Verify or authorize identity
Identity Verification
accepted
has data source
Indicates the source or origin of data being processed
Processing Context
Context or conditions within which processing takes place
Register, authenticate, and identify users or agents in context of a service
Registration and Authentication
Protocols involving validation of identity i.e. authentication of a person or information
Authentication Protocols
Maintain registry of shareholders, members, or partners for governance, administration, and management functions
Members and Partners Management
A seal or a mark indicating proof of certification to some certification or standard
Seal
Indication of 'required' or 'necessary'
Required
Organisational measures required/followed when processing data of the declared category
Organisational Measure
Specifies representative of the legal entity
has representative
Delivery of Goods
Deliver goods and services requested or asked by consumer
Academic Research
Conduct or assist with research conducted in an academic context e.g. within universities
Move
to move data from one location to another including deleting the original copy
to move data from one place to another
Transfer
Processing that involves evaluation and scoring of individuals
Evaluation and Scoring
Encryption in Rest
Encryption of data when being stored (persistent encryption)
Technical_Organisational_Measures Concepts
has recipient data controller
Indiciates inclusion or applicability of a Data Controller as a Recipient of persona data
Transmit
to send out data
Indicates the logic used in processing such as for automated decision making
has algorithmic logic
RegionalAuthority
e.g. regional DPA in DE / US-CA
An entity within or authorised by an organisation to monitor internal compliance, inform and advise on data protection obligations and act as a contact point for data subjects and the supervisory authority.
Data Protection Officer
modified
has expiry time
Specifies the expiry time or duration for consent
Derived Personal Data
Derived Data is data that is obtained through processing of existing data, e.g. deriving first name from full name. To indicate data that is derived but which was not present or evident within the source data, InferredPersonalData should be used.
Personal Data that is obtained or derived from other data
Right
A 'right' is a legal, social, or ethical principle of freedom or entitlement which dictate the norms regarding what is allowed or owed.. Rights as a concept encompass a broad area of norms and entities, and are not specific to Individuals or Data Protection / Privacy. For individual specific rights, see dpv:DataSubjectRight
The right(s) applicable, provided, or expected.
to keep data for future use
Store
Indication of 'primary' or 'main' or 'core' importance
Primary Importance
Optimize internal resource availability and usage for organisation
Internal Resource Optimisation
The definition of country is not intended for political interpretation. DPVCG welcomes alternate definitions based in existing sources with global scope, such as UN or ISO.
A political entity indicative of a sovereign or non-sovereign territorial state comprising of distinct geographical areas
Country
Purpose
The purpose of processing personal data
has duration
Indicates information about duration
Data Subjects which should be considered 'vulnerable' and therefore would require additional measures and safeguards
Vulnerable Data Subject
Personalise interfaces presented to the user
User Interface Personalisation
Altering personal data irreversibly such that a data subject can no longer be identified directly or indirectly, either by the data controller alone or in collaboration with any other party
Complete Anonymisation
Indicates association with Processing
has processing
Marketing
Was commercial interest, changed to consider Marketing a separate Purpose category by itself
Conduct marketing in relation to organisation or products or services e.g. promoting, selling, and distributing
Communication for Customer Care
Communicate with customers for assisting them, resolving issues, ensuring satisfaction in relation to services provided
Indicates applicability of specified country
has country
Safeguard for Data Transfer
Represents a safeguard used for data transfer. Can include technical or organisational measures.
Manage invoicing, orders, and records in relation to services
Service Order Management
to come into possession or control of the data
Acquire
Legitimate Interests of a Third Party in conducting specified processing
Legitimate Interest of Third Party
Code of Conduct
A set of rules or procedures outlining the norms and practices for conducting activities
PseudoAnonmyization or 'pseudonymisation’ means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person;
Pseudo-Anonymization
A law is a set of rules created by government or authorities
Law
Specifies consent is 'explicit'
The conditions for what is considered 'explicit consent' differ by norms and laws.
