Any information that can identify you, such as your name, email, or your computer's digital address.

Defining Personal Data

This is the official term for any person whose information is being collected or used by a company.

You are the Subject

A controller decides why to collect data, while a processor handles the technical work for them.

Controllers and Processors

Companies must have a valid legal reason to use your data and must treat you fairly while doing so.

Being Honest and Fair

Organizations must explain in plain language how they use your data so there are no hidden surprises.

The Need for Transparency

Companies can only collect data for a specific reason and cannot use it for something else later.

Collecting with a Purpose

Organizations are responsible for making sure the information they have about you is correct and up to date.

Keeping Information Accurate

Companies should not keep your personal information forever; they must delete it once it is no longer needed.

Setting Time Limits

This involves using technical tools like digital locks and codes to protect your information from hackers.

Keeping Your Data Secure

Organizations must be able to show proof that they are following all the privacy laws correctly.

Proving Rule Compliance

You must give permission in a way that is easy to understand, usually by clicking a clear 'I agree' button.

Giving Clear Consent

You have the right to ask any company for a copy of all the personal information they have about you.

Seeing Your Own Data

In many cases, you can ask a company to completely delete your information from their systems.

Right to be Forgotten

If a company has the wrong details about you, you have the right to ask them to fix those mistakes.

Fixing Your Information

You can request your data in a format that lets you easily move it from one service to another.

Moving Your Data

If your information is stolen or leaked, the company must tell the authorities and sometimes notify you quickly.

Handling Data Breaches

This means companies should think about your privacy from the first day they start building a new app.

Building Privacy In

Some organizations must hire a special officer whose only job is to make sure data is handled safely.

GDPR & Data Privacy Basics Concepts