What is 'personal data' or 'personally identifiable information' (PII)?

Any information that can identify a specific individual — including name, address, email, phone number, IP address, biometric data, and even browsing history when combined with other data Only government-issued ID numbers like Social Security numbers and passport numbers Information that you have personally chosen to make public on social media Data stored on your personal computer or phone that hasn't been shared online

What is the 'right to be forgotten' (right to erasure)?

A legal right in some countries (like the EU under GDPR) to request that companies delete personal data they hold about you under certain conditions The ability to delete your own social media posts and have them removed from search engines automatically A law that prevents websites from remembering your browsing history between visits The right to use incognito mode without websites tracking your activity

What does GDPR stand for and why is it important?

General Data Protection Regulation — a comprehensive EU law governing how companies collect, use, store, and protect personal data, with fines up to 4% of global revenue for violations Global Digital Privacy Rights — a United Nations treaty signed by 150 countries Government Data Protection Requirements — rules that governments must follow when storing citizen data General Defense Protocol for Regulation — cybersecurity standards for protecting regulated industries

What is 'data minimization' in privacy terms?

The principle that organizations should only collect and retain the minimum personal data necessary for their stated purpose — no more Compressing data to take up less storage space on servers Providing users with a way to reduce the amount of data they share voluntarily Limiting data collection to people under 18 years old

What is 'informed consent' in the context of data privacy?

Users genuinely understanding what data is collected, how it's used, and who it's shared with — then freely choosing to agree, without being tricked or forced Clicking 'I Agree' on any terms of service — that's consent by definition Being informed after data has been collected about how it was used A parent or guardian giving permission for a child under 18 to use a website

What is 'behavioral advertising'?

Targeting ads based on detailed profiles built from tracking your online behavior — what you search, browse, click, buy, and where you go — across many websites and apps Ads that try to change your behavior by showing you more of what you already like Advertising that targets people based on their job title or professional behavior Showing ads to people based on articles or videos they're currently viewing

What are 'tracking cookies' and how do they affect your privacy?

Small files placed by websites and ad networks in your browser that track your activity across different websites to build advertising profiles and analyze behavior Malware that hackers install in your browser to steal your passwords Browser files that remember your settings and preferences for websites you visit Files that websites use to verify your identity without requiring a password

What does it mean that 'if a service is free, you are the product'?

Free services often generate revenue by collecting and monetizing user data — your attention, behavior, and personal information are sold to advertisers and data brokers Free services are funded by government grants and don't collect user data Free services are only free temporarily — they'll eventually charge you Free services make money from premium upgrades, not from user data

What is a 'data broker'?

A company that collects personal data from many sources (public records, social media, purchases, app data) and sells detailed profiles to marketers, employers, insurers, and others A service that helps people recover their personal data after a breach An agent who negotiates data sharing agreements between large tech companies A government official who oversees how companies store and protect citizen data

What is 'metadata' and why does it matter for privacy?

Data about data — like when a photo was taken, where, on what device, or when an email was sent, to whom, and how long it is — which can reveal sensitive information even without the content Hidden information that hackers embed in files to track them across the internet The terms and conditions data that websites must display under privacy laws Data stored on Meta (Facebook) servers about your account activity