Employee
in scheme: dpv#
definition: Data subjects that are employees
creator: Georg P. Krog
creator: Beatriz Esteves
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Julian Flake
term status: accepted
type: Concept
isSubTypeOf: Data Subject
created: 2022-04-06

Automation of Processing
in scheme: dpv#
type: Concept
created: 2022-06-15
definition: Contextual information about the degree of automation and human involvement associated with Processing
isSubTypeOf: Processing Context
note: It is difficult to provide a formal definition of automation since any and all processing may be considered automation. This concept instead is intended to explicitly signal the utilisation of automation and its extent towards some context - such as decision making, and to indicate the involvement of humans.
term status: accepted
creator: Harshvardhan J. Pandit

Child
in scheme: dpv#
modified: 2022-06-22
created: 2020-11-25
term status: changed
type: Concept
note: The legality of age defining a child varies by jurisdiction. In addition, 'child' is distinct from a 'minor'. For example, the legal age for consumption of alcohol can be 21, which makes a person of age 20 a 'minor' in this context. In other cases, 'minor' and 'child' are used interchangeably to refer to a person below some legally defined age.
isSubTypeOf: Data Subject
creator: Harshvardhan J. Pandit
definition: A 'child' is a natural legal person who is below a certain legal age depending on the legal jurisdiction.

Purposes Concepts
member: Internal Resource Optimisation
member: Create Personalized Recommendations
member: Record Management
member: Personalisation
member: Targeted Advertising
member: Academic Research
member: Identity Verification
member: Personnel Payment
member: Registration and Authentication
member: Purpose
member: Improve Existing Products and Services
member: Sector
member: Dispute Management
member: Customer Care
member: User Interface Personalisation
member: Analytics
member: Customer Claims Management
member: Customer Relationship Management
member: Customer Solvency Monitoring
member: Fraud Prevention and Detection
member: Communication for Customer Care
member: Payment
member: Credit Checking
member: Public Relations
member: Communication Management
member: Sell Insights from Data
member: Technical Service Provision
member: Account Management
member: Organisation Risk Management
member: Create Event Recommendations
member: Optimisation for Consumer
member: has sector
member: Vendor Selection Assessment
member: Sell Products
member: Enforce Security
member: Personalised Benefits
member: Optimisation for Controller
member: Increase Service Robustness
member: Optimise User Interface
member: Organisation Governance
member: Human Resources Management
member: Service Optimization
member: Create Product Recommendations
member: Delivery of Goods
member: Enforce Access Control
member: Direct Marketing
member: Legal Compliance
member: MaintainCreditRatingDatabase
member: MaintainFraudDatabase
member: Service Provision
member: Customer Order Management
member: Sell Products to Data Subject
member: Sell Data to Third Parties
member: Counter Money Laundering
member: Advertising
member: Vendor Records Management
member: Vendor Management
member: Research and Development
member: Social Media
member: Organisation Compliance Management
member: Non-Commercial Research
member: MaintainCreditCheckingDatabase
member: Personnel Hiring
member: Service Personalization
member: Vendor Payment
member: Identify and Repair Impairments
member: Personnel Management
member: Anti-Terrorism Operations
member: Improve Internal CRM Processes
member: Customer Management
member: Members and Partners Management
member: has purpose
member: Commercial Research
member: Service Order Management
member: Requested Service Provision
member: Marketing
member: Personalised Advertising
type: Collection

Entities_Datasubject Concepts
member: Consumer
member: has relation with data subject
member: Elderly Data Subject
member: Citizen
member: has data subject
member: NonCitizen
member: Child
member: Student
member: Parent(s) of Data Subject
member: Patient
member: User
member: Immigrant
member: Subscriber
member: Asylum Seeker
member: Client
member: Employee
member: Visitor
member: Participant
member: Guardian(s) of Data Subject
member: Customer
member: JobApplicant
member: Adult
member: Mentally Vulnerable Data Subject
member: Data Subject
member: Applicant
member: Tourist
member: Member
member: Vulnerable Data Subject
type: Collection

is implemented by entity
in scheme: dpv#
note: The use of 'entity' is inclusive of entities (e.g. Data Processor) as well as 'agent' (e.g. DPO). For indicating technological implementation, the property isImplementedByTechnology should be used.
has domain: Concept
creator: Beatriz Esteves
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Julian Flake
has range: Entity
term status: modified
type: Concept
type: Relation
modified: 2022-01-26
created: 2019-05-07
definition: Indicates implementation details such as entities or agents

Client
in scheme: dpv#
isSubTypeOf: Customer
creator: Georg P. Krog
creator: Beatriz Esteves
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
term status: accepted
created: 2022-04-06
definition: Data subjects that are clients or recipients of services

has provision by justification
in scheme: dpv#
created: 2019-04-05
definition: Specifies the justification for entity providing consent
editorial note: WARNING: This concept will be deprecated in future releases
creator: Mark Lizar
creator: Harshvardhan J. Pandit
creator: Bud Bruegger
type: Relation
type: Concept
term status: sunset
note: This field can be used to proivde a justification why the provision was provided by another DataSubject or legal entity, e.g. declariing the relationship (parent, guardian), in combination with the field provisionBy
modified: 2022-06-22

Consent Invalidated
in scheme: dpv#
definition: The state where consent has been deemed to be invalidate
type: Concept
term status: accepted
source: GConsent
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P Krog
note: An example of this state is where an investigating authority or a court finds the collected consent did not meet requirements, and 'invalidates' both prior and future uses of it to carry out processing
created: 2022-06-22
isInstanceOf: Consent Status Invalid for Processing

Registration and Authentication
in scheme: dpv#
type: Concept
created: 2020-11-04
creator: Georg P Krog
creator: Beatriz Esteves
creator: Harshvardhan J. Pandit
isSubTypeOf: Service Provision
term status: accepted
definition: Register, authenticate, and identify users or agents in context of a service

Vendor Payment
in scheme: dpv#
creator: Paul Ryan
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: David Hickey
type: Concept
created: 2021-09-01
definition: Manage payment of vendors
isSubTypeOf: Vendor Management
source: model-voor-een-register-van-de-verwerkingsactiviteiten
term status: accepted

has expiry
in scheme: dpv#
type: Relation
type: Concept
created: 2019-04-05
creator: Harshvardhan J. Pandit
creator: Bud Bruegger
creator: Mark Lizar
modified: 2022-06-22
definition: Generic property specifying when or under which condition(s) the consent will expire
editorial note: WARNING: This concept will be deprecated in future releases
term status: sunset

Material Damage
in scheme: dpv#
created: 2022-03-30
type: Concept
term status: accepted
definition: Impact that acts as or causes material damages
creator: Harshvardhan J. Pandit
isSubTypeOf: Damage

Access
in scheme: dpv#
type: Concept
isSubTypeOf: Use
created: 2022-06-15
creator: Harshvardhan J. Pandit
creator: Georg P Krog
definition: to access data
term status: accepted

has name
in scheme: dpv#
definition: Specifies name of a legal entity
type: Relation
type: Concept
created: 2020-11-04
creator: Harshvardhan J.Pandit
creator: Paul Ryan
creator: Georg P Krog
creator: Beatriz Esteves
has range: Concept
term status: accepted
has domain: Entity

has withdrawal method
in scheme: dpv#
created: 2019-04-05
creator: Bud Bruegger
creator: Mark Lizar
creator: Harshvardhan J. Pandit
type: Concept
type: Relation
modified: 2022-06-22
note: Can be used to record information of how to withdraw consent, e.g. by a click to a form, in writing, etc., by logging into a system and confirm per email, or with some additional authentication, etc.
definition: Specifries the method by which consent can be/has been withdrawn
editorial note: WARNING: This concept will be deprecated in future releases
term status: sunset

Organisation Risk Management
in scheme: dpv#
type: Concept
creator: Georg P Krog
creator: David Hickey
creator: Paul Ryan
creator: Harshvardhan J. Pandit
created: 2021-09-01
term status: accepted
definition: Manage risk for organisation's activities
isSubTypeOf: Organisation Governance

Asymmetric Encryption
in scheme: dpv#
created: 2022-08-17
type: Concept
source: data-pseudonymisation-advanced-techniques-and-use-cases
definition: Use of asymmetric cryptography to encrypt data
creator: Harshvardhan J. Pandit
isSubTypeOf: Encryption
term status: accepted

Public Data Source
in scheme: dpv#
creator: Georg P Krog
creator: Beatriz Esteves
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Julian Flake
term status: accepted
isInstanceOf: Data Source
created: 2022-01-26
note: The term 'Public' is used here in a broad sense. Actual consideration of what is 'Public Data' can vary based on several contextual or jurisdictional factors such as definition of open, methods of access, permissions and licenses.
definition: A source of data that is publicly accessible or available
type: Concept

Transfer
in scheme: dpv#
source: processing
type: Concept
term status: accepted
definition: to move data from one place to another
isSubTypeOf: Processing
created: 2019-05-07
related: Transfer

Acquire
in scheme: dpv#
source: oj
type: Concept
term status: accepted
created: 2019-05-07
isSubTypeOf: Obtain
definition: to come into possession or control of the data

Activity Ongoing
in scheme: dpv#
creator: Harshvardhan J. Pandit
definition: State of an activity occuring in continuation i.e. currently ongoing
type: Concept
isInstanceOf: Activity Status
term status: accepted
created: 2022-05-18

Importance
in scheme: dpv#
creator: Georg P Krog
creator: Beatriz Esteves
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
term status: accepted
definition: An indication of 'importance' within a context
isSubTypeOf: Context
created: 2022-02-09
note: Importance can be used to express importance, desirability, relevance, or significance as a context.

User
in scheme: dpv#
term status: accepted
creator: Beatriz Esteves
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Julian Flake
creator: Georg P. Krog
type: Concept
isSubTypeOf: Data Subject
created: 2022-04-06
definition: Data subjects that use service(s)

has data exporter
in scheme: dpv#
type: Relation
type: Concept
has range: Data Exporter
created: 2022-02-09
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
has domain: Concept
term status: accepted
definition: Indiciates inclusion or applicability of a LegalEntity in the role of Data Exporter
isSubTypeOf: has entity

Consent Withdrawn
in scheme: dpv#
type: Concept
definition: The state where the consent is withdrawn or revoked specifically by the data subject and which prevents it from being further used as a valid state
creator: Paul Ryan
creator: Georg P Krog
creator: Julian Flake
creator: Harshvardhan J. Pandit
term status: accepted
source: GConsent
note: This state can be considered a form of 'revocation' of consent, where the revocation can only be performed by the data subject. Therefore we suggest using ConsentRevoked when it is a non-data-subject entity, and ConsentWithdrawn when it is the data subject
isInstanceOf: Consent Status Invalid for Processing
created: 2022-06-22

Quantum Cryptography
in scheme: dpv#
definition: Cryptographic methods that utilise quantum mechanical properties to perform cryptographic tasks
source: reference-incident-classification-taxonomy
type: Concept
creator: Harshvardhan J. Pandit
term status: accepted
isSubTypeOf: CrytographicMethods
created: 2022-08-17

Personalised Benefits
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Elmar Kiesling
creator: Axel Polleres
creator: Simon Steyskal
creator: Fajar Ekaputra
creator: Javier Fernandez
term status: accepted
created: 2019-04-05
type: Concept
definition: Create and provide personalised benefits for a service
isSubTypeOf: Service Personalization

has scale
in scheme: dpv#
type: Relation
type: Concept
created: 2022-06-15
definition: Indicates the scale of specified concept
term status: accepted
has domain: Concept
has range: Scale
creator: Harshvardhan J. Pandit

has entity
in scheme: dpv#
type: Relation
type: Concept
creator: Harshvardhan J. Pandit
has range: Entity
created: 2022-02-09
definition: Indicates inclusion or applicability of an entity to some concept
term status: accepted
has domain: Concept
note: parent property for controller, processor, data subject, authority, etc.?

Vendor Management
in scheme: dpv#
source: model-voor-een-register-van-de-verwerkingsactiviteiten
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: David Hickey
creator: Paul Ryan
term status: accepted
definition: Manage orders, payment, evaluation, and prospecting related to vendors
isSubTypeOf: Purpose
type: Concept
created: 2021-09-01

Contract
in scheme: dpv#
term status: accepted
creator: Harshvardhan J. Pandit
isSubTypeOf: Legal Agreement
isSubTypeOf: Legal Basis
definition: Creation, completion, fulfilment, or performance of a contract involving specified processing
type: Concept
created: 2021-04-07

Human Resources Management
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Beatriz Esteves
creator: David Hickey
creator: Paul Ryan
definition: Manage humans and 'human resources' within the organisation for effective and efficient operations.
term status: accepted
created: 2021-09-01
note: HR is a broad concept. Its management includes, amongst others - recruiting employees and intermediaries e.g. brokers, independent representatives; payroll administration, remunerations, commissions, and wages; and application of social legislation.
isSubTypeOf: Purpose
source: model-voor-een-register-van-de-verwerkingsactiviteiten
type: Concept

has expiry condition
in scheme: dpv#
term status: sunset
creator: Mark Lizar
creator: Harshvardhan J. Pandit
creator: Bud Bruegger
note: Can be TextOrDocumentOrURI
type: Relation
type: Concept
isSubTypeOf: expiry
editorial note: WARNING: This concept will be deprecated in future releases
created: 2019-04-05
modified: 2022-06-22
definition: Specifies the condition or event that determines the expiry of consent

Official Authority of Controller
in scheme: dpv#
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
term status: accepted
definition: Processing necessary or authorised through the official authority granted to or vested in the Data Controller
created: 2021-05-05
isSubTypeOf: Legal Basis

RegionalScale
in scheme: dpv#
definition: Geographic coverage spanning a specific region or regions
type: Concept
term status: accepted
isInstanceOf: Geographic Coverage
creator: Harshvardhan J. Pandit
created: 2022-06-15

Data Exporter
in scheme: dpv#
type: Concept
definition: An entity that 'exports' data where exporting is considered a form of data transfer
creator: Harshvardhan Pandit
creator: Georg Krog
creator: David Hickey
creator: Paul Ryan
source: recommendations-012020-measures-supplement-transfer en
created: 2021-09-08
term status: accepted
note: The EU, in particular the EDPB, uses data exporter the context of cross-border data transfers/flows. These concepts are not bound by jurisdictional or geopolitical scopes within DPV and can thus be used for any notion of exporting
isSubTypeOf: Legal Entity

Automated Processing with Human Oversight
in scheme: dpv#
type: Concept
definition: Processing that is automated and involves oversight by Humans
created: 2022-06-15
isInstanceOf: Automation of Processing
term status: accepted
note: For example, a human watching metrics to ensure correctness of procedural values and outputs as processing takes place
creator: Harshvardhan J. Pandit

Identity Verification
in scheme: dpv#
created: 2019-04-05
creator: Fajar Ekaputra
creator: Harshvardhan J. Pandit
creator: Elmar Kiesling
creator: Axel Polleres
creator: Javier Fernandez
creator: Simon Steyskal
type: Concept
definition: Verify or authorize identity
isSubTypeOf: Enforce Security
term status: accepted

Local Location
in scheme: dpv#
created: 2022-06-15
type: Concept
term status: accepted
creator: Harshvardhan J. Pandit
isInstanceOf: Location Locality
definition: Location is local

Necessity
in scheme: dpv#
creator: Beatriz Esteves
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Paul Ryan
creator: Julian Flake
created: 2022-02-12
definition: An indication of 'necessity' within a context
isSubTypeOf: Context
type: Concept
term status: accepted
note: Necessity can be used to express need, essentiality, requirement, or compulsion.

Consequence of Success
in scheme: dpv#
creator: Georg P Krog
creator: Harshvardhan J. Pandit
created: 2022-03-23
type: Concept
definition: The consequence(s) possible or arising from success of specified context
term status: accepted
isSubTypeOf: Consequence

Risk Management Policy
in scheme: dpv#
term status: accepted
definition: A policy or statement of the overall intentions and direction of an organisation related to risk management
type: Concept
created: 2022-08-18
isSubTypeOf: Security Procedure
isSubTypeOf: Policy
creator: Harshvardhan J. Pandit
source: 79637.html

Copy
in scheme: dpv#
type: Concept
term status: accepted
created: 2019-05-07
related: Copy
isSubTypeOf: Processing
definition: to produce an exact reprodution of the data
source: processing

Privacy by Default
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Rob Brennan
creator: Axel Polleres
creator: Mark Lizar
definition: Practices regarding selecting appropriate data protection and privacy measures as the 'default' in an activity or service
type: Concept
term status: accepted
isSubTypeOf: GuidelinesPrinciple
created: 2019-04-05

Authentication using ABC
in scheme: dpv#
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
definition: Use of Attribute Based Credentials (ABC) to perform and manage authentication
created: 2022-08-17
isSubTypeOf: Cryptographic Authentication
source: data-protection-engineering

Encryption in Rest
in scheme: dpv#
creator: Axel Polleres
creator: Mark Lizar
creator: Harshvardhan J. Pandit
creator: Rob Brennan
created: 2019-04-05
type: Concept
isSubTypeOf: Encryption
term status: accepted
definition: Encryption of data when being stored (persistent encryption)

has identifier
in scheme: dpv#
created: 2020-11-25
creator: Harshvardhan J.Pandit
creator: Paul Ryan
creator: Georg P Krog
creator: Beatriz Esteves
has domain: Concept
definition: Indicates an identifier associated for identification or reference
type: Relation
type: Concept
term status: accepted
has range: Concept

Encryption
in scheme: dpv#
creator: Mark Lizar
creator: Harshvardhan J. Pandit
creator: Rob Brennan
creator: Axel Polleres
isSubTypeOf: Technical Measure
type: Concept
definition: Technical measures consisting of encryption
term status: accepted
created: 2019-04-05

Organise
in scheme: dpv#
definition: to organize data for arranging or classifying
term status: accepted
isSubTypeOf: Processing
type: Concept
created: 2019-05-07
source: oj

Organisational Measure
in scheme: dpv#
creator: Mark Lizar
creator: Rob Brennan
creator: Harshvardhan J. Pandit
creator: Axel Polleres
isSubTypeOf: Technical and Organisational Measure
definition: Organisational measures required/followed when processing data of the declared category
type: Concept
created: 2019-04-05
term status: accepted

Sensitive Personal Data
in scheme: dpv#
isSubTypeOf: Personal Data
definition: Personal data that is considered 'sensitive' in terms of privacy and/or impact, and therefore requires additional considerations and/or protection
creator: Harshvardhan J. Pandit
created: 2022-01-19
type: Concept
term status: accepted
note: Sensitivity' is a matter of context, and may be defined within legal frameworks. For GDPR, Special categories of personal data are considered a subset of sensitive data. To illustrate the difference between the two, consider the situation where Location data is collected, and which is considered 'sensitive' but not 'special'. As a probable rule, sensitive data require additional considerations whereas special category data requires additional legal basis / justifications.

SupraNationalUnion
in scheme: dpv#
type: Concept
creator: Harshvardhan J. Pandit
isSubTypeOf: Location
created: 2022-01-19
definition: A political union of two or more countries with an establishment of common authority
term status: accepted

Consent Status Invalid for Processing
in scheme: dpv#
created: 2022-06-22
source: GConsent
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Paul Ryan
definition: States of consent that cannot be used as valid justifications for processing data
note: This identifies the stages associated with consent that should not be used to process data
isSubTypeOf: Consent Status
type: Concept
term status: accepted

Immigrant
in scheme: dpv#
creator: Julian Flake
creator: Paul Ryan
creator: Beatriz Esteves
creator: Harshvardhan J. Pandit
creator: Georg P. Krog
created: 2022-04-06
type: Concept
definition: Data subjects that are immigrants (for a jurisdiction)
term status: accepted
isSubTypeOf: Data Subject

Location Locality
in scheme: dpv#
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
definition: Locality refers to whether the specified location is local within some context, e.g. for the user
created: 2022-06-15

Privacy Preserving Protocol
in scheme: dpv#
isSubTypeOf: CrytographicMethods
source: reference-incident-classification-taxonomy
type: Concept
creator: Harshvardhan J. Pandit
created: 2022-08-17
definition: Use of protocols designed with the intention of provided additional guarentees regarding privacy
term status: accepted

JobApplicant
in scheme: dpv#
creator: Beatriz Esteves
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Julian Flake
creator: Georg P. Krog
term status: accepted
definition: Data subjects that apply for jobs or employments
type: Concept
created: 2022-04-06
isSubTypeOf: Applicant

Risk Level
in scheme: dpv#
note: Risk Levels can be defined as a combination of different characteristics. For example, ISO 31073:2022 defines it as a combination of consequences and their likelihood. Another example would be the Risk Matrix where Risk Level is defined as a combination of Likelihood and Severity associated with the Risk.
definition: The magnitude of a risk expressed as an indication to aid in its management
type: Concept
term status: accepted
created: 2022-07-20
creator: Harshvardhan J. Pandit

has data controller
in scheme: dpv#
creator: Bud Bruegger
creator: Javier Fernández
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
modified: 2020-11-04
has domain: Concept
has range: Legal Entity
has range: Data Controller
type: Relation
type: Concept
definition: Indicates association with Data Controller
term status: accepted
created: 2019-04-04
isSubTypeOf: has entity

is after
in scheme: dpv#
has domain: Concept
type: Relation
type: Concept
creator: Harshvardhan J. Pandit
creator: Georg P. Krog
creator: Julian Flake
created: 2022-03-02
term status: accepted
has range: Concept
definition: Indicates the specified concepts is 'after' this concept in some context

NationalScale
in scheme: dpv#
creator: Harshvardhan J. Pandit
isInstanceOf: Geographic Coverage
type: Concept
created: 2022-06-15
definition: Geographic coverage spanning a nation
term status: accepted

Enforce Access Control
in scheme: dpv#
creator: Fajar Ekaputra
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Elmar Kiesling
creator: Simon Steyskal
creator: Javier Fernandez
type: Concept
created: 2019-04-05
related: Login
definition: Conduct or enforce access control
isSubTypeOf: Enforce Security
note: Was previously "Access Control". Prefixed to distinguish from Technical Measure.
term status: accepted

Legitimate Interest of Controller
in scheme: dpv#
creator: Paul Ryan
creator: Harshvardhan J. Pandit
creator: Georg P Krog
created: 2021-05-19
type: Concept
definition: Legitimate Interests of a Data Controller in conducting specified processing
term status: accepted
isSubTypeOf: Legitimate Interest

Member
in scheme: dpv#
creator: Julian Flake
creator: Georg P. Krog
creator: Beatriz Esteves
creator: Harshvardhan J. Pandit
creator: Paul Ryan
definition: Data subjects that are members of a group, organisation, or other collectives
created: 2022-04-06
type: Concept
term status: accepted
isSubTypeOf: Data Subject

Counter Money Laundering
in scheme: dpv#
created: 2022-04-20
creator: Harshvardhan J. Pandit
isSubTypeOf: Fraud Prevention and Detection
definition: Detect and prevent or mitigate money laundering
type: Concept
term status: accepted

has provision method
in scheme: dpv#
term status: sunset
creator: Mark Lizar
creator: Harshvardhan J. Pandit
creator: Bud Bruegger
note: Can be used to record information of how consent was provided e.g. by a click to a form, in writing, etc., by logging into a system and confirm per email, or with some additional authentication, etc.
type: Relation
type: Concept
definition: Specifies the method by which consent was provisioned or provided
editorial note: WARNING: This concept will be deprecated in future releases
modified: 2022-06-22
created: 2019-04-05

Anonymised Data
in scheme: dpv#
type: Concept
definition: Personal Data that has been (fully and completely) anonymised so that it is no longer considered Personal Data
isSubTypeOf: Non-Personal Data
created: 2022-01-19
term status: accepted
creator: Piero Bonatti
note: It is advised to carefully consider indicating data is fully or completely anonymised by determining whether the data by itself or in combination with other data can identify a person. Failing this condition, the data should be denoted as PseudoAnonymisedData. To indicate data is anonymised only for a specified entity (e.g. within an organisation), the concept AnonymisedDataWithinScope (as subclass of PseudoAnonymisedData) should be used instead of AnonymisedData.

