accepted
Use of credentials or processes that enable using one set of credentials to authenticate multiple contexts.
Single Sign On
Personal Data Handling
A high-level Class to describe 'data handling'. This can consist of personal data being processed for a purpose, involving entities, using technical and organisational measures, applicable risks, rights, and legal basis.
The term 'special category' is based on GDPR Art.9, but should not be considered as exlusive to it. DPV considers all Special Categories to also be Sensitive, but whose use is either prohibited or regulated and therefore requires additional legal basis for justification.
modified
Sensitive Personal Data whose use requires specific legal permission or justification
Special Category Personal Data
Privacy Preserving Protocol
Use of protocols designed with the intention of provided additional guarentees regarding privacy
Anonymised Data
It is advised to carefully consider indicating data is fully or completely anonymised by determining whether the data by itself or in combination with other data can identify a person. Failing this condition, the data should be denoted as PseudonymisedData. To indicate data is anonymised only for a specified entity (e.g. within an organisation), the concept AnonymisedDataWithinScope (as subclass of PseudonymisedData) should be used instead of AnonymisedData.
Personal Data that has been (fully and completely) anonymised so that it is no longer considered Personal Data
Data subjects that consume goods or services for direct use
Consumer
Alter
to change the data without changing it into something else
For specific role-based data processing agreements, see concepts for Processors and JointDataController agreements.
Data Processing Agreement
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data
Conduct marketing through social media
Social Media
Access control applied for physical access e.g. premises or equipement
Physical Access Control Method
Status associated with Compliance with some norms, objectives, or requirements
Compliance Status
The state where consent has been given
Consent Given
An example of this state is when the individual clicks on a button, ticks a checkbox, verbally agrees - or any other form that communicates their decision agreeing to the processing of data
Network Security Protocols
Security implemented at or over networks protocols
Optimise services or activities
Service Optimization
Subclass of ServiceProvision since optimisation is usually considered part of providing services
Personnel Payment
Management and execution of payment of personnel
Was previous "Security". Prefixed to distinguish from TechOrg measures.
Enforce Security
Ensure and enforce security e.g. of data, personnel
Indicates a purpose is restricted to the specified context(s)
has context
Automation of Processing
Contextual information about the degree of automation and human involvement associated with Processing
It is difficult to provide a formal definition of automation since any and all processing may be considered automation. This concept instead is intended to explicitly signal the utilisation of automation and its extent towards some context - such as decision making, and to indicate the involvement of humans.
Specifries the method by which consent can be/has been withdrawn
sunset
Can be used to record information of how to withdraw consent, e.g. by a click to a form, in writing, etc., by logging into a system and confirm per email, or with some additional authentication, etc.
has withdrawal method
WARNING: This concept will be deprecated in future releases
Authentication using Zero-Knowledge proofs
Zero Knowledge Authentication
has data volume
Indicates the volume of data
Indicates the source or origin of data being processed
has data source
Transform
to change the form or nature of data
has applicable law
Indicates applicability of a Law
Processing Context
Context or conditions within which processing takes place
The term 'data subject' is specific to the GDPR, but is functionally equivalent to the term 'individual' and the ISO/IEC term 'PII Principle'.
The individual (or category of individuals) whose personal data is being processed
Data Subject
Vital Interest
Processing is necessary or required to protect vital interests of a data subject or other natural person
Use of Attribute Based Credentials (ABC) to perform and manage authentication
Authentication using ABC
Certification mechanisms, seals, and marks for the purpose of demonstrating compliance
Certification
Visitor
Data subjects that are temporary visitors
Non-disclosure Agreements e.g. preserving confidentiality of information
Non-Disclosure Agreement (NDA)
has indication method
Specifies the method by which an entity has indicated the specific context
Personal Data that is obtained through inference from other data
Inferred Personal Data
Inferred Data is derived data generated from existing data, but which did not originally exist within it, e.g. inferring demographics from browsing history.