is explicit
A ROPA is a document maintained by Data Controllers detailing processing activities carried out under their responsibility
Register of Processing Activities
Tied to compliance processes and documents, decide how to specify those
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data between a Data Controller or Processor and a Third Party
Third-Party Agreement
The duration or temporal limitation
Duration
has contact
Specifies contact details of a legal entity such as phone or email
Records of personal data processing, whether ex-ante or ex-post
Data Processing Records
Improve customer-relationship management (CRM) processes
Improve Internal CRM Processes
has authority
Indicates applicability of authority for a jurisdiction
An organisation not part of or independent from the government
NonGovernmentalOrganisation
Indicates association with Data Subject
has data subject
to create new derivative data from the original data
Derive
Sensitivity' is a matter of context, and may be defined within legal frameworks. For GDPR, Special categories of personal data are considered a subset of sensitive data. To illustrate the difference between the two, consider the situation where Location data is collected, and which is considered 'sensitive' but not 'special'. As a probable rule, sensitive data require additional considerations whereas special category data requires additional legal basis / justifications.
Sensitive Personal Data
Personal data that is considered 'sensitive' in terms of privacy and/or impact, and therefore requires additional considerations and/or protection
Generic property specifying when or under which condition(s) the consent will expire
has expiry
Human involvement is also relevant to 'human in the loop'
has human involvement
Indicates Involvement of humans in processing such as within automated decision making process
Legitimate Interest Assessment
Indicates an assessment regarding the use of legitimate interest as a lawful basis by the data controller
Dispute Management
Manage disputes by natural persons, private bodies, or public authorities relevant to organisation
Pseudo-Anonymise
to replace personal identifiable information by artificial identifiers
Child
A 'child' is a natural legal person who is below a certain legal age depending on the legal jurisdiction.
The legality of age defining a child varies by jurisdiction. In addition, 'child' is distinct from a 'minor'. For example, the legal age drinking alcohol can be 21, which makes a person of age 20 a 'minor' in this context. In other cases, 'minor' and 'child' are used interchangeably to refer to a person below some legally defined age.
This field can be used to proivde a justification why the weithdrawal was done by another DataSubject or legal entity, e.g. declariing the relationship (parent, guardian), in combination with the field withdrawalBy
Specifies the justification for entity withdrawing consent
has withdrawal by justification
Contract Performance
Fulfilment or performance of a contract involving specified processing
Matching and Combining
Processing that involves matching and combining of personal data
Policy
A guidance document outlining any of: procedures, plans, principles, decisions, intent, or protocols.
Create Personalized Recommendations
Create and provide personalised recommendations
Storage Duration
Duration or temporal limitation on storage of personal data
An organisation managed or part of government
GovernmentalOrganisation
to change the form or nature of data
Transform
to process data in a way it no longer exists or cannot be repaired
Destruct
Methods which restrict access to a place or resource
Access Control Method
Service Personalization
Personalise services or product or activities
Subclass of ServiceProvision since personalisation is usually considered part of providing services
has withdrawal time
Specifies the instant in time when consent was withdrawn
Human Involvement
The involvement of humans as a factor or agent in processing
Human Involvement here broadly refers to any involvement by a human in the context of carrying out processing. This may include verification of outcomes, providing input data for making decisions, or overseeing activities.
Consultation is a process of receiving feedback, advice, or opinion from an external agency
Consultation
Privacy Notice
Represents a notice or document outlining information regarding privacy
Indication of 'secondary' or 'minor' or 'auxiliary' importance
Secondary Importance
Regularity and temporal span of data restoration/backup mechanisms that guarantee that data is preserved
Storage Restoration
Specifies the condition or event that determines the expiry of consent
has expiry condition
Can be TextOrDocumentOrURI
This purpose by itself does not sufficiently and clearly indicate what the communication is about. As such, it is recommended to combine it with another purpose to indicate the application. For example, Communication of Payment.
Manage communication or provide means for communication e.g. to send an email notifying some information
Communication Management
Sell Products to Data Subject
Sell products or services to the user, consumer, or data subjects
Was subclass of commercial interest, changed to reflect selling something
Guidelines or Principles regarding processing and operational measures
GuidelinesPrinciple
has personal data handling
Indicates association with Personal Data Handling
Storage Deletion
Deletion or Erasure of data including any deletion guarantees
The term 'Public' is used here in a broad sense. Actual consideration of what is 'Public Data' can vary based on several contextual or jurisdictional factors such as definition of open, methods of access, permissions and licenses.