Incompliant
in scheme: dpv#
isInstanceOf: Compliance Status
type: Concept
term status: accepted
definition: State of not being compliant
created: 2022-05-18
creator: Harshvardhan J. Pandit

Jurisdiction Concepts
member: Law
member: Location Locality
member: Fixed Singular Location
member: has country
member: Fixed Multiple Locations
member: Cloud Location
member: Federated Locations
member: Remote Location
member: has applicable law
member: Random Location
member: Within Device
member: Fixed Location
member: Third Country
member: Location Fixture
member: Variable Location
member: has third country
member: Location
member: Region
member: SupraNationalUnion
member: has jurisdiction
member: EconomicUnion
member: Country
member: has location
member: Decentralised Locations
member: Local Location
type: Collection

RegionalAuthority
in scheme: dpv#
term status: accepted
isSubTypeOf: Authority
created: 2022-02-02
creator: Harshvardhan J. Pandit
definition: An authority tasked with overseeing legal compliance for a region
source: adms
type: Concept

Cybersecurity Assessments
in scheme: dpv#
created: 2022-08-17
definition: Assessment of cybersecurity capabilities in terms of vulnerabilities and effectiveness of controls
type: Concept
isSubTypeOf: SecurityAssessment
isSubTypeOf: Assessment
creator: Harshvardhan J. Pandit
source: 5g-cybersecurity-standards
term status: accepted

is explicit
in scheme: dpv#
note: The conditions for what is considered 'explicit consent' differ by norms and laws.
type: Concept
type: Relation
editorial note: WARNING: This concept will be deprecated in future releases
creator: Mark Lizar
creator: Harshvardhan J. Pandit
creator: Bud Bruegger
created: 2019-04-05
term status: sunset
has range: boolean
modified: 2022-06-22
definition: Specifies consent is 'explicit'

Consultation with Authority
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Paul Ryan
isSubTypeOf: Consultation
type: Concept
term status: accepted
definition: Consultation with an authority or authoritative entity
created: 2020-11-04

Guardian(s) of Data Subject
in scheme: dpv#
created: 2022-08-03
term status: accepted
creator: Georg P Krog
definition: Guardian(s) of data subjects such as children
type: Concept
isSubTypeOf: Data Subject

Special Category Personal Data
in scheme: dpv#
type: Concept
modified: 2022-01-19
term status: modified
isSubTypeOf: Sensitive Personal Data
source: oj
created: 2019-05-07
creator: Fajar Ekaputra
creator: Elmar Kiesling; Harshvardhan J. Pandit
definition: Sensitive Personal Data whose use requires specific legal permission or justification
note: The term 'special category' is based on GDPR Art.9, but should not be considered as exlusive to it. DPV considers all Special Categories to also be Sensitive, but whose use is either prohibited or regulated and therefore requires additional legal basis for justification.

Status
in scheme: dpv#
created: 2022-05-18
isSubTypeOf: Context
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
definition: The status or state of something

Organisation
in scheme: dpv#
isSubTypeOf: Legal Entity
type: Concept
term status: accepted
creator: Harshvardhan J. Pandit
definition: A general term reflecting a company or a business or a group acting as a unit
created: 2022-02-02

Data Importer
in scheme: dpv#
type: Concept
creator: Harshvardhan Pandit
creator: Georg Krog
creator: David Hickey
creator: Paul Ryan
created: 2021-09-08
source: recommendations-012020-measures-supplement-transfer en
term status: accepted
isSubTypeOf: Recipient
definition: An entity that 'imports' data where importing is considered a form of data transfer
note: The EU, in particular the EDPB, uses data importing the context of cross-border data transfers/flows. These concepts are not bound by jurisdictional or geopolitical scopes within DPV and can thus be used for any notion of importing

Move
in scheme: dpv#
type: Concept
created: 2019-05-07
related: Move
isSubTypeOf: Transfer
source: processing
definition: to move data from one location to another including deleting the original copy
term status: accepted

Processing_Context Concepts
member: Processing Context
member: Storage Restoration
member: Public Data Source
member: Automated Processing with Human Oversight
member: Completely Manual Processing
member: Automated Decision Making
member: has processing automation
member: Partially Automated Processing
member: Innovative Use of New Technologies
member: Systematic Monitoring
member: Automation of Processing
member: Data published by Data Subject
member: has algorithmic logic
member: has data source
member: Data Source
member: Storage Deletion
member: Automated Processing with Human Input
member: Algorithmic Logic
member: Automated Processing with Human Verification
member: Non-Public Data Source
member: Storage Duration
member: has storage condition
member: Evaluation and Scoring
member: Fully Automated Processing
member: Storage Condition
member: Large Scale Processing
member: Storage Location
member: Human Involvement
type: Collection

Pseudo-anonymised Data
in scheme: dpv#
definition: Personal Data that has undergone a partial (incomplete) anonymisation process such that it is still considered Personal Data
creator: Harshvardhan J. Pandit
created: 2022-01-19
type: Concept
isSubTypeOf: Personal Data
term status: accepted

Register of Processing Activities
in scheme: dpv#
definition: A ROPA is a document maintained by Data Controllers detailing processing activities carried out under their responsibility
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Paul Ryan
type: Concept
term status: accepted
created: 2021-09-08
note: Tied to compliance processes and documents, decide how to specify those
isSubTypeOf: Data Processing Records

EconomicUnion
in scheme: dpv#
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
isSubTypeOf: Location
definition: A political union of two or more countries based on economic or trade agreements
created: 2022-01-19

Risk
in scheme: dpv#
creator: Harshvardhan J. Pandit
definition: A risk or possibility or uncertainty of negative effects, impacts, or consequences.
type: Concept
term status: accepted
note: Risks can be associated with one or more different concepts such as purpose, processing, personal data, technical or organisational measure.
created: 2020-11-18

has data
in scheme: dpv#
has range: Data
has domain: Concept
definition: Indicates associated with Data (may or may not be personal)
type: Relation
type: Concept
creator: Harshvardhan J. Pandit
term status: accepted
created: 2022-08-18

Privacy Impact Assessment
in scheme: dpv#
definition: Carrying out an impact assessment regarding privacy risks
type: Concept
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Paul Ryan
isSubTypeOf: Impact Assessment
term status: accepted
created: 2020-11-04

NationalAuthority
in scheme: dpv#
created: 2022-02-02
type: Concept
term status: accepted
creator: Harshvardhan J. Pandit
isSubTypeOf: Authority
source: adms
definition: An authority tasked with overseeing legal compliance for a nation

Screen
in scheme: dpv#
created: 2022-06-15
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
definition: to remove data for some criteria
isSubTypeOf: Transform

Fully Automated Processing
in scheme: dpv#
creator: Harshvardhan J. Pandit
definition: Processing that is fully automated
isInstanceOf: Automation of Processing
type: Concept
created: 2022-06-15
term status: accepted

Modify
in scheme: dpv#
definition: to modify or change data
isSubTypeOf: Alter
created: 2022-06-15
type: Concept
creator: Harshvardhan J. Pandit
creator: Georg P Krog
term status: accepted

Observe
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Georg P Krog
type: Concept
definition: to obtain data through observation
isSubTypeOf: Obtain
term status: accepted
created: 2022-06-15

Sell Data to Third Parties
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Elmar Kiesling
creator: Axel Polleres
creator: Simon Steyskal
creator: Fajar Ekaputra
creator: Javier Fernandez
created: 2019-04-05
note: Sell here means exchange, submit, or provide in return for direct or indirect compensation. Was subclass of commercial interest, changed to reflect selling something
isSubTypeOf: Sell Products
type: Concept
term status: accepted
definition: Sell data or information to third parties

has data subject scale
in scheme: dpv#
creator: Harshvardhan J. Pandit
isSubTypeOf: Scale
created: 2022-06-22
type: Relation
type: Concept
has range: Data Subject Scale
definition: Indicates the scale of data subjects
term status: accepted
has domain: Concept

Data Protection Authority
in scheme: dpv#
type: Concept
creator: Harshvardhan Pandit
creator: Georg Krog
creator: Paul Ryan
isSubTypeOf: Authority
term status: accepted
definition: An authority tasked with overseeing legal compliance regarding privacy and data protection laws.
created: 2020-11-04

is residual risk of
in scheme: dpv#
has range: Risk
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P Krog
definition: Indicates this risk is the remaining or residual risk from applying mitigation measures or treatments to specified risk
created: 2022-07-20
type: Relation
type: Concept
has domain: Risk
term status: accepted

Violation of Compliance
in scheme: dpv#
term status: accepted
creator: Harshvardhan J. Pandit
definition: State where objectives have been violated
created: 2022-05-18
type: Concept
isInstanceOf: Compliance Status

Symmetric Cryptography
in scheme: dpv#
source: reference-incident-classification-taxonomy
definition: Use of crytography where the same keys are utilised for encryption and descryption of information
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
isSubTypeOf: CrytographicMethods
created: 2022-08-17

Not Required
in scheme: dpv#
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P Krog
creator: Beatriz Esteves
definition: Indication of neither being required nor optional i.e. not relevant or needed
type: Concept
isInstanceOf: Necessity
term status: accepted
created: 2022-02-15

Advertising
in scheme: dpv#
creator: Georg P Krog
creator: Beatriz Esteves
creator: Harshvardhan J. Pandit
note: Advertising is a subset of Marketing. Advertising by itself does not indicate 'personalisation' i.e. personalised ads.
term status: accepted
type: Concept
created: 2020-11-04
definition: Conduct advertising i.e. process or artefact used to call attention to a product, service, etc. through announcements, notices, or other forms of communication
isSubTypeOf: Marketing

Monitoring Policies
in scheme: dpv#
created: 2022-08-17
type: Concept
term status: accepted
isSubTypeOf: Governance Procedures
creator: Harshvardhan J. Pandit
source: 5g-cybersecurity-standards
definition: Policy for monitoring (e.g. progress, performance)

Effectiveness Determination Procedures
in scheme: dpv#
created: 2022-08-17
term status: accepted
type: Concept
isSubTypeOf: Assessment
definition: Procedures intended to determine effectiveness of other measures
source: 5g-cybersecurity-standards
creator: Harshvardhan J. Pandit

Staff Training
in scheme: dpv#
creator: Axel Polleres
creator: Mark Lizar
creator: Harshvardhan J. Pandit
creator: Rob Brennan
created: 2019-04-05
definition: Practices and policies regarding training of staff members
type: Concept
term status: accepted
isSubTypeOf: Organisational Measure

Geographic Coverage
in scheme: dpv#
created: 2022-06-15
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
isSubTypeOf: Scale
type: Concept
term status: accepted
definition: Indicate of scale in terms of geographic coverage

Consent Status
in scheme: dpv#
type: Concept
creator: Paul Ryan
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Georg P Krog
term status: accepted
created: 2022-06-22
source: GConsent
definition: The state or status of 'consent' that provides information reflecting its operational status and validity for processing data
isSubTypeOf: Status
note: States are useful as information artefacts to implement them in controlling processing, and to reflect the process and flow of obtaining and maintaining consent. For example, a database table that stores consent states for specific processing and can be queried to obtain them in an efficient manner. States are also useful in investigations to determine the use and validity of consenting practices

Legitimate Interest
in scheme: dpv#
definition: Legitimate Interests of a Party as justification for specified processing
creator: Harshvardhan J. Pandit
type: Concept
created: 2021-05-19
term status: accepted
isSubTypeOf: Legal Basis

Benefit
in scheme: dpv#
definition: Impact(s) that acts as or causes benefits
type: Concept
creator: Julian Flake
creator: Beatriz Esteves
creator: Axel Polleres
creator: Fajar Ekaputra
creator: Harshvardhan J. Pandit
creator: Georg P Krog
isSubTypeOf: Impact
term status: accepted
created: 2022-03-23

Activity Halted
in scheme: dpv#
definition: State of an activity that was occuring in the past, and has been halted or paused or stoped
type: Concept
term status: accepted
isInstanceOf: Activity Status
creator: Harshvardhan J. Pandit
created: 2022-05-18

Organisational_Measures Concepts
member: Consent Record
member: Regularity of Re-certification
member: Consultation
member: Cybersecurity Training
member: Data Protection Training
member: Credential Management
member: Design Standard
member: Data Processing Agreement
member: Safeguard
member: Consultation with DPO
member: Seal
member: Effectiveness Determination Procedures
member: Risk Management Policy
member: Information Security Policy
member: Consent Notice
member: Legitimate Interest Assessment
member: Legal Agreement
member: Non-Disclosure Agreement (NDA)
member: Notice
member: Privacy Impact Assessment
member: Educational Training
member: Identity Management Method
member: Impact Assessment
member: Professional Training
member: Incident Reporting Communication
member: Disaster Recovery Procedures
member: Consultation with Authority
member: Logging Policies
member: Third Party Security Procedures
member: Incident Management Procedures
member: Monitoring Policies
member: Background Checks
member: Security Knowledge Training
member: Asset Management Procedures
member: GuidelinesPrinciple
member: Risk Management Plan
member: Privacy by Default
member: Data Transfer Impact Assessment
member: Consultation with Data Subject
member: Security Role Procedures
member: Data Protection Impact Assessment (DPIA)
member: Certification and Seal
member: Controller-Processor Agreement
member: Trusted Third Party Utilisation
member: Data Processing Records
member: Assessment
member: Sub-Processor Agreement
member: Authorisation Procedure
member: Security Procedure
member: Records of Activities
member: Compliance Monitoring
member: Code of Conduct
member: Certification
member: Policy
member: Register of Processing Activities
member: Staff Training
member: Privacy by Design
member: Security Assessments
member: Joint Data Controllers Agreement
member: Governance Procedures
member: Third-Party Agreement
member: Privacy Notice
member: Cybersecurity Assessments
member: ContractualTerms
member: Safeguard for Data Transfer
type: Collection

Security Procedure
in scheme: dpv#
created: 2022-08-24
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
isSubTypeOf: Organisational Measure
definition: Procedures associated with assessing, implementing, and evaluating security

Student
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Beatriz Esteves
creator: Paul Ryan
creator: Julian Flake
creator: Georg P. Krog
created: 2022-04-06
type: Concept
isSubTypeOf: Data Subject
definition: Data subjects that are students
term status: accepted

Within Device
in scheme: dpv#
type: Concept
created: 2022-06-15
term status: accepted
isInstanceOf: Local Location
definition: Location is local and entirely within a device or environment
creator: Harshvardhan J. Pandit

Non-Disclosure Agreement (NDA)
in scheme: dpv#
type: Concept
term status: accepted
creator: Rob Brennan
creator: Axel Polleres
creator: Mark Lizar
creator: Harshvardhan J. Pandit
isSubTypeOf: Legal Agreement
created: 2019-04-05
definition: Non-disclosure Agreements e.g. preserving confidentiality of information

Anonymisation
in scheme: dpv#
source: oj
creator: Mark Lizar
creator: Harshvardhan J. Pandit
creator: Rob Brennan
creator: Axel Polleres
isSubTypeOf: Technical Measure
type: Concept
definition: Process by which some personal identifiers are removed or identifiability is reduced
term status: accepted
created: 2019-04-05

has consequence
in scheme: dpv#
creator: Julian Flake
creator: Georg P Krog
creator: Beatriz Esteves
creator: Fajar Ekaputra
creator: Harshvardhan J. Pandit
definition: Indicates consenquence(s) possible or arising from specified concept
type: Relation
type: Concept
term status: accepted
has domain: Concept
note: Removed plural suffix for consistency
created: 2020-11-04
has range: Consequence
modified: 2021-09-21

SingularFrequency
in scheme: dpv#
type: Concept
term status: accepted
creator: Harshvardhan J. Pandit
definition: Frequency where occurences are singular i.e. they take place only once
created: 2022-06-15
isInstanceOf: Frequency

File System Security
in scheme: dpv#
isSubTypeOf: Security Method
type: Concept
term status: accepted
created: 2022-08-17
definition: Security implemented over a file system
source: reference-incident-classification-taxonomy
creator: Harshvardhan J. Pandit

Context Concepts
member: Not Required
member: SingularFrequency
member: FixedOccurencesDuration
member: Context
member: Frequency
member: Necessity
member: is implemented by entity
member: is before
member: UntilTimeDuration
member: Continous Frequency
member: EndlessDuration
member: has duration
member: Justification
member: Required
member: Importance
member: UntilEventDuration
member: has outcome
member: has identifier
member: has scope
member: is after
member: Technology
member: Optional
member: has frequency
member: Primary Importance
member: has context
member: is implemented using technology
member: Secondary Importance
member: TemporalDuration
member: SporadicFrequency
member: Often Frequency
member: has human involvement
member: Duration
member: has justification
member: Scope
type: Collection

Create Event Recommendations
in scheme: dpv#
definition: Create and provide personalised recommendations for events
creator: Rudy Jacob
creator: Harshvardhan J. Pandit
type: Concept
created: 2019-11-26
isSubTypeOf: Create Personalized Recommendations
term status: accepted
source: specialprivacy.ercim.eu

De-Identification
in scheme: dpv#
isSubTypeOf: Anonymisation
creator: Rob Brennan
creator: Axel Polleres
creator: Mark Lizar
creator: Harshvardhan J. Pandit
definition: Removal of identity or information to reduce identifiability
created: 2019-04-05
type: Concept
term status: accepted

Commercial Research
in scheme: dpv#
creator: Elmar Kiesling
creator: Simon Steyskal
creator: Javier Fernandez
creator: Fajar Ekaputra
creator: Axel Polleres
creator: Harshvardhan J. Pandit
type: Concept
definition: Conduct research in a commercial setting or with intention to commercialise e.g. in a company or sponsored by a company
isSubTypeOf: Research and Development
term status: accepted
related: Develop
created: 2019-04-05

LocalEnvironmentScale
in scheme: dpv#
creator: Harshvardhan J. Pandit
type: Concept
isInstanceOf: Geographic Coverage
definition: Geographic coverage spanning a specific environment within the locality
created: 2022-06-15
note: For example, geographic scale of an event take place in a specific building or room
term status: accepted

End-to-End Encryption (E2EE)
in scheme: dpv#
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
created: 2022-08-17
source: data-protection-engineering
isSubTypeOf: Encryption
definition: Encrypted communications where data is encrypted by the sender and decrypted by the intended receiver to prevent access to any third party

NonCitizen
in scheme: dpv#
definition: Data subjects that are not citizens (for a jurisdiction)
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Julian Flake
creator: Georg P. Krog
creator: Beatriz Esteves
created: 2022-04-06
type: Concept
isSubTypeOf: Data Subject
term status: accepted

has impact
in scheme: dpv#
type: Relation
type: Concept
has domain: Concept
creator: Beatriz Esteves
creator: Fajar Ekaputra
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Julian Flake
has range: Impact
created: 2022-05-18
term status: accepted
isSubTypeOf: has consequence
definition: Indicates impact(s) possible or arising as consequences from specified concept

Customer
in scheme: dpv#
creator: Georg P. Krog
creator: Beatriz Esteves
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
term status: accepted
note: note: for B2B relations where customers are organisations, this concept only applies for data subjects
isSubTypeOf: Data Subject
definition: Data subjects that purchase goods or services
created: 2022-04-06

Homomorphic Encryption
in scheme: dpv#
definition: Use of Homomorphic encryption that permits computations on encrypted data without decrypting it
source: reference-incident-classification-taxonomy
isSubTypeOf: Cryptographic Methods
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
created: 2022-08-17

HugeDataVolume
in scheme: dpv#
type: Concept
term status: accepted
isInstanceOf: Data Volume
creator: Harshvardhan J. Pandit
definition: Data volume that is considered huge or more than large within the context
created: 2022-06-15

Impact Assessment
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Paul Ryan
type: Concept
term status: accepted
definition: Calculating or determining the likelihood of impact of an existing or proposed process, which can involve risks or detriments.
created: 2020-11-04
isSubTypeOf: Assessment

GovernmentalOrganisation
in scheme: dpv#
created: 2022-02-02
type: Concept
isInstanceOf: Organisation
creator: Harshvardhan J. Pandit
definition: An organisation managed or part of government
term status: accepted

Natural Person
in scheme: dpv#
type: Concept
term status: accepted
isSubTypeOf: Entity
definition: A human
created: 2022-02-09
creator: Harshvardhan J. Pandit

Hash-based Message Authentication Code (HMAC)
in scheme: dpv#
creator: Harshvardhan J. Pandit
type: Concept
isSubTypeOf: Cryptographic Authentication
created: 2022-08-17
term status: accepted
definition: Use of HMAC where message authentication code (MAC) utilise a cryptographic hash function and a secret cryptographic key
source: 5g-cybersecurity-standards

Improve Existing Products and Services
in scheme: dpv#
creator: Simon Steyskal
creator: Fajar Ekaputra
creator: Javier Fernandez
creator: Harshvardhan J. Pandit
creator: Elmar Kiesling
creator: Axel Polleres
isSubTypeOf: Optimisation for Controller
type: Concept
term status: accepted
definition: Improve existing products and services
created: 2019-04-05

Status Concepts
member: Partially Compliant
member: Audit Required
member: Audit Rejected
member: Audit Status
member: Activity Proposed
member: Activity Completed
member: Audit Not Required
member: Compliance Status
member: Compliant
member: has audit status
member: Audit Approved
member: Audit Conditionally Approved
member: Audit Requested
member: Violation of Compliance
member: Activity Status
member: Incompliant
member: has compliance status
member: Not Compliant
member: has status
member: has activity status
member: Activity Ongoing
member: Activity Halted
member: Status
type: Collection

