Glossary
Derived Data
Derived data is produced by computing, aggregating, or otherwise transforming other, source data, rather than being collected directly. A dashboard built from raw event logs, a risk score computed from several underlying records, and a cached summary of a larger dataset are all derived data — related to their sources, but not identical to them, and not automatically carrying the same access rules by default.
The common mistake runs in both directions: treating derived data as automatically safe because it's 'just a summary,' when it can still leak sensitive information through aggregation; or treating it as automatically as sensitive as its source, when a genuinely well-aggregated summary may in fact be safe to share far more broadly. Neither assumption substitutes for actually working out what the specific transformation does and doesn't expose.