Use of randomised pseudonymisation where the same elements are assigned different values in the same document or database
Document Randomised Pseudonymisation
Duration that has a fixed temporal duration e.g. 6 months
Temporal Duration
Vendor Payment
Manage payment of vendors
is residual risk of
Indicates this risk is the remaining or residual risk from applying mitigation measures or treatments to specified risk
The status or state of something
Status
Use of cryptographic methods for entities to jointly compute functions without revealing inputs
Secure Multi-Party Computation
Optimize activities and services for provider or controller
Optimisation for Controller
Organisational Measure
Organisational measures required/followed when processing data of the declared category
A broad concept representing 'data' or 'information'
Data
Personal Data
This definition of personal data encompasses the concepts used in GDPR Art.4-1 for 'personal data' and ISO/IEC 2700 for 'personally identifiable information (PII)'.
Data directly or indirectly associated or related to an individual.
The processing performed on personal data
Processing
This state can be considered a form of 'revocation' of consent, where the revocation can only be performed by the data subject. Therefore we suggest using ConsentRevoked when it is a non-data-subject entity, and ConsentWithdrawn when it is the data subject
Consent Withdrawn
The state where the consent is withdrawn or revoked specifically by the data subject and which prevents it from being further used as a valid state
Processing that involves evaluation and scoring of individuals
Evaluation and Scoring
Password Authentication
Use of passwords to perform authentication
Personnel Management
Management of personnel associated with the organisation e.g. evaluation and management of employees and intermediaries
Consent
Consent of the Data Subject for specified processing
Indicates the status of compliance of specified concept
has compliance status
Location
Location may be geographic, physical, or virtual.
A location is a position, site, or area where something is located
Advertising
Advertising is a subset of Marketing. Advertising by itself does not indicate 'personalisation' i.e. personalised ads.
Conduct advertising i.e. process or artefact used to call attention to a product, service, etc. through announcements, notices, or other forms of communication
HR is a broad concept. Its management includes, amongst others - recruiting employees and intermediaries e.g. brokers, independent representatives; payroll administration, remunerations, commissions, and wages; and application of social legislation.
Manage humans and 'human resources' within the organisation for effective and efficient operations.
Human Resources Management
The state where the temporal or contextual validity of consent has 'expired'
An example of this state is when the obtained consent has been assigned a duration - which has lapsed or 'expired', making it invalid to be used further for processing data
Consent Expired
Legal Obligation
Legal Obligation to conduct the specified processing
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data between a Data Processor and a Data (Sub-)Processor
Sub-Processor Agreement
Public Relations
Manage and conduct public relations processes. This includes creating goodwill for the organization.
Identity Verification
Verify or authorize identity
Technical_Organisational_Measures Concepts
LargeDataVolume
Data volume that is considered large within the context
Sell data or information relevant to insights obtained from analysis of data
Sell Insights from Data
Sell here means exchange, submit, or provide in return for direct or indirect compensation. Was subclass of commercial interest, changed to reflect selling something
is indicated at time
Specifies the temporal information for when the entity has indicated the specific context
to solicit or gather data from someone
Obtain
A DPIA involves determining the potential and actual impact of processing activities on individuals or groups of individuals
Data Protection Impact Assessment (DPIA)
Top class: Impact Assessment, and DPIA is sub-class
Personalise interfaces presented to the user
User Interface Personalisation
Impact that acts as or causes damages
Damage
Restrict
to apply a restriction on the processsing of specific records
An authority tasked with overseeing legal compliance for a supra-national union e.g. EU
SupraNationalAuthority
has geographic coverage
Indicate the geographic coverage (of specified context)
Procedures intended to determine effectiveness of other measures
Effectiveness Determination Procedures
has withdrawal time
Specifies the instant in time when consent was withdrawn
Indicates Recipient of Personal Data
has recipient
Represents a country outside applicable or compatible jurisdiction as outlined in law
Third Country
The purpose of processing personal data
Purpose
Geographic coverage spanning a specific environment within the locality
LocalEnvironmentScale
For example, geographic scale of an event take place in a specific building or room
Certification and Seal
Certifications, seals, and marks indicating compliance to regulations or practices
Provide assistance, resolve issues, ensure satisfaction in relation to services provided
Customer Care
Regularity and temporal span of data restoration/backup mechanisms that guarantee that data is preserved
Storage Restoration
has data controller
Indicates association with Data Controller
Law
A law is a set of rules created by government or authorities
has name
Specifies name of a legal entity
Storage Location
Location or geospatial scope where the data is stored
Decentralised Locations
Location that is spread across multiple separate areas with no distinction between their importance
Removed plural suffix for consistency
has consequence
Indicates consenquence(s) possible or arising from specified concept
Policy
A guidance document outlining any of: procedures, plans, principles, decisions, intent, or protocols.