Risk Concepts
member: has impact on
member: Risk Level
member: Risk Management Process
member: Detriment
member: Material Damage
member: Impact
member: is residual risk of
member: has risk level
member: has risk
member: has impact
member: Consequence as Side-Effect
member: Consequence
member: Risk
member: Non-Material Damage
member: has consequence
member: has residual risk
member: Severity
member: has likelihood
member: Likelihood
member: has severity
member: Consequence of Failure
member: Consequence of Success
member: Benefit
member: Harm
member: is mitigated by measure
member: Risk Mitigation Measure
member: mitigates risk
member: Damage
type: Collection

MaintainFraudDatabase
in scheme: dpv#
created: 2022-06-15
type: Concept
definition: Maintain Fraud Database
creator: Harshvardhan J. Pandit
creator: Georg P Krog
isSubTypeOf: Fraud Prevention and Detection
term status: accepted

GuidelinesPrinciple
in scheme: dpv#
created: 2019-04-05
creator: Axel Polleres
creator: Mark Lizar
creator: Harshvardhan J. Pandit
creator: Rob Brennan
definition: Guidelines or Principles regarding processing and operational measures
type: Concept
term status: accepted
isSubTypeOf: Organisational Measure

Evaluation and Scoring
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Piero Bonatti
type: Concept
term status: accepted
definition: Processing that involves evaluation and scoring of individuals
source: oj
isSubTypeOf: Processing Context
created: 2020-11-04

Pseudo-Anonymisation
in scheme: dpv#
term status: accepted
creator: Rob Brennan
creator: Axel Polleres
creator: Mark Lizar
creator: Harshvardhan J. Pandit
created: 2019-04-05
source: oj
isSubTypeOf: Anonymisation
definition: PseudoAnonmyization or 'pseudonymisation’ means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person;
type: Concept

Social Media
in scheme: dpv#
definition: Conduct marketing through social media
creator: Georg P Krog
creator: Beatriz Esteves
creator: Harshvardhan J. Pandit
term status: accepted
type: Concept
isSubTypeOf: Marketing
created: 2020-11-04

Notice
in scheme: dpv#
creator: Paul Ryan
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: David Hickey
definition: A notice is an artefact for providing information, choices, or controls
type: Concept
isSubTypeOf: Organisational Measure
created: 2021-09-08
term status: accepted

Processing_Scale Concepts
member: HugeDataVolume
member: SingularScaleOfDataSubjects
member: Data Subject Scale
member: MediumDataVolume
member: LocalEnvironmentScale
member: MultiNationalScale
member: GlobalScale
member: has data subject scale
member: MediumScaleOfDataSubjects
member: SmallScaleOfDataSubjects
member: SporadicDataVolume
member: SingularDataVolume
member: LocalityScale
member: NearlyGlobalScale
member: NationalScale
member: Scale
member: SporadicScaleOfDataSubjects
member: RegionalScale
member: LargeScaleOfDataSubjects
member: LargeDataVolume
member: has geographic coverage
member: Geographic Coverage
member: HugeScaleOfDataSubjects
member: has scale
member: SmallDataVolume
member: has data volume
member: Data Volume
type: Collection

Authentication Protocols
in scheme: dpv#
creator: Rob Brennan
creator: Axel Polleres
creator: Mark Lizar
creator: Harshvardhan J. Pandit
created: 2019-04-05
isSubTypeOf: Technical Measure
definition: Protocols involving validation of identity i.e. authentication of a person or information
type: Concept
term status: accepted

Generated Personal Data
in scheme: dpv#
created: 2022-03-30
note: Generated Data is used to indicate data that is produced and is not derived or inferred from other data
term status: accepted
definition: Personal Data that is generated or brought into existence without relation to existing data i.e. it is not derived or inferred from other data
isSubTypeOf: Personal Data
creator: Harshvardhan J. Pandit
type: Concept

Communication for Customer Care
in scheme: dpv#
type: Concept
creator: Georg P Krog
creator: Beatriz Esteves
creator: Harshvardhan J. Pandit
term status: accepted
created: 2020-11-04
isSubTypeOf: Customer Care
isSubTypeOf: Communication Management
definition: Communicate with customers for assisting them, resolving issues, ensuring satisfaction in relation to services provided

Information Security Policy
in scheme: dpv#
creator: Harshvardhan J. Pandit
type: Concept
created: 2022-08-17
term status: accepted
isSubTypeOf: Policy
definition: Policy regarding security of information
source: 5g-cybersecurity-standards

Likelihood
in scheme: dpv#
note: Likelihood can be expressed in a subjective manner, such as 'Unlikely', or in a quantitative manner such as "Twice in a Day" (frequency per period). The suggestion is to use quantitative values, or to associate them with subjective terms used so as to enable accurate interpretations and interoperability. See the concepts related to Frequency and Duration for possible uses as a combination to express Likelihood.
created: 2022-07-22
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
definition: The likelihood or probability or chance of something taking place or occuring

Risk Mitigation Measure
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Paul Ryan
created: 2020-11-04
type: Concept
isSubTypeOf: Technical and Organisational Measure
definition: Measures intended to mitigate, minimise, or prevent risk.
term status: accepted

Consult
in scheme: dpv#
isSubTypeOf: Use
related: Query
type: Concept
source: processing
source: oj
definition: to consult or query data
term status: accepted
created: 2019-05-07

Analytics
in scheme: dpv#
isSubTypeOf: Service Provision
creator: Beatriz Esteves
creator: Harshvardhan J. Pandit
creator: Georg P Krog
created: 2020-11-04
definition: Conduct analysis and reporting related to usage of services or products
type: Concept
term status: accepted
note: Was "UsageAnalytics", prefixed with Service to better reflect scope

has residual risk
in scheme: dpv#
type: Concept
type: Relation
has range: Risk
creator: Paul Ryan
creator: Julian Flake
creator: Georg P Krog
creator: Harshvardhan J. Pandit
created: 2022-07-20
has domain: Risk
definition: Indicates the associated risk is the remaining or residual risk from applying mitigation measures or treatments to this risk
term status: accepted

Filter
in scheme: dpv#
type: Concept
created: 2022-06-15
isSubTypeOf: Transform
creator: Georg P Krog
creator: Harshvardhan J. Pandit
definition: to filter or keep data for some criteria
term status: accepted

has indication method
in scheme: dpv#
type: Relation
type: Concept
creator: Julian Flake
creator: Paul Ryan
creator: Harshvardhan J. Pandit
creator: Georg P Krog
definition: Specifies the method by which an entity has indicated the specific context
term status: accepted
created: 2022-06-21
has domain: Concept

Derived Personal Data
in scheme: dpv#
source: dpvcg
modified: 2022-01-19
related: Derived
isSubTypeOf: Personal Data
creator: Fajar Ekaputra
creator: Elmar Kiesling; Harshvardhan J. Pandit
definition: Personal Data that is obtained or derived from other data
type: Concept
term status: accepted
created: 2019-05-07
note: Derived Data is data that is obtained through processing of existing data, e.g. deriving first name from full name. To indicate data that is derived but which was not present or evident within the source data, InferredPersonalData should be used.

Entities Concepts
member: Entity
member: Representative
member: has representative
member: has name
member: has contact
member: has responsible entity
member: Legal Entity
member: Natural Person
member: has entity
member: has address
type: Collection

Audit Rejected
in scheme: dpv#
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
definition: State of not being approved or being rejected through the audit
created: 2022-05-18
isInstanceOf: Audit Status

Partially Compliant
in scheme: dpv#
term status: accepted
isInstanceOf: Compliance Status
definition: State of partially being compliant i.e. only some objectives have been met, and others have not been in violation
creator: Harshvardhan J. Pandit
created: 2022-05-18
type: Concept

Consent Notice
in scheme: dpv#
creator: Paul Ryan
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Georg P Krog
type: Concept
isSubTypeOf: Privacy Notice
definition: A Notice for information provision associated with Consent
created: 2022-06-21
term status: accepted

Data
in scheme: dpv#
creator: Harshvardhan J. Pandit
definition: A broad concept representing 'data' or 'information'
created: 2022-01-19
type: Concept
term status: accepted

has status
in scheme: dpv#
creator: Harshvardhan J. Pandit
has range: Status
has domain: Concept
definition: Indicates the status of specified concept
term status: accepted
type: Relation
type: Concept
created: 2022-05-18

Privacy Notice
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: David Hickey
creator: Paul Ryan
definition: Represents a notice or document outlining information regarding privacy
isSubTypeOf: Notice
type: Concept
term status: accepted
created: 2021-09-08

Create Personalized Recommendations
in scheme: dpv#
type: Concept
creator: Harshvardhan J. Pandit
creator: Rudy Jacob
term status: accepted
created: 2019-11-26
definition: Create and provide personalised recommendations
isSubTypeOf: Service Personalization
source: specialprivacy.ercim.eu

Authority
in scheme: dpv#
creator: Paul Ryan
creator: Harshvardhan Pandit
creator: Georg Krog
created: 2020-11-04
isSubTypeOf: Legal Entity
isSubTypeOf: GovernmentalOrganisation
definition: An authority with the power to create or enforce laws, or determine their compliance.
type: Concept
term status: accepted

has legal basis
in scheme: dpv#
has range: Legal Basis
creator: Axel Polleres
creator: Javier Fernández
type: Concept
type: Relation
term status: accepted
definition: Indicates use or applicability of a Legal Basis
has domain: Concept
created: 2019-04-04
modified: 2020-11-04

Cloud Location
in scheme: dpv#
term status: accepted
creator: Harshvardhan J. Pandit
definition: Location that is in the 'cloud' i.e. a logical location operated over the internet
type: Concept
isInstanceOf: Remote Location
created: 2022-06-15

Required
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Julian Flake
creator: Paul Ryan
creator: Beatriz Esteves
term status: accepted
created: 2022-02-13
type: Concept
definition: Indication of 'required' or 'necessary'
isInstanceOf: Necessity

Trusted Computing
in scheme: dpv#
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
definition: Use of cryptographic methods to restrict access and execution to trusted parties and code
isSubTypeOf: CrytographicMethods
created: 2022-08-17
source: reference-incident-classification-taxonomy

Expressed Consent
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
creator: Georg P Krog
definition: Consent that is expressed through an action intended to convey a consenting decision
type: Concept
isSubTypeOf: Informed Consent
note: Expressed consent requires the individual take a specific and unambigious action that directly indicates their consent. This action may be a part of other processes such as setting preferences, or agreeing to a contract, or other matters not relating to consent. An example of expressed consent is interacting with a checkbox within a dashboard or clicking a button on a web form
created: 2022-06-21
term status: accepted

Elderly Data Subject
in scheme: dpv#
type: Concept
isSubTypeOf: Vulnerable Data Subject
created: 2022-06-15
creator: Georg P Krog
term status: accepted
definition: Data subjects that are considered elderly (i.e. based on age)

Explicitly Expressed Consent
in scheme: dpv#
created: 2022-06-21
type: Concept
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Julian Flake
creator: Paul Ryan
note: Explicitly expressed consent is a more specific form of Expressed consent where the action taken must 'explicitly' relate to only the consent decision. Expressed consent where the consenting is part of other matters therefore cannot satisfy the requirements of explicitly expressed consent. An example of explicit action expressing the consenting decision is a button on a web form where the form only relates to consent, or it is accompanied with suitable text that reiterates what the consenting decision is about
isSubTypeOf: Expressed Consent
term status: accepted
definition: Consent that is expressed through an explicit action solely conveying a consenting decision

has data volume
in scheme: dpv#
type: Concept
type: Relation
created: 2022-06-22
has range: Data Volume
definition: Indicates the volume of data
term status: accepted
has domain: Concept
creator: Harshvardhan J. Pandit
isSubTypeOf: Scale

Secondary Importance
in scheme: dpv#
creator: Beatriz Esteves
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P Krog
isInstanceOf: Importance
definition: Indication of 'secondary' or 'minor' or 'auxiliary' importance
type: Concept
created: 2022-02-11
term status: accepted

SporadicFrequency
in scheme: dpv#
type: Concept
definition: Frequency where occurences are sporadic or infrequent or sparse
isInstanceOf: Frequency
term status: accepted
created: 2022-06-15
creator: Harshvardhan J. Pandit

Restrict
in scheme: dpv#
source: oj
isSubTypeOf: Transform
type: Concept
definition: to apply a restriction on the processsing of specific records
created: 2019-05-07
term status: accepted

Store
in scheme: dpv#
definition: to keep data for future use
created: 2019-05-07
source: oj
type: Concept
term status: accepted
isSubTypeOf: Processing

Storage Restoration
in scheme: dpv#
isSubTypeOf: Storage Condition
creator: Rob Brennan
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
type: Concept
created: 2019-04-05
term status: accepted
definition: Regularity and temporal span of data restoration/backup mechanisms that guarantee that data is preserved

Partially Automated Processing
in scheme: dpv#
creator: Harshvardhan J. Pandit
isInstanceOf: Automation of Processing
type: Concept
note: For example, a series of distinct processing operations that are automated individually or have some human involvement
created: 2022-06-15
definition: Processing that is partially automated or semi-automated
term status: accepted

Audit Approved
in scheme: dpv#
created: 2022-05-18
type: Concept
isInstanceOf: Audit Status
term status: accepted
definition: State of being approved through the audit
creator: Harshvardhan J. Pandit

has applicable law
in scheme: dpv#
creator: Harshvardhan J. Pandit
type: Concept
type: Relation
created: 2022-01-19
definition: Indicates applicability of a Law
term status: accepted
has domain: Concept
has range: Law

Fixed Location
in scheme: dpv#
type: Concept
isInstanceOf: Location Fixture
definition: Location that is fixed i.e. known to occur at a specific place
created: 2022-06-15
term status: accepted
creator: Harshvardhan J. Pandit

has jurisdiction
in scheme: dpv#
definition: Indicates applicability of specified jurisdiction
type: Relation
type: Concept
created: 2022-01-19
has domain: Concept
term status: accepted
creator: Harshvardhan J. Pandit
has range: Location

Identity Management Method
in scheme: dpv#
definition: Management of identity and identity-based processes
isSubTypeOf: Authorisation Procedure
type: Concept
term status: accepted
created: 2022-08-17
source: reference-incident-classification-taxonomy
creator: Harshvardhan J. Pandit

has personal data handling
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Georg P Krog
has range: Personal Data Handling
definition: Indicates association with Personal Data Handling
type: Relation
type: Concept
created: 2022-01-19
term status: accepted
has domain: Concept

Asylum Seeker
in scheme: dpv#
creator: Georg P Krog
term status: accepted
type: Concept
definition: Data subjects that are asylum seekers
created: 2022-06-15
isSubTypeOf: Vulnerable Data Subject

Participant
in scheme: dpv#
term status: accepted
creator: Beatriz Esteves
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P. Krog
isSubTypeOf: Data Subject
created: 2022-04-06
type: Concept
definition: Data subjects that participate in some context such as volunteers in a function

SingularDataVolume
in scheme: dpv#
isInstanceOf: Data Volume
creator: Harshvardhan J. Pandit
type: Concept
definition: Data volume that is considered singular i.e. a specific instance or single item
term status: accepted
created: 2022-06-15

Data Protection Officer
in scheme: dpv#
creator: Paul Ryan
creator: Georg Krog
modified: 2021-12-08
type: Concept
source: oj
definition: An entity within or authorised by an organisation to monitor internal compliance, inform and advise on data protection obligations and act as a contact point for data subjects and the supervisory authority.
term status: modified
isSubTypeOf: Representative
created: 2020-11-04

MediumDataVolume
in scheme: dpv#
created: 2022-06-15
isInstanceOf: Data Volume
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Paul Ryan
type: Concept
term status: accepted
definition: Data volume that is considered medium i.e. neither large nor small within the context

Consent
in scheme: dpv#
creator: Harshvardhan J. Pandit
created: 2021-04-07
definition: Consent of the Data Subject for specified processing
term status: accepted
isSubTypeOf: Legal Basis
type: Concept

Technology
in scheme: dpv#
creator: Harshvardhan J. Pandit
created: 2022-01-26
type: Concept
term status: accepted
note: Examples (non-exhaustive) include: Algorithm, Process, Method, Skill, Database, Cookies, Server, Device
definition: The technology, technological implementation, or any techniques, skills, methods, and processes used or applied

Design Standard
in scheme: dpv#
definition: A set of rules or guidelines outlining criterias for design
creator: Harshvardhan J. Pandit
creator: Rob Brennan
creator: Axel Polleres
creator: Mark Lizar
type: Concept
isSubTypeOf: GuidelinesPrinciple
term status: accepted
created: 2019-04-05

Sub-Processor Agreement
in scheme: dpv#
created: 2022-01-26
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Paul Ryan
creator: Beatriz Esteves
creator: Julian Flake
type: Concept
term status: accepted
isSubTypeOf: Data Processing Agreement
definition: An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data between a Data Processor and a Data (Sub-)Processor

Anonymise
in scheme: dpv#
source: processing
isSubTypeOf: Transform
related: Anonymise
definition: to irreversibly alter personal data in such a way that an unique data subject can no longer be identified directly or indirectly or in combination with other data
term status: accepted
created: 2019-05-07
type: Concept

Data Protection Impact Assessment (DPIA)
in scheme: dpv#
isSubTypeOf: Impact Assessment
created: 2020-11-04
definition: A DPIA involves determining the potential and actual impact of processing activities on individuals or groups of individuals
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Paul Ryan
note: Top class: Impact Assessment, and DPIA is sub-class
type: Concept
term status: accepted

Service Provision
in scheme: dpv#
type: Concept
definition: Provide service or product or activities
term status: accepted
created: 2019-04-05
creator: Fajar Ekaputra
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Elmar Kiesling
creator: Simon Steyskal
creator: Javier Fernandez
isSubTypeOf: Purpose

Personal_Data Concepts
member: Personal Data
member: Anonymised Data
member: Pseudo-anonymised Data
member: Inferred Personal Data
member: has personal data
member: Derived Personal Data
member: Collected Personal Data
member: Synthetic Data
member: Non-Personal Data
member: Observed Personal Data
member: Data
member: has data
member: Generated Personal Data
member: Special Category Personal Data
member: Sensitive Personal Data
type: Collection

Digital Rights Management
in scheme: dpv#
source: reference-incident-classification-taxonomy
type: Concept
definition: Management of access, use, and other operations associated with digital content
creator: Harshvardhan J. Pandit
isSubTypeOf: Technical Measure
term status: accepted
created: 2022-08-17

has recipient
in scheme: dpv#
creator: Bud Bruegger
creator: Javier Fernández
creator: Mark Lizar
creator: Axel Polleres
creator: Harshvardhan J. Pandit
definition: Indicates Recipient of Personal Data
modified: 2020-11-04
has domain: Concept
source: specialprivacy.ercim.eu
term status: accepted
type: Concept
type: Relation
has range: Recipient
created: 2019-04-04
isSubTypeOf: has entity

Academic Research
in scheme: dpv#
related: Education
term status: accepted
creator: Axel Polleres
creator: Simon Steyskal
creator: Fajar Ekaputra
creator: Javier Fernandez
creator: Harshvardhan J. Pandit
creator: Elmar Kiesling
created: 2019-04-05
type: Concept
definition: Conduct or assist with research conducted in an academic context e.g. within universities
isSubTypeOf: Research and Development

HugeScaleOfDataSubjects
in scheme: dpv#
isInstanceOf: Data Subject Scale
type: Concept
created: 2022-06-15
definition: Scale of data subjects considered huge or more than large within the context
term status: accepted
creator: Harshvardhan J. Pandit

is authority for
in scheme: dpv#
term status: accepted
creator: Georg P Krog
creator: Harshvardhan J. Pandit
has range: Concept
has domain: Authority
created: 2022-01-19
type: Relation
type: Concept
definition: Indicates area, scope, or applicability of an Authority

Audit Conditionally Approved
in scheme: dpv#
definition: State of being conditionally approved through the audit
type: Concept
isInstanceOf: Audit Status
creator: Paul Ryan
term status: accepted
note: A "conditional approval" is intended to reflect states where the audit has identified further changes which must be implemented before considering the audit has been 'passed', without requiring another audit to validate them. This is distinct from the case where an audit has state 'rejected', which means changes must be made and submitted for review. The requirements of a 'conditional acceptance' are expected to be minor or not significant enough to warrant another audit to review them.
created: 2022-06-29

has consent status
in scheme: dpv#
created: 2022-06-21
creator: Paul Ryan
creator: Georg P Krog
creator: Julian Flake
creator: Harshvardhan J. Pandit
has range: Consent Status
type: Concept
type: Relation
term status: accepted
has domain: Concept
definition: Specifies the state or status of consent

Research and Development
in scheme: dpv#
creator: Javier Fernandez
creator: Fajar Ekaputra
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Elmar Kiesling
creator: Simon Steyskal
definition: Conduct research and development for new methods, products, or services
term status: accepted
type: Concept
created: 2019-04-05
isSubTypeOf: Purpose

Sell Products to Data Subject
in scheme: dpv#
type: Concept
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Elmar Kiesling
creator: Simon Steyskal
creator: Javier Fernandez
creator: Fajar Ekaputra
created: 2019-04-05
definition: Sell products or services to the user, consumer, or data subjects
note: Was subclass of commercial interest, changed to reflect selling something
isSubTypeOf: Sell Products
term status: accepted

Service Optimization
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Elmar Kiesling
creator: Axel Polleres
creator: Javier Fernandez
creator: Simon Steyskal
creator: Fajar Ekaputra
definition: Optimise services or activities
note: Subclass of ServiceProvision since optimisation is usually considered part of providing services
type: Concept
isSubTypeOf: Service Provision
term status: accepted
created: 2019-04-05

Joint Data Controllers Agreement
in scheme: dpv#
definition: An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data between Controllers within a Joint Controllers relationship
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Beatriz Esteves
creator: Paul Ryan
creator: Julian Flake
created: 2022-01-26
type: Concept
isSubTypeOf: Data Processing Agreement
term status: accepted

Vital Interest of Data Subject
in scheme: dpv#
definition: Processing is necessary or required to protect vital interests of a data subject
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P Krog
type: Concept
created: 2021-04-21
term status: accepted
isSubTypeOf: Vital Interest of Natural Person

has recipient third party
in scheme: dpv#
creator: Paul Ryan
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
created: 2022-02-09
isSubTypeOf: has recipient
has domain: Concept
has range: Third Party
type: Relation
type: Concept
term status: accepted
definition: Indiciates inclusion or applicability of a Third Party as a Recipient of persona data

