
RS Glossary
Data Privacy / GDPR
Data privacy is the lawful, fair, transparent, and controlled handling of information about people. The GDPR — the European Union's General Data Protection Regulation — is the law that sets out specific rights for individuals and specific obligations for organizations that process personal data within its scope, including organizations based outside the EU that handle the data of people in it.
- Review state
- Reviewed in POC
- Freshness
- Current
- Version
- 3
- Data Privacy / GDPR
- Data Privacy and GDPR
- GDPR
- Data Privacy
Remember it this wayPersonal data carries duties through every AI handoff.
In plain language
AI systems may collect, receive, infer, store, transform, or expose personal information. Privacy work asks whether that processing has a valid purpose and basis, uses appropriate limits and safeguards, and respects applicable rights.
Why it matters
Data can cross vendors, models, logs, retrieval stores, and outputs. Organizations need current legal and operational analysis before using personal data in an AI workflow.
Example
Before connecting customer records to an AI assistant, a company evaluates purpose, legal basis, minimization, access, retention, vendors, transfers, security, and individual rights.
Common misconception
Removing names does not automatically remove personal-data obligations, and GDPR is not the only privacy law that may apply.
Related terms
Sources
- European Union, General Data Protection Regulationofficial legal text governing personal-data processing in the European Union.
- NIST Privacy Frameworkrisk-based guidance for identifying and managing privacy risk.
Learn more
- Consult current official GDPR and applicable privacy-regulator guidance; begin operationally with [[sensitive-information|Sensitive Information]].
Public history
46 recorded events · 46 public summaries
A potential shared concept was discussed and selected for initial glossary drafting.
The captured candidate received a complete initial draft and entered section-level human review.
Radar reviewed the initial definition draft for human consideration.
Radar reviewed the initial plain-language-explanation draft for human consideration.
Radar reviewed the initial why-it-matters draft for human consideration.
Radar reviewed the initial example draft for human consideration.
Radar reviewed the initial common-misconception draft for human consideration.
Radar reviewed the initial remember-it-this-way draft for human consideration.
Radar reviewed the initial related-terms draft for human consideration.
Radar reviewed the initial sources draft for human consideration.
Radar reviewed the initial learn-more draft for human consideration.
A proposal was opened for section-level human review while preserving the current version.
A human reviewer opened a proposed revision while preserving the current approved or captured version.
definition approved by a human reviewer.
plain-language-explanation approved by a human reviewer.
why-it-matters approved by a human reviewer.
example approved by a human reviewer.
common-misconception approved by a human reviewer.
remember-it-this-way approved by a human reviewer.
related-terms approved by a human reviewer.
sources returned for revision.
learn-more approved by a human reviewer.
Requested wording was prepared without changing approved or existing sections.
Radar reviewed the pending sources section for human consideration.
Radar must rereview the complete data-privacy-and-gdpr term after an accepted text change.
Radar must rereview the complete data-privacy-and-gdpr term after an accepted text change.
Radar must rereview the complete data-privacy-and-gdpr term after an accepted text change.
Radar must rereview the complete data-privacy-and-gdpr term after an accepted text change.
Radar must rereview the complete data-privacy-and-gdpr term after an accepted text change.
Radar must rereview the complete data-privacy-and-gdpr term after an accepted text change.
Radar must rereview the complete data-privacy-and-gdpr term after an accepted text change.
Radar must rereview the complete data-privacy-and-gdpr term after an accepted text change.
Radar must rereview the complete data-privacy-and-gdpr term after an accepted text change.
sources approved by a human reviewer.
sources approved wording became the current section text.
All section gates are approved; content version 2 is now a fully approved term.
Radar rereviewed the human-approved definition wording for this exact version.
Radar rereviewed the human-approved plain-language-explanation wording for this exact version.
Radar rereviewed the human-approved why-it-matters wording for this exact version.
Radar rereviewed the human-approved example wording for this exact version.
Radar rereviewed the human-approved common-misconception wording for this exact version.
Radar rereviewed the human-approved remember-it-this-way wording for this exact version.
Radar rereviewed the human-approved related-terms wording for this exact version.
Radar rereviewed the human-approved sources wording for this exact version.
Radar rereviewed the human-approved learn-more wording for this exact version.
Definition review recorded as replace.
Source: vault/Glossary/terms/data-privacy-and-gdpr/term.md · sha256:dab3f3a616b79935d5908f59bcc8d2c8d07856d8a5cc1a3500674efabd899abd · Release: rs-glossary-glossary-team-poc-0.5.5-2026-09-02