GDPR – Key definitions A controller determines the purposes and means of processing personal data. “the controller shall be Data Controller responsible for, and be able to demonstrate, compliance with the principles.” A processor is responsible for processing personal data Data Processor on behalf of a controller Any information relating to an identifiable person who Personal Data can be directly or indirectly identified by reference to an identifier. Special categories of personal data including; Race and ethnicity Political, religious, or philosophical beliefs Sensitive Personal Data Health information Sexual orientation Genetic and biometric data (used for identification) The use of identifiers such as reference numbers to Pseudonymisation replace direct personal data A tool designed identify the most effective way to comply with data protection obligations. Including; A description of the processing operations Privacy Impact Assessments Purposes, (PIAs), Data Protection Necessity, Impact Assessments (DPIAs) Proportionality, Level of risk to individuals, Risk control. Automated processing of personal data for evaluation Profiling analysis or prediction What’s new guidance on GDPR available from the ICO on:
GDPR – Key definitions Data Controller A controller determines the purposes and means of processing personal data. “the controller shall be responsible for, and be able to demonstrate, compliance with the principles.” Data Processor A processor is responsible for processing personal data on behalf of a controller Personal Data Any information relating to an identifiable person who can be directly or indirectly identified by reference to an identifier. Sensitive Personal Data Special categories of personal data including; Race and ethnicity Political, religious, or philosophical beliefs Health information Sexual orientation Genetic and biometric data (used for identification) Pseudonymisation The use of identifiers such as reference numbers to replace direct personal data Privacy Impact Assessments (PIAs), Data Protection Impact Assessments (DPIAs) A tool designed identify the most effective way to comply with data protection obligations. Including; A description of the processing operations Purposes, Necessity, Proportionality, Level of risk to individuals, Risk control. Profiling Automated processing of personal data for evaluation analysis or prediction What’s new guidance on GDPR available from the ICO on:
GDPR+-+Key+definitions.docx