Technical_Measures Concepts
member: Network Proxy Routing
member: Private Information Retrieval
member: End-to-End Encryption (E2EE)
member: Privacy Preserving Protocol
member: Asymmetric Cryptography
member: Deterministic Pseudonymisation
member: Data Sanitisation Technique
member: Multi-Factor Authentication (MFA)
member: Usage Control
member: Security Method
member: Document Security
member: Operating System Security
member: Distributed System Security
member: Complete Anonymisation
member: Encryption
member: Secure Multi-Party Computation
member: Virtualisation Security
member: Trusted Execution Environments
member: Pseudo-Anonymisation
member: Single Sign On
member: Information Flow Control
member: Penetration Testing Methods
member: Mobile Platform Security
member: Activity Monitoring
member: Cryptographic Authentication
member: Biometric Authentication
member: Hash Functions
member: Monotonic Counter Pseudoanonymisation
member: Data Backup Protocols
member: Data Anonymisation Technique
member: Homomorphic Encryption
member: Authorisation Protocols
member: Quantum Cryptography
member: Authentication using PABC
member: Authentication Protocols
member: Digital Rights Management
member: Vulnerability Testing Methods
member: De-Identification
member: Trusted Computing
member: Zero Knowledge Authentication
member: Differential Privacy
member: RNG Pseudoanonymisation
member: Fully Randomised Pseudonymisation
member: Hardware Security Protocols
member: Physical Access Control Method
member: Web Security Protocols
member: Encryption in Rest
member: Message Authentication Codes (MAC)
member: Wireless Security Protocols
member: Authentication using ABC
member: Encryption in Transfer
member: Digital Signatures
member: Network Security Protocols
member: Symmetric Cryptography
member: Cryptographic Methods
member: Access Control Method
member: Cryptographic Key Management
member: Use of Synthetic Data
member: Post-Quantum Cryptography
member: Intrusion Detection System
member: Password Authentication
member: Asymmetric Encryption
member: WebBrowser Security
member: Hash-based Message Authentication Code (HMAC)
member: Anonymisation
member: Secret Sharing Schemes
member: File System Security
member: Document Randomised Pseudonymisation
member: Symmetric Encryption
type: Collection

Intrusion Detection System
in scheme: dpv#
source: reference-incident-classification-taxonomy
type: Concept
isSubTypeOf: Security Method
creator: Harshvardhan J. Pandit
definition: Use of measures to detect intrusions and other unauthorised attempts to gain access to a system
term status: accepted
created: 2022-08-17

NonGovernmentalOrganisation
in scheme: dpv#
source: adms
definition: An organisation not part of or independent from the government
created: 2022-02-02
type: Concept
term status: accepted
creator: Harshvardhan J. Pandit
isInstanceOf: Organisation

Service Personalization
in scheme: dpv#
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Simon Steyskal
creator: Fajar Ekaputra
creator: Javier Fernandez
creator: Elmar Kiesling
note: Subclass of ServiceProvision since personalisation is usually considered part of providing services
isSubTypeOf: Service Provision
isSubTypeOf: Personalisation
type: Concept
created: 2019-04-05
definition: Personalise services or product or activities
term status: accepted

Consent Concepts
member: is indicated by
member: has expiry time
member: has withdrawal time
member: has consent notice
member: has withdrawal by justification
member: has withdrawal method
member: is explicit
member: has consent status
member: has provision time
member: has withdrawal by
member: has expiry
member: has indication method
member: has provision by justification
member: has expiry condition
member: has provision by
member: has provision method
member: is indicated at time
type: Collection

Assessment
in scheme: dpv#
type: Concept
creator: Harshvardhan J. Pandit
isSubTypeOf: Organisational Measure
term status: accepted
definition: The document, plan, or process for assessment or determination towards a purpose e.g. assessment of legality or impact assessments
created: 2021-09-08

Mobile Platform Security
in scheme: dpv#
isSubTypeOf: Security Method
type: Concept
term status: accepted
definition: Security implemented over a mobile platform
created: 2022-08-17
source: reference-incident-classification-taxonomy
creator: Harshvardhan J. Pandit

Risk Management Process
in scheme: dpv#
isSubTypeOf: Security Procedure
term status: accepted
creator: Harshvardhan J. Pandit
source: 79637.html
source: iso-31000-risk-management.html
type: Concept
definition: The systematic application of management policies, procedures and practices to the activities of communicating, consulting, establishing the context, and identifying, analysing, evaluating, treating, monitoring, and reviewing risk
created: 2022-08-18

TemporalDuration
in scheme: dpv#
type: Concept
definition: Duration that has a fixed temporal duration e.g. 6 months
term status: accepted
created: 2022-06-15
isInstanceOf: Duration
creator: Harshvardhan J. Pandit

Structure
in scheme: dpv#
term status: accepted
definition: to arrange data according to a structure
created: 2019-05-07
source: oj
type: Concept
isSubTypeOf: Organise

Mentally Vulnerable Data Subject
in scheme: dpv#
definition: Data subjects that are considered mentally vulnerable
type: Concept
isSubTypeOf: Vulnerable Data Subject
created: 2022-06-15
creator: Georg P Krog
term status: accepted

has relation with data subject
in scheme: dpv#
term status: accepted
has range: Concept
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P Krog
definition: Indicates the relation between specified Entity and Data Subject
created: 2022-06-21
isSubTypeOf: has entity
has domain: Entity
type: Relation
type: Concept

Incident Management Procedures
in scheme: dpv#
source: 5g-cybersecurity-standards
definition: Procedures related to management of incidents
isSubTypeOf: Governance Procedures
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
created: 2022-08-17

Service Order Management
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Beatriz Esteves
definition: Manage invoicing, orders, and records in relation to services
type: Concept
isSubTypeOf: Service Provision
term status: accepted
created: 2021-09-08

Enforce Security
in scheme: dpv#
isSubTypeOf: Purpose
creator: Harshvardhan J. Pandit
creator: Elmar Kiesling
creator: Axel Polleres
creator: Simon Steyskal
creator: Fajar Ekaputra
creator: Javier Fernandez
term status: accepted
definition: Ensure and enforce security e.g. of data, personnel
note: Was previous "Security". Prefixed to distinguish from TechOrg measures.
type: Concept
created: 2019-04-05

Consultation with Data Subject
in scheme: dpv#
isSubTypeOf: Consultation
created: 2022-06-15
type: Concept
creator: Harshvardhan J. Pandit
creator: Georg P Krog
term status: accepted
definition: Consultation with data subject(s) or their representative(s)

Collected Personal Data
in scheme: dpv#
type: Concept
note: To indicate the source of data, use the DataSource concept with the hasDataSource relation
created: 2022-03-30
term status: accepted
creator: Harshvardhan J. Pandit
isSubTypeOf: Personal Data
definition: Personal Data that has been collected from another source such as the Data Subject

Credit Checking
in scheme: dpv#
isSubTypeOf: Customer Solvency Monitoring
type: Concept
creator: Harshvardhan J. Pandit
term status: accepted
definition: Monitor, perform, or assess credit worthiness or solvency
created: 2022-04-20

Document Security
in scheme: dpv#
created: 2022-08-17
definition: Security measures enacted over documents to protect against tampering or restrict access
source: reference-incident-classification-taxonomy
type: Concept
isSubTypeOf: Security Method
creator: Harshvardhan J. Pandit
term status: accepted

Encryption in Transfer
in scheme: dpv#
isSubTypeOf: Encryption
term status: accepted
creator: Rob Brennan
creator: Axel Polleres
creator: Mark Lizar
creator: Harshvardhan J. Pandit
created: 2019-04-05
type: Concept
definition: Encryption of data in transit e.g. when being transferred from one location to another, including sharing

Duration
in scheme: dpv#
isSubTypeOf: Context
type: Concept
created: 2022-02-09
term status: accepted
definition: The duration or temporal limitation
creator: Harshvardhan J. Pandit

Data Sanitisation Technique
in scheme: dpv#
creator: Harshvardhan J. Pandit
isSubTypeOf: Technical Measure
type: Concept
created: 2022-08-17
definition: Cleaning or any removal or re-organisation of elements in data based on selective criteria
term status: accepted
source: reference-incident-classification-taxonomy

Code of Conduct
in scheme: dpv#
creator: Mark Lizar
creator: Harshvardhan J. Pandit
creator: Rob Brennan
creator: Axel Polleres
type: Concept
term status: accepted
definition: A set of rules or procedures outlining the norms and practices for conducting activities
isSubTypeOf: GuidelinesPrinciple
created: 2019-04-05

has withdrawal time
in scheme: dpv#
type: Relation
type: Concept
creator: Harshvardhan J. Pandit
creator: Bud Bruegger
creator: Mark Lizar
term status: sunset
editorial note: WARNING: This concept will be deprecated in future releases
definition: Specifies the instant in time when consent was withdrawn
modified: 2022-06-22
created: 2019-04-05

has authority
in scheme: dpv#
created: 2022-01-19
has domain: Concept
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
type: Relation
term status: accepted
has range: Authority
definition: Indicates applicability of authority for a jurisdiction

MediumScaleOfDataSubjects
in scheme: dpv#
creator: Paul Ryan
creator: Harshvardhan J. Pandit
creator: Georg P Krog
type: Concept
definition: Scale of data subjects considered medium i.e. neither large nor small within the context
created: 2022-06-15
isInstanceOf: Data Subject Scale
term status: accepted

has processing
in scheme: dpv#
source: specialprivacy.ercim.eu
created: 2019-04-04
term status: accepted
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Bud Bruegger
creator: Javier Fernández
type: Concept
type: Relation
has range: Processing
definition: Indicates association with Processing
has domain: Concept
modified: 2020-11-04

Law
in scheme: dpv#
definition: A law is a set of rules created by government or authorities
created: 2022-01-19
type: Concept
creator: Harshvardhan J. Pandit
term status: accepted

GlobalScale
in scheme: dpv#
isInstanceOf: Geographic Coverage
type: Concept
created: 2022-06-15
term status: accepted
definition: Geographic coverage spanning the entire globe
creator: Harshvardhan J. Pandit

Sector
in scheme: dpv#
creator: Axel Polleres
creator: Simon Steyskal
creator: Fajar Ekaputra
creator: Javier Fernandez
creator: Harshvardhan J. Pandit
creator: Elmar Kiesling
created: 2019-04-05
type: Concept
definition: Indicate or restrict scope for interpretation and application of purpose in a domain e.g. Agriculture, Banking
term status: accepted
note: There are various sector codes used commonly to indicate the domain of an organisation or business. Examples include NACE (EU), ISIC (UN), SIC and NAICS (USA).

Message Authentication Codes (MAC)
in scheme: dpv#
creator: Harshvardhan J. Pandit
type: Concept
isSubTypeOf: Cryptographic Authentication
created: 2022-08-17
definition: Use of cryptographic methods to authenticate messages
term status: accepted
source: reference-incident-classification-taxonomy

Consequence
in scheme: dpv#
creator: Harshvardhan J. Pandit
created: 2022-01-26
type: Concept
definition: The consequence(s) possible or arising from specified context
term status: accepted

Controller-Processor Agreement
in scheme: dpv#
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Paul Ryan
creator: Beatriz Esteves
definition: An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data between a Data Controller and a Data Processor
created: 2022-01-26
type: Concept
term status: accepted
isSubTypeOf: Data Processing Agreement

Professional Training
in scheme: dpv#
isSubTypeOf: Staff Training
creator: Harshvardhan J. Pandit
type: Concept
created: 2022-08-17
definition: Training methods that are intended to provide professional knowledge and expertise
term status: accepted
source: reference-incident-classification-taxonomy

UntilEventDuration
in scheme: dpv#
type: Concept
definition: Duration that takes place until a specific event occurs e.g. Account Closure
isInstanceOf: Duration
created: 2022-06-15
term status: accepted
creator: Harshvardhan J. Pandit

Variable Location
in scheme: dpv#
type: Concept
term status: accepted
definition: Location that is known but is variable e.g. somewhere within a given area
creator: Harshvardhan J. Pandit
isInstanceOf: Location Fixture
created: 2022-06-15

Monitor
in scheme: dpv#
type: Concept
created: 2022-06-15
creator: Georg P Krog
creator: Harshvardhan J. Pandit
term status: accepted
definition: to monitor data for some criteria
isSubTypeOf: Consult

Processing Concepts
member: Infer
member: Processing
member: Erase
member: Retrieve
member: Destruct
member: Share
member: Anonymise
member: Match
member: Transmit
member: Pseudo-Anonymise
member: Profiling
member: Copy
member: Observe
member: Consult
member: Make Available
member: Organise
member: Screen
member: Use
member: Remove
member: Access
member: Disclose by Transmission
member: Analyse
member: Acquire
member: Alter
member: Assess
member: Derive
member: Restrict
member: has processing
member: Obtain
member: Adapt
member: Collect
member: Disclose
member: Transform
member: Transfer
member: Align
member: Structure
member: Combine
member: Record
member: Store
member: Generate
member: Query
member: Move
member: Monitor
member: Modify
member: Disseminate
member: Filter
type: Collection

Dispute Management
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Beatriz Esteves
source: model-voor-een-register-van-de-verwerkingsactiviteiten
definition: Manage disputes by natural persons, private bodies, or public authorities relevant to organisation
isSubTypeOf: Organisation Governance
type: Concept
term status: accepted
created: 2021-09-08

Consent_Types Concepts
member: Implied Consent
member: Uninformed Consent
member: Expressed Consent
member: Explicitly Expressed Consent
member: Informed Consent
type: Collection

Adapt
in scheme: dpv#
term status: accepted
created: 2019-05-07
source: oj
type: Concept
definition: to modify the data, often rewritten into a new form for a new use
isSubTypeOf: Transform

has processing automation
in scheme: dpv#
definition: Indicates the use or extent of automation associated with processing
type: Relation
type: Concept
has domain: Concept
created: 2022-08-13
term status: accepted
creator: Harshvardhan J. Pandit
has range: Automation of Processing

Vendor Records Management
in scheme: dpv#
type: Concept
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: David Hickey
creator: Paul Ryan
definition: Manage orders related to vendors
source: model-voor-een-register-van-de-verwerkingsactiviteiten
created: 2021-09-01
term status: accepted
isSubTypeOf: Vendor Management

Data Subject Right
in scheme: dpv#
type: Concept
term status: accepted
note: Based on use of definitions, the notion of 'Data Subject Right' can be equivalent to 'Individual Right' or 'Right of a Person'
creator: Harshvardhan Pandit
creator: Beatriz Esteves
creator: Georg P Krog
created: 2020-11-18
definition: The rights applicable or provided to a Data Subject
isSubTypeOf: Right

has data importer
in scheme: dpv#
type: Relation
type: Concept
has range: Data Importer
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
term status: accepted
definition: Indiciates inclusion or applicability of a LegalEntity in the role of Data Importer
created: 2022-02-09
has domain: Concept
isSubTypeOf: has recipient

Customer Relationship Management
in scheme: dpv#
definition: Manage and analyse interactions with past, current, and potential customers
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Beatriz
term status: accepted
type: Concept
created: 2021-09-08
isSubTypeOf: Customer Management

Internal Resource Optimisation
in scheme: dpv#
definition: Optimize internal resource availability and usage for organisation
created: 2019-04-05
creator: Javier Fernandez
creator: Fajar Ekaputra
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Elmar Kiesling
creator: Simon Steyskal
term status: accepted
type: Concept
isSubTypeOf: Optimisation for Controller

Activity Monitoring
in scheme: dpv#
type: Concept
term status: accepted
created: 2022-08-17
source: reference-incident-classification-taxonomy
isSubTypeOf: Technical Measure
definition: Monitoring of activities including assessing whether they have been successfully initiated and completed
creator: Harshvardhan J. Pandit

Data Source
in scheme: dpv#
type: Concept
isSubTypeOf: Processing Context
created: 2020-11-04
creator: Georg P Krog
creator: Beatriz Esteves
creator: Harshvardhan J. Pandit
term status: accepted
definition: The source or origin of data
note: Source' is the direct point of data collection; 'origin' would indicate the original/others points of where the data originates from.

Safeguard
in scheme: dpv#
creator: Georg P Krog
creator: David Hickey
creator: Paul Ryan
creator: Harshvardhan J. Pandit
term status: accepted
isSubTypeOf: Organisational Measure
created: 2021-09-22
type: Concept
note: This concept is relevant given the requirement to assert safeguards in cross-border data transfers
definition: A safeguard is a precautionary measure for the protection against or mitigation of negative effects

has duration
in scheme: dpv#
source: specialprivacy.ercim.eu
creator: Mark Lizar
creator: Rob Brennan
creator: Harshvardhan J. Pandit
creator: Axel Polleres
has range: Duration
type: Relation
type: Concept
definition: Indicates information about duration
term status: accepted
has domain: Concept
created: 2019-04-05

Visitor
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Julian Flake
creator: Georg P. Krog
creator: Beatriz Esteves
type: Concept
definition: Data subjects that are temporary visitors
isSubTypeOf: Data Subject
created: 2022-04-06
term status: accepted

has contact
in scheme: dpv#
type: Relation
type: Concept
definition: Specifies contact details of a legal entity such as phone or email
creator: Harshvardhan J.Pandit
creator: Paul Ryan
creator: Georg P Krog
creator: Beatriz Esteves
term status: accepted
has domain: Entity
has range: Concept
created: 2020-11-04

Analyse
in scheme: dpv#
related: Analyse
definition: to study or examine the data in detail
type: Concept
source: processing
term status: accepted
created: 2019-05-07
isSubTypeOf: Use

isSubTypeOf
sub property of: broader

Federated Locations
in scheme: dpv#
created: 2022-06-15
type: Concept
term status: accepted
definition: Location that is federated across multiple separate areas with designation of a primary or central location
creator: Harshvardhan J. Pandit
isInstanceOf: Location Fixture

Harm
in scheme: dpv#
creator: Beatriz Esteves
creator: Fajar Ekaputra
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Julian Flake
created: 2022-08-13
type: Concept
definition: Impact that acts as or causes harms
term status: changed
isSubTypeOf: Damage

has expiry time
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Bud Bruegger
creator: Mark Lizar
type: Concept
type: Relation
modified: 2022-06-22
isSubTypeOf: expiry
editorial note: WARNING: This concept will be deprecated in future releases
term status: sunset
definition: Specifies the expiry time or duration for consent
created: 2019-04-05

Public Relations
in scheme: dpv#
creator: Paul Ryan
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: David Hickey
type: Concept
isSubTypeOf: Marketing
source: model-voor-een-register-van-de-verwerkingsactiviteiten
created: 2021-09-01
term status: accepted
definition: Manage and conduct public relations processes. This includes creating goodwill for the organization.

Retrieve
in scheme: dpv#
type: Concept
term status: accepted
created: 2019-05-07
source: oj
isSubTypeOf: Use
definition: to retrieve data, often in an automated manner

Public Interest
in scheme: dpv#
isSubTypeOf: Legal Basis
term status: accepted
type: Concept
definition: Processing is necessary or beneficial for interest of the public or society at large
created: 2021-04-21
creator: Harshvardhan J. Pandit

Optimisation for Consumer
in scheme: dpv#
definition: Optimize activities and services for consumer or user
creator: Javier Fernandez
creator: Fajar Ekaputra
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Elmar Kiesling
creator: Simon Steyskal
type: Concept
isSubTypeOf: Service Optimization
term status: accepted
created: 2019-04-05
related: Custom

EndlessDuration
in scheme: dpv#
creator: Harshvardhan J. Pandit
type: Concept
definition: Duration that is open ended or without an end
term status: accepted
created: 2022-06-15
isInstanceOf: Duration

Alter
in scheme: dpv#
created: 2019-05-07
type: Concept
term status: accepted
definition: to change the data without changing it into something else
isSubTypeOf: Transform
source: oj

Patient
in scheme: dpv#
creator: Julian Flake
creator: Paul Ryan
creator: Harshvardhan J. Pandit
creator: Georg P. Krog
creator: Beatriz Esteves
created: 2022-04-06
type: Concept
definition: Data subjects that receive medican attention, treatment, care, advice, or other health related services
term status: accepted
isSubTypeOf: Data Subject

Large Scale Processing
in scheme: dpv#
type: Concept
definition: Processing that takes place at large scales
term status: accepted
isSubTypeOf: Processing Context
created: 2020-11-04
creator: Piero Bonatti
creator: Harshvardhan J. Pandit
source: oj

Disseminate
in scheme: dpv#
term status: accepted
definition: to spread data throughout
type: Concept
created: 2019-05-07
source: oj
isSubTypeOf: Disclose

has data source
in scheme: dpv#
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
term status: accepted
definition: Indicates the source or origin of data being processed
created: 2020-11-04
type: Concept
type: Relation
has range: Data Source
has domain: Concept

has technical and organisational measure
in scheme: dpv#
creator: Mark Lizar
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Bud Bruegger
creator: Javier Fernández
definition: Indicates use or applicability of Technical or Organisational measure
type: Concept
type: Relation
created: 2019-04-04
has range: Technical and Organisational Measure
has domain: Concept
modified: 2020-11-04
term status: accepted

Not Compliant
in scheme: dpv#
term status: accepted
definition: State of not being compliant where objectives have not been met, but have not been violated
isInstanceOf: Compliance Status
type: Concept
creator: Harshvardhan J. Pandit
created: 2022-05-18

Consumer
in scheme: dpv#
term status: accepted
creator: Beatriz Esteves
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P. Krog
isSubTypeOf: Data Subject
created: 2022-04-06
type: Concept
definition: Data subjects that consume goods or services for direct use

Scale
in scheme: dpv#
definition: A measurement along some dimension
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Rana Saniei
note: Scales are subjective concepts that need to be defined and interpreted within the context of their application. For example, what would be small within one context could be large within another.
type: Concept
created: 2022-06-15
isSubTypeOf: Processing Context
term status: accepted

Single Sign On
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Paul Ryan
type: Concept
isSubTypeOf: Authentication Protocols
term status: accepted
created: 2020-11-04
definition: Use of credentials or processes that enable using one set of credentials to authenticate multiple contexts.

