Glossary of Compliance

Compliance Glossary

Our list of curated compliance glossary offers everything you to know about compliance in one place.

Glossary » GDPR » Third Party

Third Party

The GDPR defines a Third Party as any entity excluding the data controller, data subject, or processor who, under authorization of the processor or controller, is allowed to receive and process personal data. A third party is not a processor that works on behalf of the data controller. They are not restricted by the controller. Instead, they are allowed to receive and process data any way they deem fit. An example of a third-party under the GDPR is a social media plugin that is authorized by the data subject to collect data and process it appropriately.

Additional reading

The Ultimate PCI DSS Compliance Checklist-1

PCI DSS Audit: A Complete Guide + Downloadable Checklist

Willie Sutton, the infamous twentieth-century U.S. criminal, was allegedly known to rob banks because “that’s where the money is.” In this digital age, organizations are exposed to financial fraud due to their lax security- leaving sensitive consumer data stolen and misused.  To protect against this, PCI DSS (Payment Card Industry Data Security Standard) was set…
ISO 27001 Information Security Policy Templates (What Does it Contain)

What is ISO 27001 Policy Template? How to Create one

The ISO 27001 policy provides a comprehensive framework to establish and maintain an information security management system. To demonstrate your commitment to information security to stakeholders, having a defined ISO 27001 template is highly significant. The ISO 27001 policy templates are an effective resource that helps organizations manage risks and establish an effective information security…

Sprinto: Your growth superpower

Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.