Glossary
Reviewed: 6 September 2026
This glossary contains technical terms used in the EU compliance framework documentation. English terms are listed with their Czech equivalents and explanations.
Navigation
A
| English term | Czech equivalent | Explanation |
|---|---|---|
| Access Control | Řízení přístupu | Mechanism for controlling who has access to certain resources |
| Accountability | Odpovědnost | GDPR principle requiring demonstration of compliance |
| Accuracy | Přesnost | Degree of correctness of AI system outputs |
| AI Act | Akt o umělé inteligenci | Regulation (EU) 2024/1689 on artificial intelligence |
| AI System | AI systém | A machine-based system with varying autonomy that infers outputs such as predictions, content or decisions from inputs; Article 3 of the AI Act specifies the legal definition |
| Annex | Příloha | Supplement to a regulation or directive |
| Anonymization | Anonymizace | Making individuals no longer identifiable by means reasonably likely to be used; removing a name alone may be insufficient |
| Audit | Audit | Systematic review of processes or systems |
| Audit Log | Auditní záznam | A chronological record of selected events for review and traceability |
| Audit Trail | Auditní stopa | Chronological record documenting the sequence of activities |
| Automated Decision-Making | Automatizované rozhodování | Decision-making by automated means, including without AI; Article 22 GDPR has specific conditions for solely automated decisions with significant effects |
B
| English term | Czech equivalent | Explanation |
|---|---|---|
| Backup | Záloha | Copy of data in case of loss of the original |
| Balancing Test | Test vyvážení | Assessment of legitimate interest vs. data subject rights |
| BCM | Řízení kontinuity činností | Business Continuity Management |
| Bias | Zkreslení | Systematic error in an AI model |
| Bias Testing | Testování zkreslení | Evaluation of an AI system for discriminatory outputs |
| Biometric Data | Biometrické údaje | Personal data resulting from specific technical processing of physical, physiological or behavioural characteristics that allows or confirms unique identification of a person (Article 4(14) GDPR) |
| Board | Představenstvo | Governing body providing oversight |
| Breach | Porušení zabezpečení | A security breach; for personal data it may affect confidentiality, integrity or availability |
| Business Continuity | Kontinuita činností | Ability to continue operations even during an incident |
C
| English term | Czech equivalent | Explanation |
|---|---|---|
| CE marking | Označení CE | Under the AI Act, a marking by which the provider indicates that the system conforms to Chapter III, Section 2 requirements and other applicable harmonisation legislation providing for CE marking (Article 3(24)); it is not certification of the entire company |
| Chatbot | Chatbot | Conversational interface powered by AI |
| Checklist | Kontrolní seznam | List of items to verify |
| CISO | Chief Information Security Officer | Chief Information Security Officer |
| Classification | Klasifikace | Assignment to a category based on risk |
| C-level | Vrcholový management | Executive leadership (CEO, CTO, CISO, etc.) |
| Cloud Computing | Cloud computing | Delivery of IT services over the internet |
| Compliance | Soulad | Adherence to legal requirements |
| Conformity Assessment | Posouzení shody | The process of demonstrating whether a high-risk AI system meets the requirements of Chapter III, Section 2 of the AI Act (Article 3(20)) |
| Consent | Souhlas | A freely given, specific, informed and unambiguous indication of wishes; some situations require explicit consent |
| Controller | Správce | A person or entity determining the purposes and means of processing personal data |
| Critical Infrastructure | Kritická infrastruktura | Infrastructure essential for the functioning of society |
| Cryptography | Kryptografie | Data protection using mathematical algorithms |
| CTO | Chief Technology Officer | Chief Technology Officer |
D
| English term | Czech equivalent | Explanation |
|---|---|---|
| Dashboard | Přehledový panel | Visual overview of key metrics |
| Data Breach | Porušení zabezpečení dat | A security breach leading to accidental or unlawful destruction, loss or alteration of personal data, or unauthorised disclosure of or access to them (Article 4(12) GDPR) |
| Data Controller | Správce | A person or entity determining the purposes and means of processing personal data |
| Data Mapping | Mapování dat | Discovery of what data an organization processes |
| Data Minimization | Minimalizace dat | The principle that personal data must be adequate, relevant and limited to what is necessary for the purpose (Article 5(1)(c) GDPR) |
| Data Processing Agreement (DPA) | Smlouva o zpracování | Controller–processor arrangement under Article 28 GDPR; processing must be governed by a binding contract or other legal act containing the required terms |
| Data Processor | Zpracovatel | A person or body processing personal data on behalf of the controller (Article 4(8) GDPR) |