Region
in scheme: dpv#
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
isSubTypeOf: Location
definition: A region is an area or site that is considered a location
created: 2022-01-19

Non-Personal Data
in scheme: dpv#
type: Concept
creator: Harshvardhan J. Pandit
created: 2022-01-19
term status: accepted
isSubTypeOf: Data
note: The term NonPersonalData is provided to distinguish between PersonalData and other data, e.g. for indicating which data is regulated by privacy laws. To specify personal data that has been anonymised, the concept AnonymisedData should be used.
definition: Data that is not Personal Data

Random Location
in scheme: dpv#
type: Concept
term status: accepted
creator: Harshvardhan J. Pandit
isInstanceOf: Location Fixture
created: 2022-06-15
definition: Location that is random or unknown

has activity status
in scheme: dpv#
has range: Activity Status
isSubTypeOf: has status
definition: Indicates the status of activity of specified concept
type: Concept
type: Relation
has domain: Concept
term status: accepted
creator: Harshvardhan J. Pandit
created: 2022-05-18

Anti-Terrorism Operations
in scheme: dpv#
isSubTypeOf: Enforce Security
created: 2022-04-20
term status: accepted
type: Concept
definition: Detect, prevent, mitigate, or otherwise act on anti-terrorism activities
creator: Harshvardhan J. Pandit

Operating System Security
in scheme: dpv#
isSubTypeOf: Security Method
term status: accepted
created: 2022-08-17
definition: Security implemented at or through operating systems
source: reference-incident-classification-taxonomy
type: Concept
creator: Harshvardhan J. Pandit

has joint data controllers
in scheme: dpv#
term status: accepted
definition: Indicates inclusion or applicability of a Joint Data Controller
isSubTypeOf: has data controller
has range: Joint Data Controllers
created: 2022-02-09
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
has domain: Concept
type: Relation
type: Concept

has purpose
in scheme: dpv#
creator: Bud Bruegger
creator: Javier Fernández
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
modified: 2020-11-04
has domain: Concept
definition: Indicates association with Purpose
has range: Purpose
created: 2019-04-04
term status: accepted
source: specialprivacy.ercim.eu
type: Concept
type: Relation

Personnel Management
in scheme: dpv#
created: 2022-03-30
creator: Paul Ryan
creator: Harshvardhan J. Pandit
type: Concept
source: model-voor-een-register-van-de-verwerkingsactiviteiten
definition: Management of personnel associated with the organisation e.g. evaluation and management of employees and intermediaries
term status: accepted
isSubTypeOf: HumanResources

Data Privacy Vocabulary
contributor: Elmar Kiesling
contributor: Rob Brennan
contributor: Axel Polleres
contributor: Paul Ryan
contributor: Ramisa Gachpaz Hamed
contributor: Rigo Wenning
contributor: Bud Bruegger
contributor: Georg P Krog
contributor: Mark Lizar
contributor: Julian Flake
contributor: Beatriz Esteves
contributor: Eva Schlehahn
contributor: Bert Bos
contributor: Harshvardhan J. Pandit
contributor: Fajar J. Ekaputra
contributor: Javier D. Fernández
contributor: Piero Bonatti
contributor: Simon Steyskal
license: doc-license
creator: Axel Polleres
creator: Harshvardhan J. Pandit
type: Ontology
description: The Data Privacy Vocabulary (DPV) provides terms (classes and properties) to represent information about legally compliant personal data handling, which includes purposes, processing, personal data, technical and organisational measures.
preferred namespace uri: https://w3id.org/dpv#
version info: 0.8
created: 2019-06-18
modified: 2022-08-26
preferred namespace prefix: dpv
source: dpvcg

Certification
in scheme: dpv#
type: Concept
definition: Certification mechanisms, seals, and marks for the purpose of demonstrating compliance
creator: Mark Lizar
creator: Harshvardhan J. Pandit
creator: Rob Brennan
creator: Axel Polleres
isSubTypeOf: Certification and Seal
term status: accepted
created: 2019-04-05

has audit status
in scheme: dpv#
definition: Indicates the status of audit associated with specified concept
type: Concept
type: Relation
term status: accepted
has range: Audit Status
has domain: Concept
created: 2022-06-22
creator: Harshvardhan J. Pandit
isSubTypeOf: has status

Fixed Multiple Locations
in scheme: dpv#
created: 2022-06-15
term status: accepted
creator: Harshvardhan J. Pandit
type: Concept
isInstanceOf: Fixed Location
definition: Location that is fixed with multiple places e.g. multiple cities

Representative
in scheme: dpv#
created: 2020-11-04
creator: Georg Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Beatriz Esteves
definition: A representative of a legal entity
source: oj
isSubTypeOf: Legal Entity
type: Concept
term status: accepted

Legal Compliance
in scheme: dpv#
created: 2020-11-04
definition: Fulfilment of obligations or requirements towards achieving compliance with law or regulations
creator: Georg P Krog
creator: Beatriz Esteves
creator: Harshvardhan J. Pandit
type: Concept
isSubTypeOf: Purpose
term status: accepted

Personnel Hiring
in scheme: dpv#
created: 2022-04-20
creator: Harshvardhan J. Pandit
definition: Management and execution of hiring processes of personnel
type: Concept
term status: accepted
isSubTypeOf: Personnel Management

Storage Duration
in scheme: dpv#
creator: Rob Brennan
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
type: Concept
term status: accepted
created: 2019-04-05
isSubTypeOf: Duration
isSubTypeOf: Storage Condition
definition: Duration or temporal limitation on storage of personal data

Data Transfer Impact Assessment
in scheme: dpv#
definition: Impact Assessment for conducting data transfers
isSubTypeOf: Impact Assessment
created: 2021-09-08
creator: Paul Ryan
creator: Harshvardhan J. Pandit
creator: Georg P Krog
type: Concept
term status: accepted

Cryptographic Key Management
in scheme: dpv#
type: Concept
creator: Harshvardhan J. Pandit
definition: Management of crytographic keys, including their generation, storage, assessment, and safekeeping
term status: accepted
created: 2022-08-17
source: reference-incident-classification-taxonomy
isSubTypeOf: Cryptographic Methods

Make Available
in scheme: dpv#
type: Concept
definition: to transform or publish data to be used
term status: accepted
isSubTypeOf: Disclose
created: 2019-05-07
source: oj

Delivery of Goods
in scheme: dpv#
type: Concept
creator: Fajar Ekaputra
creator: Javier Fernandez
creator: Harshvardhan J. Pandit
creator: Elmar Kiesling
creator: Axel Polleres
creator: Simon Steyskal
related: Delivery
definition: Deliver goods and services requested or asked by consumer
term status: accepted
created: 2019-04-05
isSubTypeOf: Requested Service Provision

Cryptographic Methods
in scheme: dpv#
definition: Use of cryptographic methods to perform tasks
type: Concept
term status: accepted
created: 2022-08-17
source: reference-incident-classification-taxonomy
creator: Harshvardhan J. Pandit
isSubTypeOf: Technical Measure

Algorithmic Logic
in scheme: dpv#
type: Concept
note: Algorithmic Logic is intended as a broad concept for explaining the use of algorithms and automated decisions making within Processing. To describe the actual algorithm, see the Algorithm concept.
modified: 2022-06-15
term status: accepted
isSubTypeOf: Automation of Processing
definition: The algorithmic logic applied or used
created: 2022-01-26
creator: Harshvardhan J. Pandit

Information Flow Control
in scheme: dpv#
source: reference-incident-classification-taxonomy
type: Concept
creator: Harshvardhan J. Pandit
isSubTypeOf: Technical Measure
definition: Use of measures to control information flows
created: 2022-08-17
term status: accepted

Base Concepts
member: Recipient
member: Data Subject Right
member: has risk
member: has technical and organisational measure
member: has personal data handling
member: Personal Data
member: has right
member: Risk
member: has personal data
member: Data Subject
member: Right
member: has legal basis
member: Processing
member: has data controller
member: Technical and Organisational Measure
member: has processing
member: Personal Data Handling
member: has data subject
member: has recipient
member: Purpose
member: has purpose
member: Data Controller
member: Legal Basis
type: Collection

Create Product Recommendations
in scheme: dpv#
created: 2019-04-05
creator: Harshvardhan J. Pandit
creator: Elmar Kiesling
creator: Simon Steyskal
creator: Javier Fernandez
creator: Fajar Ekaputra
creator: Axel Polleres
isSubTypeOf: Create Personalized Recommendations
definition: Create and provide product recommendations e.g. suggest similar products
type: Concept
related: Marketing
term status: accepted

Access Control Method
in scheme: dpv#
creator: Rob Brennan
creator: Axel Polleres
creator: Mark Lizar
creator: Harshvardhan J. Pandit
type: Concept
created: 2019-04-05
isSubTypeOf: Technical Measure
term status: accepted
definition: Methods which restrict access to a place or resource

Vital Interest
in scheme: dpv#
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
definition: Processing is necessary or required to protect vital interests of a data subject or other natural person
created: 2021-04-21
isSubTypeOf: Legal Basis

Organisation Governance
in scheme: dpv#
type: Concept
creator: Georg P Krog
creator: David Hickey
creator: Paul Ryan
creator: Harshvardhan J. Pandit
term status: accepted
source: model-voor-een-register-van-de-verwerkingsactiviteiten
isSubTypeOf: Purpose
definition: Conduct activities and functions for organisation's governance
created: 2021-09-01

Context
in scheme: dpv#
created: 2019-04-05
creator: Axel Polleres
creator: Fajar Ekaputra
creator: Harshvardhan J. Pandit
creator: Javier Fernandez
creator: Elmar Kiesling
creator: Simon Steyskal
type: Concept
modified: 2022-06-15
term status: changed
definition: Contextually relevant information not possible to represent through other core concepts

Data Processing Agreement
in scheme: dpv#
creator: Georg P Krog
creator: Beatriz Esteves
creator: Paul Ryan
creator: Julian Flake
creator: Harshvardhan J. Pandit
term status: accepted
type: Concept
definition: An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data
created: 2022-01-26
note: For specific role-based data processing agreements, see concepts for Processors and JointDataController agreements.
isSubTypeOf: Legal Agreement

Authorisation Protocols
in scheme: dpv#
creator: Harshvardhan J. Pandit
isSubTypeOf: Technical Measure
type: Concept
definition: Protocols involving authorisation of roles or profiles to determine permission, rights, or privileges
term status: accepted
created: 2022-08-17
source: reference-incident-classification-taxonomy

Automated Processing with Human Input
in scheme: dpv#
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
definition: Processing that is automated and involves inputs by Humans
isInstanceOf: Automation of Processing
created: 2022-06-15
note: For example, an algorithm that takes inputs from humans and performs operations based on them

Implied Consent
in scheme: dpv#
created: 2022-06-21
type: Concept
isSubTypeOf: Informed Consent
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Julian Flake
creator: Paul Ryan
definition: Consent that is implied indirectly through an action not associated solely with conveying a consenting decision
note: Implied consent is expected to also be Informed Consent. An example is a CCTV notice outside a monitored area that informs the individuals that by walking in they would be consenting to the use of camera for surveillance.
term status: accepted

Use
in scheme: dpv#
definition: to use data
term status: accepted
isSubTypeOf: Processing
type: Concept
created: 2019-05-07
source: oj

Destruct
in scheme: dpv#
type: Concept
created: 2019-05-07
source: oj
definition: to process data in a way it no longer exists or cannot be repaired
isSubTypeOf: Remove
term status: accepted

Consent Unknown
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P Krog
creator: Julian Flake
created: 2022-06-22
source: GConsent
type: Concept
note: Consent states can be unknown, for example, when information is not available, or cannot be trusted, or is known to be inaccurate
definition: State where information about consent is not available or is unknown
term status: accepted
isInstanceOf: Consent Status Invalid for Processing

Legal Basis
in scheme: dpv#
note: Legal basis (plural: legal bases) are defined by legislations and regulations, whose applicability is usually restricted to specific jurisdictions.
modified: 2020-11-04
type: Concept
term status: accepted
created: 2019-04-05
definition: The Legal basis used to justify processing of personal data
creator: Axel Polleres
creator: Javier Fernández

Consent Request Deferred
in scheme: dpv#
note: An example of this state is when the individual closes or dismisses a notice without making a decision. This state is intended for making the distinction between a notice being provided (as a consent request) and the individual interacting with the notice without making a decision - where the 'ignoring of a notice' is taken as consent being neither given nor refused
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Paul Ryan
creator: Julian Flake
created: 2022-06-22
type: Concept
definition: State where a request for consent has been deferred without a decision
term status: accepted
source: GConsent
isInstanceOf: Consent Status Invalid for Processing

Country
in scheme: dpv#
definition: A political entity indicative of a sovereign or non-sovereign territorial state comprising of distinct geographical areas
creator: Harshvardhan J. Pandit
creator: Georg P Krog
type: Concept
term status: accepted
note: The definition of country is not intended for political interpretation. DPVCG welcomes alternate definitions based in existing sources with global scope, such as UN or ISO.
isSubTypeOf: Location
created: 2022-01-19

Third Party Security Procedures
in scheme: dpv#
isSubTypeOf: Security Procedure
creator: Harshvardhan J. Pandit
source: 5g-cybersecurity-standards
type: Concept
term status: accepted
definition: Procedures related to security associated with Third Parties
created: 2022-08-17

Certification and Seal
in scheme: dpv#
term status: accepted
definition: Certifications, seals, and marks indicating compliance to regulations or practices
isSubTypeOf: Organisational Measure
creator: Rob Brennan
creator: Axel Polleres
creator: Mark Lizar
creator: Harshvardhan J. Pandit
type: Concept
created: 2019-04-05

Organisation Compliance Management
in scheme: dpv#
creator: Paul Ryan
creator: Harshvardhan J. Pandit
creator: David Hickey
creator: Georg P Krog
type: Concept
isSubTypeOf: Organisation Governance
created: 2021-09-01
definition: Manage compliance for organisation in relation to internal policies
term status: accepted

Hash Functions
in scheme: dpv#
definition: Use of hash functions to map information or to retrieve a prior categorisation
isSubTypeOf: Cryptographic Methods
creator: Harshvardhan J. Pandit
type: Concept
created: 2022-08-17
term status: accepted
source: reference-incident-classification-taxonomy

Personalised Advertising
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Beatriz Esteves
type: Concept
created: 2020-11-04
isSubTypeOf: Advertising
isSubTypeOf: Personalisation
definition: Create and provide personalised advertising
term status: accepted

Data Subject
in scheme: dpv#
isSubTypeOf: Legal Entity
isSubTypeOf: Natural Person
modified: 2020-11-04
creator: Javier Fernández
creator: Axel Polleres
term status: accepted
note: The term 'data subject' is specific to the GDPR, but is functionally equivalent to the term 'individual' and the ISO/IEC term 'PII Principle'.
source: oj
type: Concept
definition: The individual (or category of individuals) whose personal data is being processed
created: 2019-04-05

Complete Anonymisation
in scheme: dpv#
term status: accepted
type: Concept
isSubTypeOf: Anonymisation
created: 2022-02-09
definition: Altering personal data irreversibly such that a data subject can no longer be identified directly or indirectly, either by the data controller alone or in collaboration with any other party
creator: Harshvardhan J. Pandit

Logging Policies
in scheme: dpv#
type: Concept
term status: accepted
definition: Policy for logging of information
created: 2022-08-17
source: 5g-cybersecurity-standards
isSubTypeOf: Governance Procedures
creator: Harshvardhan J. Pandit

Erase
in scheme: dpv#
isSubTypeOf: Remove
term status: accepted
definition: to delete data
type: Concept
created: 2019-05-07
source: oj

Non-Public Data Source
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Paul Ryan
creator: Julian Flake
creator: Beatriz Esteves
created: 2022-01-26
type: Concept
term status: accepted
definition: A source of data that is not publicly accessible or available
isInstanceOf: Data Source

has risk
in scheme: dpv#
has domain: Concept
type: Relation
type: Concept
has range: Risk
creator: Harshvardhan J. Pandit
term status: accepted
definition: Indicates applicability of Risk
definition: Indicates applicability of Risk for this concept
created: 2020-11-18

IndustryConsortium
in scheme: dpv#
definition: A consortium established and comprising on industry organisations
type: Concept
term status: accepted
source: adms
created: 2022-02-02
isInstanceOf: Organisation
creator: Harshvardhan J. Pandit

Trusted Execution Environments
in scheme: dpv#
type: Concept
source: data-protection-engineering
creator: Harshvardhan J. Pandit
term status: accepted
isSubTypeOf: CrytographicMethods
created: 2022-08-17
definition: Use of cryptographic methods to restrict access and execution to trusted parties and code within a dedicated execution environment

Share
in scheme: dpv#
definition: to give data (or a portion of it) to others
isSubTypeOf: Disclose
type: Concept
term status: accepted
created: 2019-05-07
source: oj

Combine
in scheme: dpv#
type: Concept
created: 2019-05-07
source: oj
source: processing
related: Aggregate
definition: to join or merge data
isSubTypeOf: Transform
term status: accepted

Customer Management
in scheme: dpv#
type: Concept
created: 2021-09-08
isSubTypeOf: Purpose
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Beatriz
term status: accepted
definition: Manage past, current, and future customers

has representative
in scheme: dpv#
type: Relation
type: Concept
creator: Harshvardhan J.Pandit
creator: Paul Ryan
creator: Georg P Krog
creator: Beatriz Esteves
created: 2020-11-04
isSubTypeOf: has entity
has domain: Entity
term status: accepted
definition: Specifies representative of the legal entity
has range: Representative

Audit Requested
in scheme: dpv#
term status: accepted
creator: Harshvardhan J. Pandit
definition: State of an audit being requested whose outcome is not yet known
created: 2022-05-18
type: Concept
isInstanceOf: Audit Status

Processing
in scheme: dpv#
created: 2019-04-05
creator: Axel Polleres
creator: Javier Fernández
type: Concept
term status: accepted
source: specialprivacy.ercim.eu
related: AnyProcessing
modified: 2020-11-04
definition: The processing performed on personal data

has country
in scheme: dpv#
isSubTypeOf: has location
created: 2022-01-19
has domain: Concept
definition: Indicates applicability of specified country
creator: Harshvardhan J. Pandit
creator: Georg P Krog
type: Concept
type: Relation
term status: accepted
has range: Country

mitigates risk
in scheme: dpv#
has domain: Risk Mitigation Measure
creator: Harshvardhan J. Pandit
created: 2020-11-04
type: Concept
type: Relation
has range: Risk
term status: accepted
definition: Indicates risks mitigated by this concept

Optional
in scheme: dpv#
created: 2022-02-14
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P Krog
creator: Beatriz Esteves
type: Concept
definition: Indication of 'optional' or 'voluntary'
isInstanceOf: Necessity
term status: accepted

Profiling
in scheme: dpv#
type: Concept
term status: accepted
created: 2019-05-07
source: oj
isSubTypeOf: Use
definition: to create a profile that describes or represents a person

Monotonic Counter Pseudoanonymisation
in scheme: dpv#
type: Concept
term status: accepted
created: 2022-08-17
source: data-pseudonymisation-advanced-techniques-and-use-cases
definition: A simple pseudoanonymisation method where identifiers are substituted by a number chosen by a monotonic counter
isSubTypeOf: Anonymisation
creator: Harshvardhan J. Pandit

Digital Signatures
in scheme: dpv#
source: reference-incident-classification-taxonomy
isSubTypeOf: Cryptographic Methods
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
definition: Expression and authentication of identity through digital information containing cryptographic signatures
created: 2022-08-17

Physical Access Control Method
in scheme: dpv#
created: 2022-06-15
creator: Georg P Krog
type: Concept
definition: Access control applied for physical access e.g. premises or equipement
term status: accepted
isSubTypeOf: Access Control Method

Use of Synthetic Data
in scheme: dpv#
definition: Use of synthetic data to preserve privacy, security, or other effects and side-effects
source: data-protection-engineering
isSubTypeOf: Security Method
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
created: 2022-08-17

ContractualTerms
in scheme: dpv#
creator: Axel Polleres
creator: Mark Lizar
creator: Harshvardhan J. Pandit
creator: Rob Brennan
type: Concept
isSubTypeOf: Legal Agreement
definition: Contractual terms governing data handling within or with an entity
term status: accepted
created: 2019-04-05

Impact
in scheme: dpv#
isSubTypeOf: Consequence
creator: Fajar Ekaputra
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Julian Flake
creator: Beatriz Esteves
note: Impact is a stronger notion of consequence in terms of influence, change, or effect on something e.g. for impact assessments
created: 2022-03-23
type: Concept
term status: accepted
definition: The impact(s) possible or arising as a consequence from specified context

Justification
in scheme: dpv#
created: 2022-06-15
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
definition: A form of documentation providing reaosns, explanations, or justifications
isSubTypeOf: Context

Non-Commercial Research
in scheme: dpv#
type: Concept
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Elmar Kiesling
creator: Simon Steyskal
creator: Javier Fernandez
creator: Fajar Ekaputra
created: 2019-04-05
definition: Conduct research in a non-commercial setting e.g. for a non-profit-organisation (NGO)
isSubTypeOf: Research and Development
term status: accepted

AcademicScientificOrganisation
in scheme: dpv#
created: 2022-02-02
type: Concept
definition: Organisations related to academia or scientific pursuits e.g. Universities, Schools, Research Bodies
creator: Harshvardhan J. Pandit
source: adms
term status: accepted
isInstanceOf: Organisation

is indicated at time
in scheme: dpv#
type: Relation
type: Concept
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P Krog
creator: Julian Flake
term status: accepted
has domain: Concept
created: 2022-06-21
definition: Specifies the temporal information for when the entity has indicated the specific context

Uninformed Consent
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Julian Flake
creator: Paul Ryan
definition: Consent that is uninformed i.e. without requirement to provide sufficient information to make a consenting decision
type: Concept
isSubTypeOf: Consent
created: 2022-06-21
term status: accepted

LocalityScale
in scheme: dpv#
type: Concept
note: For example, geographic scale of a city or an area within a city
term status: accepted
created: 2022-06-15
creator: Harshvardhan J. Pandit
isInstanceOf: Geographic Coverage
definition: Geographic coverage spanning a specific locality

has likelihood
in scheme: dpv#
term status: accepted
has range: Likelihood
created: 2022-07-20
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Julian Flake
creator: Georg P Krog
type: Relation
type: Concept
definition: Indicates the likelihood associated with a concept
has domain: Concept

Right
in scheme: dpv#
created: 2020-11-18
creator: Harshvardhan J Pandit
creator: Georg P Krog
creator: Beatriz Esteves
type: Concept
note: A 'right' is a legal, social, or ethical principle of freedom or entitlement which dictate the norms regarding what is allowed or owed.. Rights as a concept encompass a broad area of norms and entities, and are not specific to Individuals or Data Protection / Privacy. For individual specific rights, see dpv:DataSubjectRight
term status: accepted
definition: The right(s) applicable, provided, or expected.

