Employee
Data subjects that are employees
accepted
Contextual information about the degree of automation and human involvement associated with Processing
It is difficult to provide a formal definition of automation since any and all processing may be considered automation. This concept instead is intended to explicitly signal the utilisation of automation and its extent towards some context - such as decision making, and to indicate the involvement of humans.
Automation of Processing
changed
The legality of age defining a child varies by jurisdiction. In addition, 'child' is distinct from a 'minor'. For example, the legal age for consumption of alcohol can be 21, which makes a person of age 20 a 'minor' in this context. In other cases, 'minor' and 'child' are used interchangeably to refer to a person below some legally defined age.
Child
A 'child' is a natural legal person who is below a certain legal age depending on the legal jurisdiction.
The use of 'entity' is inclusive of entities (e.g. Data Processor) as well as 'agent' (e.g. DPO). For indicating technological implementation, the property isImplementedByTechnology should be used.
is implemented by entity
modified
Indicates implementation details such as entities or agents
Client
Data subjects that are clients or recipients of services
has provision by justification
Specifies the justification for entity providing consent
WARNING: This concept will be deprecated in future releases
sunset
This field can be used to proivde a justification why the provision was provided by another DataSubject or legal entity, e.g. declariing the relationship (parent, guardian), in combination with the field provisionBy
The state where consent has been deemed to be invalidate
Consent Invalidated
An example of this state is where an investigating authority or a court finds the collected consent did not meet requirements, and 'invalidates' both prior and future uses of it to carry out processing
Registration and Authentication
Register, authenticate, and identify users or agents in context of a service
Manage payment of vendors
Vendor Payment
has expiry
Generic property specifying when or under which condition(s) the consent will expire
Material Damage
Impact that acts as or causes material damages
Access
to access data
Specifies name of a legal entity
has name
has withdrawal method
Can be used to record information of how to withdraw consent, e.g. by a click to a form, in writing, etc., by logging into a system and confirm per email, or with some additional authentication, etc.
Specifries the method by which consent can be/has been withdrawn
Organisation Risk Management
Manage risk for organisation's activities
Use of asymmetric cryptography to encrypt data
Asymmetric Encryption
Public Data Source
The term 'Public' is used here in a broad sense. Actual consideration of what is 'Public Data' can vary based on several contextual or jurisdictional factors such as definition of open, methods of access, permissions and licenses.
A source of data that is publicly accessible or available
Transfer
to move data from one place to another
Acquire
to come into possession or control of the data
State of an activity occuring in continuation i.e. currently ongoing
Activity Ongoing
Importance
An indication of 'importance' within a context
Importance can be used to express importance, desirability, relevance, or significance as a context.
User
Data subjects that use service(s)
Indiciates inclusion or applicability of a LegalEntity in the role of Data Exporter
has data exporter
The state where the consent is withdrawn or revoked specifically by the data subject and which prevents it from being further used as a valid state
Consent Withdrawn
This state can be considered a form of 'revocation' of consent, where the revocation can only be performed by the data subject. Therefore we suggest using ConsentRevoked when it is a non-data-subject entity, and ConsentWithdrawn when it is the data subject
Quantum Cryptography
Cryptographic methods that utilise quantum mechanical properties to perform cryptographic tasks
Create and provide personalised benefits for a service
Personalised Benefits
has scale
Indicates the scale of specified concept
Indicates inclusion or applicability of an entity to some concept
has entity
parent property for controller, processor, data subject, authority, etc.?
Manage orders, payment, evaluation, and prospecting related to vendors
Vendor Management
Creation, completion, fulfilment, or performance of a contract involving specified processing
Contract
Manage humans and 'human resources' within the organisation for effective and efficient operations.
HR is a broad concept. Its management includes, amongst others - recruiting employees and intermediaries e.g. brokers, independent representatives; payroll administration, remunerations, commissions, and wages; and application of social legislation.
Human Resources Management
has expiry condition
Can be TextOrDocumentOrURI
Specifies the condition or event that determines the expiry of consent
Processing necessary or authorised through the official authority granted to or vested in the Data Controller
Official Authority of Controller
Geographic coverage spanning a specific region or regions
RegionalScale
An entity that 'exports' data where exporting is considered a form of data transfer
Data Exporter
The EU, in particular the EDPB, uses data exporter the context of cross-border data transfers/flows. These concepts are not bound by jurisdictional or geopolitical scopes within DPV and can thus be used for any notion of exporting
Processing that is automated and involves oversight by Humans
Automated Processing with Human Oversight
For example, a human watching metrics to ensure correctness of procedural values and outputs as processing takes place
Verify or authorize identity
Identity Verification
Local Location
Location is local
Necessity
An indication of 'necessity' within a context
Necessity can be used to express need, essentiality, requirement, or compulsion.
The consequence(s) possible or arising from success of specified context
Consequence of Success
A policy or statement of the overall intentions and direction of an organisation related to risk management
Risk Management Policy
Copy
to produce an exact reprodution of the data
Practices regarding selecting appropriate data protection and privacy measures as the 'default' in an activity or service
Privacy by Default
Use of Attribute Based Credentials (ABC) to perform and manage authentication
Authentication using ABC
Encryption of data when being stored (persistent encryption)
Encryption in Rest
Indicates an identifier associated for identification or reference
has identifier
Technical measures consisting of encryption
Encryption
to organize data for arranging or classifying
Organise
Organisational Measure
Organisational measures required/followed when processing data of the declared category
Sensitive Personal Data
Personal data that is considered 'sensitive' in terms of privacy and/or impact, and therefore requires additional considerations and/or protection
Sensitivity' is a matter of context, and may be defined within legal frameworks. For GDPR, Special categories of personal data are considered a subset of sensitive data. To illustrate the difference between the two, consider the situation where Location data is collected, and which is considered 'sensitive' but not 'special'. As a probable rule, sensitive data require additional considerations whereas special category data requires additional legal basis / justifications.
SupraNationalUnion
A political union of two or more countries with an establishment of common authority
States of consent that cannot be used as valid justifications for processing data
This identifies the stages associated with consent that should not be used to process data
Consent Status Invalid for Processing
Immigrant
Data subjects that are immigrants (for a jurisdiction)
Locality refers to whether the specified location is local within some context, e.g. for the user
Location Locality
Privacy Preserving Protocol
Use of protocols designed with the intention of provided additional guarentees regarding privacy
Data subjects that apply for jobs or employments
JobApplicant
Risk Levels can be defined as a combination of different characteristics. For example, ISO 31073:2022 defines it as a combination of consequences and their likelihood. Another example would be the Risk Matrix where Risk Level is defined as a combination of Likelihood and Severity associated with the Risk.