This purpose by itself does not sufficiently and clearly indicate what the communication is about. As such, it is recommended to combine it with another purpose to indicate the application. For example, Communication of Payment.
Communication Management
Manage communication or provide means for communication e.g. to send an email notifying some information
Conduct activities and functions for organisation's governance
Organisation Governance
Creation, completion, fulfilment, or performance of a contract involving specified processing
Contract
has legal basis
Indicates use or applicability of a Legal Basis
Data subjects that purchase goods or services
Customer
note: for B2B relations where customers are organisations, this concept only applies for data subjects
An indication of 'importance' within a context
Importance
Importance can be used to express importance, desirability, relevance, or significance as a context.
Security implemented at or through virtualised environments
Virtualisation Security
An indication of 'necessity' within a context
Necessity can be used to express need, essentiality, requirement, or compulsion.
Necessity
has data protection officer
Specifices an associated data protection officer
A rule describing a process or control that directs or determines if and how an activity should be conducted
Rule
An example of this state is when a previously given consent has expired, and the individual is presented a notice regarding continuing associated processing operations - to which they agree. This state can be useful to keep track of 'reconfirmed' or 'refreshed' consent within consent records, assist notices and contextual agents to create better consenting dialogues, and assist with specific legal obligations related to subsequent consenting
Renewed Consent Given
The state where a previously given consent has been 'renewed' or 'refreshed' or 'reaffirmed' to form a new instance of given consent
Data subjects that use service(s)
User
has notice
Indicates the use or applicability of a Notice for the specified context
Subscriber
note: subscriber can be customer or consumer
Data subjects that subscribe to service(s)
Organisation Risk Management
Manage risk for organisation's activities
Anonymisation
Altering personal data irreversibly such that a data subject can no longer be identified directly or indirectly, either by the data controller alone or in collaboration with any other party
Assessment of cybersecurity capabilities in terms of vulnerabilities and effectiveness of controls
Cybersecurity Assessments
An entity that 'imports' data where importing is considered a form of data transfer
Data Importer
The EU, in particular the EDPB, uses data importing the context of cross-border data transfers/flows. These concepts are not bound by jurisdictional or geopolitical scopes within DPV and can thus be used for any notion of importing
Manage orders, payment, evaluation, and prospecting related to vendors
Vendor Management
Personal Data that is generated or brought into existence without relation to existing data i.e. it is not derived or inferred from other data
Generated Personal Data
Generated Data is used to indicate data that is produced and is not derived or inferred from other data
Location is local and entirely within a device, such as a smartphone
Within Device
Consent Revoked
An example of this state is when a Data Controller stops utilising previously obtaining consent, such as when that service no longer exists
The state where the consent is revoked by an entity other than the data subject and which prevents it from being further used as a valid state
Lawful
State of being lawful or legally compliant
Legitimate Interests of a Data Controller in conducting specified processing
Legitimate Interest of Controller
Data Subject Scale
Scale of Data Subject(s)
Secondary Importance
Indication of 'secondary' or 'minor' or 'auxiliary' importance
An authority with the power to create or enforce laws, or determine their compliance.
Authority
MaintainCreditCheckingDatabase
Maintain Credit Checking Database
Training methods that are intended to provide professional knowledge and expertise
Professional Training
Entities that receive personal data
A recipient of personal data can be used to indicate any entity that receives personal data. This can be a Third Party, Processor (GDPR), or even a Controller.
