Data subjects that purchase goods or services
Customer
note: for B2B relations where customers are organisations, this concept only applies for data subjects
accepted
Indication of 'optional' or 'voluntary'
Optional
SupraNationalUnion
A political union of two or more countries with an establishment of common authority
Specifies the instant in time when consent was given
has provision time
Data subjects that consume goods or services for direct use
Consumer
Necessity
Necessity can be used to express need, essentiality, requirement, or compulsion.
An indication of 'necessity' within a context
Fulfilment or performance of a contract involving specified processing
Contract Performance
Indication of 'secondary' or 'minor' or 'auxiliary' importance
Secondary Importance
Manage compliance for organisation in relation to internal policies
Organisation Compliance Management
Create and provide product recommendations e.g. suggest similar products
Create Product Recommendations
Academic Research
Conduct or assist with research conducted in an academic context e.g. within universities
Authorisation Procedure
Procedures for determining authorisation through permission or authority
non-technical authorisation procedures: How is it described on an organisational level, who gets access to the data
Privacy Notice
Represents a notice or document outlining information regarding privacy
An authority tasked with overseeing legal compliance for a supra-national union e.g. EU
SupraNationalAuthority
Duration or temporal limitation on storage of personal data
Storage Duration
Indicates applicability or relevance of a 'third country'
has third country
Indicates an identifier associated for identification or reference
has identifier
Specifies the condition or event that determines the expiry of consent
has expiry condition
Can be TextOrDocumentOrURI
Indicates information about storage condition
has storage
Activity Ongoing
State of an activity occuring in continuation i.e. currently ongoing
Representative
A representative of a legal entity
Records of personal data processing, whether ex-ante or ex-post
Data Processing Records
Customer Management
Manage past, current, and future customers
Legitimate Interest of Controller
Legitimate Interests of a Data Controller in conducting specified processing
Specifices an associated data protection officer
has data protection officer
Credit Checking
Monitor, perform, or assess credit worthiness or solvency
has compliance status
Indicates the status of compliance of specified concept
Customer Claims Management
Manage claims, including repayment of monies owed
Impact that acts as or causes detriments
Detriment
to adjust the data to be in relation to another data
Align
The Data Privacy Vocabulary (DPV) provides terms (classes and properties) to represent information about legally compliant personal data handling, which includes purposes, processing, personal data, technical and organisational measures.
Data Privacy Vocabulary
has jurisdiction
Indicates applicability of specified jurisdiction
Specifies the instant in time when consent was withdrawn
has withdrawal time
Data subjects that are students
Student
Enforce Access Control
Was previously "Access Control". Prefixed to distinguish from Technical Measure.
Conduct or enforce access control
Targeted Advertising
Create and provide pesonalised advertisement where the personalisation is targeted to a specific individual or group of individuals
Conduct advertising i.e. process or artefact used to call attention to a product, service, etc. through announcements, notices, or other forms of communication
Advertising
Advertising is a subset of Marketing. Advertising by itself does not indicate 'personalisation' i.e. personalised ads.
has country
Indicates applicability of specified country
Policy
A guidance document outlining any of: procedures, plans, principles, decisions, intent, or protocols.
Data Transfer Legal Basis
Specific or special categories and instances of legal basis intended for justifying data transfers
The frequency or information about periods and repetitions in terms of recurrence.
Frequency
Generic property specifying when or under which condition(s) the consent will expire
has expiry
Process by which some personal identifiers are removed or identifiability is reduced
Anonymization
Indicates the status of specified concept
has status
Inferred Data is derived data generated from existing data, but which did not originally exist within it, e.g. inferring demographics from browsing history.
Inferred Personal Data
Personal Data that is obtained through inference from other data
Data subjects that apply for jobs or employments
JobApplicant
Applicant
Data subjects that are applicants in some context
Marketing
Conduct marketing in relation to organisation or products or services e.g. promoting, selling, and distributing
Was commercial interest, changed to consider Marketing a separate Purpose category by itself
Indicates the source or origin of data being processed
has data source
Measures intended to mitigate, minimise, or prevent risk.
Risk Mitigation Measure
Non-Public Data Source
A source of data that is not publicly accessible or available
Data subjects that are not citizens (for a jurisdiction)
NonCitizen
Safeguard for Data Transfer
Represents a safeguard used for data transfer. Can include technical or organisational measures.
