UK GDPR terms explained


Consent   consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
     
Controller   an individual or legal body who, alone or jointly with others, decides the purposes for and the means by which Personal Data is processed.  They are responsible for ensuring that the processing of Personal Data complies with the relevant requirements of the UK GDPR and the law governing privacy in general.
 
Processor   someone (other than an employee of the Controller) who processes Personal Data on behalf of the Controller.
   
Data Subjects   individuals about whom Personal Data is held.
   
Personal Data   any information (whether opinion or fact) relating to an identified or identifiable living person.  A person can be identified (directly or indirectly) in a number of ways, including from their name, an identification number, an IP address or by factors specific to their physical, physiological, genetic, mental, economic, cultural or social identity. In a pensions context, personal data includes members’ names, contact details, dates of birth, national insurance numbers, bank account and salary details.
   
Personal Data Breach   a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, Personal Data.
Processing   is broadly defined, covering almost anything that can be done with Personal Data, including collecting, recording, organising, structuring, storing, adapting, altering, retrieving, consulting, using, disclosing or destroying
   
Special categories of Personal Data   the UK GDPR’s term for sensitive personal data, it comprises Personal Data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, sex life or sexual orientation, as well as the Processing of genetic data and biometric data used for identification purposes.