Necessity and Proportionality
A core legal test requiring that data processing goes no further than what is genuinely needed to achieve its purpose (Articles 5–6).
Personal Data
Any information relating to an identified or identifiable individual, such as names, email addresses, or IP addresses (Article 4(1)).
Privacy by Default
Ensuring privacy settings are configured to the highest level by default (Article 25).
Privacy by Design
Integrating data protection principles into the development of systems and processes from the beginning (Article 25).
Processing
Any operation performed on personal data, including collection, storage, alteration, and deletion (Article 4(2)).
Standard Contractual Clauses (SCCs)
Pre-approved legal agreements for GDPR-compliant data transfers outside the EU (Articles 46(2)(c), 46(5)).