Social and Professional Issues I - Privacy and Security Basics

Vocabulary practice flashcards covering fundamental concepts, legal rules, and ethical frameworks from Chapter III: Privacy and Security Basics.

General Data Protection Regulation (GDPR)

A European Union data protection ruling that took effect in 2018 to protect the personal data of all EU citizens, applying to any organization managing data of EU residents and anyone within the European Economic Area (EEA) free-trade zone.

Data Minimization

A GDPR rule requiring companies to collect only the minimum amount of data necessary for a specific purpose, such as only asking for an email address for a newsletter rather than a date of birth.

Right to be Forgotten (Article 17)

A GDPR provision allowing individuals to request that a company delete their personal data when it is no longer necessary for the original purpose.

Purpose Limitation

A GDPR rule mandating that data must be collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes.

Storage Limitation

A GDPR rule stating that personal data must be kept only for as long as necessary, requiring businesses to delete data after a specific retention period.

Data Breach Notification

A GDPR rule requiring organizations to notify the relevant supervisory authority within 72 hours of discovering a data breach, unless it is unlikely to risk people's rights.

Ethical Responsibility of Organizations

The obligation to operate in a fair, honest, and transparent manner, exceeding mere legal compliance to ensure all actions respect stakeholders, including employees, customers, investors, and the environment.

Privacy

Controlling how your personal data is collected and used, ensuring that personal information (PII) is handled properly with consent or legitimate reasons.

Confidentiality

A core security principle defined as ensuring data is only accessible to authorized individuals.

Personal Data Protection

Safeguarding an individual's personal information from unauthorized access, collection, or misuse, ensuring privacy while allowing data flow.