| Data Protection Impact Assessment (DPIA) | Posouzení vlivu na ochranu osobních údajů | Assessment of the impact of envisaged processing on personal data protection, required where high risk is likely under the conditions of Article 35 GDPR |
| Data Protection Officer (DPO) | Pověřenec pro ochranu osobních údajů | An officer with an independent advisory and monitoring role; the controller’s GDPR accountability does not transfer to the DPO |
| Data Subject | Subjekt údajů | Natural person whose data is being processed |
| Data Subject Access Request (DSAR) | Žádost o přístup k údajům | A request for confirmation whether personal data are processed, access to those data and related information, including a copy under Article 15 GDPR |
| Deadline | Termín | Final date for meeting a requirement |
| Deepfake | Deep fake | AI-generated or manipulated image, audio or video content resembling existing persons, objects, places, entities or events that would falsely appear authentic or truthful to a person (Article 3(60) AI Act) |
| Deployer | Zavádějící subjekt | A person or body using an AI system under its authority, except for a natural person’s personal non-professional activity (Article 3(4) AI Act). The Czech term „provozovatel“ means the broader category operator under point 8 |
| Disaster Recovery | Obnova po havárii | Process of restoring systems after a catastrophe |
| Drift Detection | Detekce odchylek | Monitoring changes in AI model behavior |
| Due Diligence | Hloubková kontrola | Detailed vetting of a partner or supplier |
E
| English term | Czech equivalent | Explanation |
|---|---|---|
| Encryption | Šifrování | Data protection using cryptography |
| Encryption at Rest | Šifrování uložených dat | Encryption of data on disk |
| Encryption in Transit | Šifrování při přenosu | Encryption of data during transfer (TLS) |
| Endpoint Protection | Ochrana koncových bodů | Antivirus and other protection on devices |
| Essential Entity | Základní subjekt | An essential entity under NIS2; classification particularly affects supervision and sanctions, while Czech regimes require separate assessment |
F
| English term | Czech equivalent | Explanation |
|---|---|---|
| Fail-safe | Bezpečnostní mechanismus | Mechanism for safe system failure |
| Firewall | Firewall | Network perimeter protection |
| Fraud Detection | Detekce podvodů | AI system for detecting fraud |
| Framework | Rámec | Structured approach or methodology |
G
| English term | Czech equivalent | Explanation |
|---|---|---|
| GDPR | Obecné nařízení o ochraně osobních údajů | General Data Protection Regulation (EU 2016/679) |
| General Purpose AI (GPAI) | Obecný model AI / obecný systém AI | An AI model displaying significant generality, competently performing a wide range of distinct tasks and capable of integration into different downstream systems or applications; research, development and prototyping before market placement are excluded (Article 3(63) AI Act). A general-purpose AI system based on such a model can serve various purposes directly and through integration into other systems (point 66) |
| Global Turnover | Celosvětový obrat | Total worldwide annual turnover; the applicable law specifies the relevant period and undertaking for fine thresholds (e.g. Article 34 NIS2: the preceding financial year and the undertaking to which the entity belongs) |
| Governance | Správa a řízení | System of management and oversight |
H
| English term | Czech equivalent | Explanation |
|---|---|---|
| Hallucination | Halucinace | AI output that is factually incorrect |
| High-Risk AI | AI s vysokým rizikem | An AI system classified under Article 6 and Annex I or III of the AI Act, subject to the relevant conditions and exceptions |
| Human Oversight | Lidský dohled | Ability of a human to intervene in AI decision-making |
| Human-in-the-loop | Člověk ve smyčce | AI decision requires human approval |
I
| English term | Czech equivalent | Explanation |
|---|---|---|
| Important Entity | Důležitý subjekt | An important entity under NIS2; classification does not automatically mean less stringent security measures |
| Incident Management | Řízení incidentů | Process of responding to security incidents |
| Incident Response | Reakce na incident | Procedures when a security incident occurs |
| Incident Response Plan (IRP) | Plán reakce na incidenty | Document describing incident procedures |
| Information Security Management System (ISMS) | Systém řízení informační bezpečnosti | Systematic approach to security management per ISO 27001 |
| Inventory | Inventura | List of all AI systems in the organization |
K
| English term | Czech equivalent | Explanation |
|---|---|---|
| Key Performance Indicator (KPI) | Klíčový ukazatel výkonnosti | Metric for measuring success |
| Knowledge Cutoff | Hranice znalostí | A stated temporal boundary for training knowledge; it does not guarantee complete earlier knowledge or describe connected retrieval |
L
| English term | Czech equivalent | Explanation |
|---|---|---|