The magnitude of a risk expressed as an indication to aid in its management
Risk Level
Indicates association with Data Controller
has data controller
is after
Indicates the specified concepts is 'after' this concept in some context
NationalScale
Geographic coverage spanning a nation
Enforce Access Control
Conduct or enforce access control
Was previously "Access Control". Prefixed to distinguish from Technical Measure.
Legitimate Interests of a Data Controller in conducting specified processing
Legitimate Interest of Controller
Data subjects that are members of a group, organisation, or other collectives
Member
Detect and prevent or mitigate money laundering
Counter Money Laundering
Can be used to record information of how consent was provided e.g. by a click to a form, in writing, etc., by logging into a system and confirm per email, or with some additional authentication, etc.
has provision method
Specifies the method by which consent was provisioned or provided
Anonymised Data
Personal Data that has been (fully and completely) anonymised so that it is no longer considered Personal Data
It is advised to carefully consider indicating data is fully or completely anonymised by determining whether the data by itself or in combination with other data can identify a person. Failing this condition, the data should be denoted as PseudoAnonymisedData. To indicate data is anonymised only for a specified entity (e.g. within an organisation), the concept AnonymisedDataWithinScope (as subclass of PseudoAnonymisedData) should be used instead of AnonymisedData.
State of not being compliant
Incompliant
An authority tasked with overseeing legal compliance for a region
RegionalAuthority
Assessment of cybersecurity capabilities in terms of vulnerabilities and effectiveness of controls
Cybersecurity Assessments
The conditions for what is considered 'explicit consent' differ by norms and laws.
is explicit
Specifies consent is 'explicit'
Consultation with an authority or authoritative entity
Consultation with Authority
Guardian(s) of Data Subject
Guardian(s) of data subjects such as children
Special Category Personal Data
Sensitive Personal Data whose use requires specific legal permission or justification
The term 'special category' is based on GDPR Art.9, but should not be considered as exlusive to it. DPV considers all Special Categories to also be Sensitive, but whose use is either prohibited or regulated and therefore requires additional legal basis for justification.
Status
The status or state of something
A general term reflecting a company or a business or a group acting as a unit
Organisation
An entity that 'imports' data where importing is considered a form of data transfer
Data Importer
The EU, in particular the EDPB, uses data importing the context of cross-border data transfers/flows. These concepts are not bound by jurisdictional or geopolitical scopes within DPV and can thus be used for any notion of importing
to move data from one location to another including deleting the original copy
Move
Personal Data that has undergone a partial (incomplete) anonymisation process such that it is still considered Personal Data
Pseudo-anonymised Data
A ROPA is a document maintained by Data Controllers detailing processing activities carried out under their responsibility
Register of Processing Activities
Tied to compliance processes and documents, decide how to specify those
A political union of two or more countries based on economic or trade agreements
EconomicUnion
Risk
A risk or possibility or uncertainty of negative effects, impacts, or consequences.
Risks can be associated with one or more different concepts such as purpose, processing, personal data, technical or organisational measure.
has data
Indicates associated with Data (may or may not be personal)
Carrying out an impact assessment regarding privacy risks
Privacy Impact Assessment
NationalAuthority
An authority tasked with overseeing legal compliance for a nation
Screen
to remove data for some criteria
Processing that is fully automated
Fully Automated Processing
to modify or change data
Modify
to obtain data through observation
Observe
Sell here means exchange, submit, or provide in return for direct or indirect compensation. Was subclass of commercial interest, changed to reflect selling something
Sell Data to Third Parties
Sell data or information to third parties
has data subject scale
Indicates the scale of data subjects
Data Protection Authority
An authority tasked with overseeing legal compliance regarding privacy and data protection laws.
is residual risk of
Indicates this risk is the remaining or residual risk from applying mitigation measures or treatments to specified risk
Violation of Compliance
State where objectives have been violated
Use of crytography where the same keys are utilised for encryption and descryption of information
Symmetric Cryptography
Indication of neither being required nor optional i.e. not relevant or needed
Not Required
Advertising is a subset of Marketing. Advertising by itself does not indicate 'personalisation' i.e. personalised ads.
Conduct advertising i.e. process or artefact used to call attention to a product, service, etc. through announcements, notices, or other forms of communication
Advertising
Monitoring Policies
Policy for monitoring (e.g. progress, performance)
Effectiveness Determination Procedures
Procedures intended to determine effectiveness of other measures
Practices and policies regarding training of staff members
Staff Training
Geographic Coverage
Indicate of scale in terms of geographic coverage
Consent Status
The state or status of 'consent' that provides information reflecting its operational status and validity for processing data
States are useful as information artefacts to implement them in controlling processing, and to reflect the process and flow of obtaining and maintaining consent. For example, a database table that stores consent states for specific processing and can be queried to obtain them in an efficient manner. States are also useful in investigations to determine the use and validity of consenting practices
Legitimate Interests of a Party as justification for specified processing
Legitimate Interest
Impact(s) that acts as or causes benefits
Benefit
State of an activity that was occuring in the past, and has been halted or paused or stoped
Activity Halted
Security Procedure
Procedures associated with assessing, implementing, and evaluating security
Student
Data subjects that are students
Within Device
Location is local and entirely within a device or environment
Non-Disclosure Agreement (NDA)
Non-disclosure Agreements e.g. preserving confidentiality of information
Anonymisation
Process by which some personal identifiers are removed or identifiability is reduced
Indicates consenquence(s) possible or arising from specified concept
has consequence
Removed plural suffix for consistency
Frequency where occurences are singular i.e. they take place only once
SingularFrequency
File System Security
Security implemented over a file system
Create and provide personalised recommendations for events
Create Event Recommendations
Removal of identity or information to reduce identifiability
De-Identification
Conduct research in a commercial setting or with intention to commercialise e.g. in a company or sponsored by a company
Commercial Research
LocalEnvironmentScale
Geographic coverage spanning a specific environment within the locality
For example, geographic scale of an event take place in a specific building or room
End-to-End Encryption (E2EE)
Encrypted communications where data is encrypted by the sender and decrypted by the intended receiver to prevent access to any third party
Data subjects that are not citizens (for a jurisdiction)
NonCitizen
has impact
Indicates impact(s) possible or arising as consequences from specified concept
Customer
note: for B2B relations where customers are organisations, this concept only applies for data subjects
Data subjects that purchase goods or services
Use of Homomorphic encryption that permits computations on encrypted data without decrypting it
Homomorphic Encryption
HugeDataVolume
Data volume that is considered huge or more than large within the context
Impact Assessment
Calculating or determining the likelihood of impact of an existing or proposed process, which can involve risks or detriments.