Public Data Source
A source of data that is publicly accessible or available
The GDPR extension to Data Privacy Vocabulary provides terms (classes and properties) related to EU General Data Protection Regulation.
DPV-GDPR: GDPR Extension for DPV
isInstanceOf
Recipient
Entities that receive personal data
A recipient of personal data can be used to indicate any entity that receives personal data. This can be a Third Party, Processor (GDPR), or even a Controller.
Single Sign On
Use of credentials or processes that enable using one set of credentials to authenticate multiple contexts.
Encryption
Technical measures consisting of encryption
Manage humans and 'human resources' within the organisation for effective and efficient operations.
Human Resources Management
HR is a broad concept. Its management includes, amongst others - recruiting employees and intermediaries e.g. brokers, independent representatives; payroll administration, remunerations, commissions, and wages; and application of social legislation.
Storage Condition
Conditions required or followed regarding storage of data
Requested Service Provision
Deliver service as requested by user or consumer
Research and Development
Conduct research and development for new methods, products, or services
A representative of a legal entity
Representative
has withdrawal by
Specifies the entity that withdrew consent
Normally this would be the dataSubject, but in some exceptional cases, the consent might be withdraawn on behalf by someone else, e.g. parents of minors.
Customer Care
Provide assistance, resolve issues, ensure satisfaction in relation to services provided
Indicates use or applicability of Technical or Organisational measure
has technical and organisational measure
Practices and policies regarding training of staff members
Staff Training
ContractualTerms
Contractual terms governing data handling within or with an entity
Optimise services or activities
Service Optimization
Subclass of ServiceProvision since optimisation is usually considered part of providing services
Region
A region is an area or site that is considered a location
Processing is necessary or required to protect vital interests of a data subject
Vital Interest of Data Subject
Create and provide personalised benefits for a service
Personalised Benefits
to study or examine the data in detail
Analyse
Data
A broad concept representing 'data' or 'information'
Vital Interest
Processing is necessary or required to protect vital interests of a data subject or other natural person
has legal basis
Indicates use or applicability of a Legal Basis
The term NonPersonalData is provided to distinguish between PersonalData and other data, e.g. for indicating which data is regulated by privacy laws. To specify personal data that has been anonymised, the concept AnonymisedData should be used.
Non-Personal Data
Data that is not Personal Data
An entity that 'exports' data where exporting is considered a form of data transfer
Data Exporter
The EU, in particular the EDPB, uses data exporter the context of cross-border data transfers/flows. These concepts are not bound by jurisdictional or geopolitical scopes within DPV and can thus be used for any notion of exporting
Align
to adjust the data to be in relation to another data
Removal of identity or information to reduce identifiability
De-Identification
to transform or publish data to be used
Make Available
Enforce Access Control
Conduct or enforce access control
Was previously "Access Control". Prefixed to distinguish from Technical Measure.
Joint Data Controllers Agreement
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data between Controllers within a Joint Controllers relationship
has technical measure
Indicates use or applicability of Technical measure
Sensitive Personal Data whose use requires specific legal permission or justification
Special Category Personal Data
The term 'special category' is based on GDPR Art.9, but should not be considered as exlusive to it. DPV considers all Special Categories to also be Sensitive, but whose use is either prohibited or regulated and therefore requires additional legal basis for justification.
Manage and analyse interactions with past, current, and potential customers
Customer Relationship Management
Processing that takes place at large scales
Large Scale Processing
Personalisation
This term is a blanket purpose category for indicating personalisation of some other purpose, e.g. by creating a subclass of the other concept and Personalisation
Create and provide customisation based on attributes and/or needs of person(s) or context(s).
Indicates the purpose is associated with activities in the indicated (Economic) Sector(s)
has sector
Legitimate Interests of a Party as justification for specified processing
Legitimate Interest
has purpose
Indicates association with Purpose
A risk or possibility or uncertainty of negative effects, impacts, or consequences.
Risk
Risks can be associated with one or more different concepts such as purpose, processing, personal data, technical or organisational measure.
