Information Policy Glossary

The principle that organizations must be transparent and responsible for the outcomes of their automated decision-making systems.

The suppression or prohibition of speech, communication, or information deemed objectionable or harmful by a government or other authority.

The screening and removal of user-generated content by online platforms based on community standards or legal requirements.

A form of intellectual property protection granting creators exclusive rights over their original works for a limited period.

The practice of protecting information systems, networks, and data from unauthorized access, attacks, and damage.

An incident in which sensitive, protected, or confidential data is accessed, disclosed, or stolen by an unauthorized party.

The principle of collecting only the personal data that is strictly necessary for a specified purpose.

The concept that data is subject to the laws and governance of the country in which it is collected or stored.

The gap between populations with access to modern information and communication technologies and those without.

Technologies used by publishers and copyright holders to control the use and distribution of digital content.

The use of digital technologies by government agencies to deliver services, disseminate information, and engage with citizens.

The process of converting information into a code to prevent unauthorized access, a key technology in data security and privacy.

A legal doctrine permitting limited use of copyrighted material without permission for purposes such as criticism, education, and research.

U.S. federal law establishing the public's right to request access to records from any federal agency.

EU regulation providing comprehensive data protection rights to individuals and imposing obligations on organizations that process personal data.

A situation where one party in a transaction possesses more or better information than the other party.

Legal protections for creations of the mind, including copyrights, patents, trademarks, and trade secrets.

The principle that internet service providers should treat all internet traffic equally without discrimination.

Data made freely available for public use in machine-readable formats, typically by government or institutional sources.

Any data that could be used to identify a specific individual, such as name, address, Social Security number, or biometric data.

An approach to systems engineering that embeds privacy protections into the design of technologies and business practices from the outset.

Documents or information created or maintained by government agencies that are generally accessible to the public.

The right under GDPR for individuals to have their personal data deleted under certain conditions, also known as the right to be forgotten.

Provision of the U.S. Communications Decency Act that shields online platforms from liability for user-generated content.

The monitoring of behavior, communications, or activities by government agencies or organizations, often for security purposes.