Vulnerability Testing Methods
in scheme: dpv#
term status: accepted
source: reference-incident-classification-taxonomy
type: Concept
creator: Harshvardhan J. Pandit
definition: Methods that assess or discover vulnerabilities in a system
created: 2022-08-17
isSubTypeOf: Security Method

has provision time
in scheme: dpv#
editorial note: WARNING: This concept will be deprecated in future releases
term status: sunset
creator: Mark Lizar
creator: Harshvardhan J. Pandit
creator: Bud Bruegger
type: Concept
type: Relation
modified: 2022-06-22
created: 2019-04-05
definition: Specifies the instant in time when consent was given

Personal Data Handling
in scheme: dpv#
creator: Axel Polleres
creator: Javier Fernández
type: Concept
term status: accepted
created: 2019-04-05
definition: A high-level Class to describe 'data handling'. This can consist of personal data being processed for a purpose, involving entities, using technical and organisational measures, applicable risks, rights, and legal basis.
modified: 2020-11-04

Data Subject Scale
in scheme: dpv#
definition: Scale of Data Subject(s)
type: Concept
created: 2022-06-15
isSubTypeOf: Scale
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Rana Saniei
term status: accepted

is policy for
in scheme: dpv#
has domain: Policy
type: Concept
type: Relation
term status: accepted
has range: Concept
created: 2022-01-26
definition: Indicates the context or application of policy
creator: Harshvardhan J. Pandit

Sell Products
in scheme: dpv#
created: 2021-09-08
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Beatriz Esteves
definition: Sell products or services
type: Concept
term status: accepted
note: Sell here means exchange, submit, or provide in return for direct or indirect compensation.
isSubTypeOf: Service Provision

Transmit
in scheme: dpv#
type: Concept
definition: to send out data
isSubTypeOf: Disclose
term status: accepted
created: 2019-05-07
source: oj

Safeguard for Data Transfer
in scheme: dpv#
definition: Represents a safeguard used for data transfer. Can include technical or organisational measures.
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: David Hickey
creator: Paul Ryan
type: Concept
isSubTypeOf: Safeguard
term status: accepted
created: 2021-09-22

Post-Quantum Cryptography
in scheme: dpv#
creator: Harshvardhan J. Pandit
definition: Use of algorithms that are intended to be secure against cryptanalytic attack by a quantum computer
type: Concept
term status: accepted
created: 2022-08-17
source: reference-incident-classification-taxonomy
isSubTypeOf: CrytographicMethods

ForProfitOrganisation
in scheme: dpv#
term status: accepted
creator: Harshvardhan J. Pandit
definition: An organisation that aims to achieve profit as its primary goal
created: 2022-02-02
type: Concept
isInstanceOf: Organisation

Legal Obligation
in scheme: dpv#
definition: Legal Obligation to conduct the specified processing
type: Concept
term status: accepted
created: 2021-04-07
isSubTypeOf: Legal Basis
creator: Harshvardhan J. Pandit

has human involvement
in scheme: dpv#
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
term status: accepted
created: 2020-11-04
note: Human involvement is also relevant to 'human in the loop'
type: Concept
type: Relation
definition: Indicates Involvement of humans in processing such as within automated decision making process
has range: Human Involvement
has domain: Concept

Renewed Consent Given
in scheme: dpv#
creator: Georg P Krog
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Paul Ryan
term status: accepted
note: An example of this state is when a previously given consent has expired, and the individual is presented a notice regarding continuing associated processing operations - to which they agree. This state can be useful to keep track of 'reconfirmed' or 'refreshed' consent within consent records, assist notices and contextual agents to create better consenting dialogues, and assist with specific legal obligations related to subsequent consenting
source: GConsent
created: 2022-06-22
type: Concept
definition: The state where a previously given consent has been 'renewed' or 'refreshed' or 'reaffirmed' to form a new instance of given consent
isInstanceOf: Consent Status Valid for Processing

has third country
in scheme: dpv#
term status: accepted
creator: Harshvardhan J. Pandit
creator: Georg P Krog
type: Concept
type: Relation
has range: Third Country
definition: Indicates applicability or relevance of a 'third country'
created: 2022-02-09
has domain: Concept
isSubTypeOf: has country

Compliant
in scheme: dpv#
term status: accepted
creator: Harshvardhan J. Pandit
created: 2022-05-18
type: Concept
definition: State of being fully compliant
isInstanceOf: Compliance Status

Infer
in scheme: dpv#
isSubTypeOf: Derive
definition: to infer data from existing data
created: 2022-04-20
term status: accepted
type: Concept
note: Infer indicates data that is derived without it being present or obtainable from existing data. For data that is presented, and is 'extracted' or 'obtained' from existing data, see Derive.
creator: Harshvardhan J. Pandit

Compliance Status
in scheme: dpv#
definition: Status associated with Compliance with some norms, objectives, or requirements
creator: Harshvardhan J. Pandit
created: 2022-05-18
isSubTypeOf: Status
type: Concept
term status: accepted

has location
in scheme: dpv#
has range: Location
source: specialprivacy.ercim.eu
type: Relation
type: Concept
creator: Axel Polleres
creator: Mark Lizar
creator: Rob Brennan
creator: Harshvardhan J. Pandit
term status: accepted
has domain: Concept
created: 2019-04-05
definition: Indicates information about location

SmallScaleOfDataSubjects
in scheme: dpv#
term status: accepted
created: 2022-06-15
creator: Harshvardhan J. Pandit
isInstanceOf: Data Subject Scale
type: Concept
definition: Scale of data subjects considered small or limited within the context

Technical Measure
in scheme: dpv#
type: Concept
created: 2019-04-05
term status: accepted
creator: Mark Lizar
creator: Harshvardhan J. Pandit
creator: Rob Brennan
creator: Axel Polleres
isSubTypeOf: Technical and Organisational Measure
definition: Technical measures required/followed when processing data of the declared category

Decentralised Locations
in scheme: dpv#
type: Concept
isInstanceOf: Location Fixture
created: 2022-06-15
definition: Location that is spread across multiple separate areas with no distinction between their importance
creator: Harshvardhan J. Pandit
term status: accepted

Consent Expired
in scheme: dpv#
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Paul Ryan
note: An example of this state is when the obtained consent has been assigned a duration - which has lapsed or 'expired', making it invalid to be used further for processing data
source: GConsent
isInstanceOf: Consent Status Invalid for Processing
created: 2022-06-22
definition: The state where the temporal or contextual validity of consent has 'expired'
type: Concept
term status: accepted

Secret Sharing Schemes
in scheme: dpv#
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
isSubTypeOf: CrytographicMethods
created: 2022-08-17
source: data-pseudonymisation-advanced-techniques-and-use-cases
definition: Use of secret sharing schemes where the secret can only be reconstructed through combination of sufficient number of individuals

RNG Pseudoanonymisation
in scheme: dpv#
created: 2022-08-17
term status: accepted
definition: A pseudoanonymisation method where identifiers are substituted by a number chosen by a Random Number Generator (RNG)
type: Concept
source: data-pseudonymisation-advanced-techniques-and-use-cases
isSubTypeOf: Anonymisation
creator: Harshvardhan J. Pandit

has withdrawal by
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Bud Bruegger
creator: Mark Lizar
definition: Specifies the entity that withdrew consent
editorial note: WARNING: This concept will be deprecated in future releases
term status: sunset
type: Concept
type: Relation
created: 2019-04-05
has range: Legal Entity
modified: 2022-06-22
note: Normally this would be the dataSubject, but in some exceptional cases, the consent might be withdraawn on behalf by someone else, e.g. parents of minors.

Password Authentication
in scheme: dpv#
creator: Harshvardhan J. Pandit
isSubTypeOf: Authentication Protocols
type: Concept
term status: accepted
source: reference-incident-classification-taxonomy
created: 2022-08-17
definition: Use of passwords to perform authentication

Citizen
in scheme: dpv#
creator: Beatriz Esteves
creator: Harshvardhan J. Pandit
creator: Georg P. Krog
creator: Paul Ryan
creator: Julian Flake
definition: Data subjects that are citizens (for a jurisdiction)
type: Concept
term status: accepted
isSubTypeOf: Data Subject
created: 2022-04-06

Data Transfer Legal Basis
in scheme: dpv#
definition: Specific or special categories and instances of legal basis intended for justifying data transfers
creator: David Hickey
creator: Georg P Krogg
type: Concept
term status: accepted
created: 2021-09-08
isSubTypeOf: Legal Basis

has notice
in scheme: dpv#
created: 2022-06-22
type: Concept
type: Relation
definition: Indicates the use or applicability of a Notice for the specified context
creator: Paul Ryan
creator: Georg P Krog
creator: Julian Flake
creator: Harshvardhan J. Pandit
has domain: Concept
has range: Notice
term status: accepted
isSubTypeOf: has organisational measure

Enter Into Contract
in scheme: dpv#
creator: Paul Ryan
creator: Harshvardhan J. Pandit
creator: Georg P Krog
type: Concept
term status: accepted
created: 2021-04-07
definition: Processing necessary to enter into contract
isSubTypeOf: Contract

Symmetric Encryption
in scheme: dpv#
created: 2022-08-17
type: Concept
source: data-pseudonymisation-advanced-techniques-and-use-cases
definition: Use of symmetric crytography to encrypt data
isSubTypeOf: Encryption
creator: Harshvardhan J. Pandit
term status: accepted

Private Information Retrieval
in scheme: dpv#
source: data-protection-engineering
type: Concept
creator: Harshvardhan J. Pandit
term status: accepted
isSubTypeOf: CrytographicMethods
created: 2022-08-17
definition: Use of cryptographic methods to retrieve a record from a system without revealing which record is retrieved

Data Backup Protocols
in scheme: dpv#
type: Concept
isSubTypeOf: Technical Measure
created: 2022-06-15
creator: Georg P Krog
term status: accepted
definition: Protocols or plans for backing up of data

Customer Care
in scheme: dpv#
creator: Axel Polleres
creator: Simon Steyskal
creator: Fajar Ekaputra
creator: Javier Fernandez
creator: Harshvardhan J. Pandit
creator: Elmar Kiesling
definition: Provide assistance, resolve issues, ensure satisfaction in relation to services provided
related: Feedback
type: Concept
term status: accepted
created: 2019-04-05
isSubTypeOf: Customer Management

Third Party
in scheme: dpv#
term status: accepted
definition: A ‘third party’ means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and people who, under the direct authority of the controller or processor, are authorised to process personal data.
created: 2019-06-04
creator: Harshvardhan J. Pandit
source: oj
type: Concept
isSubTypeOf: Recipient

has range
sub property of: semanticRelation

Synthetic Data
in scheme: dpv#
creator: Harshvardhan J. Pandit
source: data-protection-engineering
type: Concept
created: 2022-08-18
isSubTypeOf: Data
definition: Synthetic data reffers to artificially created data such that it is intended to resemble real data (personal or non-personal), but does not refer to any specific identified or identifiable individual, or to the real measure of an observable parameter in the case of non-personal data
term status: accepted

has storage condition
in scheme: dpv#
type: Relation
type: Concept
creator: Axel Polleres
creator: Mark Lizar
creator: Rob Brennan
creator: Harshvardhan J. Pandit
has domain: Concept
created: 2022-08-13
source: specialprivacy.ercim.eu
definition: Indicates information about storage condition
term status: changed
has range: Storage Condition

Legal Entity
in scheme: dpv#
isSubTypeOf: Entity
term status: accepted
definition: A human or non-human 'thing' that constitutes as an entity and which is recognised and defined in law
type: Concept
created: 2019-04-05
creator: Harshvardhan J. Pandit

Tourist
in scheme: dpv#
creator: Georg P. Krog
creator: Beatriz Esteves
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
term status: accepted
definition: Data subjects that are tourists i.e. not citizens and not immigrants
isSubTypeOf: Data Subject
created: 2022-04-06

Entities_Authority Concepts
member: is authority for
member: Data Protection Authority
member: Authority
member: NationalAuthority
member: SupraNationalAuthority
member: has authority
member: RegionalAuthority
type: Collection

Activity Completed
in scheme: dpv#
created: 2022-05-18
type: Concept
definition: State of an activity that has completed i.e. is fully in the past
term status: accepted
isInstanceOf: Activity Status
creator: Harshvardhan J. Pandit

Human Involvement
in scheme: dpv#
type: Concept
modified: 2022-06-15
term status: accepted
creator: Harshvardhan J. Pandit
created: 2022-01-26
isSubTypeOf: Automation of Processing
definition: The involvement of humans in specified context
note: Human Involvement here broadly refers to any involvement by a human in the context of carrying out processing. This may include verification of outcomes, providing input data for making decisions, or overseeing activities.

Assess
in scheme: dpv#
created: 2022-06-15
creator: Georg P Krog
creator: Harshvardhan J. Pandit
term status: accepted
definition: to assess data for some criteria
type: Concept
isSubTypeOf: Use

Damage
in scheme: dpv#
isSubTypeOf: Impact
term status: accepted
created: 2022-03-30
creator: Harshvardhan J. Pandit
definition: Impact that acts as or causes damages
type: Concept

Audit Not Required
in scheme: dpv#
creator: Harshvardhan J. Pandit
created: 2022-05-18
type: Concept
term status: accepted
isInstanceOf: Audit Status
definition: State where an audit is determined as not being required

Record Management
in scheme: dpv#
isSubTypeOf: Purpose
definition: Manage creation, storage, and use of records relevant to operations, events, and processes e.g. to store logs or access requests
created: 2021-09-01
creator: Georg P Krog
creator: David Hickey
creator: Paul Ryan
creator: Harshvardhan J. Pandit
term status: accepted
type: Concept

Asymmetric Cryptography
in scheme: dpv#
type: Concept
term status: accepted
definition: Use of public-key cryptography or asymmetric cryptography involving a public and private pair of keys
created: 2022-08-17
source: reference-incident-classification-taxonomy
isSubTypeOf: Cryptographic Methods
creator: Harshvardhan J. Pandit

has risk level
in scheme: dpv#
creator: Paul Ryan
creator: Georg P Krog
creator: Julian Flake
creator: Harshvardhan J. Pandit
has domain: Risk
type: Relation
type: Concept
definition: Indicates the associated risk level associated with a risk
has range: Risk Level
term status: accepted
created: 2022-07-20

Security Assessments
in scheme: dpv#
type: Concept
term status: accepted
created: 2022-08-17
isSubTypeOf: Assessment
isSubTypeOf: Security Procedure
creator: Harshvardhan J. Pandit
source: 5g-cybersecurity-standards
definition: Assessment of security intended to identity gaps, vulnerabilities, risks, and effectiveness of controls

Consent Given
in scheme: dpv#
source: GConsent
created: 2022-06-22
type: Concept
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P Krog
isInstanceOf: Consent Status Valid for Processing
note: An example of this state is when the individual clicks on a button, ticks a checkbox, verbally agrees - or any other form that communicates their decision agreeing to the processing of data
definition: The state where consent has been given
term status: accepted

Data Controller
in scheme: dpv#
isSubTypeOf: Legal Entity
source: oj
creator: Javier Fernández
creator: Axel Polleres
type: Concept
modified: 2020-11-04
term status: accepted
definition: The individual or organisation that decides (or controls) the purpose(s) of processing personal data.
created: 2019-04-05
note: The terms 'Controller' is usually the more common form of indicating a Data Controller. In ISO/IEC the term 'PII Controller' is used.

NearlyGlobalScale
in scheme: dpv#
created: 2022-06-15
definition: Geographic coverage nearly spanning the entire globe
term status: accepted
creator: Harshvardhan J. Pandit
isInstanceOf: Geographic Coverage
type: Concept

Communication Management
in scheme: dpv#
created: 2021-09-01
term status: accepted
isSubTypeOf: Purpose
type: Concept
creator: David Hickey
creator: Paul Ryan
creator: Harshvardhan J. Pandit
creator: Georg P Krog
note: This purpose by itself does not sufficiently and clearly indicate what the communication is about. As such, it is recommended to combine it with another purpose to indicate the application. For example, Communication of Payment.
definition: Manage communication or provide means for communication e.g. to send an email notifying some information

Disclose by Transmission
in scheme: dpv#
isSubTypeOf: Disclose
term status: accepted
definition: to disclose data by means of transmission
created: 2019-05-07
type: Concept
source: oj

Customer Solvency Monitoring
in scheme: dpv#
type: Concept
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Beatriz
term status: accepted
created: 2021-09-08
isSubTypeOf: Customer Management
source: model-voor-een-register-van-de-verwerkingsactiviteiten
definition: Monitor solvency of customers for financial diligence

has responsible entity
in scheme: dpv#
type: Relation
type: Concept
creator: Harshvardhan J. Pandit
term status: accepted
has domain: Concept
created: 2022-03-02
has range: Entity
isSubTypeOf: has entity
definition: Specifies the indicated entity is responsible within some context

has consent notice
in scheme: dpv#
creator: Mark Lizar
creator: Harshvardhan J. Pandit
creator: Bud Bruegger
type: Relation
type: Concept
definition: Specifies the notice provided in context of consent
editorial note: WARNING: This concept will be deprecated in future releases
term status: sunset
created: 2019-04-05
note: The actual notice that the Data Subject received to consent to, either a text or link to a document, which should be usable to decide whether the form or consent was compliant to legislation, e.g. documenting how the user has been informed about rights and implications (such as, right to data portability,right to recitffy, right to erasure, right to restrict processing, right to object, rights regarding automated decision making or profiling, processors, third parties, sub-processors, outside-EEA transfers, automated decision-making, or other necessary details of the privacy-policy). Can be TextOrDocumentOrURI.
modified: 2022-06-22

has address
in scheme: dpv#
type: Relation
type: Concept
created: 2020-11-04
creator: Georg P Krog
creator: Harshvardhan J.Pandit
creator: Paul Ryan
creator: Beatriz Esteves
definition: Specifies address of a legal entity such as street address or pin code
term status: accepted
has range: Concept
has domain: Entity

Entities_Organisation Concepts
type: Collection
member: NonGovernmentalOrganisation
member: NonProfitOrganisation
member: ForProfitOrganisation
member: IndustryConsortium
member: International Organisation
member: AcademicScientificOrganisation
member: Organisation
member: Organisational Unit
member: GovernmentalOrganisation

Derive
in scheme: dpv#
type: Concept
isSubTypeOf: Transform
related: Derive
definition: to create new derivative data from the original data
note: Derive indicates data is present or obtainable from existing data. For data that is created without such existence, see Infer.
source: processing
created: 2019-05-07
term status: accepted

Incident Reporting Communication
in scheme: dpv#
isSubTypeOf: Governance Procedures
source: 5g-cybersecurity-standards
type: Concept
creator: Harshvardhan J. Pandit
term status: accepted
created: 2022-08-17
definition: Procedures related to management of incident reporting

Usage Control
in scheme: dpv#
created: 2022-08-17
term status: accepted
source: reference-incident-classification-taxonomy
type: Concept
isSubTypeOf: Access Control Method
definition: Management of usage, which is intended to be broader than access control and may cover trust, digital rights, or other relevant controls
creator: Harshvardhan J. Pandit

Requested Service Provision
in scheme: dpv#
definition: Deliver service as requested by user or consumer
isSubTypeOf: Service Provision
type: Concept
created: 2021-09-08
term status: accepted
creator: Beatriz Esteves
creator: Harshvardhan J. Pandit
creator: Georg P Krog

Seal
in scheme: dpv#
type: Concept
isSubTypeOf: Certification and Seal
creator: Axel Polleres
creator: Mark Lizar
creator: Harshvardhan J. Pandit
creator: Rob Brennan
term status: accepted
definition: A seal or a mark indicating proof of certification to some certification or standard
created: 2019-04-05

Applicant
in scheme: dpv#
type: Concept
isSubTypeOf: Data Subject
creator: Paul Ryan
creator: Julian Flake
creator: Georg P. Krog
creator: Beatriz Esteves
creator: Harshvardhan J. Pandit
created: 2022-04-06
term status: accepted
definition: Data subjects that are applicants in some context

Technical Service Provision
in scheme: dpv#
type: Concept
isSubTypeOf: Service Provision
term status: accepted
creator: Harshvardhan J. Pandit
created: 2021-09-08
definition: Manage and provide technical processes and functions necessary for delivering services

Customer Order Management
in scheme: dpv#
type: Concept
created: 2021-09-08
source: model-voor-een-register-van-de-verwerkingsactiviteiten
isSubTypeOf: Customer Management
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Beatriz
term status: accepted
definition: Manage customer orders

Severity
in scheme: dpv#
creator: Harshvardhan J. Pandit
created: 2022-07-21
type: Concept
term status: accepted
note: Severity can be associated with Risk, or its Consequences and Impacts
definition: The magnitude of being unwanted or having negative effects such as harmful impacts

has personal data
in scheme: dpv#
created: 2022-01-19
type: Concept
type: Relation
has range: Personal Data
term status: accepted
creator: Harshvardhan J. Pandit
definition: Indicates association with Personal Data
has domain: Concept
isSubTypeOf: has data

Cryptographic Authentication
in scheme: dpv#
created: 2022-08-17
isSubTypeOf: Authentication Protocols
isSubTypeOf: Cryptographic Methods
definition: Use of crytography for authentication
source: reference-incident-classification-taxonomy
type: Concept
creator: Harshvardhan J. Pandit
term status: accepted

SmallDataVolume
in scheme: dpv#
created: 2022-06-15
term status: accepted
isInstanceOf: Data Volume
type: Concept
creator: Harshvardhan J. Pandit
definition: Data volume that is considered small or limited within the context

is implemented using technology
in scheme: dpv#
type: Relation
type: Concept
has range: Technology
creator: Beatriz Esteves
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Paul Ryan
note: The term 'technology' is inclusive of technologies, processes, and methods.
created: 2022-01-26
definition: Indicates implementation details such as technologies or processes
term status: changed
modified: 2022-06-15
has domain: Concept

Increase Service Robustness
in scheme: dpv#
creator: Fajar Ekaputra
creator: Javier Fernandez
creator: Elmar Kiesling
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Simon Steyskal
isSubTypeOf: Optimisation for Controller
term status: accepted
type: Concept
definition: Improve robustness and resilience of services
created: 2019-04-05

has data processor
in scheme: dpv#
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
type: Relation
term status: accepted
has range: Data Processor
definition: Indiciates inclusion or applicability of a Data Processor
isSubTypeOf: has recipient
has domain: Concept
created: 2022-02-09

Network Security Protocols
in scheme: dpv#
source: reference-incident-classification-taxonomy
type: Concept
isSubTypeOf: Security Method
creator: Harshvardhan J. Pandit
term status: accepted
definition: Security implemented at or over networks protocols
created: 2022-08-17

Trusted Third Party Utilisation
in scheme: dpv#
creator: Harshvardhan J. Pandit
type: Concept
definition: Utilisation of a trusted third party to provide or carry out a measure
created: 2022-08-17
term status: accepted
source: data-pseudonymisation-advanced-techniques-and-use-cases
isSubTypeOf: Security Procedure

is mitigated by measure
in scheme: dpv#
term status: accepted
isSubTypeOf: has technical and organisational measure
definition: Indicate a risk is mitigated by specified measure
type: Concept
type: Relation
creator: Harshvardhan J. Pandit
has range: Risk Mitigation Measure
has domain: Risk
created: 2022-02-09