Recipient
NonGovernmentalOrganisation
An organisation not part of or independent from the government
Uninformed Consent
Consent that is uninformed i.e. without requirement to provide sufficient information to make a consenting decision
is before
Indicates the specified concepts is 'before' this concept in some context
An authority tasked with overseeing legal compliance for a nation
NationalAuthority
Non-Public Data Source
A source of data that is not publicly accessible or available
AcademicScientificOrganisation
Organisations related to academia or scientific pursuits e.g. Universities, Schools, Research Bodies
The Data Privacy Vocabulary (DPV) provides terms (classes and properties) to represent information about legally compliant personal data handling, which includes purposes, processing, personal data, technical and organisational measures.
Data Privacy Vocabulary
An entity that 'exports' data where exporting is considered a form of data transfer
Data Exporter
The EU, in particular the EDPB, uses data exporter the context of cross-border data transfers/flows. These concepts are not bound by jurisdictional or geopolitical scopes within DPV and can thus be used for any notion of exporting
Location is local and entirely within a virtual environment, such as a shared network directory
Within Virtual Environment
Use of crytography for authentication
Cryptographic Authentication
Symmetric Cryptography
Use of crytography where the same keys are utilised for encryption and descryption of information
Specific or special categories and instances of legal basis intended for justifying data transfers
Data Transfer Legal Basis
Contextually relevant information not possible to represent through other core concepts
Context
Data Anonymisation Technique
Use of anonymisation techniques that reduce the identifiability in data
Deliver goods and services requested or asked by consumer
Delivery of Goods
State where an audit is determined as being required but has not been conducted
Audit Required
Procedures related to management of incidents
Incident Management Procedures
Optimize interfaces presented to the user
Optimise User Interface
Management of usage, which is intended to be broader than access control and may cover trust, digital rights, or other relevant controls
Usage Control
Encryption
Technical measures consisting of encryption
has activity status
Indicates the status of activity of specified concept
Transfer
to move data from one place to another
NonConformant
State of being non-conformant
Service Order Management
Manage invoicing, orders, and records in relation to services
Asset Management Procedures
Procedures related to management of assets
Processing that involves decision making
Decision Making
Security Role Procedures
Procedures related to security roles
A region consisting of urban population and commerce
City
Representative
A representative of a legal entity
A notice is an artefact for providing information, choices, or controls
Notice
State of an activity being proposed or planned i.e. yet to occur
Activity Proposed
Entity
A human or non-human 'thing' that constitutes as an entity
has recipient data controller
Indiciates inclusion or applicability of a Data Controller as a Recipient of persona data
Audit Status
Status associated with Auditing or Investigation
Consent Status Valid for Processing
Practically, given consent is the only valid state for processing
States of consent that can be used as valid justifications for processing data
GuidelinesPrinciple
Guidelines or Principles regarding processing and operational measures
Indication of 'primary' or 'main' or 'core' importance
Primary Importance
Consent that is expressed through an action intended to convey a consenting decision
Expressed Consent
Expressed consent requires the individual take a specific and unambigious action that directly indicates their consent. This action may be a part of other processes such as setting preferences, or agreeing to a contract, or other matters not relating to consent. An example of expressed consent is interacting with a checkbox within a dashboard or clicking a button on a web form
Indicates the frequency with which something takes place
has frequency
The right(s) applicable, provided, or expected.
Right
A 'right' is a legal, social, or ethical principle of freedom or entitlement which dictate the norms regarding what is allowed or owed.. Rights as a concept encompass a broad area of norms and entities, and are not specific to Individuals or Data Protection / Privacy. For individual specific rights, see dpv:DataSubjectRight
Specifies the instant in time when consent was given
has provision time
Create Personalised Recommendations
Create and provide personalised recommendations
IndustryConsortium
A consortium established and comprising on industry organisations
Indication of 'required' or 'necessary'
Required
Frequency
The frequency or information about periods and repetitions in terms of recurrence.