| Law Enforcement | Orgány činné v trestním řízení | Police and judicial authorities |
| Legal Basis | Právní základ | Lawful reason for processing personal data |
| Legitimate Interest | Oprávněný zájem | Legal basis per Art. 6(1)(f) GDPR |
| Legitimate Interest Assessment (LIA) | Posouzení oprávněného zájmu | Test for legitimate interest |
| Limited Risk AI | AI s omezeným rizikem | A common explanatory label for certain transparency duties; Article 50 can also apply alongside high-risk requirements |
| Logging | Logování | Recording of events in a system |
M
| English term | Czech equivalent | Explanation |
|---|---|---|
| Machine Learning (ML) | Strojové učení | Artificial intelligence technology |
| Minimal Risk AI | AI s minimálním rizikem | An explanatory low-risk label, not a separate legal category; being outside the high-risk regime is not enough to establish it. Assess Article 5 prohibitions and other applicable obligations separately |
| Mitigation | Zmírnění | Measures to reduce risk |
| Model Card | Karta modelu | AI model documentation |
| Monitoring | Monitorování | Continuous system observation |
| Multi-Factor Authentication (MFA) | Vícefaktorová autentizace | Authentication using multiple factors |
N
| English term | Czech equivalent | Explanation |
|---|---|---|
| NIS2 | Směrnice NIS 2 | Cybersecurity Directive (EU 2022/2555) |
O
| English term | Czech equivalent | Explanation |
|---|---|---|
| Onboarding | Zaškolení | Process of integrating a new employee |
| Opt-in | Aktivní souhlas | An active choice or sign-up; ticking a box alone does not establish valid GDPR consent, which must meet Article 4(11) and Article 7 |
| Oversight | Dohled | Control and supervision |
P
| English term | Czech equivalent | Explanation |
|---|---|---|
| Patch Management | Správa záplat | Process of applying security updates |
| Penalty | Sankce | A penalty for infringement of the applicable rules, not necessarily only a monetary fine; the specific law determines its type and conditions |
| Penetration Testing | Penetrační testování | Simulated attack for security testing |
| Personal Data | Osobní údaj | Any information relating to an identified or identifiable natural person |
| Policy | Směrnice | Internal organizational directive |
| Post-Market Monitoring | Monitorování po uvedení na trh | Provider activities to collect and review experience with systems it makes available on the market or puts into service, to identify necessary corrective or preventive measures (Article 3(25) AI Act) |
| Privacy by Design | Ochrana soukromí od návrhu | Data protection by design: appropriate technical and organisational measures both when determining processing means and during processing, considering the risks and other criteria in Article 25(1) GDPR |
| Privacy Policy | Zásady ochrany osobních údajů | Document informing about data processing |
| Procedure | Postup | Detailed instructions for performing a task |
| Processor | Zpracovatel | A person or body processing personal data on behalf of the controller (Article 4(8) GDPR) |
| Prohibited AI | Zakázaná AI | Prohibited AI practices under Article 5 of the AI Act, subject to the specific conditions, exceptions and application dates; a tool’s name alone is not decisive |
| Provider | Poskytovatel | A person or entity developing or commissioning an AI system or GPAI model and placing it on the market, or putting the relevant system into service, under its name or trademark |
| Pseudonymization | Pseudonymizace | Processing personal data so they cannot be attributed to a specific person without additional information kept separately and protected by technical and organisational measures (Article 4(5) GDPR). Merely replacing a name is not anonymisation |
| Purpose Limitation | Omezení účelu | Personal data are collected for specified, explicit and legitimate purposes and not further processed incompatibly; Article 5(1)(b) GDPR also addresses further archiving, research and statistical processing under Article 89(1) |
R
| English term | Czech equivalent | Explanation |
|---|---|---|
| RBAC | Řízení přístupu na základě rolí | Role-Based Access Control |
| Record Keeping | Vedení záznamů | Creating and retaining records; the applicable law determines any specific duty, content and retention period |
| Records of Processing Activities (ROPA) | Záznamy o činnostech zpracování | Records of a controller’s processing activities or a processor’s categories of activities under Article 30 GDPR, which specifies their content and exemptions; not merely a list of data |
| Recovery Point Objective (RPO) | Cílový bod obnovy | Maximum acceptable data loss |
| Recovery Time Objective (RTO) | Cílový čas obnovy | Maximum downtime duration |
| Resilience | Odolnost | Ability of a system to handle problems |
| Retention | Doba uchovávání | Data retention period |
| Right to Access | Právo na přístup | The right to confirmation of processing, access to personal data and related information, including a copy subject to Article 15 GDPR |
