Cheat sheet: Personal data with no plan
The 34 terms of this lesson, part by part, with the French word a team in France would use.
1. Personal data is more than a name
- Personal datadonnées personnelles
- any information about a person who can be identified, such as a name or an email address.
- GDPRRGPD
- the European law on personal data, which applies as soon as a site collects a name or an email.
- IP addressadresse IP
- the numeric address that computers on the internet use to find and reach each other.
- Special categoriesdonnées sensibles
- kinds of personal data with stricter rules under GDPR, such as health, religion, political opinions and sexual orientation.
- Anonymiseanonymiser
- to change data so that nobody can find the person again, even with other data; removing the names is not enough.
2. Every field needs a reason
- Data minimisationminimisation des données
- the GDPR rule that a form or a tool collects only the data that its purpose needs.
- Purposefinalité
- the reason an organisation collects personal data, such as confirming a booking, which limits what it may collect.
- Form fieldchamp de formulaire
- a box on a page where a visitor types or chooses something, such as a name or an amount.
- CNILCNIL
- the French authority for personal data, which receives reports of breaches and can fine organisations.
- Duty to advisedevoir de conseil
- the duty of a French professional, such as a freelancer or an agency, to warn the client about risks.
3. Four decisions before the form goes live
- Purposefinalité
- the reason an organisation collects personal data, such as confirming a booking, which limits what it may collect.
- Retention perioddurée de conservation
- how long personal data is kept before it is deleted or anonymised, decided before collecting it.
- Privacy noticemention d'information
- a short text next to a form that says what is collected, why, for how long and whom to contact.
- Right of accessdroit d'accès
- a person's right to ask an organisation what personal data it holds about them, and to get a copy.
- Right to erasuredroit à l'effacement
- a person's right to ask an organisation to delete their personal data.
- CNILCNIL
- the French authority for personal data, which receives reports of breaches and can fine organisations.
4. Where the data goes
- Data processing agreementcontrat de sous-traitance, DPA
- a contract that says what a provider may do with the personal data it receives for you, and how it protects it.
- Consentconsentement
- a person's free and clear agreement to one use of their data, which they can withdraw at any time.
- Consent bannerbandeau de consentement, bandeau cookies
- the box that asks visitors to accept or refuse cookies and trackers when they arrive on a site.
- Trackertraceur, tracker
- a script that records what visitors do on a site, often to show them targeted ads.
- Free planoffre gratuite
- a free level of an online service, with limits on how much you can use it.
- Modelmodèle
- the AI inside an agent that reads text and writes a reply, such as Gemini or Claude.
5. Kept forever, seen by everyone
- Retention perioddurée de conservation
- how long personal data is kept before it is deleted or anonymised, decided before collecting it.
- Anonymiseanonymiser
- to change data so that nobody can find the person again, even with other data; removing the names is not enough.
- Access rulesdroits d'accès
- rules that decide who can see or change each piece of data, such as each client seeing only their own files.
- Rolerôle
- a set of permissions in a service, such as viewer, editor or admin, given to each account.
- Personal data breachviolation de données personnelles
- a leak, loss or change of personal data, which may have to be reported to the CNIL within 72 hours.
6. What to ask
- Data minimisationminimisation des données
- the GDPR rule that a form or a tool collects only the data that its purpose needs.
- Retention perioddurée de conservation
- how long personal data is kept before it is deleted or anonymised, decided before collecting it.
- Privacy noticemention d'information
- a short text next to a form that says what is collected, why, for how long and whom to contact.
- Data processing agreementcontrat de sous-traitance, DPA
- a contract that says what a provider may do with the personal data it receives for you, and how it protects it.
- DPOdélégué à la protection des données, DPO
- the person in an organisation in charge of GDPR, who must hear about new uses of personal data.
- Consent bannerbandeau de consentement, bandeau cookies
- the box that asks visitors to accept or refuse cookies and trackers when they arrive on a site.
- Analyticsmesure d'audience, analytics
- an outside service that counts visits and records what visitors do on a site, such as Google Analytics.
Web Technologies · Risk smells · wt.thomasjuldo.com/course/risk-smells/personal-data-with-no-plan