, this is nearly always presented as a *data processing agreement* (
DPA), it is deemed by the processor to be in effect as part of their terms of service, and cannot be negotiated, changed, or signed by the counterparty (i.e., Hackworth Ltd).
https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/accountability-and-governance/contracts/
Data processor
https://ico.org.uk/for-organisations/data-protection-fee/legal-definitions-fees/#processor
For more details, see:
https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/key-definitions/controllers-and-processors/
Data protection officer
https://ico.org.uk/for-organisations/data-protection-fee/legal-definitions-fees/#officer
Often abbreviated as DPO. For more details, see:
https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/accountability-and-governance/data-protection-officers/
Data subject
https://ico.org.uk/for-organisations/data-protection-fee/legal-definitions-fees/#subject
Also referred to in this policy as person, natural person, or individual.
"Identified"
https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/what-is-personal-data/what-are-identifiers-and-related-factors/
Lawful basis
https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/lawful-basis-for-processing/
Legal obligation
https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/lawful-basis-for-processing/legal-obligation/
Legitimate interest
https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/legitimate-interests/
Personal data
https://ico.org.uk/for-organisations/data-protection-fee/legal-definitions-fees/#data
Also referred to in this policy as personal information or personally identifying information (PII).
For more details, see:
https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/what-is-personal-data/what-is-personal-data/
"Relates to"
https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/what-is-personal-data/what-is-the-meaning-of-relates-to/
Restricted transfer
https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/international-transfers-after-uk-exit/#arewemaking