Provide assistance, resolve issues, ensure satisfaction in relation to services provided
Customer Care
Duration
The duration or temporal limitation
A general term reflecting a company or a business or a group acting as a unit
Organisation
Protocols involving validation of identity i.e. authentication of a person or information
Authentication Protocols
Entity
A human or non-human 'thing' that constitutes as an entity
Indicates impact(s) possible or arising as consequences from specified concept
has impact
Practices regarding selecting appropriate data protection and privacy measures as the 'default' in an activity or service
Privacy by Default
Tied to compliance processes and documents, decide how to specify those
A ROPA is a document maintained by Data Controllers detailing processing activities carried out under their responsibility
Register of Processing Activities
has data exporter
Indiciates inclusion or applicability of a LegalEntity in the role of Data Exporter
This field can be used to proivde a justification why the weithdrawal was done by another DataSubject or legal entity, e.g. declariing the relationship (parent, guardian), in combination with the field withdrawalBy
has withdrawal by justification
Specifies the justification for entity withdrawing consent
Consultation with Authority
Consultation with an authority or authoritative entity
Service Order Management
Manage invoicing, orders, and records in relation to services
An authority tasked with overseeing legal compliance for a nation
NationalAuthority
The use of 'entity' is inclusive of entities (e.g. Data Processor) as well as 'agent' (e.g. DPO). For indicating technological implementation, the property isImplementedByTechnology should be used.
Indicates implementation details such as entities or agents
is implemented by entity
modified
Use of credentials or processes that enable using one set of credentials to authenticate multiple contexts.
Single Sign On
Processing Context
Context or conditions within which processing takes place
Staff Training
Practices and policies regarding training of staff members
Optimize activities and services for provider or controller
Optimisation for Controller
Top class: Impact Assessment, and DPIA is sub-class
Data Protection Impact Assessment (DPIA)
A DPIA involves determining the potential and actual impact of processing activities on individuals or groups of individuals
Maintain registry of shareholders, members, or partners for governance, administration, and management functions
Members and Partners Management
Regularity of Re-certification
Policy regarding repetition or renewal of existing certification(s)
Legal basis (plural: legal bases) are defined by legislations and regulations, whose applicability is usually restricted to specific jurisdictions.
Legal Basis
The Legal basis used to justify processing of personal data
Violation of Compliance
State where objectives have been violated
to create a profile that describes or represents a person
Profiling
has policy
Indicates policy applicable or used
An entity that 'exports' data where exporting is considered a form of data transfer
Data Exporter
The EU, in particular the EDPB, uses data exporter the context of cross-border data transfers/flows. These concepts are not bound by jurisdictional or geopolitical scopes within DPV and can thus be used for any notion of exporting
Indicates the logic used in processing such as for automated decision making
has algorithmic logic
Move
to move data from one location to another including deleting the original copy
Sector
Indicate or restrict scope for interpretation and application of purpose in a domain e.g. Agriculture, Banking
There are various sector codes used commonly to indicate the domain of an organisation or business. Examples include NACE (EU), ISIC (UN), SIC and NAICS (USA).
Technical measures required/followed when processing data of the declared category
Technical Measure
Improve existing products and services
Improve Existing Products and Services
State of an activity that has completed i.e. is fully in the past
Activity Completed
Processing that involves evaluation and scoring of individuals
Evaluation and Scoring
Risk Management Procedure
Data Protection Impact Assessments as per GDPR art 35, other Privacy Impact Assessments, threat severity assessment https://www.cnil.fr/en/privacy-impact-assessment-pia
Risk management refers to a coordinated set of activities and methods that is used to direct an organization and to control the many risks that can affect its ability to achieve objectives. The term risk management also refers to the programme that is used to manage risk. This programme includes risk management principles, a risk management framework, and a risk management process.
Manage disputes by natural persons, private bodies, or public authorities relevant to organisation
Dispute Management
Research and Development
Conduct research and development for new methods, products, or services
Vendor Records Management
Manage orders related to vendors
This purpose by itself does not sufficiently and clearly indicate what the communication is about. As such, it is recommended to combine it with another purpose to indicate the application. For example, Communication of Payment.
Manage communication or provide means for communication e.g. to send an email notifying some information
Communication Management
A location is a position, site, or area where something is located
Location
Location may be geographic, physical, or virtual.
