Harshvardhan J. Pandit, Javier Fernandez, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
Research conducted in an academic context e.g. within universities
Information about an individualâs accent.
To conduct or enforce access control
Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
methods which restrict access to a place or resource
Information about an individual's financial account identifier.
Information about acquaintainces in a social network.
to come into possession or control of the data
to modify the data, often rewritten into a new form for a new use
Information about an individual's age
to adjust the data to be in relation to another data
to change the data withouth changing it into something else
to study or examine the data in detail
to irreversibly alter personal data in such a way that a unique data subject can no longer be identified directly or indirectly or in combination with other data
process by which personal data is irreversibly altered in such a way that a data subject can no longer be identified directly or indirectly, either by the data controller alone or in collaboration with any other party
Information on the apartement(s) owned by an individual.
Information about associations in a social network with other individuals, groups, or entities e.g. friend of a friend
Information that relates to an individual's attitude.
Information used to authenticate an individual with something they know
protocols involving validation of identity i.e. authentication of a person or information
Specifies procedures for determining permission or authority
Information related to an individual's bank account.
Information that describes an individualâs behavior or activity, on-line or off
self.DataSubject, self.DataController, society ? ( --- under consideration ---)
Biometric information on an individual.
Information about an individual's blood type.
Information that characterizes the browser used by an individual, which in turn can be used to uniquely identify a user.
Information that relates to an individual's browsing behaviour.
Information on the calls that an individual has made.
Information about cars owned by an individual.
Information about professional certifications associated with an individual
certification mechanisms, seals, and marks for the purpose of demonstrating compliance
Category of certifications, seals, and marks indicating compliance to regulations or practices
Information about an individual's character in the public sphere
A 'child' is a natural legal person who is below a certain legal age depending on the legal jurisdiction.
A 'child' is distinct from a 'minor'. For example, the legal age for a 'minor' in most countries is 18, whereas a 'child' can be a minor below the age of 14.
A set of rules or procedures outlining the norms and practices for conducting activities
to gather data from someone
to join or merge data
For purposes of commercial activities i.e. of profit or benefit to the Controller
Research conducted in a commercial setting e.g. in a company
Information communicated from or to an individual
Information about communication metadata in the public sphere
Information about and including connections of an individual in a social network
Harshvardhan J. Pandit, Mark Lizar, Bud Bruegger
Consent as defined by Article 4(11) of the GDPR
to consult or query data
Information that can be used for contacting an individual e.g. email address or phone number
Used to scope the purpose, e.g. restriction to a certain business sector
Contractual terms governing data handling within the data controller
to produce an exact reprodution of the data
Information about an individualâs country e.g. residence, travel.
Create and provide personalised recommendations for events to the individual.
Create and provide personalised recommendations to the individual.
To create product recommendations e.g. suggest similar products
Information about an individualâs reputation with regards to money
Information relating to an individual's credit capacity.
Information about an individual's credit card number
Information relating to an individual's credit record.
Information relating to an individual's credit score.
Information relating to an individual's credit standing.
Information relating to an individual's credit worthiness.
Information about an individualâs criminal activity e.g. criminal convictions or jail time
Information on an individual's criminal charges.
Information on an individual's criminal convictions.
Information on an individual's criminal pardons.
Processes related to providing assistance for customer satisfaction
Information about an individual's DNA.
The class of Data Controllers that control this particular data handling, any legal entity that is defined by article 4.7 of GDPR.
âprocessorâ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
The class of Data Subject that this particular data handling applies to, any legal entity that is defined by article 4.1 of GDPR.
Process by identifiable personal data (PII) is converted to un-identifiable personal data
To deliver goods and services
Information that relates to an individual's demeanor.
Information that describes an individualâs characteristics shared with others
to create new derivative data from the original data
Derived data is data that has not been directly provided by the DataSubject, but has been derived from other collected or externally obtained data.
A set of rules or guidelines outlining criterias for design
to process data in a way it no longer exists or cannot be repaired
Information about a device that an individual uses for personal use (even part-time or with others)
Information about an individualâs dialect.
Information about an individual's disabilities.
Information about disciplinary actions associated with an individual
to make data known
to disclose data by means of transmission
Information relating to a user's dislikes.
to spread data throughout
Information about an individual's divorce(s).
Information about an individual's drug test results.
Information about an individual's Email address.
The contents of Emails that an individual sends or receives.
Information about an individual's employment history
Encryption of data when being stored (persistent encryption)
Encryption of data in transit e.g. when being transferred from one location to another, including sharing
to delete data
Information related to an individual's ethnic origin.
Information that describes an individualâs origins and lineage
Personal Data that can be observed by another person i.e. has external characteristics that make it visible
Information about an individualâs family and relationships
Information related to an individual's family health history.
Information that describes an individual's family structure.