This field can be used to proivde a justification why the provision was provided by another DataSubject or legal entity, e.g. declariing the relationship (parent, guardian), in combination with the field provisionBy
Specifies the justification for entity providing consent
has provision by justification
Records of personal data processing, whether ex-ante or ex-post
Data Processing Records
A political union of two or more countries with an establishment of common authority
SupraNationalUnion
changed
Indicates the logic used in processing such as for automated decision making
has algorithmic logic
Likelihood
Likelihood can be expressed in a subjective manner, such as 'Unlikely', or in a quantitative manner such as "Twice in a Day" (frequency per period). The suggestion is to use quantitative values, or to associate them with subjective terms used so as to enable accurate interpretations and interoperability. See the concepts related to Frequency and Duration for possible uses as a combination to express Likelihood.
The likelihood or probability or chance of something taking place or occuring
State of an activity that has completed i.e. is fully in the past
Activity Completed
Privacy by Default
Practices regarding selecting appropriate data protection and privacy measures as the 'default' in an activity or service
Organisation Compliance Management
Manage compliance for organisation in relation to internal policies
Conduct research in a commercial setting or with intention to commercialise e.g. in a company or sponsored by a company
Commercial Research
has contact
Specifies contact details of a legal entity such as phone or email
Lawfulness (alt title: LegalComplianceStatus)
Status associated with being lawful
The term NonPersonalData is provided to distinguish between PersonalData and other data, e.g. for indicating which data is regulated by privacy laws. To specify personal data that has been anonymised, the concept AnonymisedData should be used.
Non-Personal Data
Data that is not Personal Data
Conduct or enforce access control
Was previously "Access Control". Prefixed to distinguish from Technical Measure.
Enforce Access Control
Scale of data subjects considered singular i.e. a specific data subject
SingularScaleOfDataSubjects
The specifics for what information should be provided or made available will depend on the context, use-case, or relevant legal requirements
Informed Consent
Consent that is informed i.e. with the requirement to provide sufficient information to make a consenting decision
Governance Procedures
Procedures related to governance (e.g. organisation, unit, team, process, system)
Within Physical Environment
Location is local and entirely within a physical environment, such as a room
Encryption of data in transit e.g. when being transferred from one location to another, including sharing
Encryption in Transfer
Service Personalization
Personalise services or product or activities
Subclass of ServiceProvision since personalisation is usually considered part of providing services
A simple pseudonymisation method where identifiers are substituted by a number chosen by a monotonic counter
Monotonic Counter Pseudonymisation
For example, a human verifying outputs of an algorithm for correctness or impact to individuals
Automated Processing with Human Review
Processing that is automated and involves review by Humans
Document Security
Security measures enacted over documents to protect against tampering or restrict access
Indicates association with Personal Data
has personal data
Status associated with conformance to a standard, guideline, code, or recommendation
Conformance Status
Mentally Vulnerable Data Subject
Data subjects that are considered mentally vulnerable
Duration or temporal limitation on storage of personal data
Storage Duration
Can be used to record information of how consent was provided e.g. by a click to a form, in writing, etc., by logging into a system and confirm per email, or with some additional authentication, etc.
has provision method
Specifies the method by which consent was provisioned or provided
is explicit
The conditions for what is considered 'explicit consent' differ by norms and laws.
Specifies consent is 'explicit'
Human Involvement for Verification
Human involvement for the purposes of verification of a system, its operations, inputs, or outputs
Customer Order Management
Manage customer orders
Monitoring of activities including assessing whether they have been successfully initiated and completed
Activity Monitoring
Right Exercise
The exercising of an active right
Specifying applicability or inclusion of a rule within specified context
has rule
Indiciates inclusion or applicability of a LegalEntity in the role of Data Exporter
has data exporter
An authority tasked with overseeing legal compliance regarding privacy and data protection laws.