Contract Performance
in scheme: dpv#
created: 2021-04-07
isSubTypeOf: Contract
definition: Fulfilment or performance of a contract involving specified processing
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P Krog
type: Concept
term status: accepted

NonProfitOrganisation
in scheme: dpv#
definition: An organisation that does not aim to achieve profit as its primary goal
created: 2022-02-02
type: Concept
isInstanceOf: Organisation
creator: Harshvardhan J. Pandit
source: adms
term status: accepted

Consent Requested
in scheme: dpv#
definition: State where a request for consent has been made and is awaiting a decision
creator: Paul Ryan
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Georg P Krog
type: Concept
term status: accepted
source: GConsent
isInstanceOf: Consent Status Invalid for Processing
note: An example of this state is when a notice has been presented to the individual but they have not made a decision
created: 2022-06-22

Asset Management Procedures
in scheme: dpv#
source: 5g-cybersecurity-standards
definition: Procedures related to management of assets
term status: accepted
created: 2022-08-17
type: Concept
isSubTypeOf: Governance Procedures
creator: Harshvardhan J. Pandit

Personal Data
in scheme: dpv#
isSubTypeOf: Data
modified: 2022-01-19
source: oj
related: AnyData
creator: Harshvardhan Pandit
term status: accepted
type: Concept
note: This definition of personal data encompasses the concepts used in GDPR Art.4-1 for 'personal data' and ISO/IEC 2700 for 'personally identifiable information (PII)'.
created: 2019-04-05
definition: Data directly or indirectly associated or related to an individual.

has frequency
in scheme: dpv#
has domain: Concept
definition: Indicates the frequency with which something takes place
term status: accepted
creator: Harshvardhan J. Pandit
type: Concept
type: Relation
created: 2022-02-16
has range: Frequency

Audit Required
in scheme: dpv#
type: Concept
term status: accepted
definition: State where an audit is determined as being required but has not been conducted
created: 2022-05-18
isInstanceOf: Audit Status
creator: Harshvardhan J. Pandit

Collect
in scheme: dpv#
source: processing
source: oj
type: Concept
term status: accepted
created: 2019-05-07
related: Collect
definition: to gather data from someone
isSubTypeOf: Obtain

Penetration Testing Methods
in scheme: dpv#
term status: accepted
definition: Use of penetration testing to identity weaknessess and vulnerabilities through simulations
source: reference-incident-classification-taxonomy
type: Concept
isSubTypeOf: Security Method
creator: Harshvardhan J. Pandit
created: 2022-08-17

SporadicScaleOfDataSubjects
in scheme: dpv#
type: Concept
created: 2022-06-15
term status: accepted
definition: Scale of data subjects considered sporadic or sparse within the context
creator: Harshvardhan J. Pandit
isInstanceOf: Data Subject Scale

Security Knowledge Training
in scheme: dpv#
source: 5g-cybersecurity-standards
isSubTypeOf: Staff Training
type: Concept
term status: accepted
created: 2022-08-17
creator: Harshvardhan J. Pandit
definition: Training intended to increase knowledge regarding security

has data protection officer
in scheme: dpv#
isSubTypeOf: has representative
term status: accepted
creator: Paul Ryan
creator: Rob Brennan
definition: Specifices an associated data protection officer
has range: Data Protection Officer
type: Relation
type: Concept
created: 2022-03-02
has domain: Concept

has technical measure
in scheme: dpv#
has domain: Concept
term status: accepted
isSubTypeOf: has technical and organisational measure
type: Relation
type: Concept
has range: Technical Measure
definition: Indicates use or applicability of Technical measure
created: 2022-02-09
creator: Harshvardhan J. Pandit

Deterministic Pseudonymisation
in scheme: dpv#
isSubTypeOf: Anonymisation
creator: Harshvardhan J. Pandit
type: Concept
created: 2022-08-17
term status: accepted
definition: Pseudoanonymisation achieved through a deterministic function
source: data-pseudonymisation-advanced-techniques-and-use-cases

Subscriber
in scheme: dpv#
note: note: subscriber can be customer or consumer
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P. Krog
creator: Beatriz Esteves
isSubTypeOf: Data Subject
created: 2022-04-06
definition: Data subjects that subscribe to service(s)
type: Concept
term status: accepted

has data subject
in scheme: dpv#
has domain: Concept
type: Relation
type: Concept
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Bud Bruegger
creator: Javier Fernández
term status: accepted
definition: Indicates association with Data Subject
has range: Data Subject
created: 2019-04-04
modified: 2020-11-04
isSubTypeOf: has entity

has recipient data controller
in scheme: dpv#
type: Relation
type: Concept
created: 2022-02-09
definition: Indiciates inclusion or applicability of a Data Controller as a Recipient of persona data
has domain: Concept
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
term status: accepted
has range: Data Controller
isSubTypeOf: has recipient

Customer Claims Management
in scheme: dpv#
creator: Beatriz
creator: Georg P Krog
creator: Harshvardhan J. Pandit
source: model-voor-een-register-van-de-verwerkingsactiviteiten
term status: accepted
definition: Manage claims, including repayment of monies owed
type: Concept
created: 2021-09-08
isSubTypeOf: Customer Management

Third Country
in scheme: dpv#
definition: Represents a country outside applicable or compatible jurisdiction as outlined in law
creator: Harshvardhan J. Pandit
type: Concept
isSubTypeOf: Country
created: 2022-02-09
term status: accepted

Processing Context
in scheme: dpv#
creator: Harshvardhan J. Pandit
definition: Context or conditions within which processing takes place
type: Concept
isSubTypeOf: Context
created: 2022-02-09
term status: accepted

Data Anonymisation Technique
in scheme: dpv#
creator: Harshvardhan J. Pandit
type: Concept
created: 2022-08-17
term status: accepted
source: reference-incident-classification-taxonomy
definition: Use of anonymisation techniques that reduce the identifiability in data
isSubTypeOf: Anonymisation

has provision by
in scheme: dpv#
type: Concept
type: Relation
modified: 2022-06-22
creator: Bud Bruegger
creator: Mark Lizar
creator: Harshvardhan J. Pandit
created: 2019-04-05
has range: Legal Entity
note: Normally this would be the dataSubject, but in some exceptional cases, the consent might be given on behalf by someone else, e.g. parents of minors.
term status: sunset
definition: Specifies the entity that provisioned or provided consent
editorial note: WARNING: This concept will be deprecated in future releases

Continous Frequency
in scheme: dpv#
created: 2022-06-15
isInstanceOf: Frequency
definition: Frequency where occurences are continous
type: Concept
term status: accepted
creator: Harshvardhan J. Pandit

Legitimate Interest of Third Party
in scheme: dpv#
isSubTypeOf: Legitimate Interest
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Paul Ryan
type: Concept
definition: Legitimate Interests of a Third Party in conducting specified processing
created: 2021-05-19
term status: accepted

Web Security Protocols
in scheme: dpv#
type: Concept
source: reference-incident-classification-taxonomy
definition: Security implemented at or over web-based protocols
isSubTypeOf: Security Method
creator: Harshvardhan J. Pandit
term status: accepted
created: 2022-08-17

Marketing
in scheme: dpv#
creator: Beatriz Esteves
creator: Harshvardhan J. Pandit
creator: Georg P Krog
type: Concept
term status: accepted
note: Was commercial interest, changed to consider Marketing a separate Purpose category by itself
created: 2020-11-04
isSubTypeOf: Purpose
definition: Conduct marketing in relation to organisation or products or services e.g. promoting, selling, and distributing

Consent_Status Concepts
member: Consent Status Valid for Processing
member: Consent Revoked
member: Renewed Consent Given
member: Consent Requested
member: Consent Refused
member: Consent Withdrawn
member: Consent Given
member: Consent Request Deferred
member: Consent Invalidated
member: Consent Status Invalid for Processing
member: Consent Unknown
member: Consent Status
member: Consent Expired
type: Collection

Legal Agreement
in scheme: dpv#
creator: Axel Polleres
creator: Mark Lizar
creator: Harshvardhan J. Pandit
creator: Rob Brennan
definition: A legally binding agreement
type: Concept
term status: accepted
isSubTypeOf: Organisational Measure
created: 2019-04-05

Authentication using PABC
in scheme: dpv#
isSubTypeOf: Cryptographic Authentication
created: 2022-08-17
term status: accepted
type: Concept
definition: Use of Privacy-enhacing Attribute Based Credentials (ABC) to perform and manage authentication
source: data-protection-engineering
creator: Harshvardhan J. Pandit

Members and Partners Management
in scheme: dpv#
source: model-voor-een-register-van-de-verwerkingsactiviteiten
created: 2021-09-01
creator: Georg P Krog
creator: David Hickey
creator: Paul Ryan
creator: Harshvardhan J. Pandit
term status: accepted
type: Concept
definition: Maintain registry of shareholders, members, or partners for governance, administration, and management functions
isSubTypeOf: Organisation Governance

Purpose
in scheme: dpv#
creator: Javier Fernández
creator: Axel Polleres
source: specialprivacy.ercim.eu
related: AnyPurpose
definition: The purpose of processing personal data
modified: 2020-11-04
type: Concept
created: 2019-04-05
term status: accepted

Primary Importance
in scheme: dpv#
creator: Julian Flake
creator: Paul Ryan
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Beatriz Esteves
type: Concept
term status: accepted
definition: Indication of 'primary' or 'main' or 'core' importance
created: 2022-02-10
isInstanceOf: Importance

Fully Randomised Pseudonymisation
in scheme: dpv#
source: data-pseudonymisation-advanced-techniques-and-use-cases
definition: Use of randomised pseudoanonymisation where the same elements are assigned different values each time they occur
isSubTypeOf: Anonymisation
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
created: 2022-08-17

Activity Proposed
in scheme: dpv#
definition: State of an activity being proposed or planned i.e. yet to occur
created: 2022-05-18
creator: Harshvardhan J. Pandit
type: Concept
isInstanceOf: Activity Status
term status: accepted

Compliance Monitoring
in scheme: dpv#
source: 5g-cybersecurity-standards
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
created: 2022-08-17
definition: Monitoring of compliance (e.g. internal policy, regulations)
isSubTypeOf: Governance Procedures

Document Randomised Pseudonymisation
in scheme: dpv#
isSubTypeOf: Anonymisation
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
definition: Use of randomised pseudoanonymisation where the same elements are assigned different values in the same document or database
created: 2022-08-17
source: data-pseudonymisation-advanced-techniques-and-use-cases

Obtain
in scheme: dpv#
type: Concept
term status: accepted
created: 2019-05-07
source: oj
isSubTypeOf: Processing
definition: to solicit or gather data from someone

Recipient
in scheme: dpv#
source: specialprivacy.ercim.eu
source: oj
creator: Axel Polleres
creator: Javier Fernández
type: Concept
definition: Entities that receive personal data
created: 2019-04-05
isSubTypeOf: Legal Entity
modified: 2020-11-04
related: AnyRecipient
term status: accepted
note: A recipient of personal data can be used to indicate any entity that receives personal data. This can be a Third Party, Processor (GDPR), or even a Controller.

Sell Insights from Data
in scheme: dpv#
creator: Fajar Ekaputra
creator: Javier Fernandez
creator: Harshvardhan J. Pandit
creator: Elmar Kiesling
creator: Axel Polleres
creator: Simon Steyskal
type: Concept
note: Sell here means exchange, submit, or provide in return for direct or indirect compensation. Was subclass of commercial interest, changed to reflect selling something
created: 2019-04-05
definition: Sell data or information relevant to insights obtained from analysis of data
isSubTypeOf: Sell Products
term status: accepted

Audit Status
in scheme: dpv#
creator: Harshvardhan J. Pandit
created: 2022-05-18
isSubTypeOf: Status
type: Concept
definition: Status associated with Auditing or Investigation
term status: accepted

Educational Training
in scheme: dpv#
created: 2022-08-17
type: Concept
term status: accepted
definition: Training methods that are intended to provide education on topic(s)
source: reference-incident-classification-taxonomy
isSubTypeOf: Staff Training
creator: Harshvardhan J. Pandit

Align
in scheme: dpv#
isSubTypeOf: Transform
definition: to adjust the data to be in relation to another data
term status: accepted
type: Concept
created: 2019-05-07
source: oj

Record
in scheme: dpv#
created: 2019-05-07
type: Concept
term status: accepted
source: oj
definition: to make a record (especially media)
isSubTypeOf: Obtain

Consequence as Side-Effect
in scheme: dpv#
created: 2022-03-30
term status: accepted
isSubTypeOf: Consequence
creator: Harshvardhan J. Pandit
type: Concept
definition: The consequence(s) possible or arising as a side-effect of specified context

has withdrawal by justification
in scheme: dpv#
created: 2019-04-05
modified: 2022-06-22
definition: Specifies the justification for entity withdrawing consent
note: This field can be used to proivde a justification why the weithdrawal was done by another DataSubject or legal entity, e.g. declariing the relationship (parent, guardian), in combination with the field withdrawalBy
term status: sunset
creator: Mark Lizar
creator: Harshvardhan J. Pandit
creator: Bud Bruegger
type: Relation
type: Concept
editorial note: WARNING: This concept will be deprecated in future releases

Data Volume
in scheme: dpv#
created: 2022-06-15
creator: Georg P Krog
creator: Rana Saniei
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
definition: Volume or Scale of Data
isSubTypeOf: Scale

LargeScaleOfDataSubjects
in scheme: dpv#
created: 2022-06-15
type: Concept
definition: Scale of data subjects considered large within the context
term status: accepted
creator: Harshvardhan J. Pandit
isInstanceOf: Data Subject Scale

Consultation with DPO
in scheme: dpv#
created: 2022-06-15
creator: Harshvardhan J. Pandit
creator: Georg P Krog
type: Concept
definition: Consultation with Data Protection Officer(s)
term status: accepted
isSubTypeOf: Consultation

Consent Status Valid for Processing
in scheme: dpv#
type: Concept
definition: States of consent that can be used as valid justifications for processing data
note: Practically, given consent is the only valid state for processing
creator: Paul Ryan
creator: Georg P Krog
creator: Julian Flake
creator: Harshvardhan J. Pandit
term status: accepted
created: 2022-06-22
source: GConsent
isSubTypeOf: Consent Status

Improve Internal CRM Processes
in scheme: dpv#
term status: accepted
creator: Fajar Ekaputra
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Elmar Kiesling
creator: Simon Steyskal
creator: Javier Fernandez
type: Concept
definition: Improve customer-relationship management (CRM) processes
created: 2019-04-05
isSubTypeOf: Customer Relationship Management
isSubTypeOf: Optimisation for Controller

Storage Condition
in scheme: dpv#
isSubTypeOf: Processing Context
term status: accepted
creator: Mark Lizar
creator: Rob Brennan
creator: Axel Polleres
creator: Harshvardhan J. Pandit
created: 2019-04-05
definition: Conditions required or followed regarding storage of data
type: Concept

has right
in scheme: dpv#
has range: Right
created: 2020-11-18
type: Relation
type: Concept
has domain: Concept
term status: accepted
creator: Harshvardhan J. Pandit
definition: Indicates use or applicability of Right

is indicated by
in scheme: dpv#
definition: Specifies entity who indicates the specific context
has range: Entity
type: Relation
type: Concept
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Paul Ryan
creator: Julian Flake
created: 2022-06-21
term status: accepted
has domain: Concept

Joint Data Controllers
in scheme: dpv#
type: Concept
creator: Harshvardhan Pandit
creator: Georg Krog
note: To indicate the membership, hasDataController may be used
isSubTypeOf: Data Controller
created: 2022-02-02
term status: accepted
definition: A group of Data Controllers that jointly determine the purposes and means of processing

has algorithmic logic
in scheme: dpv#
creator: Paul Ryan
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
term status: changed
has range: Algorithmic Logic
modified: 2022-06-15
has domain: Concept
definition: Indicates the logic used in processing such as for automated decision making
type: Relation
type: Concept
created: 2020-11-04

Differential Privacy
in scheme: dpv#
type: Concept
created: 2022-08-17
term status: accepted
definition: Utilisation of differential privacy where information is shared as patterns or groups to withold individual elements
source: data-protection-engineering
isSubTypeOf: Cryptographic Methods
creator: Harshvardhan J. Pandit

Scope
in scheme: dpv#
isSubTypeOf: Context
type: Concept
definition: Indication of the extent or range or boundaries associated with(in) a context
created: 2022-06-15
creator: Harshvardhan J. Pandit
term status: accepted

Vulnerable Data Subject
in scheme: dpv#
creator: Harshvardhan Pandit
creator: Paul Ryan
creator: Georg Krog
definition: Data Subjects which should be considered 'vulnerable' and therefore would require additional measures and safeguards
note: This concept denotes a Data Subject or a group are vulnerable, but not what vulnerability they possess or its context. This information can be provided additionally as comments, or as separate concepts and relations. Proposals for this are welcome.
created: 2020-11-04
type: Concept
term status: accepted
isSubTypeOf: Data Subject

Personalisation
in scheme: dpv#
term status: accepted
type: Concept
created: 2021-09-01
definition: Create and provide customisation based on attributes and/or needs of person(s) or context(s).
creator: Harshvardhan J. Pandit
isSubTypeOf: Purpose
note: This term is a blanket purpose category for indicating personalisation of some other purpose, e.g. by creating a subclass of the other concept and Personalisation

has geographic coverage
in scheme: dpv#
type: Relation
type: Concept
created: 2022-06-22
definition: Indicate the geographic coverage (of specified context)
term status: accepted
has domain: Concept
has range: Geographic Coverage
creator: Harshvardhan J. Pandit
isSubTypeOf: Scale

Optimisation for Controller
in scheme: dpv#
created: 2019-04-05
creator: Javier Fernandez
creator: Fajar Ekaputra
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Elmar Kiesling
creator: Simon Steyskal
isSubTypeOf: Service Optimization
term status: accepted
type: Concept
definition: Optimize activities and services for provider or controller

Vital Interest of Natural Person
in scheme: dpv#
type: Concept
isSubTypeOf: Vital Interest
term status: accepted
created: 2021-04-21
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P Krog
definition: Processing is necessary or required to protect vital interests of a natural person

Personnel Payment
in scheme: dpv#
type: Concept
definition: Management and execution of payment of personnel
created: 2022-04-20
creator: Harshvardhan J. Pandit
term status: accepted
isSubTypeOf: Personnel Management

Relation
sub property of: semanticRelation

Privacy by Design
in scheme: dpv#
creator: Axel Polleres
creator: Mark Lizar
creator: Harshvardhan J. Pandit
creator: Rob Brennan
created: 2019-04-05
type: Concept
definition: Practices regarding incorporating data protection and privacy in the design of information and services
term status: accepted
isSubTypeOf: Organisational Measure

SupraNationalAuthority
in scheme: dpv#
definition: An authority tasked with overseeing legal compliance for a supra-national union e.g. EU
source: adms
created: 2022-02-02
type: Concept
term status: accepted
creator: Harshvardhan J. Pandit
isSubTypeOf: Authority

Targeted Advertising
in scheme: dpv#
isSubTypeOf: Personalised Advertising
creator: Harshvardhan J. Pandit
term status: accepted
type: Concept
created: 2022-03-30
definition: Create and provide pesonalised advertisement where the personalisation is targeted to a specific individual or group of individuals

Technical and Organisational Measure
in scheme: dpv#
type: Concept
created: 2019-04-05
creator: Bud Bruegger
modified: 2020-11-04
definition: The Technical and Organisational measures used.
term status: accepted

Regularity of Re-certification
in scheme: dpv#
term status: accepted
isSubTypeOf: Organisational Measure
creator: Rob Brennan
creator: Axel Polleres
creator: Mark Lizar
creator: Harshvardhan J. Pandit
type: Concept
created: 2019-04-05
definition: Policy regarding repetition or renewal of existing certification(s)

Storage Location
in scheme: dpv#
type: Concept
isSubTypeOf: Storage Condition
isSubTypeOf: Location
term status: accepted
creator: Rob Brennan
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
definition: Location or geospatial scope where the data is stored
created: 2019-04-05

WebBrowser Security
in scheme: dpv#
isSubTypeOf: Security Method
term status: accepted
source: reference-incident-classification-taxonomy
type: Concept
creator: Harshvardhan J. Pandit
definition: Security implemented at or over web browsers
created: 2022-08-17

Records of Activities
in scheme: dpv#
creator: Georg P Krog
creator: Paul Ryan
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
isSubTypeOf: Organisational Measure
created: 2021-09-08
definition: Records of activities within some context such as maintainence tasks or governance functions

Parent(s) of Data Subject
in scheme: dpv#
creator: Georg P Krog
term status: accepted
type: Concept
isSubTypeOf: Data Subject
definition: Parent(s) of data subjects such as children
created: 2022-08-03

Entities_Legalrole Concepts
member: Recipient
member: Joint Data Controllers
member: has data controller
member: has recipient third party
member: has joint data controllers
member: has recipient
member: Data Protection Officer
member: Third Party
member: Data Exporter
member: Data Controller
member: has data processor
member: Data Importer
member: has data protection officer
member: has recipient data controller
member: Data Sub-Processor
member: has data exporter
member: Data Processor
member: has data importer
type: Collection

Detriment
in scheme: dpv#
creator: Julian Flake
creator: Beatriz Esteves
creator: Fajar Ekaputra
creator: Harshvardhan J. Pandit
creator: Georg P Krog
definition: Impact that acts as or causes detriments
type: Concept
isSubTypeOf: Impact
created: 2022-03-23
term status: accepted

Account Management
in scheme: dpv#
type: Concept
creator: Beatriz Esteves
creator: Harshvardhan J. Pandit
creator: Georg P Krog
definition: Create, maintain, and manage accounts for purposes of providing services
term status: accepted
created: 2021-09-08
isSubTypeOf: Purpose

Governance Procedures
in scheme: dpv#
source: 5g-cybersecurity-standards
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
isSubTypeOf: Organisational Measure
created: 2022-08-17
definition: Procedures related to governance (e.g. organisation, unit, team, process, system)

has scope
in scheme: dpv#
type: Relation
type: Concept
created: 2022-06-15
has domain: Concept
term status: accepted
creator: Harshvardhan J. Pandit
definition: Indicates the scope of specified concept or context
has range: Scope

Risk Management Plan
in scheme: dpv#
type: Concept
isSubTypeOf: Security Procedure
source: 79637.html
creator: Harshvardhan J. Pandit
term status: accepted
definition: A scheme within the risk management framework specifying the approach, the management components, and resources to be applied to the management of risk
created: 2022-08-18

