D
DAA - Draft Agreement on Accession (draft proposal of an EU agreement adopting the European Convention on Human Rights)
DAR - data at rest (information stored on a system or device, such as on disks, tapes, in a database, or other type of storage device (versus data that is actively being trasmitted))
Dec - decision (act or pronouncement which applies to, or is binding, only on the parties addressed by the decision)
DG - Directorate-General (functional division of the European Commission - the equivalent of a national governmental department - responsible for a specific policy area, such as Agriculture and Rural Development or Industry)
DiEM25 - Democracy in Europe Movement (informal party or advocacy group promoting democratic ideals, co-founded by former Greek Finance Minister Yanis Varoufakis)
Dir - directive (a form of EU act directing the parties or member states to take a specific action or produce a final result, such as a law, but leaving the national authority the choice of form or methods)
DIT - data in transit (data being transmitted (used) both when being accessed from storage for use by a local computer application and when being transmitted between external network systems )
DIU - data in use (data within a system or application that is currently being processed or is in use, either through the computing resources or residing in memory)
DLP - data leak prevention (actions organizations take to prevent unauthorized external parties from gaining access to sensitive data)
DLP - data loss prevention (system measures employed to prevent the loss of data, either actual loss, such as theft of a storage device or laptop, or functional loss, where the data is not accessible by the user, such as from a malware attack, where the data has been encrypted)
DPA - Data Processing Agreement (contract/agreement with a third party/external contractor to process data)
DPA - Data Protection Act (one of a number of privacy acts, but may refer to one of the earlier acts, the 1998 United Kingdom (UK) act, which set out six core Privacy Principles for the collection and processing of personal information)
DPA - Data Protection Agency (name, under the Danish Data Protection Act, for the supervisory body dealing with data protection - alternative name for a Data Protection Authority)
DPA - Data Protection Authority (independent body, within an EU member state, that monitors and supervises the application of a data protection law)
DPD - Data Protection Directive (Officially Directive 95/46/EC - Directive covering the protection of data of individuals in the European Union by restricting the processing of personal data and the free movement of such data - replaced by the General Data Protection Regulation (GDPR) in May 2018)
DPIA - Data Protection Impact Assessment (a method/tool, under the General Data Protection Regulation (GDPR) for evaluating data processing operations in order to identify risks arising from the collection, processing, and retention of personal data)
DPO - Data Privacy Officer (individual responsible for understanding, advising, and complying with laws and regulations relating to the handling of data storage and processing - alternative name for Data Protection Officer)
DPO - Data Protection Officer (individual (or group of individuals) responsible for data protection and privacy issues within an organization)
DSA - Data Sharing Agreement (contract document between an organization and a third party contractor detailing the terms (conditions and obligations) under which the third party will be allowed access to, and use of, an organization's data)
DSA - debt sustainability analysis (economic analysis model often applied to governmental budgeting which measures the level of debt a government can take on)
DSB - Dispute Settlement Body ()
DSR - Data Subject Request (formal or informal demand made by a data subject to a data controller to exercise their right of access to their data under the General Data Protection Regulation (GDPR))
DUA - Data Use Agreement (contract document between an organization and a third party contractor detailing the terms (conditions and obligations) under which the third party will be allowed access to, and use of, an organization's data )