GovernmentalOrganisation
An organisation managed or part of government
Natural Person
A human
Use of HMAC where message authentication code (MAC) utilise a cryptographic hash function and a secret cryptographic key
Hash-based Message Authentication Code (HMAC)
Improve existing products and services
Improve Existing Products and Services
Maintain Fraud Database
MaintainFraudDatabase
Guidelines or Principles regarding processing and operational measures
GuidelinesPrinciple
Evaluation and Scoring
Processing that involves evaluation and scoring of individuals
Pseudo-Anonymisation
PseudoAnonmyization or 'pseudonymisation’ means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person;
Conduct marketing through social media
Social Media
Notice
A notice is an artefact for providing information, choices, or controls
Authentication Protocols
Protocols involving validation of identity i.e. authentication of a person or information
Generated Personal Data
Generated Data is used to indicate data that is produced and is not derived or inferred from other data
Personal Data that is generated or brought into existence without relation to existing data i.e. it is not derived or inferred from other data
Communication for Customer Care
Communicate with customers for assisting them, resolving issues, ensuring satisfaction in relation to services provided
Information Security Policy
Policy regarding security of information
Likelihood can be expressed in a subjective manner, such as 'Unlikely', or in a quantitative manner such as "Twice in a Day" (frequency per period). The suggestion is to use quantitative values, or to associate them with subjective terms used so as to enable accurate interpretations and interoperability. See the concepts related to Frequency and Duration for possible uses as a combination to express Likelihood.
Likelihood
The likelihood or probability or chance of something taking place or occuring
Risk Mitigation Measure
Measures intended to mitigate, minimise, or prevent risk.
Consult
to consult or query data
Conduct analysis and reporting related to usage of services or products
Was "UsageAnalytics", prefixed with Service to better reflect scope
Analytics
has residual risk
Indicates the associated risk is the remaining or residual risk from applying mitigation measures or treatments to this risk
to filter or keep data for some criteria
Filter
has indication method
Specifies the method by which an entity has indicated the specific context
Derived Personal Data
Personal Data that is obtained or derived from other data
Derived Data is data that is obtained through processing of existing data, e.g. deriving first name from full name. To indicate data that is derived but which was not present or evident within the source data, InferredPersonalData should be used.
State of not being approved or being rejected through the audit
Audit Rejected
Partially Compliant
State of partially being compliant i.e. only some objectives have been met, and others have not been in violation
Consent Notice
A Notice for information provision associated with Consent
Data
A broad concept representing 'data' or 'information'
Indicates the status of specified concept
has status
Privacy Notice
Represents a notice or document outlining information regarding privacy
Create Personalized Recommendations
Create and provide personalised recommendations
Authority
An authority with the power to create or enforce laws, or determine their compliance.
has legal basis
Indicates use or applicability of a Legal Basis
Location that is in the 'cloud' i.e. a logical location operated over the internet
Cloud Location
Indication of 'required' or 'necessary'
Required
Use of cryptographic methods to restrict access and execution to trusted parties and code
Trusted Computing
Consent that is expressed through an action intended to convey a consenting decision
Expressed consent requires the individual take a specific and unambigious action that directly indicates their consent. This action may be a part of other processes such as setting preferences, or agreeing to a contract, or other matters not relating to consent. An example of expressed consent is interacting with a checkbox within a dashboard or clicking a button on a web form
Expressed Consent
Data subjects that are considered elderly (i.e. based on age)
Elderly Data Subject
Explicitly expressed consent is a more specific form of Expressed consent where the action taken must 'explicitly' relate to only the consent decision. Expressed consent where the consenting is part of other matters therefore cannot satisfy the requirements of explicitly expressed consent. An example of explicit action expressing the consenting decision is a button on a web form where the form only relates to consent, or it is accompanied with suitable text that reiterates what the consenting decision is about
Explicitly Expressed Consent
Consent that is expressed through an explicit action solely conveying a consenting decision
Indicates the volume of data
has data volume
Indication of 'secondary' or 'minor' or 'auxiliary' importance
Secondary Importance
Frequency where occurences are sporadic or infrequent or sparse
SporadicFrequency
to apply a restriction on the processsing of specific records
Restrict
to keep data for future use
Store
Storage Restoration
Regularity and temporal span of data restoration/backup mechanisms that guarantee that data is preserved
For example, a series of distinct processing operations that are automated individually or have some human involvement
Processing that is partially automated or semi-automated
Partially Automated Processing
State of being approved through the audit
Audit Approved
has applicable law
Indicates applicability of a Law
Location that is fixed i.e. known to occur at a specific place
Fixed Location
Indicates applicability of specified jurisdiction
has jurisdiction
Management of identity and identity-based processes
Identity Management Method
has personal data handling
Indicates association with Personal Data Handling
Data subjects that are asylum seekers
Asylum Seeker
Participant
Data subjects that participate in some context such as volunteers in a function
SingularDataVolume
Data volume that is considered singular i.e. a specific instance or single item
Data Protection Officer
An entity within or authorised by an organisation to monitor internal compliance, inform and advise on data protection obligations and act as a contact point for data subjects and the supervisory authority.
MediumDataVolume
Data volume that is considered medium i.e. neither large nor small within the context
Consent of the Data Subject for specified processing
Consent
Examples (non-exhaustive) include: Algorithm, Process, Method, Skill, Database, Cookies, Server, Device
The technology, technological implementation, or any techniques, skills, methods, and processes used or applied
Technology
A set of rules or guidelines outlining criterias for design
Design Standard
Sub-Processor Agreement
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data between a Data Processor and a Data (Sub-)Processor
to irreversibly alter personal data in such a way that an unique data subject can no longer be identified directly or indirectly or in combination with other data
Anonymise
A DPIA involves determining the potential and actual impact of processing activities on individuals or groups of individuals
Data Protection Impact Assessment (DPIA)
Top class: Impact Assessment, and DPIA is sub-class
Provide service or product or activities
Service Provision
Digital Rights Management
Management of access, use, and other operations associated with digital content
Indicates Recipient of Personal Data
has recipient
Conduct or assist with research conducted in an academic context e.g. within universities
Academic Research
HugeScaleOfDataSubjects
Scale of data subjects considered huge or more than large within the context
is authority for
Indicates area, scope, or applicability of an Authority
State of being conditionally approved through the audit
Audit Conditionally Approved
A "conditional approval" is intended to reflect states where the audit has identified further changes which must be implemented before considering the audit has been 'passed', without requiring another audit to validate them. This is distinct from the case where an audit has state 'rejected', which means changes must be made and submitted for review. The requirements of a 'conditional acceptance' are expected to be minor or not significant enough to warrant another audit to review them.