Audit Required
State where an audit is determined as being required but has not been conducted
Organise
to organize data for arranging or classifying
The involvement of humans in specified context
Human Involvement
Human Involvement here broadly refers to any involvement by a human in the context of carrying out processing. This may include verification of outcomes, providing input data for making decisions, or overseeing activities.
Creation, completion, fulfilment, or performance of a contract involving specified processing
Contract
The purpose of processing personal data
Purpose
Increase Service Robustness
Improve robustness and resilience of services
Derived Data is data that is obtained through processing of existing data, e.g. deriving first name from full name. To indicate data that is derived but which was not present or evident within the source data, InferredPersonalData should be used.
Personal Data that is obtained or derived from other data
Derived Personal Data
Alter
to change the data without changing it into something else
Register, authenticate, and identify users or agents in context of a service
Registration and Authentication
A political entity indicative of a sovereign or non-sovereign territorial state comprising of distinct geographical areas
Country
The definition of country is not intended for political interpretation. DPVCG welcomes alternate definitions based in existing sources with global scope, such as UN or ISO.
to join or merge data
Combine
has provision method
Specifies the method by which consent was provisioned or provided
Can be used to record information of how consent was provided e.g. by a click to a form, in writing, etc., by logging into a system and confirm per email, or with some additional authentication, etc.
Subclass of ServiceProvision since personalisation is usually considered part of providing services
Personalise services or product or activities
Service Personalization
Tourist
Data subjects that are tourists i.e. not citizens and not immigrants
Technology
Examples (non-exhaustive) include: Algorithm, Process, Method, Skill, Database, Cookies, Server, Device
The technology, technological implementation, or any techniques, skills, methods, and processes used or applied
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data between a Data Processor and a Data (Sub-)Processor
Sub-Processor Agreement
Public Relations
Manage and conduct public relations processes. This includes creating goodwill for the organization.
Privacy Impact Assessment
Carrying out an impact assessment regarding privacy risks
ContractualTerms
Contractual terms governing data handling within or with an entity
Indicates use or applicability of Organisational measure
has organisational measure
Technical_Organisational_Measures Concepts
Data Subject Right
The rights applicable or provided to a Data Subject
Based on use of definitions, the notion of 'Data Subject Right' can be equivalent to 'Individual Right' or 'Right of a Person'
Manage orders, payment, evaluation, and prospecting related to vendors
Vendor Management
NonProfitOrganisation
An organisation that does not aim to achieve profit as its primary goal
A human
Natural Person
Legal Obligation
Legal Obligation to conduct the specified processing
Organisational Measure
Organisational measures required/followed when processing data of the declared category
Indicates information about duration
has duration
Contextually relevant information about purpose not possible to represent through other concepts
Context
to come into possession or control of the data
Acquire
Analyse
to study or examine the data in detail
Audit Rejected
State of not being approved or being rejected through the audit
Optimize internal resource availability and usage for organisation
Internal Resource Optimisation
The processing performed on personal data
Processing
Indicates Recipient of Personal Data
has recipient
Notice
A notice is an artefact for providing information, choices, or controls
Personal data that is considered 'sensitive' in terms of privacy and/or impact, and therefore requires additional considerations and/or protection
Sensitive Personal Data
Sensitivity' is a matter of context, and may be defined within legal frameworks. For GDPR, Special categories of personal data are considered a subset of sensitive data. To illustrate the difference between the two, consider the situation where Location data is collected, and which is considered 'sensitive' but not 'special'. As a probable rule, sensitive data require additional considerations whereas special category data requires additional legal basis / justifications.
to keep data for future use
Store
has applicable law
Indicates applicability of a Law
Non-Commercial Research
Conduct research in a non-commercial setting e.g. for a non-profit-organisation (NGO)
Indicates information about location
has location
Vendor Selection Assessment
Manage selection, assessment, and evaluation related to vendors
Altering personal data irreversibly such that a data subject can no longer be identified directly or indirectly, either by the data controller alone or in collaboration with any other party
Complete Anonymisation
Vital Interest of Natural Person
Processing is necessary or required to protect vital interests of a natural person
This concept denotes a Data Subject or a group are vulnerable, but not what vulnerability they possess or its context. This information can be provided additionally as comments, or as separate concepts and relations. Proposals for this are welcome.
