Snapshot 46970
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Skip to main content The speed of AI adoption is exposing the next governance gap Download the report On-demand webinar coming soon... On-demand webinar coming soon... On-demand webinar coming soon... Glossary of AI Governance, Privacy & Data Risk Terms Understand the terms that power modern privacy, risk, and AI programs—and how they connect across your governance ecosystem. A B C D E F G H I J K L M N O P Q R S T U V W X Y Z A Agent Governance Agent governance defines policies, controls, and oversight to manage autonomous AI agents across design, deployment, operation, and continuous decision‑making. Learn More AI Accountability AI accountability refers to the frameworks, processes, and controls that ensure organizations developing or deploying artificial intelligence systems are responsible for their outcomes, impacts, and compliance with legal and ethical standards. Learn More AI Act High-Risk Systems AI Act high‑risk systems are artificial intelligence systems classified as high risk under Article 6 of the European Union Artificial Intelligence Act (EU AI Act) because of their potential impact on individuals’ fundamental rights, safety, or access to essential services. Learn More AI Compliance AI compliance ensures artificial intelligence systems meet legal, ethical, and organizational requirements for transparency, accountability, risk management, and responsible use. Learn More AI Conformity Assessment An AI conformity assessment is a regulatory process that evaluates whether an AI system meets legal, technical, and ethical requirements under applicable frameworks. Learn More AI DPIA An AI DPIA is a data protection impact assessment designed to evaluate risks, compliance, and safeguards when deploying artificial intelligence systems. Learn More AI Explainability AI explainability is the ability to make artificial intelligence system decisions understandable, transparent, and interpretable for stakeholders, regulators, and end users. Learn More AI Fairness AI fairness refers to the principle of developing and deploying artificial intelligence systems that make unbiased, equitable decisions across individuals and demographic groups. Learn More AI Governance AI governance is the policies, processes, and controls to manage AI risk, performance, and compliance across the AI lifecycle, enabling trustworthy, auditable systems. Learn More AI Impact Assessment (AIIA) An AI Impact Assessment (AIIA) evaluates the potential risks, benefits, and compliance implications of artificial intelligence systems before and during deployment. Learn More AI Lifecycle Management AI lifecycle management is the process of governing, monitoring, and optimizing artificial intelligence systems from development to decommissioning to ensure transparency, compliance, and ethical use. Learn More AI Model Drift AI model drift occurs when an artificial intelligence model’s performance declines over time because of changes in data, environment, or user behavior. Learn More AI Model Inventory An AI model inventory tracks all artificial intelligence models within an organization to ensure governance, compliance, and transparency. Learn More AI Risk Management AI risk management is the process of identifying, assessing, and mitigating risks throughout the lifecycle of artificial intelligence systems to ensure safe and compliant use. Learn More AI Safety AI safety refers to the practices and safeguards that ensure artificial intelligence systems operate reliably, ethically, and without causing harm to individuals or society. Learn More Algorithmic Bias Algorithmic bias occurs when an artificial intelligence or automated system produces unfair, inaccurate, or discriminatory outcomes due to skewed data or flawed model design. Learn More APAC - APRA APRA is Australia’s prudential regulator overseeing banks, insurers, and superannuation to promote financial safety, stability, and regulatory compliance. Learn More Australian Privacy Act The Australian Privacy Act is a national law that regulates how organizations handle personal information, ensuring transparency, accountability, and individual privacy rights across Australia. Learn More Australian Privacy Principles (APPs) Australian Privacy Principles (APPs) are Australia’s core privacy requirements governing how organizations collect, use, disclose, secure, and provide access to personal information. Learn More B Bias Detection Bias detection is the process of identifying and measuring unfair patterns or discrimination within artificial intelligence models, datasets, or automated decision-making systems. Learn More C CCPA (California Consumer Privacy Act) The California Consumer Privacy Act (CCPA) grants California residents rights over their personal data, requiring transparency and control from organizations processing that data. Learn More Chile's Data Protection Law Chile's data protection law governs how organizations collect, process, share, and store personal data. It gives individuals rights over their information and sets legal obligations for every organization that handles it. Learn More CMP (Consent Management Platform) A Consent Management Platform (CMP) helps organizations collect, manage, and document user consent for cookies, data processing, and personalized advertising in compliance with privacy laws. Learn More Cookie Consent Cookie consent is the process of obtaining user permission to store or access cookies and similar tracking technologies on their devices in compliance with privacy laws. Learn More CPRA (California Privacy Rights Act) The California Privacy Rights Act (CPRA) expands and strengthens the California Consumer Privacy Act (CCPA), enhancing consumer rights, defining sensitive data, and establishing California’s dedicated privacy regulator. Learn More Customer Data Rights Customer data rights refer to the legal entitlements individuals have to access, correct, delete, or control how organizations collect and use their personal data. Learn More D Data Classification Data classification is the process of organizing data into categories based on sensitivity, confidentiality, and regulatory requirements to improve security and compliance. Learn More Data Discovery Data discovery is the process of identifying, cataloging, and understanding data across an organization’s systems to support governance, privacy, and compliance initiatives. Learn More Data Ethics Data ethics refers to the principles and practices that ensure data is collected, managed, and used responsibly, fairly, and transparently. Learn More Data Lineage Data lineage is the process of tracking the origin, movement, and transformation of data across systems to ensure transparency, accuracy, and compliance. Learn More Data Mapping Data mapping is the process of identifying and connecting data flows between systems to understand how personal information is collected, shared, and stored. Learn More Data Minimization Data minimization is the principle of collecting and processing