Often confused with sovereignty. Residency is about geography; sovereignty is about jurisdiction and who can compel access. A vendor can offer a region while remaining subject to laws that reach into it.
More in Privacy
- AnonymizationIrreversibly stripping data of anything that could identify a person. Unlike pseudonymization, there is no key that brings the identity back.
- CCPACalifornia privacy law giving residents the right to know what is collected about them, to delete it, and to opt out of its sale.
- Consent managementRecording what each user agreed to and enforcing it at collection, so consent is a property of the pipeline rather than a banner.
- Data minimizationCollecting only what a stated purpose needs. The cheapest way to reduce risk is not to hold the data at all.
- Data sovereigntyThe principle that data is subject to the laws of the country it sits in, and that you, not a vendor, decide which country that is.
- GDPREU regulation governing personal data, covering the lawful basis for collection, rights to access and erasure, and real consequences for ignoring both.