A plain-English privacy glossary

European Union law that governs how personal data of EU residents is collected, processed, and stored.

California consumer privacy law granting residents access, deletion, and opt-out rights for their personal information.

A clear, specific, freely given indication by a user that they agree to a defined data processing activity.

A vendor that handles personal data only on documented instructions from a controller, such as an analytics provider.

The entity that decides why and how personal data is processed. Usually the business that runs the website or app.

Data Processing Agreement. A contract between controller and processor that defines responsibilities and safeguards.

Data Protection Officer. A staff or contracted role that oversees privacy compliance and acts as a regulator contact.

A user-facing prompt that explains cookie use and captures consent or opt-out signals before non-essential cookies fire.

Personal Information (CCPA) or Personally Identifiable Information. Any information that identifies, relates to, or could be linked to a person.

Rights given to individuals over their personal data, such as access, deletion, rectification, and portability.