Process payment transactions in relation to service
Payment
Indicate a risk is mitigated by specified measure
is mitigated by measure
Conduct direct marketing i.e. marketing communicated directly to the individual
Direct Marketing
Necessity can be used to express need, essentiality, requirement, or compulsion.
Necessity
An indication of 'necessity' within a context
Assessment
The document, plan, or process for assessment or determination towards a purpose e.g. assessment of legality or impact assessments
The Technical and Organisational measures used.
Technical and Organisational Measure
Algorithmic Logic is intended as a broad concept for explaining the use of algorithms and automated decisions making within Processing. To describe the actual algorithm, see the Algorithm concept.
The algorithmic logic applied or used
Algorithmic Logic
Data Protection Impact Assessments as per GDPR art 35, other Privacy Impact Assessments, threat severity assessment https://www.cnil.fr/en/privacy-impact-assessment-pia
Risk Management Procedure
Risk management refers to a coordinated set of activities and methods that is used to direct an organization and to control the many risks that can affect its ability to achieve objectives. The term risk management also refers to the programme that is used to manage risk. This programme includes risk management principles, a risk management framework, and a risk management process.
Enforce Security
Ensure and enforce security e.g. of data, personnel
Was previous "Security". Prefixed to distinguish from TechOrg measures.
Removed plural suffix for consistency
Indicates consequences of processing such as those for Data Subjects in relation to automated decision making
has consequence
Technical Measure
Technical measures required/followed when processing data of the declared category
Non-Disclosure Agreement (NDA)
Non-disclosure Agreements e.g. preserving confidentiality of information
Process by which some personal identifiers are removed or identifiability is reduced
Anonymization
Procedures for determining authorisation through permission or authority
Authorisation Procedure
non-technical authorisation procedures: How is it described on an organisational level, who gets access to the data
Anonymise
to irreversibly alter personal data in such a way that an unique data subject can no longer be identified directly or indirectly or in combination with other data
Carrying out an impact assessment regarding privacy risks
Privacy Impact Assessment
Consent
Consent of the Data Subject for specified processing
Indicates area, scope, or applicability of an Authority
is authority for
Legal Obligation
Legal Obligation to conduct the specified processing
Impact Assessment
Calculating or determining the likelihood of impact of an existing or proposed process, which can involve risks or detriments.
to make data known
Disclose
has joint data controllers
Indicates inclusion or applicability of a Joint Data Controller
Personalised Advertising
Create and provide personalised advertising
Official Authority of Controller
Processing necessary or authorised through the official authority granted to or vested in the Data Controller
Manage and provide technical processes and functions necessary for delivering services
Technical Service Provision
The use of 'entity' is inclusive of entities (e.g. Data Processor) as well as 'agent' (e.g. DPO). For indicating technological implementation, the property isImplementedByTechnology should be used.
is implemented by entity
Indicates implementation details such as entities or agents
Improve robustness and resilience of services
Increase Service Robustness
A 'sub-processor' is a processor engaged by another processor
sub-processor' is a commonly used term similar to 'sub-contractor' and does not have a specific legal definition
Data Sub-Processor
The term 'technology' is inclusive of technologies, processes, and methods.
is implemented using technology
Indicates implementation details such as technologies or processes
Frequency
The frequency or information about periods and repetitions in terms of recurrence.
A ‘third party’ means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and people who, under the direct authority of the controller or processor, are authorised to process personal data.
Third Party
Location
A location is a position, site, or area where something is located
Location may be geographic, physical, or virtual.
to change the data without changing it into something else
Alter
There are various sector codes used commonly to indicate the domain of an organisation or business. Examples include NACE (EU), ISIC (UN), SIC and NAICS (USA).
Indicate or restrict scope for interpretation and application of purpose in a domain e.g. Agriculture, Banking
Sector
Organisation Governance
Conduct activities and functions for organisation's governance
Non-Commercial Research
Conduct research in a non-commercial setting e.g. for a non-profit-organisation (NGO)
to give data (or a portion of it) to others
Share
Conduct analysis and reporting related to usage of services or products
Analytics
Was "UsageAnalytics", prefixed with Service to better reflect scope
Consequence
The consequence(s) possible or arising from indicated plan or action
Context
Contextually relevant information about purpose not possible to represent through other concepts
An authority with the power to create or enforce laws, or determine their compliance.
