Definitions

Legal terms carry regime-specific definitions with controlling sources; operational terms carry plain-language working definitions from technical authorities. The two tiers are kept separate.

Legal terms

Personal data

TDPSA, Business and Commerce Code chapter 541. Confirm exact definitional section at drafting. Related guides: LG01, LG02.

Related: LG01, LG02

Sensitive data

TDPSA chapter 541. Confirm exact section at drafting. Related guides: LG02, LG14.

Related: LG02, LG14

Consumer

TDPSA chapter 541. Confirm exact section at drafting. Related guides: LG01, LG03.

Related: LG01, LG03

Controller

TDPSA chapter 541. Related guides: LG02, LG37.

Related: LG02, LG37

Processor

TDPSA chapter 541. Related guides: LG02, LG37.

Related: LG02, LG37

Process or processing

TDPSA chapter 541. Related guide: LG02.

Related: LG02

TDPSA chapter 541; distinguish from TCPA/FCC consent (LG40) and COPPA verifiable parental consent (LG11). Related guides: LG04, LG40.

Related: LG04, LG11, LG40

Child

regime-specific. COPPA: under 13 (15 U.S.C. 6501; 16 C.F.R. part 312). TDPSA: under 13 for consent provisions. SCOPE Act: known minor. Do not merge. Related guides: LG11, LG12, LG13.

Related: LG11, LG12, LG13

Biometric data

TDPSA sensitive-data category, chapter 541. Related guide: LG14.

Related: LG14

Biometric identifier under CUBI

Business and Commerce Code section 503.001, with the exact subsection exceptions in 503.001(b-1), (e), (f) per C11: images an individual made public, training use, unique identification, security or fraud, later repurposing. No blanket training exemption. Related guide: LG14.

Related: LG14

Precise geolocation data

TDPSA sensitive-data category. Related guides: LG14, LG21.

Related: LG14, LG21

Sale of personal data

TDPSA chapter 541. Related guides: LG02, LG08.

Related: LG02, LG08

Targeted advertising

TDPSA chapter 541. Related guides: LG02, LG08.

Related: LG02, LG08

Profiling

TDPSA chapter 541, including decisions producing legal or similarly significant effects. Related guide: LG03.

Related: LG03

TDPSA chapter 541. Related guide: LG03.

Related: LG03

Deidentified data

TDPSA chapter 541 treatment; NIST SP 800-188 as technical reference (not a legal definition). Related guides: LG36, LG38.

Related: LG36, LG38

Pseudonymous data

TDPSA chapter 541 treatment. Related guide: LG36.

Related: LG36

Publicly available information

TDPSA chapter 541. Related guide: LG02.

Related: LG02

Third party

TDPSA chapter 541. Related guide: LG37.

Related: LG37

Authenticate

TDPSA (consumer-request authentication, LG03). Confirm section at drafting.

Related: LG03

Affiliate

TDPSA chapter 541. Confirm section at drafting.

Personal identifying information

Texas Identity Theft Enforcement and Protection Act, Business and Commerce Code chapter 521. Related guides: LG22, LG24.

Related: LG22, LG24

Sensitive personal information

chapter 521 breach-notification context. Related guide: LG24.

Related: LG24

Breach of system security

chapter 521. Related guide: LG24.

Related: LG24

Data broker

Business and Commerce Code chapter 510 (current retrieved broker chapter per C01). Related guide: LG05.

Related: LG05

FTC Health Breach Notification Rule, 16 C.F.R. part 318. Related guide: LG17.

Related: LG17

HIPAA covered entity** and **Business associate

45 C.F.R. parts 160, 164. Related guide: LG16.

Related: LG16

Protected health information

45 C.F.R. part 160. Related guide: LG16.

Related: LG16

Education record

FERPA, 20 U.S.C. 1232g. Related guide: LG19.

Related: LG19

Consumer report

FCRA, 15 U.S.C. 1681a. Related guide: LG18.

Related: LG18

Trade secret** and **Misappropriation

Texas Uniform Trade Secrets Act; companion link to https://texas-ip-law.com/guides/trade-secrets/trade-secret-law-in-texas/. Related guides: LG36, LG38.

Related: LG36, LG38

Personal data under GDPR

EU GDPR Article 4(1). Related guide: LG42.

Related: LG42

Joint controller

EU GDPR Article 26. Related guide: LG42.

Related: LG42

Pseudonymisation under GDPR

EU GDPR Article 4(5). Related guide: LG42.

Related: LG42

Personal data breach under GDPR

EU GDPR Article 4(12). Related guide: LG42.

Related: LG42

Operational and analytical terms

Data governance

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

Data management

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

Information governance

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

Data lifecycle

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

Data owner

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

Data steward

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

Data custodian

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

Metadata

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

Business glossary

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

Data dictionary

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

Data catalog

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

Data inventory

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

Data map

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

Lineage

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

Provenance

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

System of record

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

Authoritative source

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

Master data

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

Reference data

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

Data quality

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

Retention trigger

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

Legal hold

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

Archive

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

Defensible disposition

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

Media sanitization

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

Cryptographic erase

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

Data product

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

Technical data contract

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

Privacy engineering

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

Privacy by design

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

Differential privacy

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

Synthetic data

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

Federated learning

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

Embedding

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

Vector index

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

Feature store

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

Model unlearning

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

Dracula Data

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

Inference theft

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.

Concentrated protection

Working definition to be drafted from identified technical or professional sources (DAMA, NIST, IAPP, DATAVERSITY, UK ICO). Not a statutory definition.