Vulnerable Data Subject
Data Subjects which should be considered 'vulnerable' and therefore would require additional measures and safeguards
Retrieve
to retrieve data, often in an automated manner
Entity within an organisation that does not constitute as a separate legal entity
Organisational Unit
Data subjects that receive medican attention, treatment, care, advice, or other health related services
Patient
Encryption in Rest
Encryption of data when being stored (persistent encryption)
Indicates the specified concepts is 'after' this concept in some context
is after
Data Importer
The EU, in particular the EDPB, uses data importing the context of cross-border data transfers/flows. These concepts are not bound by jurisdictional or geopolitical scopes within DPV and can thus be used for any notion of importing
An entity that 'imports' data where importing is considered a form of data transfer
is implemented using technology
The term 'technology' is inclusive of technologies, processes, and methods.
Indicates implementation details such as technologies or processes
Client
Data subjects that are clients or recipients of services
Processing that involves use of innovative and new technologies
Innovative Use of New Technologies
Practices regarding incorporating data protection and privacy in the design of information and services
Privacy by Design
The terms 'Controller' is usually the more common form of indicating a Data Controller. In ISO/IEC the term 'PII Controller' is used.
Data Controller
The individual or organisation that decides (or controls) the purpose(s) of processing personal data.
Assessment
The document, plan, or process for assessment or determination towards a purpose e.g. assessment of legality or impact assessments
Record Management
Manage creation, storage, and use of records relevant to operations, events, and processes e.g. to store logs or access requests
Third Country
Represents a country outside applicable or compatible jurisdiction as outlined in law
An authority with the power to create or enforce laws, or determine their compliance.
Authority
Algorithmic Logic
Algorithmic Logic is intended as a broad concept for explaining the use of algorithms and automated decisions making within Processing. To describe the actual algorithm, see the Algorithm concept.
The algorithmic logic applied or used
Damage
Impact that acts as or causes damages
has activity status
Indicates the status of activity of specified concept
has name
Specifies name of a legal entity
Conduct research in a commercial setting or with intention to commercialise e.g. in a company or sponsored by a company
Commercial Research
PseudoAnonmyization or 'pseudonymisation’ means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person;
Pseudo-Anonymization
Law
A law is a set of rules created by government or authorities
Indiciates inclusion or applicability of a Data Controller as a Recipient of persona data
has recipient data controller
International Organisation
An organisation and its subordinate bodies governed by public international law, or any other body which is set up by, or on the basis of, an agreement between two or more countries
Indicates applicability of authority for a jurisdiction
has authority
Data subjects that are members of a group, organisation, or other collectives
Member
A ‘processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
Data Processor
Status associated with activity operations and lifecycles
Activity Status
An authority tasked with overseeing legal compliance for a region
RegionalAuthority
State of not being compliant
Incompliant
has context
Indicates a purpose is restricted to the specified context(s)
to transform or publish data to be used
Make Available
Indicates use or applicability of Technical measure
has technical measure
State of partially being compliant i.e. only some objectives have been met, and others have not been in violation
Partially Compliant
to spread data throughout
Disseminate
Certifications, seals, and marks indicating compliance to regulations or practices
Certification and Seal
Activity Halted
State of an activity that was occuring in the past, and has been halted or paused or stoped
State where an audit is determined as not being required
Audit Not Required
Citizen
Data subjects that are citizens (for a jurisdiction)
A ‘third party’ means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and people who, under the direct authority of the controller or processor, are authorised to process personal data.
Third Party
Identity Verification
Verify or authorize identity
Guidelines or Principles regarding processing and operational measures
GuidelinesPrinciple
State of not being compliant where objectives have not been met, but have not been violated
Not Compliant
Benefit
Impact(s) that acts as or causes benefits
Indicates association with Processing
has processing
Consequence of Success
The consequence(s) possible or arising from success of specified context
Indication of 'primary' or 'main' or 'core' importance
Primary Importance
Organisations related to academia or scientific pursuits e.g. Universities, Schools, Research Bodies
AcademicScientificOrganisation
to replace personal identifiable information by artificial identifiers
Pseudo-Anonymise
Indicates the purpose is associated with activities in the indicated (Economic) Sector(s)
has sector
Subscriber
note: subscriber can be customer or consumer
Data subjects that subscribe to service(s)
Data that is not Personal Data
Non-Personal Data
The term NonPersonalData is provided to distinguish between PersonalData and other data, e.g. for indicating which data is regulated by privacy laws. To specify personal data that has been anonymised, the concept AnonymisedData should be used.
