The Procurement Glossary » Data Protection

Data Protection

Compliance & Risk

Definition

Safeguarding personal and sensitive data handled in procurement, in line with privacy laws.

Explanation

Procurement handles supplier and sometimes personal data, and shares data with suppliers. Data-protection compliance means controlling access, contracting for security, and ensuring suppliers that process data meet privacy obligations.

Example

Supplier contracts include data-processing clauses so personal data is handled lawfully.

Related terms

• Regulatory Compliance — Adherence to the laws and regulations that apply to buying, importing and operating in a given market.
• Confidentiality — The obligation to protect and not disclose sensitive information shared under a business relationship.
• Supplier Risk — The exposure a buyer faces from a supplier's potential failure — financial, operational, compliance or reputational.
• Procurement Compliance — Adherence to the policies, contracts, laws and controls that govern how an organisation buys.

Frequently Asked Questions

What is Data Protection?

Safeguarding personal and sensitive data handled in procurement, in line with privacy laws. Procurement handles supplier and sometimes personal data, and shares data with suppliers. Data-protection compliance means controlling access, contracting for security, and ensuring suppliers that process data meet privacy obligations.

Can you give an example of Data Protection?

Supplier contracts include data-processing clauses so personal data is handled lawfully.

Back to the procurement glossary | Procurement concepts | Contact us