It is an important legal concept under the GDPR and other data governance frameworks.