Glossary of Compliance

Compliance Glossary

Our list of curated compliance glossary offers everything you to know about compliance in one place.

Glossary » GDPR » Automated Individual Decision

Automated Individual Decision

An automated individual decision is a decision that is a direct result of the automated processing of a data subject’s personal information. Article 22 of the GDPR allows individuals the right to object to such decisions. There are three exceptions to this rule: 

– These decisions are essential for the entry or execution of a contract between the data subject and controller
– These decisions are authorized by a Union or Member State law which applies to the controller and has measures in place to protect the rights of the data subject
– These decisions are based on the explicit consent of the data subject

Additional reading

Risk assessment tools

Best Risk Assessment Tools for Managing Cyber Risk

Risk assessment is an activity that helps organizations strengthen their security posture. A well-rounded risk assessment process will help you identify potential risks to your compliance, evaluate risk severity, and minimize their impact on business operations and continuity.  It will require more than assessing risk to streamline your security-strengthening process; your organization must also deploy…
nis2 guidelines

NIS2 Guidelines Broken Down: Non-Negotiable for EU

The risk of large-scale disruptions and data breaches has skyrocketed, exposing vulnerabilities in systems essential to our everyday lives. The NIS2 directive aims to strengthen cybersecurity frameworks and ensure organizations are better prepared to tackle these threats head-on. The Network and Information Systems (NIS) 2 Directive isn’t just another boring compliance checklist. It introduces significant…
pyramid with influence of change management in GRC

Regulatory Change Management For GRC Leaders 

Imagine this: You’re a 500-person company with ten departments, rolling out GDPR protocols since you’re expanding in the EU. A support employee working on a customer ticket downloads a file with personal data to get a “quick, unofficial second opinion.” Seems innocent enough, right? But in the GRC world, that’s a major red flag. So…

Sprinto: Your growth superpower

Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.