Information about an individual's favorites
Information about an individual's favorite color.
Information about an individual's favorite food.
Information about an individual's favorite music.
Information an individual's sexual fetishes
Personal data regarding finance or monetary information
Information that identifies an individualâs financial account
Information about an individual's financial account number
Information related to an individual's fingerprint used for biometric purposes.
To detect and prevent fraud
Information about friends of the individual in a social network. Includes aspects of friendships such as years together or nature of friendship.
Global position system coordinates of a user's location.
Information about an individual's gender
Information about an individual's reputation in the public sphere
Geographic information relating to an individual (e.g., home address)
Information about groups the individual is included or associated with in a social network
Guidelines or Principles regarding processing and operational measures
Information about an individual's hair colour
Information about an individual's health.
Information about an individual's health history.
Information about an individual's health record.
Information about an individual's physical height
Historical personal data is that which is related to or relevant for history or past events in the context of the person or their life.
Information about house(s) owned by an individual.
An Internet protocol (IP) address of a device used by an individual.
Information that uniquely or semi-uniquely identifies a specific individual
To verify and authorise identity
To improve existing products and services
To improve customer-relationship management (CRM) processes
Information about financial income e.g. for individual or household or family
Information about an individual's income bracket.
To improve the robustness and resilience of services
Information related to an individual's information health history.
Information about an individual's intentions
Information about an individual's interactions in the public sphere
Information about an individual's interests
Personal data about characteristics of an individual that are internal i.e. cannot be seen or observed
Optimisation of internal resources used by the organisation e.g. resource usage
Information about an individual's professional jobs
Information about what a person knows or believes
Information related to an individual's language.
A legally binding agreement
A particular legal Basis, which permits personal Data handling (e.g. Consent, etc.)
A Person or Organisation, including Data Subjects, that constitute as a legal entity.
Information about an individualâs personal history (e.g., events that happened in a personâs life, either to them or just around them which might have influenced them (WWII, 9/11)).
Information relating to a user's likes.
Information on the links that an individual has clicked.
Information about loans provided or related to the individual
Information about an individualâs location
A Media Access Control (MAC) address of a device used by an individual.
to transform or publish data to be used
Information about an individual's marital status and history
Information about an individual's marriage(s).
Information that describes an individualâs health, medical conditions or health care
Information related to an individual's mental health.
to move data from one location to another including deleting the original copy
Non-disclosure Agreements e.g. preserving confidentiality of information
A name associated with an individual e.g. given name, nickname.
Research conducted in a non-commercial setting e.g. for a non-profit-organisation (NGO)
to solicit or gather data from someone
Information on an official identification document used by an individual.
Information about an individual's offspring(s).
Information about an individual's opinions
Optimisation of activities and services for the consumer or user
Optimisation of activities and services for the Controller
Optimisation of interfaces presented to the user
Organisational measures required/followed when processing data of the declared category
to organize data for arranging or classifying
Information about things an individual has owned, rented, borrowed, possessed
An individual's Personal identification number (PIN) used in the process of authenticating the individual as a user accessing a system.
Information about an individual's parent(s).
An individual's password used in the process of authenticating the individual as a user accessing a system.
A category of personal data (as defined by GDPR article 4.1) from the personal data categories taxonomy, i.e. for instance denoting the category of an object/field or data item that is used for processing
Harsh: Change name to PersonalDataCategory since DataCategory can be non-personal data. Axel: Ageed
Top Class to describe a concrete instance of legal personal Data Handling of a defined class of Data Subjects, meaning that a personal Data Category is undergoing specified processing by a specific data controller and/or transferred to some recipient for a particular purpose, based on a specific legal ground, with specified security measures and restrictions (e.g. storage locations and storage durations).
Information about an individual's personal possessions.
Personalisation of benefits received by the user
Information that relates to an individual's personality (e.g., categorization in terms of the Big Five personality traits)
Information about an individualâs philosophical beliefs.
Information about an individual's physical address.
Information that describes an individualâs physical characteristics
Information related to an individual's physical health.
Information on defining traits or features about an individuals body.
A visual representation or image of an individual e.g. profile photo.
Information about an individual's piercings
Information about an individual's political affiliation and history
Information about an individualâs preferences or interests
Information about prescriptions made for an individual.
Practices regarding selecting appropriate data protection and privacy measures as the 'default' in an activity or service
Practices regarding incorporating data protection and privacy in the design of information and services
Information about an individual's privacy preferences
A type of processing from one of the processing categories in the processing Taxonomy
Information about an individual's proclivities in a sexual context
Information about an individualâs educational or professional career
Information about professional evaluations associated with an individual
Information about professional interviews associated with an individual
to create a profile that describes or represents a person
to replace personal identifiable information by artificial identifiers
PseudoAnonmyization or 'pseudonymisationâ means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person;
Category of technical measures consisting of pseudoanonymization and encryption
Information about an individualâs public life
Information about purchases such as items bought e.g. grocery or clothing
Information about analysis of purchases made and money spent expressed as a habit e.g. monthly shopping trends
The purpose of Data Handling, from the purposes Taxonomy
Information related to an individual's race.