Technical_Organisational_Measures Concepts
member: has notice
member: Organisational Measure
member: is policy for
member: Technical and Organisational Measure
member: has technical measure
member: has policy
member: has technical and organisational measure
member: has organisational measure
member: Technical Measure
type: Collection

Identify and Repair Impairments
in scheme: dpv#
definition: Identify, rectify, or otherwise under take activities intended to fix or repair impairments to existing functionalities
term status: accepted
type: Concept
isSubTypeOf: Service Provision
note: An example of identifying and rectifying impairments is the process of finding and fixing errors in products, commonly referred to as debugging
created: 2022-08-24
creator: Harshvardhan J. Pandit

Third-Party Agreement
in scheme: dpv#
created: 2022-02-09
creator: Harshvardhan J. Pandit
definition: An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data between a Data Controller or Processor and a Third Party
type: Concept
term status: accepted
isSubTypeOf: Data Processing Agreement

Data Processing Records
in scheme: dpv#
creator: Harshvardhan J. Pandit
type: Concept
definition: Records of personal data processing, whether ex-ante or ex-post
term status: accepted
created: 2021-09-08
isSubTypeOf: Records of Activities

has severity
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P Krog
creator: Julian Flake
type: Relation
type: Concept
definition: Indicates the severity associated with a concept
has domain: Concept
has range: Severity
term status: accepted
created: 2022-07-20

SporadicDataVolume
in scheme: dpv#
type: Concept
created: 2022-06-15
definition: Data volume that is considered sporadic or sparse within the context
term status: accepted
isInstanceOf: Data Volume
creator: Harshvardhan J. Pandit

Organisational Unit
in scheme: dpv#
definition: Entity within an organisation that does not constitute as a separate legal entity
created: 2022-03-23
isSubTypeOf: Entity
type: Concept
term status: accepted
creator: Paul Ryan
creator: Harshvardhan J. Pandit

Location Fixture
in scheme: dpv#
definition: The fixture of location refers to whether the location is fixed
created: 2022-06-15
term status: accepted
creator: Harshvardhan J. Pandit
type: Concept

Non-Material Damage
in scheme: dpv#
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
definition: Impact that acts as or causes non-material damages
isSubTypeOf: Damage
created: 2022-03-30

Multi-Factor Authentication (MFA)
in scheme: dpv#
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
created: 2022-08-17
isSubTypeOf: Authentication Protocols
definition: An authentication system that uses two or more methods to authenticate
source: reference-incident-classification-taxonomy

Legitimate Interest Assessment
in scheme: dpv#
isSubTypeOf: Assessment
definition: Indicates an assessment regarding the use of legitimate interest as a lawful basis by the data controller
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Paul Ryan
type: Concept
term status: accepted
created: 2021-09-08

International Organisation
in scheme: dpv#
creator: Georg P. Krog
creator: Julian Flake
source: oj
type: Concept
term status: accepted
created: 2022-03-23
definition: An organisation and its subordinate bodies governed by public international law, or any other body which is set up by, or on the basis of, an agreement between two or more countries
isInstanceOf: Organisation

Legal_Basis Concepts
member: Public Interest
member: Legitimate Interest of Controller
member: Legal Basis
member: Contract
member: Data Transfer Legal Basis
member: Consent
member: Legitimate Interest of Third Party
member: Legal Obligation
member: Enter Into Contract
member: Contract Performance
member: Vital Interest
member: Official Authority of Controller
member: has legal basis
member: Vital Interest of Data Subject
member: Legitimate Interest
member: Vital Interest of Natural Person
type: Collection

has organisational measure
in scheme: dpv#
term status: accepted
has domain: Concept
isSubTypeOf: has technical and organisational measure
has range: Organisational Measure
created: 2022-02-09
type: Relation
type: Concept
definition: Indicates use or applicability of Organisational measure
creator: Harshvardhan J. Pandit

Virtualisation Security
in scheme: dpv#
creator: Harshvardhan J. Pandit
type: Concept
isSubTypeOf: Security Method
term status: accepted
created: 2022-08-17
source: reference-incident-classification-taxonomy
definition: Security implemented at or through virtualised environments

Disclose
in scheme: dpv#
type: Concept
term status: accepted
created: 2019-05-07
isSubTypeOf: Processing
definition: to make data known
source: oj

Remove
in scheme: dpv#
term status: accepted
isSubTypeOf: Processing
type: Concept
created: 2019-05-07
source: oj
definition: to destruct or erase data

Inferred Personal Data
in scheme: dpv#
creator: Harshvardhan J. Pandit
definition: Personal Data that is obtained through inference from other data
created: 2022-01-19
type: Concept
isSubTypeOf: Derived Personal Data
isSubTypeOf: Generated Personal Data
term status: accepted
note: Inferred Data is derived data generated from existing data, but which did not originally exist within it, e.g. inferring demographics from browsing history.

Activity Status
in scheme: dpv#
created: 2022-05-18
creator: Harshvardhan J. Pandit
isSubTypeOf: Status
type: Concept
term status: accepted
definition: Status associated with activity operations and lifecycles

Optimise User Interface
in scheme: dpv#
creator: Simon Steyskal
creator: Fajar Ekaputra
creator: Javier Fernandez
creator: Harshvardhan J. Pandit
creator: Elmar Kiesling
creator: Axel Polleres
type: Concept
term status: accepted
isSubTypeOf: Optimisation for Consumer
definition: Optimize interfaces presented to the user
created: 2019-04-05

Location
in scheme: dpv#
created: 2022-01-19
creator: Harshvardhan J. Pandit
creator: Georg P Krog
type: Concept
definition: A location is a position, site, or area where something is located
note: Location may be geographic, physical, or virtual.
term status: accepted

Often Frequency
in scheme: dpv#
created: 2022-06-15
definition: Frequency where occurences are often or frequent, but not continous
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
isInstanceOf: Frequency

Consultation
in scheme: dpv#
term status: accepted
created: 2020-11-04
creator: Paul Ryan
creator: Harshvardhan J. Pandit
creator: Georg P Krog
type: Concept
definition: Consultation is a process of receiving feedback, advice, or opinion from an external agency
isSubTypeOf: Organisational Measure

Informed Consent
in scheme: dpv#
creator: Paul Ryan
creator: Georg P Krog
creator: Julian Flake
creator: Harshvardhan J. Pandit
definition: Consent that is informed i.e. with the requirement to provide sufficient information to make a consenting decision
note: The specifics for what information should be provided or made available will depend on the context, use-case, or relevant legal requirements
type: Concept
term status: accepted
isSubTypeOf: Consent
created: 2022-06-21

Biometric Authentication
in scheme: dpv#
definition: Use of biometric data for authentication
creator: Harshvardhan J. Pandit
type: Concept
isSubTypeOf: Authentication Protocols
term status: accepted
created: 2022-08-17
source: reference-incident-classification-taxonomy

Consent Revoked
in scheme: dpv#
creator: Julian Flake
creator: Paul Ryan
creator: Harshvardhan J. Pandit
creator: Georg P Krog
term status: accepted
isInstanceOf: Consent Status Invalid for Processing
source: GConsent
note: An example of this state is when a Data Controller stops utilising previously obtaining consent, such as when that service no longer exists
created: 2022-06-22
type: Concept
definition: The state where the consent is revoked by an entity other than the data subject and which prevents it from being further used as a valid state

Innovative Use of New Technologies
in scheme: dpv#
definition: Processing that involves use of innovative and new technologies
term status: accepted
isSubTypeOf: Processing Context
creator: Piero Bonatti
creator: Harshvardhan J. Pandit
created: 2020-11-04
type: Concept
source: oj

has domain
sub property of: semanticRelation

Transform
in scheme: dpv#
created: 2019-05-07
term status: accepted
isSubTypeOf: Processing
source: oj
type: Concept
definition: to change the form or nature of data

Observed Personal Data
in scheme: dpv#
type: Concept
definition: Personal Data that has been collected through observation of the Data Subject(s)
created: 2022-08-24
creator: Georg P Krog
term status: accepted
isSubTypeOf: Collected Personal Data

isInstanceOf
sub property of: semanticRelation

Systematic Monitoring
in scheme: dpv#
isSubTypeOf: Processing Context
term status: accepted
creator: Piero Bonatti
creator: Harshvardhan J. Pandit
created: 2020-11-04
definition: Processing that involves systematic monitoring of individuals
type: Concept
source: oj

Payment
in scheme: dpv#
type: Concept
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Beatriz Esteves
isSubTypeOf: Service Provision
created: 2020-11-04
definition: Process payment transactions in relation to service
term status: accepted

Vendor Selection Assessment
in scheme: dpv#
isSubTypeOf: Vendor Management
type: Concept
definition: Manage selection, assessment, and evaluation related to vendors
created: 2021-09-01
term status: accepted
creator: David Hickey
creator: Paul Ryan
creator: Harshvardhan J. Pandit
creator: Georg P Krog
source: model-voor-een-register-van-de-verwerkingsactiviteiten

Zero Knowledge Authentication
in scheme: dpv#
definition: Authentication using Zero-Knowledge proofs
isSubTypeOf: Cryptographic Methods
isSubTypeOf: Authentication Protocols
source: data-protection-engineering
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
created: 2022-08-17

Match
in scheme: dpv#
type: Concept
created: 2022-04-20
definition: to combine, compare, or match data from different sources
term status: accepted
source: https://ec.europa.eu/newsroom/article29/items/611236
isSubTypeOf: Use
creator: Harshvardhan J. Pandit

Secure Multi-Party Computation
in scheme: dpv#
term status: accepted
definition: Use of cryptographic methods for entities to jointly compute functions without revealing inputs
source: reference-incident-classification-taxonomy
type: Concept
creator: Harshvardhan J. Pandit
isSubTypeOf: CrytographicMethods
created: 2022-08-17

Pseudo-Anonymise
in scheme: dpv#
created: 2019-05-07
type: Concept
definition: to replace personal identifiable information by artificial identifiers
source: oj
isSubTypeOf: Transform
term status: accepted

Adult
in scheme: dpv#
type: Concept
term status: accepted
creator: Georg Krog
isSubTypeOf: Data Subject
definition: A natural person that is not a child i.e. has attained some legally specified age of adulthood
created: 2022-03-30

Security Role Procedures
in scheme: dpv#
type: Concept
term status: accepted
created: 2022-08-17
isSubTypeOf: Security Procedure
creator: Harshvardhan J. Pandit
definition: Procedures related to security roles
source: 5g-cybersecurity-standards

Storage Deletion
in scheme: dpv#
term status: accepted
definition: Deletion or Erasure of data including any deletion guarantees
creator: Mark Lizar
creator: Rob Brennan
creator: Harshvardhan J. Pandit
creator: Axel Polleres
type: Concept
isSubTypeOf: Storage Condition
created: 2019-04-05

has impact on
in scheme: dpv#
definition: Indicates the thing (e.g. plan, process, or entity) affected by an impact
creator: Georg P Krog
creator: Beatriz Esteves
creator: Fajar Ekaputra
creator: Harshvardhan J. Pandit
creator: Julian Flake
isSubTypeOf: hasConsequenceOn
term status: accepted
created: 2022-05-18
type: Concept
type: Relation
has range: Concept
has domain: Impact

Entity
in scheme: dpv#
created: 2022-02-02
definition: A human or non-human 'thing' that constitutes as an entity
type: Concept
term status: accepted
creator: Harshvardhan J. Pandit

Consent Record
in scheme: dpv#
type: Concept
created: 2022-06-22
term status: accepted
creator: Paul Ryan
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Georg P Krog
definition: A Record of Consent or Consent related activities
isSubTypeOf: DataProcessingRecord

Network Proxy Routing
in scheme: dpv#
type: Concept
source: data-protection-engineering
creator: Harshvardhan J. Pandit
definition: Use of network routing using proxy
isSubTypeOf: Security Method
term status: accepted
created: 2022-08-17

has sector
in scheme: dpv#
definition: Indicates the purpose is associated with activities in the indicated (Economic) Sector(s)
term status: accepted
has range: Sector
type: Relation
type: Concept
created: 2019-04-05
has domain: Concept

Frequency
in scheme: dpv#
type: Concept
term status: accepted
definition: The frequency or information about periods and repetitions in terms of recurrence.
creator: Harshvardhan J. Pandit
isSubTypeOf: Context
created: 2022-02-16

Direct Marketing
in scheme: dpv#
term status: accepted
creator: Beatriz Esteves
creator: Harshvardhan J. Pandit
creator: Georg P Krog
definition: Conduct direct marketing i.e. marketing communicated directly to the individual
type: Concept
created: 2020-11-04
isSubTypeOf: Marketing

has context
in scheme: dpv#
definition: Indicates a purpose is restricted to the specified context(s)
created: 2019-04-05
type: Concept
type: Relation
has range: Context
term status: accepted
has domain: Concept

MaintainCreditRatingDatabase
in scheme: dpv#
isSubTypeOf: Credit Checking
created: 2022-06-15
creator: Harshvardhan J. Pandit
creator: Georg P Krog
term status: accepted
type: Concept
definition: Maintain Credit Rating Database

Data published by Data Subject
in scheme: dpv#
definition: Data is published by the data subject
creator: Julian Flake
note: This refers to where that data was made publicly available by the data subject. An example of this would be a social media profile that the data subject has made publicly accessible.
term status: accepted
created: 2022-08-24
isInstanceOf: Data Source
type: Concept

Consent Refused
in scheme: dpv#
isInstanceOf: Consent Status Invalid for Processing
term status: accepted
note: An example of this state is when the individual clicks on a 'disagree' or 'reject' or 'refuse' button, or leaves a checkbox unticked
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Paul Ryan
creator: Julian Flake
created: 2022-06-22
source: GConsent
type: Concept
definition: The state where consent has been refused

User Interface Personalisation
in scheme: dpv#
created: 2019-04-05
creator: Javier Fernandez
creator: Simon Steyskal
creator: Fajar Ekaputra
creator: Harshvardhan J. Pandit
creator: Elmar Kiesling
creator: Axel Polleres
type: Concept
term status: accepted
isSubTypeOf: Service Personalization
definition: Personalise interfaces presented to the user

Fraud Prevention and Detection
in scheme: dpv#
created: 2019-04-05
creator: Fajar Ekaputra
creator: Javier Fernandez
creator: Harshvardhan J. Pandit
creator: Elmar Kiesling
creator: Axel Polleres
creator: Simon Steyskal
definition: Detect and prevent fraud
related: Government
type: Concept
term status: accepted
isSubTypeOf: Enforce Security

Policy
in scheme: dpv#
created: 2021-09-08
creator: David Hickey
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Paul Ryan
type: Concept
definition: A guidance document outlining any of: procedures, plans, principles, decisions, intent, or protocols.
isSubTypeOf: Organisational Measure
term status: accepted

Authorisation Procedure
in scheme: dpv#
note: non-technical authorisation procedures: How is it described on an organisational level, who gets access to the data
creator: Mark Lizar
creator: Harshvardhan J. Pandit
creator: Rob Brennan
creator: Axel Polleres
type: Concept
isSubTypeOf: Organisational Measure
term status: accepted
definition: Procedures for determining authorisation through permission or authority
created: 2019-04-05

Fixed Singular Location
in scheme: dpv#
created: 2022-06-15
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
definition: Location that is fixed at a specific place e.g. a city
isInstanceOf: Fixed Location

MaintainCreditCheckingDatabase
in scheme: dpv#
type: Concept
isSubTypeOf: Credit Checking
created: 2022-06-15
creator: Harshvardhan J. Pandit
creator: Georg P Krog
term status: accepted
definition: Maintain Credit Checking Database

Data Processor
in scheme: dpv#
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
source: oj
created: 2019-06-04
isSubTypeOf: Recipient
definition: A ‘processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

Cybersecurity Training
in scheme: dpv#
isSubTypeOf: Staff Training
creator: Harshvardhan J. Pandit
type: Concept
created: 2022-08-17
term status: accepted
source: reference-incident-classification-taxonomy
definition: Training methods related to cybersecurity

Data Sub-Processor
in scheme: dpv#
type: Concept
created: 2020-11-25
note: sub-processor' is a commonly used term similar to 'sub-contractor' and does not have a specific legal definition
term status: accepted
isSubTypeOf: Data Processor
creator: Harshvardhan J. Pandit
definition: A 'sub-processor' is a processor engaged by another processor

Generate
in scheme: dpv#
isSubTypeOf: Obtain
created: 2022-04-20
term status: accepted
creator: Harshvardhan J. Pandit
type: Concept
definition: to generate or create data

has policy
in scheme: dpv#
term status: accepted
isSubTypeOf: has technical and organisational measure
type: Relation
type: Concept
creator: Harshvardhan J. Pandit
created: 2022-01-26
definition: Indicates policy applicable or used
has range: Policy
has domain: Concept

Hardware Security Protocols
in scheme: dpv#
type: Concept
definition: Security protocols implemented at or within hardware
creator: Harshvardhan J. Pandit
isSubTypeOf: Security Method
term status: accepted
created: 2022-08-17
source: reference-incident-classification-taxonomy

Security Method
in scheme: dpv#
type: Concept
definition: Methods that relate to creating and providing security
isSubTypeOf: Technical Measure
created: 2022-08-24
creator: Harshvardhan J. Pandit
term status: accepted

LargeDataVolume
in scheme: dpv#
type: Concept
definition: Data volume that is considered large within the context
created: 2022-06-15
term status: accepted
isInstanceOf: Data Volume
creator: Harshvardhan J. Pandit

has outcome
in scheme: dpv#
creator: Harshvardhan J. Pandit
created: 2022-05-18
definition: Indicates an outcome of specified concept or context
has domain: Concept
type: Relation
type: Concept
term status: accepted
has range: Concept

Disaster Recovery Procedures
in scheme: dpv#
type: Concept
isSubTypeOf: Governance Procedures
creator: Harshvardhan J. Pandit
definition: Procedures related to management of disasters and recovery
source: 5g-cybersecurity-standards
term status: accepted
created: 2022-08-17

Data Protection Training
in scheme: dpv#
isSubTypeOf: Staff Training
source: 5g-cybersecurity-standards
type: Concept
term status: accepted
created: 2022-08-17
definition: Training intended to increase knowledge regarding data protection
creator: Harshvardhan J. Pandit

Wireless Security Protocols
in scheme: dpv#
isSubTypeOf: Security Method
term status: accepted
created: 2022-08-17
source: reference-incident-classification-taxonomy
type: Concept
creator: Harshvardhan J. Pandit
definition: Security implemented at or over wireless communication protocols

Background Checks
in scheme: dpv#
definition: Procedure where the background of an entity is assessed to identity vulnerabilities and threats due to their current or intended role
created: 2022-08-17
type: Concept
isSubTypeOf: Security Procedure
creator: Harshvardhan J. Pandit
source: 5g-cybersecurity-standards
term status: accepted

Remote Location
in scheme: dpv#
created: 2022-06-15
definition: Location is remote i.e. not local
type: Concept
term status: accepted
creator: Harshvardhan J. Pandit
isInstanceOf: Location Locality

MultiNationalScale
in scheme: dpv#
definition: Geographic coverage spanning multiple nations
creator: Harshvardhan J. Pandit
type: Concept
isInstanceOf: Geographic Coverage
created: 2022-06-15
term status: accepted

Query
in scheme: dpv#
isSubTypeOf: Consult
type: Concept
created: 2022-06-15
definition: to query or make enquiries over data
term status: accepted
creator: Harshvardhan J. Pandit

Distributed System Security
in scheme: dpv#
creator: Harshvardhan J. Pandit
type: Concept
isSubTypeOf: Security Method
term status: accepted
definition: Security implementations provided using or over a distributed system
created: 2022-08-17
source: reference-incident-classification-taxonomy

UntilTimeDuration
in scheme: dpv#
type: Concept
created: 2022-06-15
definition: Duration that has a fixed end date e.g. 2022-12-31
isInstanceOf: Duration
term status: accepted
creator: Harshvardhan J. Pandit

Completely Manual Processing
in scheme: dpv#
creator: Harshvardhan J. Pandit
type: Concept
note: For example, a human performing some processing operation
created: 2022-06-15
isInstanceOf: Automation of Processing
term status: accepted
definition: Processing that is completely un-automated or fully manual

has compliance status
in scheme: dpv#
has range: Compliance Status
term status: accepted
type: Relation
type: Concept
creator: Harshvardhan J. Pandit
created: 2022-05-18
isSubTypeOf: has status
has domain: Concept
definition: Indicates the status of compliance of specified concept

FixedOccurencesDuration
in scheme: dpv#
type: Concept
term status: accepted
definition: Duration that takes place a fixed number of times e.g. 3 times
creator: Harshvardhan J. Pandit
isInstanceOf: Duration
created: 2022-06-15

is before
in scheme: dpv#
type: Concept
type: Relation
definition: Indicates the specified concepts is 'before' this concept in some context
has range: Concept
creator: Julian Flake
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
created: 2022-03-02
has domain: Concept
term status: accepted

has justification
in scheme: dpv#
definition: Indicates a justification for specified concept or context
creator: Harshvardhan J. Pandit
has domain: Concept
has range: Justification
created: 2022-06-15
type: Relation
type: Concept
term status: accepted

Automated Processing with Human Verification
in scheme: dpv#
note: For example, a human verifying outputs of an algorithm for correctness or impact to individuals
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
definition: Processing that is automated and involves verification of outputs by Humans
created: 2022-06-15
isInstanceOf: Automation of Processing

Credential Management
in scheme: dpv#
isSubTypeOf: Authorisation Procedure
created: 2022-06-15
creator: Georg P Krog
type: Concept
term status: accepted
definition: Management of credentials and their use in authorisations

Automated Decision Making
in scheme: dpv#
type: Concept
modified: 2022-06-15
definition: Processing that involves automated decision making
term status: accepted
created: 2020-11-04
note: Automated decision making can be defined as “the ability to make decisions by technological means without human involvement.” (“Guidelines on Automated individual decision-making and Profiling for the purposes of Regulation 2016/679 (wp251rev.01)”, 2018, p. 8)
isSubTypeOf: Automation of Processing
creator: Piero Bonatti
creator: Harshvardhan J. Pandit
source: oj

SingularScaleOfDataSubjects
in scheme: dpv#
created: 2022-06-15
creator: Harshvardhan J. Pandit
type: Concept
isInstanceOf: Data Subject Scale
definition: Scale of data subjects considered singular i.e. a specific data subject
term status: accepted

Consequence of Failure
in scheme: dpv#
type: Concept
definition: The consequence(s) possible or arising from failure of specified context
isSubTypeOf: Consequence
creator: Harshvardhan J. Pandit
creator: Georg P Krog
created: 2022-03-23
term status: accepted

Concept
subclass of: Concept