Specifies the state or status of consent
has consent status
Research and Development
Conduct research and development for new methods, products, or services
Sell Products to Data Subject
Sell products or services to the user, consumer, or data subjects
Was subclass of commercial interest, changed to reflect selling something
Optimise services or activities
Service Optimization
Subclass of ServiceProvision since optimisation is usually considered part of providing services
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data between Controllers within a Joint Controllers relationship
Joint Data Controllers Agreement
Processing is necessary or required to protect vital interests of a data subject
Vital Interest of Data Subject
has recipient third party
Indiciates inclusion or applicability of a Third Party as a Recipient of persona data
Intrusion Detection System
Use of measures to detect intrusions and other unauthorised attempts to gain access to a system
NonGovernmentalOrganisation
An organisation not part of or independent from the government
Subclass of ServiceProvision since personalisation is usually considered part of providing services
Service Personalization
Personalise services or product or activities
Assessment
The document, plan, or process for assessment or determination towards a purpose e.g. assessment of legality or impact assessments
Mobile Platform Security
Security implemented over a mobile platform
Risk Management Process
The systematic application of management policies, procedures and practices to the activities of communicating, consulting, establishing the context, and identifying, analysing, evaluating, treating, monitoring, and reviewing risk
Duration that has a fixed temporal duration e.g. 6 months
TemporalDuration
Structure
to arrange data according to a structure
Data subjects that are considered mentally vulnerable
Mentally Vulnerable Data Subject
Indicates the relation between specified Entity and Data Subject
has relation with data subject
Procedures related to management of incidents
Incident Management Procedures
Manage invoicing, orders, and records in relation to services
Service Order Management
Ensure and enforce security e.g. of data, personnel
Was previous "Security". Prefixed to distinguish from TechOrg measures.
Enforce Security
Consultation with Data Subject
Consultation with data subject(s) or their representative(s)
To indicate the source of data, use the DataSource concept with the hasDataSource relation
Collected Personal Data
Personal Data that has been collected from another source such as the Data Subject
Monitor, perform, or assess credit worthiness or solvency
Credit Checking
Document Security
Security measures enacted over documents to protect against tampering or restrict access
Encryption in Transfer
Encryption of data in transit e.g. when being transferred from one location to another, including sharing
The duration or temporal limitation
Duration
Data Sanitisation Technique
Cleaning or any removal or re-organisation of elements in data based on selective criteria
Code of Conduct
A set of rules or procedures outlining the norms and practices for conducting activities
has withdrawal time
Specifies the instant in time when consent was withdrawn
Indicates applicability of authority for a jurisdiction
has authority
Scale of data subjects considered medium i.e. neither large nor small within the context
MediumScaleOfDataSubjects
has processing
Indicates association with Processing
A law is a set of rules created by government or authorities
Law
Geographic coverage spanning the entire globe
GlobalScale
Indicate or restrict scope for interpretation and application of purpose in a domain e.g. Agriculture, Banking
Sector
There are various sector codes used commonly to indicate the domain of an organisation or business. Examples include NACE (EU), ISIC (UN), SIC and NAICS (USA).
Message Authentication Codes (MAC)
Use of cryptographic methods to authenticate messages
The consequence(s) possible or arising from specified context
Consequence
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data between a Data Controller and a Data Processor
Controller-Processor Agreement
Professional Training
Training methods that are intended to provide professional knowledge and expertise
Duration that takes place until a specific event occurs e.g. Account Closure
UntilEventDuration
Location that is known but is variable e.g. somewhere within a given area
Variable Location
Monitor
to monitor data for some criteria
Manage disputes by natural persons, private bodies, or public authorities relevant to organisation
Dispute Management
Adapt
to modify the data, often rewritten into a new form for a new use
Indicates the use or extent of automation associated with processing
has processing automation
Manage orders related to vendors
Vendor Records Management
Based on use of definitions, the notion of 'Data Subject Right' can be equivalent to 'Individual Right' or 'Right of a Person'
Data Subject Right
The rights applicable or provided to a Data Subject
has data importer
Indiciates inclusion or applicability of a LegalEntity in the role of Data Importer
Customer Relationship Management
Manage and analyse interactions with past, current, and potential customers
Optimize internal resource availability and usage for organisation
Internal Resource Optimisation
Activity Monitoring
Monitoring of activities including assessing whether they have been successfully initiated and completed
Data Source
The source or origin of data
Source' is the direct point of data collection; 'origin' would indicate the original/others points of where the data originates from.
Safeguard
This concept is relevant given the requirement to assert safeguards in cross-border data transfers
A safeguard is a precautionary measure for the protection against or mitigation of negative effects
has duration
Indicates information about duration
Data subjects that are temporary visitors
Visitor
Specifies contact details of a legal entity such as phone or email
has contact
to study or examine the data in detail
Analyse
isSubTypeOf
Location that is federated across multiple separate areas with designation of a primary or central location
Federated Locations
Harm
Impact that acts as or causes harms
has expiry time
Specifies the expiry time or duration for consent
Public Relations
Manage and conduct public relations processes. This includes creating goodwill for the organization.
Retrieve
to retrieve data, often in an automated manner
Public Interest
Processing is necessary or beneficial for interest of the public or society at large
Optimize activities and services for consumer or user
Optimisation for Consumer
Duration that is open ended or without an end
EndlessDuration
to change the data without changing it into something else
Alter
Patient
Data subjects that receive medican attention, treatment, care, advice, or other health related services
Processing that takes place at large scales
Large Scale Processing
to spread data throughout
Disseminate
Indicates the source or origin of data being processed
has data source
Indicates use or applicability of Technical or Organisational measure
has technical and organisational measure
Not Compliant
State of not being compliant where objectives have not been met, but have not been violated
Consumer
Data subjects that consume goods or services for direct use
A measurement along some dimension
Scales are subjective concepts that need to be defined and interpreted within the context of their application. For example, what would be small within one context could be large within another.
Scale
Single Sign On
Use of credentials or processes that enable using one set of credentials to authenticate multiple contexts.
Region
A region is an area or site that is considered a location
The term NonPersonalData is provided to distinguish between PersonalData and other data, e.g. for indicating which data is regulated by privacy laws. To specify personal data that has been anonymised, the concept AnonymisedData should be used.
Non-Personal Data
Data that is not Personal Data
Location that is random or unknown
Random Location
Indicates the status of activity of specified concept
has activity status
Anti-Terrorism Operations
Detect, prevent, mitigate, or otherwise act on anti-terrorism activities
Security implemented at or through operating systems
Operating System Security
has joint data controllers
Indicates inclusion or applicability of a Joint Data Controller
has purpose
Indicates association with Purpose
Management of personnel associated with the organisation e.g. evaluation and management of employees and intermediaries
Personnel Management
The Data Privacy Vocabulary (DPV) provides terms (classes and properties) to represent information about legally compliant personal data handling, which includes purposes, processing, personal data, technical and organisational measures.