The entities that can access the result of a data handling action/processing, any legal entity that is defined by article 4.9 of GDPR, which states - 'recipient' means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not.
to make a record (especially media)
Information about an individual's references in the professional context
Specifies policy regarding repetition or renewal of existing certification(s)
Information that characterizes an individual's relationships with other individuals.
Information about an individual's religion, religious inclinations, and religious history.
Information about an individualâs religious beliefs.
to destruct or erase data
Performing research and developing new methods,products, or services
to apply a restriction on the processsing of specific records
Information related to an individual's retina used for biometric purposes.
to retrieve data, often in an automated manner
Risk management refers to a coordinated set of activities and methods that is used to direct an organization and to control the many risks that can affect its ability to achieve objectives. The term risk management also refers to the programme that is used to manage risk. This programme includes risk management principles, a risk management framework, and a risk management process.
Data Protection Impact Assessments as per GDPR art 35, other Privacy Impact Assessments, threat severity assessment https://www.cnil.fr/en/privacy-impact-assessment-pia
Room number of a location associated with an individual.
Information about an individual's salary
Information about sales e.g. selling of goods or services
Information about an individual's school such as name of school, conduct, or grades obtained.
a seal or a mark indicating proof of certification to some certification or standard
An individual's secret text used in the process of authenticating the individual as a user accessing a system, e.g., when recovering a lost password.
Used to indicate the sector of a purpose e.g. Agriculture, Advertising (specified e.g. in the form of NACE codes)
Security of data
To sell data or information to third parties
To sell or commercially provide insights obtained from analysis of data
To sell products or services to the data subject or user
To sell or provide targetted advertisements about the user to Third Parties
Information about the consumption of a service by an individual. Examples: time and duration of consumption.
Optimization of service or activity
Personalization of service or activity for the user
Provision of service or activity
Information that describes an individualâs sexual life
Information about an individual's sexual history
Information about an individual's sexual preferences
to give data (or a portion of it) to others
Information about an individual's sibling(s).
Information about an individual's skin tone
Personal data about the social aspects such as for family, public life, or professional networks.
Information relating to an individual's social media communication, including the communication itself and metadata.
Information about an individualâs friends or connections expressed as a social network
Information about an individual's social status
Special category or personal data as per GDPR Art. 9 (1)
Practices and policies regarding training of staff members
Defines how secure deletion is guaranteed
A duration or temporal entity denoting limitation on storage of personal data
Defines a location or goespatial scope, where the data is (physically) stored
Regularity and temporal span of data restoration/backup mechanisms that guarantee that data is preserved
Restrictions required or followed regarding storage of data
to keep data for future use
to arrange data according to a structure
Information about an individual's tattoos
Information about financial tax e.g. tax records or tax due
Technical measures required/followed when processing data of the declared category
Technical and organisational measures, for instance security measure, storage restrictions etc. required/followed when processing data of the declared category
Bud: rename according to GDPR: Technical/Organisational measures
Information about an individual's telephone number.
âthird partyâ means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data;
Information about an individual's thoughts
Personal data that can be used to track an individual or used as an identifier e.g. location or email
Information about financial transactions e.g. bank transfers
Information about an individualâs purchasing, spending or income
to move data from one place to another
to change the form or nature of data
to send out data
Information that relates to an individual's TV viewing behavior, such as timestamps of channel change, duration of viewership, content consumed.
An unique identifier used to identify an individual.
to use data
Personalisation of interfaces presented to the user
A username used to identify an individual.
Elmar; Harshvardhan J. Pandit, Fajar, Axel Polleres
Recording of an individual's recorded communication (e.g. telephony, VoIP)
Information about an individual's voice mail messages.
Information about an individual's physical weight
Information about an individual's work history in a professional context
Links consent to the notice displayed for requesting consent
The actual notice that the Data Subject received to consent to, either a text or link to a document, which should be usable to decide whether the form or consent was compliant to legislation, e.g. documenting how the user has been informed about rights and implications (such as, right to data portability,right to recitffy, right to erasure, right to restrict processing, right to object, rights regarding automated decision making or profiling, processors, third parties, sub-processors, outside-EEA transfers, automated decision-making, or other necessary details of the privacy-policy). Can be TextOrDocumentOrURI.
