Responsible disclosure refers to the practice of researchers privately notifying affected organizations before publicly disclosing a vulnerability, allowing a reasonable remediation period (typically 90 days).