Detect and prevent fraud
Fraud Prevention and Detection
Data
A broad concept representing 'data' or 'information'
Derive indicates data is present or obtainable from existing data. For data that is created without such existence, see Infer.
Derive
to create new derivative data from the original data
The conditions for what is considered 'explicit consent' differ by norms and laws.
is explicit
Specifies consent is 'explicit'
Optimise User Interface
Optimize interfaces presented to the user
A 'right' is a legal, social, or ethical principle of freedom or entitlement which dictate the norms regarding what is allowed or owed.. Rights as a concept encompass a broad area of norms and entities, and are not specific to Individuals or Data Protection / Privacy. For individual specific rights, see dpv:DataSubjectRight
The right(s) applicable, provided, or expected.
Right
Payment
Process payment transactions in relation to service
Compliant
State of being fully compliant
Sell data or information to third parties
Sell Data to Third Parties
Sell here means exchange, submit, or provide in return for direct or indirect compensation. Was subclass of commercial interest, changed to reflect selling something
Communication for Customer Care
Communicate with customers for assisting them, resolving issues, ensuring satisfaction in relation to services provided
Processing is necessary or beneficial for interest of the public or society at large
Public Interest
Data Subject
The individual (or category of individuals) whose personal data is being processed
The term 'data subject' is specific to the GDPR, but is functionally equivalent to the term 'individual' and the ISO/IEC term 'PII Principle'.
Record
to make a record (especially media)
Encryption of data in transit e.g. when being transferred from one location to another, including sharing
Encryption in Transfer
Share
to give data (or a portion of it) to others
Non-Disclosure Agreement (NDA)
Non-disclosure Agreements e.g. preserving confidentiality of information
Audit Status
Status associated with Auditing or Investigation
to produce an exact reprodution of the data
Copy
De-Identification
Removal of identity or information to reduce identifiability
isInstanceOf
Required
Indication of 'required' or 'necessary'
Customer Order Management
Manage customer orders
Personnel Management
Management of personnel associated with the organisation e.g. evaluation and management of employees and intermediaries
Storage Location
Location or geospatial scope where the data is stored
Deliver service as requested by user or consumer
Requested Service Provision
Customer Solvency Monitoring
Monitor solvency of customers for financial diligence
Impact Assessment for conducting data transfers
Data Transfer Impact Assessment
Obtain
to solicit or gather data from someone
An organisation not part of or independent from the government
NonGovernmentalOrganisation
to gather data from someone
Collect
Anti-Terrorism Operations
Detect, prevent, mitigate, or otherwise act on anti-terrorism activities
Sell Products to Data Subject
Was subclass of commercial interest, changed to reflect selling something
Sell products or services to the user, consumer, or data subjects
Technical measures consisting of encryption
Encryption
has joint data controllers
Indicates inclusion or applicability of a Joint Data Controller
Vendor Payment
Manage payment of vendors
A recipient of personal data can be used to indicate any entity that receives personal data. This can be a Third Party, Processor (GDPR), or even a Controller.
Entities that receive personal data
Recipient
Consequence as Side-Effect
The consequence(s) possible or arising as a side-effect of specified context
Audit Approved
State of being approved through the audit
Indicates association with Data Subject
has data subject
Joint Data Controllers Agreement
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data between Controllers within a Joint Controllers relationship
A 'sub-processor' is a processor engaged by another processor
Data Sub-Processor
sub-processor' is a commonly used term similar to 'sub-contractor' and does not have a specific legal definition
to apply a restriction on the processsing of specific records
Restrict
Delivery of Goods
Deliver goods and services requested or asked by consumer
The status or state of something
Status
Pseudo-anonymised Data
Personal Data that has undergone a partial (incomplete) anonymisation process such that it is still considered Personal Data
has data controller
Indicates association with Data Controller
Indicates the context or application of policy
is policy for
The term 'special category' is based on GDPR Art.9, but should not be considered as exlusive to it. DPV considers all Special Categories to also be Sensitive, but whose use is either prohibited or regulated and therefore requires additional legal basis for justification.