Specifies duration for storage of personal data
Generic property specifying when or under which condition(s) the consent will expire
Specifies the condition or event that determines the expiry of consent
Specifies the expiry time or duration for consent
Cui bono? Who is the ultimate beneficiary of this purpose, here a stakeholder can be declared, e.g. the DataSubjects themselves or the Data Controller. ( --- under consideration --- )
Restricts a purpose to the specified context(s)
Axel Polleres, Javier Ferenandez, Harshvardhan J. Pandit, Mark Lizar, Bud Bruegger
This property associates a data controller with an instance of legal data handling or consent
We replicate all the properties except Legalbasis of personal data handling for consent, to declare what kinds of personal data handling are consented to
This property associates a data subject with an instance of legal data handling or consent
This property associates an instance of legal data handling with its underlying legal basis
This property associates a personal data category with an instance of legal data handling or consent
This property associates a data processing category with an instance of legal data handling or consent
This property associates a purpose with an instance of legal data handling or consent
This property associates a recipient with an instance of legal data handling or consent
Indicates the purpose is associated with activities in the indicated (Economic) Sector(s)
This property associates a technical/organisational measure with an instance of legal data handling or consent
Indicates the processing comprises of innovative uses of new or radical solutions
e.g. combining fingerprint & face scan for access control. What is concidered new/innovative is of course subject to change over time.
Indicates whether the processing comprises of or is part of or results in automated decision making
Indicates whether the processing ir part of or results in evaluation or scoring of an individual or their personal data
Indicates consent is explicit as explained in GDPR Article 9.2a and Article 22.2c
Indicates the processing is carried out at large scale in terms of size of data or individuals associated
Involves large amounts of personal data or data subjects. The WP29 recommends that the following factors, in particular, be considered when determining whether the processing is carried out on a large scale (WP29 Guidelines on Data Protection Officer 16/EN WP 243): a. the number of data subjects concerned, either as a specific number or as a proportion of the relevant population; b. the volume of data and/or the range of different data items being processed; c. the duration, or permanence, of the data processing activity; d. the geographical extent of the processing activity.
Indicates whether the processing comprises of matching or combining existing data
originating from two or more data processing operations performed for different purposes and/or by different data controllers in a way that would exceed the reasonable expectations of the data subject (WP29 Opinion on Purpose limitation 13/EN WP 203, p.24). For instance Integration/Enrichment with other data (not necessarily personal only)
Indicates whether the processing comprises of systematic monitoring of data subjects or their personal data
Specifies location for storage of personal data
a generic ObjectProperty to describe how the measure is implemented. For the values of this property we either allow a blank node with a single rdfs:comment to describe the measure, or a URI to a standard or best practice followed, i.e. a well-known identifier for that standard or a URL where the respective document describes the standard.
Specifies the entity that provisioned or provided consent
Normally this would be the dataSubject, but in some exceptional cases, the consent might be given on behalf by someone else, e.g. parents of minors.
Specifies the justification for entity providing consent
This field can be used to proivde a justification why the provision was provided by another DataSubject or legal entity, e.g. declariing the relationship (parent, guardian), in combination with the field provisionBy
Specifies the method by which consent was provisioned or provided
Can be used to record information of how consent was provided e.g. by a click to a form, in writing, etc., by logging into a system and confirm per email, or with some additional authentication, etc.
Specifies the instant in time when consent was given
Specifies restriction on the storage of personal data
Specifies the entity that withdrew consent
Normally this would be the dataSubject, but in some exceptional cases, the consent might be withdraawn on behalf by someone else, e.g. parents of minors.
Specifies the justification for entity withdrawing consent
This field can be used to proivde a justification why the weithdrawal was done by another DataSubject or legal entity, e.g. declariing the relationship (parent, guardian), in combination with the field withdrawalBy
Specifries the method by which consent can be/has been withdrawn
Can be used to record information of how to withdraw consent, e.g. by a click to a form, in writing, etc., by logging into a system and confirm per email, or with some additional authentication, etc.
Specifies the instant in time when consent was withdrawn
The Data Privacy Vocabulary provides terms (classes and properties) to annotate and categorize instances of legally compliant personal data handling according to the EU General Data Protection Regulation. This scope could be extended by later versions to other data and privacy protection regulations. The vocabulary provides terms to describe which personal data Categories are undergoing a specified kind of processing by a specific data controller and/or transferred to some recipient for a particular purpose , based on a specific legal ground (e.g. consent, or other legal grounds such as legitimate interest, etc.), with specified technical and organisational measures and restrictions (e.g. storage locations and storage durations) in place.
The Data Privacy Vocabulary provides terms (classes and properties) to annotate and categorize instances of legally compliant personal data handling. These terms are intended to annotate Legal Personal Data Handling in a machine-readable fashion, by specifying which personal data categories are undergoing a specific kind of processing, by a specific data controller and/or shared with some recipient for a particular purpose , based on a specific legal ground (e.g. consent or legitimate interest), with specific technical and organisational measures and restrictions (e.g. storage location and storage duration) in place.
Data Privacy Vocabulary