Authority
has address
Specifies address of a legal entity such as street address or pin code
Optimisation for Consumer
Optimize activities and services for consumer or user
has context
Indicates a purpose is restricted to the specified context(s)
to use data
Use
Manage compliance for organisation in relation to internal policies
Organisation Compliance Management
Indiciates inclusion or applicability of a LegalEntity in the role of Data Importer
has data importer
An entity that 'imports' data where importing is considered a form of data transfer
Data Importer
The EU, in particular the EDPB, uses data importing the context of cross-border data transfers/flows. These concepts are not bound by jurisdictional or geopolitical scopes within DPV and can thus be used for any notion of importing
Specific or special categories and instances of legal basis intended for justifying data transfers
Data Transfer Legal Basis
A legally binding agreement
Legal Agreement
Customer Management
Manage past, current, and future customers
Risk Mitigation Measure
Measures intended to mitigate, minimise, or prevent risk.
Remove
to destruct or erase data
The rights applicable or provided to a Data Subject
Data Subject Right
Based on use of definitions, the notion of 'Data Subject Right' can be equivalent to 'Individual Right' or 'Right of a Person'
Data Protection Authority
An authority tasked with overseeing legal compliance regarding privacy and data protection laws.
A DPIA involves determining the potential and actual impact of processing activities on individuals or groups of individuals
Top class: Impact Assessment, and DPIA is sub-class
Data Protection Impact Assessment (DPIA)
Indicates association with Personal Data
has personal data
Create Product Recommendations
Create and provide product recommendations e.g. suggest similar products
An organisation that does not aim to achieve profit as its primary goal
NonProfitOrganisation
has storage
Indicates information about storage condition
Improve existing products and services
Improve Existing Products and Services
This definition of personal data encompasses the concepts used in GDPR Art.4-1 for 'personal data' and ISO/IEC 2700 for 'personally identifiable information (PII)'.
Data directly or indirectly associated or related to an individual.
Personal Data
Indicates information about location
has location
Represents a country outside applicable or compatible jurisdiction as outlined in law
Third Country
Privacy by Default
Practices regarding selecting appropriate data protection and privacy measures as the 'default' in an activity or service
Detect and prevent fraud
Fraud Prevention and Detection
has recipient
Indicates Recipient of Personal Data
Service Provision
Provide service or product or activities
has entity
parent property for controller, processor, data subject, authority, etc.?
Indicates inclusion or applicability of an entity to some concept
Specifies the instant in time when consent was given
has provision time
Not Required
Indication of neither being required nor optional i.e. not relevant or needed
A human or non-human 'thing' that constitutes as an entity and which is recognised and defined in law
Legal Entity
to disclose data by means of transmission
Disclose by Transmission
has provision by justification
This field can be used to proivde a justification why the provision was provided by another DataSubject or legal entity, e.g. declariing the relationship (parent, guardian), in combination with the field provisionBy
Specifies the justification for entity providing consent
Non-Public Data Source
A source of data that is not publicly accessible or available
The term 'data subject' is specific to the GDPR, but is functionally equivalent to the term 'individual' and the ISO/IEC term 'PII Principle'.
The individual (or category of individuals) whose personal data is being processed
Data Subject
An indication of 'importance' within a context
Importance
Importance can be used to express importance, desirability, relevance, or significance as a context.
Sell Insights from Data
Sell here means exchange, submit, or provide in return for direct or indirect compensation. Was subclass of commercial interest, changed to reflect selling something
Sell data or information relevant to insights obtained from analysis of data
Processing that involves systematic monitoring of individuals
Systematic Monitoring
IndustryConsortium
A consortium established and comprising on industry organisations
A political union of two or more countries based on economic or trade agreements
EconomicUnion
SupraNationalUnion
A political union of two or more countries with an establishment of common authority
Combine
to join or merge data
Indicates applicability or relevance of a 'third country'
has third country
Creation, completion, fulfilment, or performance of a contract involving specified processing
Contract
Legal basis (plural: legal bases) are defined by legislations and regulations, whose applicability is usually restricted to specific jurisdictions.
