Concept / Term · Foundational

GDPR / Data Protection

UK GDPR and the Data Protection Act

What does GDPR / Data Protection mean?

The rules on handling personal data: what you may collect, why, how long you keep it and what rights people have over it. Non-compliance carries real financial penalties.

Category: Security & Access
Maturity: Foundational
Last reviewed: 2026-08-30

Keep exploring

API KeyA secret code that identifies and authorises your app when it calls an API. It should be kept private, like a password.
OAuthThe standard that lets an app access your data on another service without seeing your password. It is the foundation of 'Sign in with Google' and similar sign-in buttons.
SSOLogging in once to gain access to many connected apps without re-entering your details.
MFA / 2FARequiring a second proof of identity beyond the password, usually a code from a phone or an authenticator app.
Encryption at rest / in transitAt rest means stored data is encrypted on disk; in transit means it is encrypted while moving across the network. Buyers and auditors will ask about both.
Pen TestAn authorised simulated attack on your system by security specialists, to find weaknesses before someone else does. Often required before an enterprise contract.
Vulnerability / CVEA known security weakness. CVE is the public catalogue that gives each one a reference number so everyone can track it.
Zero TrustA security model that treats every request as untrusted regardless of where it comes from, rather than assuming anything inside the network is safe.

← View all 18 Security & Access terms