Data Privacy Vocabulary
Certification mechanisms, seals, and marks for the purpose of demonstrating compliance
Certification
Indicates the status of audit associated with specified concept
has audit status
Fixed Multiple Locations
Location that is fixed with multiple places e.g. multiple cities
A representative of a legal entity
Representative
Fulfilment of obligations or requirements towards achieving compliance with law or regulations
Legal Compliance
Management and execution of hiring processes of personnel
Personnel Hiring
Storage Duration
Duration or temporal limitation on storage of personal data
Impact Assessment for conducting data transfers
Data Transfer Impact Assessment
Cryptographic Key Management
Management of crytographic keys, including their generation, storage, assessment, and safekeeping
to transform or publish data to be used
Make Available
Delivery of Goods
Deliver goods and services requested or asked by consumer
Use of cryptographic methods to perform tasks
Cryptographic Methods
Algorithmic Logic is intended as a broad concept for explaining the use of algorithms and automated decisions making within Processing. To describe the actual algorithm, see the Algorithm concept.
Algorithmic Logic
The algorithmic logic applied or used
Information Flow Control
Use of measures to control information flows
Create and provide product recommendations e.g. suggest similar products
Create Product Recommendations
Access Control Method
Methods which restrict access to a place or resource
Vital Interest
Processing is necessary or required to protect vital interests of a data subject or other natural person
Organisation Governance
Conduct activities and functions for organisation's governance
Context
Contextually relevant information not possible to represent through other core concepts
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data
Data Processing Agreement
For specific role-based data processing agreements, see concepts for Processors and JointDataController agreements.
Protocols involving authorisation of roles or profiles to determine permission, rights, or privileges
Authorisation Protocols
Automated Processing with Human Input
Processing that is automated and involves inputs by Humans
For example, an algorithm that takes inputs from humans and performs operations based on them
Consent that is implied indirectly through an action not associated solely with conveying a consenting decision
Implied Consent
Implied consent is expected to also be Informed Consent. An example is a CCTV notice outside a monitored area that informs the individuals that by walking in they would be consenting to the use of camera for surveillance.
to use data
Use
Destruct
to process data in a way it no longer exists or cannot be repaired
Consent states can be unknown, for example, when information is not available, or cannot be trusted, or is known to be inaccurate
State where information about consent is not available or is unknown
Consent Unknown
Legal basis (plural: legal bases) are defined by legislations and regulations, whose applicability is usually restricted to specific jurisdictions.
Legal Basis
The Legal basis used to justify processing of personal data
An example of this state is when the individual closes or dismisses a notice without making a decision. This state is intended for making the distinction between a notice being provided (as a consent request) and the individual interacting with the notice without making a decision - where the 'ignoring of a notice' is taken as consent being neither given nor refused
State where a request for consent has been deferred without a decision
Consent Request Deferred
A political entity indicative of a sovereign or non-sovereign territorial state comprising of distinct geographical areas
The definition of country is not intended for political interpretation. DPVCG welcomes alternate definitions based in existing sources with global scope, such as UN or ISO.
Country
Third Party Security Procedures
Procedures related to security associated with Third Parties
Certification and Seal
Certifications, seals, and marks indicating compliance to regulations or practices
Organisation Compliance Management
Manage compliance for organisation in relation to internal policies
Use of hash functions to map information or to retrieve a prior categorisation
Hash Functions
Personalised Advertising
Create and provide personalised advertising
Data Subject
The term 'data subject' is specific to the GDPR, but is functionally equivalent to the term 'individual' and the ISO/IEC term 'PII Principle'.
The individual (or category of individuals) whose personal data is being processed
Complete Anonymisation
Altering personal data irreversibly such that a data subject can no longer be identified directly or indirectly, either by the data controller alone or in collaboration with any other party
Logging Policies
Policy for logging of information
Erase
to delete data
A source of data that is not publicly accessible or available
Non-Public Data Source
has risk
Indicates applicability of Risk
Indicates applicability of Risk for this concept
A consortium established and comprising on industry organisations
IndustryConsortium
Trusted Execution Environments
Use of cryptographic methods to restrict access and execution to trusted parties and code within a dedicated execution environment
Share
to give data (or a portion of it) to others
to join or merge data
Combine
Customer Management
Manage past, current, and future customers
has representative
Specifies representative of the legal entity
State of an audit being requested whose outcome is not yet known
Audit Requested
Processing
The processing performed on personal data
has country
Indicates applicability of specified country
mitigates risk
Indicates risks mitigated by this concept
Optional
Indication of 'optional' or 'voluntary'
Profiling
to create a profile that describes or represents a person
Monotonic Counter Pseudoanonymisation
A simple pseudoanonymisation method where identifiers are substituted by a number chosen by a monotonic counter
Digital Signatures
Expression and authentication of identity through digital information containing cryptographic signatures
Access control applied for physical access e.g. premises or equipement
Physical Access Control Method
Use of synthetic data to preserve privacy, security, or other effects and side-effects
Use of Synthetic Data
ContractualTerms
Contractual terms governing data handling within or with an entity
Impact is a stronger notion of consequence in terms of influence, change, or effect on something e.g. for impact assessments
The impact(s) possible or arising as a consequence from specified context
Impact
Justification
A form of documentation providing reaosns, explanations, or justifications
Non-Commercial Research
Conduct research in a non-commercial setting e.g. for a non-profit-organisation (NGO)
Organisations related to academia or scientific pursuits e.g. Universities, Schools, Research Bodies
AcademicScientificOrganisation
is indicated at time
Specifies the temporal information for when the entity has indicated the specific context
Consent that is uninformed i.e. without requirement to provide sufficient information to make a consenting decision
Uninformed Consent
For example, geographic scale of a city or an area within a city
LocalityScale
Geographic coverage spanning a specific locality
has likelihood
Indicates the likelihood associated with a concept
Right
A 'right' is a legal, social, or ethical principle of freedom or entitlement which dictate the norms regarding what is allowed or owed.. Rights as a concept encompass a broad area of norms and entities, and are not specific to Individuals or Data Protection / Privacy. For individual specific rights, see dpv:DataSubjectRight
The right(s) applicable, provided, or expected.
Vulnerability Testing Methods
Methods that assess or discover vulnerabilities in a system
Specifies the instant in time when consent was given
has provision time
A high-level Class to describe 'data handling'. This can consist of personal data being processed for a purpose, involving entities, using technical and organisational measures, applicable risks, rights, and legal basis.
Personal Data Handling
Scale of Data Subject(s)
Data Subject Scale
Indicates the context or application of policy
is policy for
Sell products or services
Sell Products
Sell here means exchange, submit, or provide in return for direct or indirect compensation.
to send out data
Transmit
Represents a safeguard used for data transfer. Can include technical or organisational measures.