The Legal basis used to justify processing of personal data
Legal Basis
Data Transfer Impact Assessment
Impact Assessment for conducting data transfers
to retrieve data, often in an automated manner
Retrieve
Indicates applicability of Risk
has risk
Natural Person
A human
Profiling
to create a profile that describes or represents a person
Sub-Processor Agreement
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data between a Data Processor and a Data (Sub-)Processor
A group of Data Controllers that jointly determine the purposes and means of processing
To indicate the membership, hasDataController may be used
Joint Data Controllers
Consultation with an authority or authoritative entity
Consultation with Authority
Structure
to arrange data according to a structure
Optimize activities and services for provider or controller
Optimisation for Controller
AcademicScientificOrganisation
Organisations related to academia or scientific pursuits e.g. Universities, Schools, Research Bodies
Specifies name of a legal entity
has name
Public Interest
Processing is necessary or beneficial for interest of the public or society at large
Anonymised Data
Personal Data that has been (fully and completely) anonymised so that it is no longer considered Personal Data
It is advised to carefully consider indicating data is fully or completely anonymised by determining whether the data by itself or in combination with other data can identify a person. Failing this condition, the data should be denoted as PseudoAnonymisedData. To indicate data is anonymised only for a specified entity (e.g. within an organisation), the concept AnonymisedDataWithinScope (as subclass of PseudoAnonymisedData) should be used instead of AnonymisedData.
Indicates association with Data Controller
has data controller
Encryption in Transfer
Encryption of data in transit e.g. when being transferred from one location to another, including sharing
Sell here means exchange, submit, or provide in return for direct or indirect compensation.
Sell products or services
Sell Products
Concept
A general term reflecting a company or a business or a group acting as a unit
Organisation
A notice is an artefact for providing information, choices, or controls
Notice
Optimise User Interface
Optimize interfaces presented to the user
Processing
The processing performed on personal data
Consult
to consult or query data
Disseminate
to spread data throughout
A safeguard is a precautionary measure for the protection against or mitigation of negative effects
Safeguard
This concept is relevant given the requirement to assert safeguards in cross-border data transfers
Vendor Records Management
Manage orders related to vendors
Indiciates inclusion or applicability of a Data Processor
has data processor
Processing necessary to enter into contract
Enter Into Contract
has data exporter
Indiciates inclusion or applicability of a LegalEntity in the role of Data Exporter
Data Source
Source' is the direct point of data collection; 'origin' would indicate the original/others points of where the data originates from.
The source or origin of data
Create, maintain, and manage accounts for purposes of providing services
Account Management
has identifier
Indicates an identifier associated for identification or reference
is policy for
Indicates the context or application of policy
Certification and Seal
Certifications, seals, and marks indicating compliance to regulations or practices
to gather data from someone
Collect
Restrict
to apply a restriction on the processsing of specific records
Policy regarding repetition or renewal of existing certification(s)
Regularity of Re-certification
Customer Claims Management
Manage claims, including repayment of monies owed
to solicit or gather data from someone
Obtain
Records of activities within some context such as maintainence tasks or governance functions
Records of Activities
Indicates applicability of a Law
has applicable law
Record Management
Manage creation, storage, and use of records relevant to operations, events, and processes e.g. to store logs or access requests
Practices regarding incorporating data protection and privacy in the design of information and services
Privacy by Design
Conduct research in a commercial setting or with intention to commercialise e.g. in a company or sponsored by a company
Commercial Research
An organisation that aims to achieve profit as its primary goal
ForProfitOrganisation
to modify the data, often rewritten into a new form for a new use
Adapt
Indicates use or applicability of Organisational measure
has organisational measure
Fulfilment of obligations or requirements towards achieving compliance with law or regulations
Legal Compliance
Data Processor
A ‘processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
has frequency
Indicates the frequency with which something takes place
Advertising
Advertising is a subset of Marketing. Advertising by itself does not indicate 'personalisation' i.e. personalised ads.