| Right to be Forgotten | Právo na výmaz | The right to erasure of personal data where a ground in Article 17(1) GDPR applies and no exception under paragraph 3 applies |
| Right to Data Portability | Právo na přenositelnost údajů | The right to receive personal data one has provided to a controller in a structured, commonly used and machine-readable format and transmit them to another controller, for automated processing based on consent or contract and subject to the other conditions of Article 20 GDPR |
| Right to Object | Právo vznést námitku | The right to object under Article 21 GDPR: for Article 6(1)(e) and (f), on grounds relating to one’s situation, subject to the controller’s overriding grounds; an objection to direct marketing ends processing for that purpose |
| Right to Rectification | Právo na opravu | Subject’s right to correct inaccurate data |
| Right to Restriction | Právo na omezení | The right to restriction in the cases specified by Article 18 GDPR; further processing of restricted data is permitted only within its limits |
| Risk Assessment | Posouzení rizik | Identification and evaluation of risks |
| Risk Management | Řízení rizik | Systematic approach to risk reduction |
| Robustness | Robustnost | Ability of a system to function even under errors |
S
| English term | Czech equivalent | Explanation |
|---|---|---|
| SaaS | SaaS | Software as a Service |
| Sanction | Sankce | A penalty for infringement of the applicable rules, not necessarily only a monetary fine; the specific law determines its type and conditions |
| Scope | Rozsah působnosti | Area to which a regulation applies |
| Security Incident | Bezpečnostní incident | Event threatening security |
| SIEM | SIEM | Security Information and Event Management |
| SLA | SLA | Service Level Agreement |
| Social Scoring | Sociální bodování | Assessment of individuals by behaviour or characteristics; the AI Act prohibition applies under the specific Article 5 conditions |
| Special Category Data | Zvláštní kategorie údajů | Special categories of personal data under Article 9 GDPR, e.g. health, racial or ethnic origin and biometric data processed for uniquely identifying a person |
| Standard Contractual Clauses (SCCs) | Standardní smluvní doložky | Standard contractual clauses for a specific purpose: notably an appropriate safeguard for third-country transfers under Article 46 GDPR; Article 28 provides for different clauses. Signing alone does not guarantee a lawful transfer |
| Storage Limitation | Omezení uložení | GDPR principle — retain only as long as necessary |
| Sub-processor | Další zpracovatel | Processor engaged by the processor |
| Supply Chain Security | Bezpečnost dodavatelského řetězce | Protection of products across the entire supply chain |
T
| English term | Czech equivalent | Explanation |
|---|---|---|
| Template | Šablona | Prepared document pattern |
| Terms of Service (ToS) | Podmínky služby | Contractual terms with the provider |
| Third-party | Třetí strana | Under GDPR, a person or body other than the data subject, controller, processor and persons authorised to process data under the direct authority of the controller or processor (Article 4(10)); not just an external supplier |
| Threat | Hrozba | Potential danger to a system |
| Timeline | Časová osa | Schedule of dates and milestones |
| Training Data | Trénovací data | Data used for training an AI model |
| Transfer Impact Assessment (TIA) | Posouzení dopadu transferu | Assessment of the destination country’s laws and practices and their effect on safeguards for a particular transfer, e.g. under Clause 14 of the transfer SCCs, together with any supplementary measures |
| Transparency | Transparentnost | Openness and clarity |
V
| English term | Czech equivalent | Explanation |
|---|---|---|
| Vendor | Dodavatel | External service provider |
| Vendor Management | Řízení dodavatelů | Process of selecting and managing vendors |
| Vulnerability | Zranitelnost | Security weakness in a system |
| Vulnerability Management | Správa zranitelností | Process of identifying and remediating vulnerabilities |
W
| English term | Czech equivalent | Explanation |
|---|---|---|
| Wireframe | Wireframe | Visual design of a user interface structure |
| Workflow | Pracovní postup | Defined sequence of steps |
Regulation abbreviations
| Abbreviation | Full name | Description |
|---|---|---|
| AI Act | Artificial Intelligence Act | EU Regulation 2024/1689 on artificial intelligence |
| GDPR | General Data Protection Regulation | EU Regulation 2016/679 on personal data protection |
| NIS2 | Network and Information Security Directive 2 | EU Directive 2022/2555 on cybersecurity |
Role abbreviations
| Abbreviation | English name | Czech equivalent |
|---|---|---|
| CEO | Chief Executive Officer | Generální ředitel |
| CFO | Chief Financial Officer | Finanční ředitel |
| CISO | Chief Information Security Officer | Vedoucí informační bezpečnosti |
| CTO | Chief Technology Officer | Technický ředitel |
| DPO | Data Protection Officer | Pověřenec pro ochranu osobních údajů |