A data diode is a hardware-enforced one-way communication device that permits data to move in only one direction. It protects critical industrial networks by allowing controlled data export while preventing inbound connections.