Compliance Glossary
134 technical terms from GDPR, EU AI Act, NIS2, HinSchG, AGG and Accessibility, briefly defined with statutory references and practical examples.
GDPR
37 terms in GDPR
Data Processor
Right of Access (Article 15 GDPR)
Automated decision-making (Article 22)
DPA (Data Processing Agreement)
BCR (Binding Corporate Rules)
Data Subject Rights (Overview)
CCPA vs. GDPR
Data Privacy Framework (DPF)
Data Minimisation
Personal Data Breach
Data Protection Officer (DPO)
Data Protection Officer — when required?
Privacy notice
Data Portability (Article 20)
Third Country
DPIA (Data Protection Impact Assessment)
DPIA Triggers
Consent (Articles 6 + 7 GDPR)
Consistency Mechanism (EDPB)
Prior Consultation (Article 36)
Loi Informatique et Libertés (FR)
Personal Data
Privacy by Design
Pseudonymisation
Accountability
Right to Erasure (Article 17 GDPR)
Schrems II
Special Categories of Personal Data (Article 9)
Storage Limitation
TIA (Transfer Impact Assessment)
TOM (Technical and Organisational Measures)
Controller
RoPA (Record of Processing Activities)
Certification under Article 42 GDPR
Purpose Limitation
Section 38 BDSG (DPO Requirement)
Article 37 GDPR — Obligation to Appoint a DPO
EU AI Act
30 terms in EU AI Act
AI Literacy (Article 4 EU AI Act)
Article 50 AI Act — Transparency Obligations
Provider (EU AI Act)
Annex II (AI Regulation)
Annex IV (Technical Documentation)
Deployer (EU AI Act)
CE Marking (EU AI Act)
Data Governance (Article 10 EU AI Act)
EU AI Office
EU Charter of Fundamental Rights
EU Model Register
FRIA (Fundamental Rights Impact Assessment)
GPAI (General Purpose AI)
GPAI Providers — Obligations 2026
High-impact / systemic risk (AI Regulation)
High-Risk AI (Annex III)
Human Oversight (Article 14 EU AI Act)
Putting into Service
Placing on the Market (AI Regulation)
AI System (Article 3 EU AI Act)
Conformity Assessment (Article 43 EU AI Act)
Logging Obligation (Article 12 EU AI Act)
Market Surveillance (AI Regulation)
Notified Body
Post-Market Monitoring (Article 72)
Real-World Testing (Article 60)
Sandbox (Article 57)
Technical Documentation (Annex IV)
Prohibited AI Practice (Article 5 EU AI Act)
Substantial Modification (AI Regulation)
NIS2
24 terms in NIS2
Asset Inventory
Backup Strategy
BCM (Business Continuity Management) NIS2
Threat Analysis
Near-Miss Incident
BSI reporting portal (24/72/30)
CSIRT (BSI)
Incident response plan
Incident Response (Article 23 NIS2)
ISAE 3402
ISMS (Information Security Management System)
ISO 27001 vs. TISAX
KRITIS
MFA (Multi-Factor Authentication)
NIS2 — securing the supply chain
NIS2UmsuCG
Patch Management
Significant Incident
Incident (NIS2)
Essential Entity (NIS2)
Important Entity (NIS2)
Zero Trust
Section 30 BSIG
Section 38 BSIG
HinSchG
11 terms in HinSchG
Anonymous Report (HinSchG)
Audit Obligation (HinSchG) — clarification
Proof of Expertise (Reporting Office)
Whistleblower
Internal Reporting Office (Section 12 HinSchG)
HinSchG — International Reporting Office
Group Reporting Office (hybrid)
HinSchG — Group Reporting Office
Prohibition of Reprisals (Section 36 HinSchG)
Investigation (HinSchG)
Confidentiality (HinSchG)
AGG
14 terms in AGG
AGG Employer Liability
Right of Access (Pay Transparency)
Harassment (Section 3(3) AGG)
Complaints Office (Section 13 AGG)
Direct Discrimination
Entgelttransparenzgesetz (German Pay Transparency Act)
EU Pay Transparency Directive 2023/970
EU Pay Transparency Directive (2023/970)
Women's Quota (Section 76 AktG / FüPoG II)
Joint Pay Assessment
Indirect Discrimination
Job Advertisement (AGG-compliant)
Section 12 AGG (Training Obligation)
§ 22 AGG (Reversal of the Burden of Proof)
Accessibility
17 terms in Accessibility
Accessibility statement
Alternative text (alt text)
BaFG (Austrian Accessibility Act)
BFSG (German Accessibility Strengthening Act)
BITV 2.0 (German Barrier-free Information Technology Ordinance)
Digital accessibility
Disproportionate burden
EN 301 549 (harmonised standard for ICT accessibility)
European Accessibility Act (Directive (EU) 2019/882)
Monitoring body (accessibility monitoring)
Office file formats
PDF/UA (ISO 14289)
Reading order
Tagged PDF (tag structure)
WCAG 2.1 (Web Content Accessibility Guidelines)
Web Accessibility Directive (Directive (EU) 2016/2102)
WZG (Austrian Web Accessibility Act)
Cross-cutting