only the personal data necessary for a specific, lawful, and clearly defined purpose. Learn More Data Privacy Data privacy refers to the responsible collection, use, and management of personal data to protect individuals’ rights and comply with legal and ethical standards. Learn More Data Retention Policy A data retention policy defines how long an organization stores different categories of data and outlines when and how that data should be deleted or anonymized. Learn More Digital Personal Data Protection Act (DPDPA) The Digital Personal Data Protection Act (DPDPA) is India’s comprehensive data protection law governing how organizations collect, process, and protect personal data while ensuring individuals’ privacy rights. Learn More DORA (Digital Operational Resilience Act) The Digital Operational Resilience Act (DORA) is an EU regulation ensuring financial entities can withstand, respond to, and recover from ICT-related disruptions and cyber threats. Learn More DORA Regulation (Digital Operational Resilience Act) The DORA Regulation establishes a unified EU framework to strengthen the digital operational resilience of financial entities against information and communication technology (ICT) disruptions. Learn More DPIA (Data Protection Impact Assessment) A Data Protection Impact Assessment (DPIA) identifies, evaluates, and mitigates privacy risks associated with personal data processing to ensure compliance with global data protection laws. Learn More DSAR (Data Subject Access Request) A Data Subject Access Request (DSAR) allows individuals to request access to personal data an organization holds about them, as required under privacy laws. Learn More E Enterprise Risk Management (ERM) Enterprise Risk Management (ERM) is a structured approach for identifying, assessing, and managing organizational risks across financial, operational, strategic, and compliance functions. Learn More EU AI Act The EU Artificial Intelligence Act (EU AI Act) is the European Union’s comprehensive regulatory framework designed to ensure that artificial intelligence systems are developed and used in a safe, transparent, and trustworthy way. Learn More F Foundation Models Foundation models are large-scale AI models trained on massive datasets that can be adapted to perform a wide range of downstream tasks across industries. Learn More G General Data Protection Regulation (GDPR) The General Data Protection Regulation (GDPR) is the European Union’s comprehensive privacy law that governs how organizations collect, use, and protect personal data of individuals within the EU. Learn More GRC Governance, Risk, and Compliance (GRC) is an integrated framework for aligning business objectives, managing organizational risks, and ensuring adherence to legal, ethical, and regulatory obligations. Learn More Guardian Agents Guardian agents are autonomous AI systems that enforce continuous AI governance at runtime by monitoring, constraining, and intervening in real time across agent behaviors. Learn More I Incident Response Plan An incident response plan is a documented strategy outlining the processes, roles, and procedures an organization follows to detect, contain, and recover from cybersecurity or data incidents. Learn More India Digital Personal Data Protection Act (DPDPA) The Digital Personal Data Protection Act (DPDPA) is India’s comprehensive data protection law that governs how organizations collect, process, and protect personal data of individuals within India. Learn More Indonesia Personal Data Protection Law The Indonesia Personal Data Protection Law (PDP Law / PDPA) is a national privacy law governing how organizations lawfully process personal data of individuals in Indonesia. Learn More M Malaysia Personal Data Protection Act (PDPA) Malaysia Personal Data Protection Act (PDPA) is a data protection law governing how organizations collect, use, disclose, and secure personal data. Learn More Model Risk Management (MRM) Model risk management (MRM) is the process of identifying, monitoring, and mitigating risks that arise from the design, implementation, and use of models in decision-making. Learn More N NIS2 Directive The NIS2 Directive is the European Union’s cybersecurity law that strengthens security and incident reporting requirements for essential and important entities across critical sectors. Learn More NIST AI Risk Management Framework (AI RMF) NIST AI RMF is a voluntary framework that helps organizations govern, map, measure and manage risks across the AI lifecycle. Learn More P Philippines Data Privacy Act (DPA) The Philippines Data Privacy Act (DPA) established under Republic Act 10173, outlines rules for lawful personal data processing, accountability, security safeguards, and individual rights. Learn More Privacy-Enhancing Technologies (PETs) Privacy-enhancing technologies (PETs) are tools and methods that protect personal data by reducing exposure, enabling secure computation, and supporting regulatory compliance. Learn More R Responsible AI Responsible AI refers to the development and deployment of artificial intelligence systems that are ethical, transparent, accountable, and aligned with legal, social, and human values. Learn More Risk Register A risk register is a centralized document or system used to identify, assess, and track risks that could impact an organization’s objectives, operations, or compliance posture. Learn More S Singapore Personal Data Protection Act (PDPA) The Singapore Personal Data Protection Act (PDPA) is Singapore’s comprehensive data protection law that sets out obligations for organizations on the collection, use, disclosure, and management of personal data. Learn More South Korea AI Basic Act South Korea AI Basic Act is South Korea’s comprehensive AI regulation establishing transparency, safety, and risk management requirements for high‑impact and generative AI. Learn More T Tech Risk Management Tech risk management is the process of identifying, assessing, and mitigating risks associated with an organization’s technology infrastructure, systems, and digital operations to ensure security, compliance, and resilience. Learn More Thailand Personal Data Protection Act Thailand Personal Data Protection Act (PDPA) is Thailand’s primary data protection law governing how organizations collect, use, disclose, and safeguard personal data. Learn More Third-Party Risk Management (TPRM) Third-party risk management (TPRM) is the process of identifying, assessing, and mitigating risks that arise from vendors, suppliers, and external partners who access or process organizational data. Learn More Trustworthy AI Trustworthy AI refers to artificial intelligence systems designed, developed, and deployed in ways that are transparent, reliable, ethical, and compliant with applicable regulations and human values. Learn More V Vendor Risk Assessment A vendor risk assessment is the process of evaluating third-party vendors to identify, measure, and manage potential risks that could affect an organization’s security, compliance, or business continuity. Learn More