Start here
Data Privacy Basics for IT Staff
A plain-language introduction to the privacy ideas that shape everyday IT work, from purpose and access to retention, vendors and handling mistakes.
Running IT
Privacy and Data Protection
Handling personal and sensitive information responsibly.
An Overview of Privacy Regulations
A general, non-legal tour of how data protection laws are usually built: who they cover, what they require, people's rights and how they are enforced.
Data Classification Levels Explained
Learn how organizations sort information into levels such as public, internal, confidential and restricted, and how each level drives handling rules.
Data Minimization in Practice
How to collect and keep only the personal data you need: practical steps for forms, databases, logs, test data and deletion, plus common obstacles.
Encryption at Rest and in Transit
Understand the two main places data is encrypted, on storage and across networks, what each protects against, what neither covers and why keys matter.
Handling Data Subject Requests
How organizations typically handle requests from people about their personal data: receiving, verifying, searching, responding and recording within deadlines.
Privacy Impact Assessments Explained
What a privacy impact assessment is, when organizations carry one out, the questions it asks and how its findings feed into project decisions.
Sharing Data With Third Parties Responsibly
Questions to ask before personal or sensitive data leaves your organization: purpose, necessity, contracts, security, onward sharing and ending the relationship.
What Counts as Personal Data
How personal information is generally defined: direct and indirect identifiers, sensitive categories, pseudonymized and anonymous data, and tricky IT examples.
Related topics
More in running it
Cybersecurity Basics Everyday security habits for passwords, networks and online life. IT Operations Help desks, service management and keeping track of equipment. Governance and Policy Oversight, risk, written policies and training for staff. Projects and Vendors Delivering IT projects and working with outside partners. Identity and Access Who can sign in to what, and how access is granted and reviewed. Incident Response Preparing for, handling and learning from security incidents.