Safeguard for Data Transfer
Use of algorithms that are intended to be secure against cryptanalytic attack by a quantum computer
Post-Quantum Cryptography
An organisation that aims to achieve profit as its primary goal
ForProfitOrganisation
Legal Obligation to conduct the specified processing
Legal Obligation
has human involvement
Human involvement is also relevant to 'human in the loop'
Indicates Involvement of humans in processing such as within automated decision making process
An example of this state is when a previously given consent has expired, and the individual is presented a notice regarding continuing associated processing operations - to which they agree. This state can be useful to keep track of 'reconfirmed' or 'refreshed' consent within consent records, assist notices and contextual agents to create better consenting dialogues, and assist with specific legal obligations related to subsequent consenting
The state where a previously given consent has been 'renewed' or 'refreshed' or 'reaffirmed' to form a new instance of given consent
Renewed Consent Given
Indicates applicability or relevance of a 'third country'
has third country
State of being fully compliant
Compliant
Infer
to infer data from existing data
Infer indicates data that is derived without it being present or obtainable from existing data. For data that is presented, and is 'extracted' or 'obtained' from existing data, see Derive.
Status associated with Compliance with some norms, objectives, or requirements
Compliance Status
Indicates information about location
has location
Scale of data subjects considered small or limited within the context
SmallScaleOfDataSubjects
Technical Measure
Technical measures required/followed when processing data of the declared category
Location that is spread across multiple separate areas with no distinction between their importance
Decentralised Locations
An example of this state is when the obtained consent has been assigned a duration - which has lapsed or 'expired', making it invalid to be used further for processing data
The state where the temporal or contextual validity of consent has 'expired'
Consent Expired
Secret Sharing Schemes
Use of secret sharing schemes where the secret can only be reconstructed through combination of sufficient number of individuals
RNG Pseudoanonymisation
A pseudoanonymisation method where identifiers are substituted by a number chosen by a Random Number Generator (RNG)
Specifies the entity that withdrew consent
has withdrawal by
Normally this would be the dataSubject, but in some exceptional cases, the consent might be withdraawn on behalf by someone else, e.g. parents of minors.
Password Authentication
Use of passwords to perform authentication
Citizen
Data subjects that are citizens (for a jurisdiction)
Specific or special categories and instances of legal basis intended for justifying data transfers
Data Transfer Legal Basis
Indicates the use or applicability of a Notice for the specified context
has notice
Enter Into Contract
Processing necessary to enter into contract
Use of symmetric crytography to encrypt data
Symmetric Encryption
Private Information Retrieval
Use of cryptographic methods to retrieve a record from a system without revealing which record is retrieved
Data Backup Protocols
Protocols or plans for backing up of data
Provide assistance, resolve issues, ensure satisfaction in relation to services provided
Customer Care
Third Party
A ‘third party’ means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and people who, under the direct authority of the controller or processor, are authorised to process personal data.
has range
Synthetic data reffers to artificially created data such that it is intended to resemble real data (personal or non-personal), but does not refer to any specific identified or identifiable individual, or to the real measure of an observable parameter in the case of non-personal data
Synthetic Data
has storage condition
Indicates information about storage condition
A human or non-human 'thing' that constitutes as an entity and which is recognised and defined in law
Legal Entity
Tourist
Data subjects that are tourists i.e. not citizens and not immigrants
State of an activity that has completed i.e. is fully in the past
Activity Completed
Human Involvement
The involvement of humans in specified context
Human Involvement here broadly refers to any involvement by a human in the context of carrying out processing. This may include verification of outcomes, providing input data for making decisions, or overseeing activities.
to assess data for some criteria
Assess
Damage
Impact that acts as or causes damages
Audit Not Required
State where an audit is determined as not being required
Record Management
Manage creation, storage, and use of records relevant to operations, events, and processes e.g. to store logs or access requests
Use of public-key cryptography or asymmetric cryptography involving a public and private pair of keys
Asymmetric Cryptography
Indicates the associated risk level associated with a risk
has risk level
Security Assessments
Assessment of security intended to identity gaps, vulnerabilities, risks, and effectiveness of controls
Consent Given
An example of this state is when the individual clicks on a button, ticks a checkbox, verbally agrees - or any other form that communicates their decision agreeing to the processing of data
The state where consent has been given
Data Controller
The individual or organisation that decides (or controls) the purpose(s) of processing personal data.
The terms 'Controller' is usually the more common form of indicating a Data Controller. In ISO/IEC the term 'PII Controller' is used.
Geographic coverage nearly spanning the entire globe
NearlyGlobalScale
Communication Management
This purpose by itself does not sufficiently and clearly indicate what the communication is about. As such, it is recommended to combine it with another purpose to indicate the application. For example, Communication of Payment.
Manage communication or provide means for communication e.g. to send an email notifying some information
to disclose data by means of transmission
Disclose by Transmission
Customer Solvency Monitoring
Monitor solvency of customers for financial diligence
has responsible entity
Specifies the indicated entity is responsible within some context
Specifies the notice provided in context of consent
The actual notice that the Data Subject received to consent to, either a text or link to a document, which should be usable to decide whether the form or consent was compliant to legislation, e.g. documenting how the user has been informed about rights and implications (such as, right to data portability,right to recitffy, right to erasure, right to restrict processing, right to object, rights regarding automated decision making or profiling, processors, third parties, sub-processors, outside-EEA transfers, automated decision-making, or other necessary details of the privacy-policy). Can be TextOrDocumentOrURI.
has consent notice
Specifies address of a legal entity such as street address or pin code
has address
to create new derivative data from the original data
Derive
Derive indicates data is present or obtainable from existing data. For data that is created without such existence, see Infer.
Incident Reporting Communication
Procedures related to management of incident reporting
Usage Control
Management of usage, which is intended to be broader than access control and may cover trust, digital rights, or other relevant controls
Deliver service as requested by user or consumer
Requested Service Provision
Seal
A seal or a mark indicating proof of certification to some certification or standard
Applicant
Data subjects that are applicants in some context
Technical Service Provision
Manage and provide technical processes and functions necessary for delivering services
Customer Order Management
Manage customer orders
Severity
Severity can be associated with Risk, or its Consequences and Impacts
The magnitude of being unwanted or having negative effects such as harmful impacts
Indicates association with Personal Data
has personal data
Use of crytography for authentication
Cryptographic Authentication
SmallDataVolume
Data volume that is considered small or limited within the context
The term 'technology' is inclusive of technologies, processes, and methods.
