The clause that turns privacy from a control problem into a design one. Data you never collected cannot leak, cannot be subpoenaed, and does not have to be found when someone asks for erasure.
More in Privacy
- AnonymizationIrreversibly stripping data of anything that could identify a person. Unlike pseudonymization, there is no key that brings the identity back.
- CCPACalifornia privacy law giving residents the right to know what is collected about them, to delete it, and to opt out of its sale.
- Consent managementRecording what each user agreed to and enforcing it at collection, so consent is a property of the pipeline rather than a banner.
- Data residencyThe requirement that data physically stays in a given jurisdiction. On Flex you pick the region; on Enterprise it is wherever you deploy.
- Data sovereigntyThe principle that data is subject to the laws of the country it sits in, and that you, not a vendor, decide which country that is.
- GDPREU regulation governing personal data, covering the lawful basis for collection, rights to access and erasure, and real consequences for ignoring both.