Glossary

Below is a list of terms and definitions used in this documentation.

A

• Access request: see subject access request.
• Action: an activity performed which is managed and controlled through the action workflow. Actions, for example, may be corrective, improvements or risk mitigation activity.

D

• Data sources: a set of information that can be used to populate a field of Privacy-Now®. The content of data sources can be customized (see Data Sources).

P

• PIA: see privacy impact assessment.
• Privacy impact assessment: is a process which assists organizations in identifying and minimizing the privacy risks of new processing activities.

S

• SAR: abbreviation for subject access request.
• Subject Access request: individuals (e.g. employees) have a right to be informed by an organisation (e.g. their employer) whether or not it is processing personal data that relates to them and, if so, to be told for example: what personal data it is being processed; the purposes for which the personal data is being processed; who, if anyone, the personal data is disclosed to; the extent to which it is using the personal data for the purpose of making automated decisions relating to the data subject and, if so, what logic is being used for that purpose, etc. Organizations are required to respond to an SAR by providing, in an intelligible form, copies of the personal data and any information about the sources of the data. There may be time limit to respond to the request.