Indicates implementation details such as technologies or processes
is implemented using technology
Increase Service Robustness
Improve robustness and resilience of services
Indiciates inclusion or applicability of a Data Processor
has data processor
Network Security Protocols
Security implemented at or over networks protocols
Trusted Third Party Utilisation
Utilisation of a trusted third party to provide or carry out a measure
is mitigated by measure
Indicate a risk is mitigated by specified measure
Fulfilment or performance of a contract involving specified processing
Contract Performance
An organisation that does not aim to achieve profit as its primary goal
NonProfitOrganisation
State where a request for consent has been made and is awaiting a decision
An example of this state is when a notice has been presented to the individual but they have not made a decision
Consent Requested
Asset Management Procedures
Procedures related to management of assets
Personal Data
This definition of personal data encompasses the concepts used in GDPR Art.4-1 for 'personal data' and ISO/IEC 2700 for 'personally identifiable information (PII)'.
Data directly or indirectly associated or related to an individual.
Indicates the frequency with which something takes place
has frequency
Audit Required
State where an audit is determined as being required but has not been conducted
Collect
to gather data from someone
Use of penetration testing to identity weaknessess and vulnerabilities through simulations
Penetration Testing Methods
Scale of data subjects considered sporadic or sparse within the context
SporadicScaleOfDataSubjects
Security Knowledge Training
Training intended to increase knowledge regarding security
Specifices an associated data protection officer
has data protection officer
Indicates use or applicability of Technical measure
has technical measure
Deterministic Pseudonymisation
Pseudoanonymisation achieved through a deterministic function
note: subscriber can be customer or consumer
Subscriber
Data subjects that subscribe to service(s)
has data subject
Indicates association with Data Subject
Indiciates inclusion or applicability of a Data Controller as a Recipient of persona data
has recipient data controller
Customer Claims Management
Manage claims, including repayment of monies owed
Represents a country outside applicable or compatible jurisdiction as outlined in law
Third Country
Context or conditions within which processing takes place
Processing Context
Data Anonymisation Technique
Use of anonymisation techniques that reduce the identifiability in data
Normally this would be the dataSubject, but in some exceptional cases, the consent might be given on behalf by someone else, e.g. parents of minors.
Specifies the entity that provisioned or provided consent
has provision by
Frequency where occurences are continous
Continous Frequency
Legitimate Interest of Third Party
Legitimate Interests of a Third Party in conducting specified processing
Web Security Protocols
Security implemented at or over web-based protocols
Was commercial interest, changed to consider Marketing a separate Purpose category by itself
Marketing
Conduct marketing in relation to organisation or products or services e.g. promoting, selling, and distributing
Legal Agreement
A legally binding agreement
Authentication using PABC
Use of Privacy-enhacing Attribute Based Credentials (ABC) to perform and manage authentication
Maintain registry of shareholders, members, or partners for governance, administration, and management functions
Members and Partners Management
Purpose
The purpose of processing personal data
Indication of 'primary' or 'main' or 'core' importance
Primary Importance
Use of randomised pseudoanonymisation where the same elements are assigned different values each time they occur
Fully Randomised Pseudonymisation
State of an activity being proposed or planned i.e. yet to occur
Activity Proposed
Compliance Monitoring
Monitoring of compliance (e.g. internal policy, regulations)
Use of randomised pseudoanonymisation where the same elements are assigned different values in the same document or database
Document Randomised Pseudonymisation
to solicit or gather data from someone
Obtain
Entities that receive personal data
Recipient
A recipient of personal data can be used to indicate any entity that receives personal data. This can be a Third Party, Processor (GDPR), or even a Controller.
Sell Insights from Data
Sell data or information relevant to insights obtained from analysis of data
Audit Status
Status associated with Auditing or Investigation
Training methods that are intended to provide education on topic(s)
Educational Training
to adjust the data to be in relation to another data
Align
to make a record (especially media)
Record
Consequence as Side-Effect
The consequence(s) possible or arising as a side-effect of specified context
has withdrawal by justification
Specifies the justification for entity withdrawing consent
This field can be used to proivde a justification why the weithdrawal was done by another DataSubject or legal entity, e.g. declariing the relationship (parent, guardian), in combination with the field withdrawalBy
Volume or Scale of Data
Data Volume
Scale of data subjects considered large within the context
LargeScaleOfDataSubjects
Consultation with Data Protection Officer(s)
Consultation with DPO
States of consent that can be used as valid justifications for processing data
Practically, given consent is the only valid state for processing
Consent Status Valid for Processing
Improve Internal CRM Processes
Improve customer-relationship management (CRM) processes
Conditions required or followed regarding storage of data
Storage Condition
has right
Indicates use or applicability of Right
Specifies entity who indicates the specific context
is indicated by
Joint Data Controllers
To indicate the membership, hasDataController may be used
A group of Data Controllers that jointly determine the purposes and means of processing
Indicates the logic used in processing such as for automated decision making
has algorithmic logic
Utilisation of differential privacy where information is shared as patterns or groups to withold individual elements
Differential Privacy
Indication of the extent or range or boundaries associated with(in) a context
Scope
Data Subjects which should be considered 'vulnerable' and therefore would require additional measures and safeguards
This concept denotes a Data Subject or a group are vulnerable, but not what vulnerability they possess or its context. This information can be provided additionally as comments, or as separate concepts and relations. Proposals for this are welcome.
Vulnerable Data Subject
Create and provide customisation based on attributes and/or needs of person(s) or context(s).
Personalisation
This term is a blanket purpose category for indicating personalisation of some other purpose, e.g. by creating a subclass of the other concept and Personalisation
has geographic coverage
Indicate the geographic coverage (of specified context)
Optimize activities and services for provider or controller
Optimisation for Controller
Vital Interest of Natural Person
Processing is necessary or required to protect vital interests of a natural person
Personnel Payment
Management and execution of payment of personnel
Relation
Privacy by Design
Practices regarding incorporating data protection and privacy in the design of information and services
An authority tasked with overseeing legal compliance for a supra-national union e.g. EU
SupraNationalAuthority
Targeted Advertising
Create and provide pesonalised advertisement where the personalisation is targeted to a specific individual or group of individuals
Technical and Organisational Measure
The Technical and Organisational measures used.
