Compliance icons

The 62 compliance icons in Security, described

Adequacy decisionadequacy-decision

A clipboard with a seal on it — a country ruled safe enough to send data to.

Age gateage-gate

A window with a head stopped at a bar — no further until the age is known.

Anonymiseanonymise

Anonymise — strip the personal details out so the person cannot be identified.

Auditaudit

An audit — somebody checked the evidence and wrote down what they found.

Audit logaudit-log

An audit log — who did what and when, kept as a trail of evidence.

Privacy audit trailaudit-trail-privacy

A window with a trail of points across it — who touched personal data, and when.

Biometric databiometric-data

A ticket with ridges on it — a face, a fingerprint, a voice, kept as data.

Breach notificationbreach-notification

The alarm bell with a bolt in it — people told, in time, that their data got out.

Certificatecertificate

A certificate — signed proof that a site, a key or a person is what it claims to be.

Child safetychild-safety

A shield with a small person in it — the youngest users, given the most care.

Compliancecompliance

Compliance — it meets the standard it has to, audited and certified.

Compliance reportcompliance-report

A compliance report — the document that attests you passed the audit.

Consentconsent

Consent — somebody agreed on the record, an opt-in signed and kept.

Consent banner configconsent-banner-config

A window with two sliders above the bar — which cookies the banner offers, set up.

Consent recordconsent-record

A consent record — who said yes, to what, and when, kept as proof.

Withdraw consentconsent-withdraw

A clipboard with a minus on it — permission given, then taken back.

Cookie bannercookie-banner

A window with a bar across the bottom — the strip that asks before cookies are set.

Cross-border transfercross-border-transfer

A cloud with an arrow through it — personal data sent to another country.

Data controllerdata-controller

A person with a flag on the chest — the one who decides why and how data is used.

Export user datadata-export-user

A person with an arrow rising on the chest — everything held about them, handed over.

Import user datadata-import-user

A person with an arrow dropping on the chest — their data brought in from somewhere else.

Data mapdata-map

A window with a route drawn across it — where personal data goes, from collection on.

Data minimisationdata-minimisation

A folder with a minus in it — no more collected than the purpose needs.

Data processordata-processor

A machine frame with an arrow through it — the one who handles data on the controller's instructions.

EU data residencydata-residency-eu

A ring of four points — data that stays inside the union.

Data subject requestdata-subject-request

A person with a written request on the chest — a rights request, as the law lets them make it.

Differential privacydifferential-privacy

Axes with a line jittered by noise — answers that hold, without giving any one person away.

Do not selldo-not-sell

A ticket with its price line struck out — the user said their data is not for sale.

DPIAdpia

A clipboard with a hazard diamond on it — the risk to people, assessed before the processing starts.

Encryption at restencryption-at-rest

A folder with a lock in it — data unreadable where it sits.

Encryption in transitencryption-in-transit

A cloud with a lock in it — data unreadable while it travels.

GDPRgdpr

GDPR — a record about a person, and the privacy rules that govern it.

Health datahealth-data

An eye with a heart in it — records about someone's body and care.

K-anonymityk-anonymity

The wide machine with three identical figures on one line — no record that stands out from the group.

Key escrowkey-escrow

A key set down in a tray — a copy held by someone trusted, for when it is needed.

Lawful basislawful-basis

A clipboard with a pillar on a base — the legal ground the processing stands on.

Location privacylocation-privacy

A shield with a pin in it — where someone is, kept to themselves.

PIIpii

PII — personally identifying data, information that is somebody.

PII detectionpii-detect

An eye zeroing in on its pupil — personal data spotted in a stream of text.

PII maskpii-mask

An eye with a bar across it — personal data hidden before anyone reads it.

PII redactionpii-redaction

PII redaction — the personal details covered over so privacy is kept.

Privacy by designprivacy-by-design

A shield with a set stone in it — protection built in from the first sketch.

Privacy noticeprivacy-notice

An eye with two lines across it — what people are told about being seen.

Privacy request queueprivacy-request-queue

Requests stacked over a tray — the rights requests waiting to be answered.

Record of processingprocessing-record

A clipboard with a ruled register — every processing activity, written down.

Processor agreementprocessor-agreement

A clipboard with a signature on it — the contract a processor signs before it touches data.

Purpose limitationpurpose-limitation

A folder with a funnel in it — data used only for what it was collected for.

Purpose tagpurpose-tag

A folder with a tag in it — the reason a record was collected, written on it.

Redactredact

Redact — black out sensitive text so it cannot be read by anyone else.

Redact fieldredact-field

A window with a field blacked out over a line — one value hidden on the form.

Retention clockretention-clock

A folder with a clock in it — how long a record is kept before it goes.

Right to accessright-to-access

A folder with a lens in it — a person asking to see what is held about them.

Right to erasureright-to-erasure

A folder with a cross in it — a person asking to be forgotten.

Right to portabilityright-to-portability

A folder with an arrow leaving it — a person taking their data somewhere else.

Secure deletesecure-delete

A bin with a cross in it — data gone in a way it cannot come back from.

Sensitive categorysensitive-category

An eye with a hazard diamond in it — data of a kind the law treats with extra care.

Standard clausesstandard-clauses

A clipboard with a standard block on it — the contract wording a transfer rests on.

Sub-processorsub-processor

A machine frame with a line and one beneath it — a processor the processor uses.

Tokenise datatokenise-data

A folder with a value and the stand-in that replaces it — the real thing kept elsewhere.

Tracking opt-outtracking-opt-out

An eye with a small cross where the pupil was — the user asked not to be followed.

Transfer impact assessmenttransfer-impact

A clipboard with an arrow on it — where the data goes, weighed before it goes.

Vault fieldvault-field

A padlock with a field in it — one value kept in the vault, a pointer left behind.

In code, each is one import — import { AdequacyDecision } from "@iconmind/react/icons/adequacy-decision" — and the same name in Vue, Svelte, Solid, Preact, React Native, Astro, Blade and Flutter.

Narrow it by tag