PrivacyBuilt / Working reference
PrivacyBuilt
knowledge base.
From a question to a defensible decision. Global privacy and AI governance, organised for the work in front of you.
Search the libraryFind your next answer
278 results
A 90-Day Privacy Program for Startups
A phase-by-phase, 90-day plan with owners and outputs for building a real, working startup privacy program.
Access control
Granting each account only the access necessary for its role, and reviewing that access periodically. Over-permissioned collaboration platforms are the most common source of accidental internal exposure.
Accountability
The obligation not only to comply but to be able to demonstrate compliance through documentation, assessments, contracts, training records and evidence that controls operate.
Accuracy
Keeping personal data correct for its intended use, and correcting or erasing inaccurate data when required.
Adequacy decision
A determination by a competent authority that another jurisdiction provides an essentially equivalent level of data protection, allowing transfers to proceed without additional safeguards.
AI deployer
Under the EU AI Act, a party using an AI system under its authority, except personal non-professional use; role changes can create additional duties.
AI governance
The set of policies, roles, assessments and controls that determine how AI systems are selected, built, deployed, monitored and retired, and who is accountable for their outcomes.
AI impact assessment
A structured assessment of an AI use case covering purpose, data, affected individuals, accuracy, bias, transparency, oversight, security and fallback, carried out before deployment.
AI Incident Management Practitioner
Prepare for, detect, investigate and respond to AI attacks, misuse and harmful failures through practical exercises grounded in NIST IR 8621.
AI literacy
Knowledge and understanding enabling informed use of AI and awareness of its opportunities, risks and possible harms, tailored to roles and context.
AI Privacy and Data Readiness
Learn how to identify sensitive-data risks, assess AI tools, reduce unsafe data exposure and build practical AI-governance controls.
AI Privacy Risk Checklist
A pre-adoption AI checklist with priority, owner role and required evidence for every check, plus approval criteria and a worked example.
AI provider
Under the EU AI Act, a party developing or having an AI system or general-purpose AI model developed and placing it on the market or putting it into service under its name, subject to the Act’s definition.
AI risk register
Track harms to people, evidence, mitigations and owned residual-risk decisions.
AI risk register
A maintained record of AI risks, affected people, controls, residual risk, decisions, owners and review triggers.
AI system model card
Capture intended use, data boundaries, evaluations, limitations and accountable oversight.
AI tool register
A maintained list of AI systems in use, with owner, purpose, data categories, vendor, risk rating and review date. It is the AI equivalent of a processing record and the first thing an auditor asks for.
Algorithmic bias
Systematic disparity in AI outputs across groups, arising from training data, labelling, feature selection, deployment context or feedback loops. Relevant to both discrimination law and fairness under privacy law.
Anonymisation
Irreversibly altering data so an individual is no longer identifiable by any reasonably likely means. Genuinely anonymised data falls outside data protection law, which is why the threshold is high.
Anonymisation vs Pseudonymisation vs Redaction
These three techniques sit on a real risk spectrum, not a synonym list — pick the wrong one and you either lose data utility or leave people exposed.
Asia-Pacific Privacy Practitioner
Apply a practical regional privacy operating model across major Asia-Pacific frameworks without treating the region as one uniform legal system.
Assess a data-handling vendor
Turn a supplier questionnaire into evidence, risk decisions and follow-up actions.
Atlassian file-access advisory: patch affected collaboration and development platforms
A critical file-access vulnerability links collaboration-platform patching to sensitive-file discovery and incident assessment.
Attribute-based access control
An access model evaluating attributes of the subject, resource, action and environment against policy.
Audit trail
A chronological record of relevant actions supporting investigation and accountability; logs themselves need access and retention controls.
Australia — Privacy Act 1988 and the Australian Privacy Principles
Australia's federal privacy regime, structured around thirteen Australian Privacy Principles, applying to agencies and to organisations above a small-business threshold, with a mandatory notifiable data breach scheme.
Authentication
Verifying the identity of a user, service or device before access; authentication alone does not determine which actions are permitted.
Authorisation
Determining the actions and resources an authenticated or anonymous actor may access, based on a policy.
Automated decision-making
A decision taken about an individual by automated means without meaningful human involvement. Where it produces legal or similarly significant effects, most regimes require safeguards, transparency and often a route to human review.
Backup retention
How long recoverable copies persist and how deletion or hold requirements are applied when data is restored.