Sensitive Personal Data whose use requires specific legal permission or justification
Special Category Personal Data
Indiciates inclusion or applicability of a LegalEntity in the role of Data Importer
has data importer
Human Resources Management
HR is a broad concept. Its management includes, amongst others - recruiting employees and intermediaries e.g. brokers, independent representatives; payroll administration, remunerations, commissions, and wages; and application of social legislation.
Manage humans and 'human resources' within the organisation for effective and efficient operations.
Indicate a risk is mitigated by specified measure
is mitigated by measure
A political union of two or more countries based on economic or trade agreements
EconomicUnion
Specifies the justification for entity providing consent
This field can be used to proivde a justification why the provision was provided by another DataSubject or legal entity, e.g. declariing the relationship (parent, guardian), in combination with the field provisionBy
has provision by justification
Indicates risks mitigated by this concept
mitigates risk
Consultation is a process of receiving feedback, advice, or opinion from an external agency
Consultation
Data subjects that participate in some context such as volunteers in a function
Participant
Create and provide personalised benefits for a service
Personalised Benefits
IndustryConsortium
A consortium established and comprising on industry organisations
Disclose
to make data known
Fulfilment of obligations or requirements towards achieving compliance with law or regulations
Legal Compliance
Sell Insights from Data
Sell data or information relevant to insights obtained from analysis of data
to disclose data by means of transmission
Disclose by Transmission
Sell Products
Sell here means exchange, submit, or provide in return for direct or indirect compensation.
Sell products or services
Processing that involves systematic monitoring of individuals
Systematic Monitoring
Legitimate Interest Assessment
Indicates an assessment regarding the use of legitimate interest as a lawful basis by the data controller
Anonymise
to irreversibly alter personal data in such a way that an unique data subject can no longer be identified directly or indirectly or in combination with other data
Indicates the frequency with which something takes place
has frequency
A safeguard is a precautionary measure for the protection against or mitigation of negative effects
Safeguard
This concept is relevant given the requirement to assert safeguards in cross-border data transfers
Activity Proposed
State of an activity being proposed or planned i.e. yet to occur
Data subjects that are immigrants (for a jurisdiction)
Immigrant
Organisation Governance
Conduct activities and functions for organisation's governance
Indiciates inclusion or applicability of a Data Processor
has data processor
Optimize activities and services for consumer or user
Optimisation for Consumer
A region is an area or site that is considered a location
Region
Non-Material Damage
Impact that acts as or causes non-material damages
has personal data handling
Indicates association with Personal Data Handling
Management and execution of hiring processes of personnel
Personnel Hiring
A natural person that is not a child i.e. has attained some legally specified age of adulthood
Adult
Consent
Consent of the Data Subject for specified processing
Service Provision
Provide service or product or activities
“the ability to make decisions by technological means without human involvement.” (“Guidelines on Automated individual decision-making and Profiling for the purposes of Regulation 2016/679 (wp251rev.01)”, 2018, p. 8)
Processing that involves automated decision making
Automated Decision Making
Infer
to infer data from existing data
Infer indicates data that is derived without it being present or obtainable from existing data. For data that is presented, and is 'extracted' or 'obtained' from existing data, see Derive.
Enter Into Contract
Processing necessary to enter into contract
to process data in a way it no longer exists or cannot be repaired
Destruct
Personalised Advertising
Create and provide personalised advertising
User Interface Personalisation
Personalise interfaces presented to the user
Audit Requested
State of an audit being requested whose outcome is not yet known
Controller-Processor Agreement
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data between a Data Controller and a Data Processor
Technical and Organisational Measure
The Technical and Organisational measures used.
Data subjects that are temporary visitors
Visitor
Deletion or Erasure of data including any deletion guarantees
Storage Deletion
Processing that takes place at large scales
Large Scale Processing
Indicates the thing (e.g. plan, process, or entity) affected by an impact
has impact on
An organisation that aims to achieve profit as its primary goal
ForProfitOrganisation
Conduct direct marketing i.e. marketing communicated directly to the individual
Direct Marketing
has address
Specifies address of a legal entity such as street address or pin code
Specifries the method by which consent can be/has been withdrawn
has withdrawal method
Can be used to record information of how to withdraw consent, e.g. by a click to a form, in writing, etc., by logging into a system and confirm per email, or with some additional authentication, etc.