Regularity of Re-certification
Policy regarding repetition or renewal of existing certification(s)
Storage Location
Location or geospatial scope where the data is stored
WebBrowser Security
Security implemented at or over web browsers
Records of Activities
Records of activities within some context such as maintainence tasks or governance functions
Parent(s) of Data Subject
Parent(s) of data subjects such as children
Detriment
Impact that acts as or causes detriments
Create, maintain, and manage accounts for purposes of providing services
Account Management
Governance Procedures
Procedures related to governance (e.g. organisation, unit, team, process, system)
has scope
Indicates the scope of specified concept or context
Risk Management Plan
A scheme within the risk management framework specifying the approach, the management components, and resources to be applied to the management of risk
Technical_Organisational_Measures Concepts
Identify, rectify, or otherwise under take activities intended to fix or repair impairments to existing functionalities
Identify and Repair Impairments
An example of identifying and rectifying impairments is the process of finding and fixing errors in products, commonly referred to as debugging
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data between a Data Controller or Processor and a Third Party
Third-Party Agreement
Records of personal data processing, whether ex-ante or ex-post
Data Processing Records
has severity
Indicates the severity associated with a concept
Data volume that is considered sporadic or sparse within the context
SporadicDataVolume
Entity within an organisation that does not constitute as a separate legal entity
Organisational Unit
The fixture of location refers to whether the location is fixed
Location Fixture
Non-Material Damage
Impact that acts as or causes non-material damages
Multi-Factor Authentication (MFA)
An authentication system that uses two or more methods to authenticate
Indicates an assessment regarding the use of legitimate interest as a lawful basis by the data controller
Legitimate Interest Assessment
International Organisation
An organisation and its subordinate bodies governed by public international law, or any other body which is set up by, or on the basis of, an agreement between two or more countries
has organisational measure
Indicates use or applicability of Organisational measure
Security implemented at or through virtualised environments
Virtualisation Security
to make data known
Disclose
Remove
to destruct or erase data
Inferred Personal Data
Personal Data that is obtained through inference from other data
Inferred Data is derived data generated from existing data, but which did not originally exist within it, e.g. inferring demographics from browsing history.
Activity Status
Status associated with activity operations and lifecycles
Optimize interfaces presented to the user
Optimise User Interface
Location
A location is a position, site, or area where something is located
Location may be geographic, physical, or virtual.
Often Frequency
Frequency where occurences are often or frequent, but not continous
Consultation
Consultation is a process of receiving feedback, advice, or opinion from an external agency
Informed Consent
Consent that is informed i.e. with the requirement to provide sufficient information to make a consenting decision
The specifics for what information should be provided or made available will depend on the context, use-case, or relevant legal requirements
Biometric Authentication
Use of biometric data for authentication
Consent Revoked
An example of this state is when a Data Controller stops utilising previously obtaining consent, such as when that service no longer exists
The state where the consent is revoked by an entity other than the data subject and which prevents it from being further used as a valid state
Processing that involves use of innovative and new technologies
Innovative Use of New Technologies
has domain
to change the form or nature of data
Transform
Observed Personal Data
Personal Data that has been collected through observation of the Data Subject(s)
isInstanceOf
Systematic Monitoring
Processing that involves systematic monitoring of individuals
Process payment transactions in relation to service
Payment
Manage selection, assessment, and evaluation related to vendors
Vendor Selection Assessment
Authentication using Zero-Knowledge proofs
Zero Knowledge Authentication
to combine, compare, or match data from different sources
Match
Use of cryptographic methods for entities to jointly compute functions without revealing inputs
Secure Multi-Party Computation
to replace personal identifiable information by artificial identifiers
Pseudo-Anonymise
Adult
A natural person that is not a child i.e. has attained some legally specified age of adulthood
Security Role Procedures
Procedures related to security roles
Storage Deletion
Deletion or Erasure of data including any deletion guarantees
Indicates the thing (e.g. plan, process, or entity) affected by an impact
has impact on
A human or non-human 'thing' that constitutes as an entity
Entity
Consent Record
A Record of Consent or Consent related activities
Use of network routing using proxy
Network Proxy Routing
Indicates the purpose is associated with activities in the indicated (Economic) Sector(s)
has sector
Frequency
The frequency or information about periods and repetitions in terms of recurrence.
Conduct direct marketing i.e. marketing communicated directly to the individual
Direct Marketing
Indicates a purpose is restricted to the specified context(s)
has context
MaintainCreditRatingDatabase
Maintain Credit Rating Database
Data is published by the data subject
This refers to where that data was made publicly available by the data subject. An example of this would be a social media profile that the data subject has made publicly accessible.
Data published by Data Subject
An example of this state is when the individual clicks on a 'disagree' or 'reject' or 'refuse' button, or leaves a checkbox unticked
The state where consent has been refused
Consent Refused
User Interface Personalisation
Personalise interfaces presented to the user
Detect and prevent fraud
Fraud Prevention and Detection
Policy
A guidance document outlining any of: procedures, plans, principles, decisions, intent, or protocols.
Authorisation Procedure
non-technical authorisation procedures: How is it described on an organisational level, who gets access to the data
Procedures for determining authorisation through permission or authority
Fixed Singular Location
Location that is fixed at a specific place e.g. a city
MaintainCreditCheckingDatabase
Maintain Credit Checking Database
Data Processor
A ‘processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
Cybersecurity Training
Training methods related to cybersecurity
sub-processor' is a commonly used term similar to 'sub-contractor' and does not have a specific legal definition
Data Sub-Processor
A 'sub-processor' is a processor engaged by another processor
Generate
to generate or create data
has policy
Indicates policy applicable or used
Hardware Security Protocols
Security protocols implemented at or within hardware
Methods that relate to creating and providing security
Security Method
Data volume that is considered large within the context
LargeDataVolume
Indicates an outcome of specified concept or context
has outcome
Disaster Recovery Procedures
Procedures related to management of disasters and recovery
Data Protection Training
Training intended to increase knowledge regarding data protection
Wireless Security Protocols
Security implemented at or over wireless communication protocols
Procedure where the background of an entity is assessed to identity vulnerabilities and threats due to their current or intended role
Background Checks
Location is remote i.e. not local
Remote Location
Geographic coverage spanning multiple nations
MultiNationalScale
to query or make enquiries over data
Query
Distributed System Security
Security implementations provided using or over a distributed system
UntilTimeDuration
Duration that has a fixed end date e.g. 2022-12-31
Completely Manual Processing
For example, a human performing some processing operation
Processing that is completely un-automated or fully manual
has compliance status
Indicates the status of compliance of specified concept
Duration that takes place a fixed number of times e.g. 3 times
FixedOccurencesDuration
Indicates the specified concepts is 'before' this concept in some context
is before
Indicates a justification for specified concept or context
has justification
For example, a human verifying outputs of an algorithm for correctness or impact to individuals
Automated Processing with Human Verification
Processing that is automated and involves verification of outputs by Humans
Management of credentials and their use in authorisations
Credential Management
Automated Decision Making
Processing that involves automated decision making
Automated decision making can be defined as “the ability to make decisions by technological means without human involvement.” (“Guidelines on Automated individual decision-making and Profiling for the purposes of Regulation 2016/679 (wp251rev.01)”, 2018, p. 8)
SingularScaleOfDataSubjects
Scale of data subjects considered singular i.e. a specific data subject
The consequence(s) possible or arising from failure of specified context
Consequence of Failure
Concept