Compliance

risk mitigation measure

Administrative or technical steps to reduce privacy risk.

Definition

Concrete administrative or technical controls that lower either the likelihood or impact of identified privacy risks, such as data minimization, pseudonymization/anonymization, differential privacy, access controls, contractual clauses, or monitoring and incident response procedures. Measures are selected proportionately to assessed risk and organizational capacity.