Third-Party Agreement
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data between a Data Controller or Processor and a Third Party
Impact
The impact(s) possible or arising as a consequence from specified context
Impact is a stronger notion of consequence in terms of influence, change, or effect on something e.g. for impact assessments
Transfer
to move data from one place to another
Remove
to destruct or erase data
This definition of personal data encompasses the concepts used in GDPR Art.4-1 for 'personal data' and ISO/IEC 2700 for 'personally identifiable information (PII)'.
Data directly or indirectly associated or related to an individual.
Personal Data
Create and provide personalised recommendations
Create Personalized Recommendations
Erase
to delete data
User
Data subjects that use service(s)
Data Source
The source or origin of data
Source' is the direct point of data collection; 'origin' would indicate the original/others points of where the data originates from.
Customer Relationship Management
Manage and analyse interactions with past, current, and potential customers
Not Required
Indication of neither being required nor optional i.e. not relevant or needed
The consequence(s) possible or arising from failure of specified context
Consequence of Failure
A set of rules or procedures outlining the norms and practices for conducting activities
Code of Conduct
has consequence
Indicates consenquence(s) possible or arising from specified concept
Removed plural suffix for consistency
Enforce Security
Was previous "Security". Prefixed to distinguish from TechOrg measures.
Ensure and enforce security e.g. of data, personnel
Seal
A seal or a mark indicating proof of certification to some certification or standard
Access Control Method
Methods which restrict access to a place or resource
has legal basis
Indicates use or applicability of a Legal Basis
Specifies the indicated entity is responsible within some context
has responsible entity
has withdrawal by
Specifies the entity that withdrew consent
Normally this would be the dataSubject, but in some exceptional cases, the consent might be withdraawn on behalf by someone else, e.g. parents of minors.
Human involvement is also relevant to 'human in the loop'
Indicates Involvement of humans in processing such as within automated decision making process
has human involvement
has right
Indicates use or applicability of Right
Importance
Importance can be used to express importance, desirability, relevance, or significance as a context.
An indication of 'importance' within a context
has purpose
Indicates association with Purpose
has contact
Specifies contact details of a legal entity such as phone or email
Indicates use or applicability of Technical or Organisational measure
has technical and organisational measure
To indicate the source of data, use the DataSource concept with the hasDataSource relation
Collected Personal Data
Personal Data that has been collected from another source such as the Data Subject
A group of Data Controllers that jointly determine the purposes and means of processing
Joint Data Controllers
To indicate the membership, hasDataController may be used
Compliance Status
Status associated with Compliance with some norms, objectives, or requirements
to modify the data, often rewritten into a new form for a new use
Adapt
Manage and provide technical processes and functions necessary for delivering services
Technical Service Provision
Indicates the specified concepts is 'before' this concept in some context
is before
Use
to use data
A risk or possibility or uncertainty of negative effects, impacts, or consequences.
Risks can be associated with one or more different concepts such as purpose, processing, personal data, technical or organisational measure.
Risk
Indicates area, scope, or applicability of an Authority
is authority for
The legality of age defining a child varies by jurisdiction. In addition, 'child' is distinct from a 'minor'. For example, the legal age for consumption of alcohol can be 21, which makes a person of age 20 a 'minor' in this context. In other cases, 'minor' and 'child' are used interchangeably to refer to a person below some legally defined age.
Child
A 'child' is a natural legal person who is below a certain legal age depending on the legal jurisdiction.
Specifies the entity that provisioned or provided consent
Normally this would be the dataSubject, but in some exceptional cases, the consent might be given on behalf by someone else, e.g. parents of minors.
has provision by
Conditions required or followed regarding storage of data
Storage Condition
Generated Personal Data
Generated Data is used to indicate data that is produced and is not derived or inferred from other data
Personal Data that is generated or brought into existence without relation to existing data i.e. it is not derived or inferred from other data
Counter Money Laundering
Detect and prevent or mitigate money laundering
Harm
Impact that acts as or causes harms
Match
to combine, compare, or match data from different sources
Management and execution of payment of personnel
Personnel Payment
has personal data
Indicates association with Personal Data
A set of rules or guidelines outlining criterias for design
Design Standard
Public Data Source
The term 'Public' is used here in a broad sense. Actual consideration of what is 'Public Data' can vary based on several contextual or jurisdictional factors such as definition of open, methods of access, permissions and licenses.