Conduct advertising i.e. process or artefact used to call attention to a product, service, etc. through announcements, notices, or other forms of communication
Examples (non-exhaustive) include: Algorithm, Process, Method, Skill, Database, Cookies, Server, Device
Technology
The technology, technological implementation, or any techniques, skills, methods, and processes used or applied
Location or geospatial scope where the data is stored
Storage Location
Personal Data Handling
A high-level Class to describe 'data handling'. This can consist of personal data being processed for a purpose, involving entities, using technical and organisational measures, applicable risks, rights, and legal basis.
Sell data or information to third parties
Sell Data to Third Parties
Organisation Risk Management
Manage risk for organisation's activities
Manage payment of vendors
Vendor Payment
Vendor Selection Assessment
Manage selection, assessment, and evaluation related to vendors
Social Media
Conduct marketing through social media
Specifies the method by which consent was provisioned or provided
Can be used to record information of how consent was provided e.g. by a click to a form, in writing, etc., by logging into a system and confirm per email, or with some additional authentication, etc.
has provision method
has jurisdiction
Indicates applicability of specified jurisdiction
Data Processing Agreement
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data
For specific role-based data processing agreements, see concepts for Processors and JointDataController agreements.
The terms 'Controller' is usually the more common form of indicating a Data Controller. In ISO/IEC the term 'PII Controller' is used.
The individual or organisation that decides (or controls) the purpose(s) of processing personal data.
Data Controller
Normally this would be the dataSubject, but in some exceptional cases, the consent might be given on behalf by someone else, e.g. parents of minors.
has provision by
Specifies the entity that provisioned or provided consent
Legitimate Interest of Controller
Legitimate Interests of a Data Controller in conducting specified processing
Manage and conduct public relations processes. This includes creating goodwill for the organization.
Public Relations
Manage orders, payment, evaluation, and prospecting related to vendors
Vendor Management
Record
to make a record (especially media)
SupraNationalAuthority
e.g. EU, EDPB
Erase
to delete data
Controller-Processor Agreement
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data between a Data Controller and a Data Processor
Create and provide personalised recommendations for events
Create Event Recommendations
Vital Interest of Natural Person
Processing is necessary or required to protect vital interests of a natural person
Indicates policy applicable or used
has policy
mitigates risk
Indicates mitigation of risk(s)
to produce an exact reprodution of the data
Copy
Can be used to record information of how to withdraw consent, e.g. by a click to a form, in writing, etc., by logging into a system and confirm per email, or with some additional authentication, etc.
has withdrawal method
Specifries the method by which consent can be/has been withdrawn
Manage customer orders
Customer Order Management
Certification mechanisms, seals, and marks for the purpose of demonstrating compliance
Certification
to organize data for arranging or classifying
Organise
Inferred Data is data that is derived from existing data, but which did not originally exist within it, e.g. inferring demographics from browsing history.
Personal Data that is obtained through inference from other data
Inferred Personal Data
Automated Decision Making
Processing that involves automated decision making
NationalAuthority
e.g. DPA, but not all "DPA" are national authority e.g. EDPS and EDPB
has consent notice
The actual notice that the Data Subject received to consent to, either a text or link to a document, which should be usable to decide whether the form or consent was compliant to legislation, e.g. documenting how the user has been informed about rights and implications (such as, right to data portability,right to recitffy, right to erasure, right to restrict processing, right to object, rights regarding automated decision making or profiling, processors, third parties, sub-processors, outside-EEA transfers, automated decision-making, or other necessary details of the privacy-policy). Can be TextOrDocumentOrURI.
Specifies the notice provided in context of consent
has recipient third party
Indiciates inclusion or applicability of a Third Party as a Recipient of persona data
Customer Solvency Monitoring
Monitor solvency of customers for financial diligence
Personal Data that has undergone a partial (incomplete) anonymisation process such that it is still considered Personal Data
Pseudo-anonymised Data
Design Standard
A set of rules or guidelines outlining criterias for design
Optional
Indication of 'optional' or 'voluntary'
Processing that involves use of innovative and new technologies
Innovative Use of New Technologies
has right
Indicates use or applicability of Right
Relation
isSubTypeOf