A source of data that is publicly accessible or available
Conduct marketing through social media
Social Media
The actual notice that the Data Subject received to consent to, either a text or link to a document, which should be usable to decide whether the form or consent was compliant to legislation, e.g. documenting how the user has been informed about rights and implications (such as, right to data portability,right to recitffy, right to erasure, right to restrict processing, right to object, rights regarding automated decision making or profiling, processors, third parties, sub-processors, outside-EEA transfers, automated decision-making, or other necessary details of the privacy-policy). Can be TextOrDocumentOrURI.
has consent notice
Specifies the notice provided in context of consent
Certification mechanisms, seals, and marks for the purpose of demonstrating compliance
Certification
Generate
to generate or create data
Calculating or determining the likelihood of impact of an existing or proposed process, which can involve risks or detriments.
Impact Assessment
An organisation managed or part of government
GovernmentalOrganisation
has representative
Specifies representative of the legal entity
Storage Restoration
Regularity and temporal span of data restoration/backup mechanisms that guarantee that data is preserved
Data subjects that are employees
Employee
Indicates applicability of Risk
Indicates applicability of Risk for this concept
has risk
Subclass of ServiceProvision since optimisation is usually considered part of providing services
Service Optimization
Optimise services or activities
Data Protection Officer
An entity within or authorised by an organisation to monitor internal compliance, inform and advise on data protection obligations and act as a contact point for data subjects and the supervisory authority.
Data Protection Authority
An authority tasked with overseeing legal compliance regarding privacy and data protection laws.
A legally binding agreement
Legal Agreement
The consequence(s) possible or arising from specified context
Consequence
Material Damage
Impact that acts as or causes material damages
Create, maintain, and manage accounts for purposes of providing services
Account Management
Legitimate Interests of a Third Party in conducting specified processing
Legitimate Interest of Third Party
For specific role-based data processing agreements, see concepts for Processors and JointDataController agreements.
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data
Data Processing Agreement
Legal Entity
A human or non-human 'thing' that constitutes as an entity and which is recognised and defined in law
to consult or query data
Consult
has range
Processing is necessary or required to protect vital interests of a data subject
Vital Interest of Data Subject
isSubTypeOf
Processing is necessary or required to protect vital interests of a data subject or other natural person
Vital Interest
to arrange data according to a structure
Structure
It is advised to carefully consider indicating data is fully or completely anonymised by determining whether the data by itself or in combination with other data can identify a person. Failing this condition, the data should be denoted as PseudoAnonymisedData. To indicate data is anonymised only for a specified entity (e.g. within an organisation), the concept AnonymisedDataWithinScope (as subclass of PseudoAnonymisedData) should be used instead of AnonymisedData.
Anonymised Data
Personal Data that has been (fully and completely) anonymised so that it is no longer considered Personal Data
to change the form or nature of data
Transform
Improve customer-relationship management (CRM) processes
Improve Internal CRM Processes
A high-level Class to describe 'data handling'. This can consist of personal data being processed for a purpose, involving entities, using technical and organisational measures, applicable risks, rights, and legal basis.
Personal Data Handling
Was "UsageAnalytics", prefixed with Service to better reflect scope
Analytics
Conduct analysis and reporting related to usage of services or products
has expiry time
Specifies the expiry time or duration for consent
Legitimate Interest
Legitimate Interests of a Party as justification for specified processing
Records of Activities
Records of activities within some context such as maintainence tasks or governance functions
Organisation Risk Management
Manage risk for organisation's activities
Create and provide personalised recommendations for events
Create Event Recommendations
Transmit
to send out data
Indiciates inclusion or applicability of a Third Party as a Recipient of persona data
has recipient third party
Official Authority of Controller
Processing necessary or authorised through the official authority granted to or vested in the Data Controller
Create and provide customisation based on attributes and/or needs of person(s) or context(s).
This term is a blanket purpose category for indicating personalisation of some other purpose, e.g. by creating a subclass of the other concept and Personalisation
Personalisation
has domain
parent property for controller, processor, data subject, authority, etc.?
has entity
Indicates inclusion or applicability of an entity to some concept
Concept
Relation