Data Protection Authority
Indicates an outcome of specified concept or context
has outcome
Legitimate Interests of the Data Subject in conducting specified processing
Legitimate Interest of Data Subject
Carrying out an impact assessment regarding privacy risks
Privacy Impact Assessment
Create and provide product recommendations e.g. suggest similar products
Create Product Recommendations
A source of data that is publicly accessible or available
The term 'Public' is used here in a broad sense. Actual consideration of what is 'Public Data' can vary based on several contextual or jurisdictional factors such as definition of open, methods of access, permissions and licenses.
Public Data Source
Utilisation of differential privacy where information is shared as patterns or groups to withold individual elements
Differential Privacy
Compliance Indeterminate
State where the status of compliance has not been fully assessed, evaluated, or determined
Sensitivity' is a matter of context, and may be defined within legal frameworks. For GDPR, Special categories of personal data are considered a subset of sensitive data. To illustrate the difference between the two, consider the situation where Location data is collected, and which is considered 'sensitive' but not 'special'. As a probable rule, sensitive data require additional considerations whereas special category data requires additional legal basis / justifications.
Sensitive Personal Data
Personal data that is considered 'sensitive' in terms of privacy and/or impact, and therefore requires additional considerations and/or protection
Location is remote i.e. not local
Remote Location
Removal of sensitive information from a data or document
Data Redaction
Legal Agreement
A legally binding agreement
Source' is the direct point of data collection; 'origin' would indicate the original/others points of where the data originates from.
The source or origin of data
Data Source
has technical and organisational measure
Indicates use or applicability of Technical or Organisational measure
Geographic coverage spanning a nation
NationalScale
Geographic coverage spanning a specific region or regions
RegionalScale
Indicates impact(s) possible or arising as consequences from specified concept
has impact
Participant
Data subjects that participate in some context such as volunteers in a function
Policy regarding security of information
Information Security Policy
has withdrawal by justification
Specifies the justification for entity withdrawing consent
This field can be used to proivde a justification why the weithdrawal was done by another DataSubject or legal entity, e.g. declariing the relationship (parent, guardian), in combination with the field withdrawalBy
Authentication using PABC
Use of Privacy-enhacing Attribute Based Credentials (ABC) to perform and manage authentication
Duration that is (known or intended to be) open ended or without an end
Endless Duration
Erase
to delete data
Manage claims, including repayment of monies owed
Customer Claims Management
Remove
to destruct or erase data
has personal data handling
Indicates association with Personal Data Handling
Data subjects that are immigrants (for a jurisdiction)
Immigrant
The term 'technology' is inclusive of technologies, processes, and methods.
Indicates implementation details such as technologies or processes
is implemented using technology
Security Knowledge Training
Training intended to increase knowledge regarding security
A 'child' is a natural legal person who is below a certain legal age depending on the legal jurisdiction.
The legality of age defining a child varies by jurisdiction. In addition, 'child' is distinct from a 'minor'. For example, the legal age for consumption of alcohol can be 21, which makes a person of age 20 a 'minor' in this context. In other cases, 'minor' and 'child' are used interchangeably to refer to a person below some legally defined age.
Child
Storage Condition
Conditions required or followed regarding storage of data
Use of algorithms that are intended to be secure against cryptanalytic attack by a quantum computer
Post-Quantum Cryptography
Duration that takes place until a specific event occurs e.g. Account Closure
Until Event Duration
Data subjects that are citizens (for a jurisdiction)
Citizen
A region is an area or site that is considered a location
Region
Optimize activities and services for consumer or user
Optimisation for Consumer
to combine, compare, or match data from different sources
Match
Conduct marketing in relation to organisation or products or services e.g. promoting, selling, and distributing
Marketing
Was commercial interest, changed to consider Marketing a separate Purpose category by itself
Direct Marketing
Conduct direct marketing i.e. marketing communicated directly to the individual
Compliance Monitoring
Monitoring of compliance (e.g. internal policy, regulations)
Detect and prevent fraud
Fraud Prevention and Detection
Collected Personal Data
To indicate the source of data, use the DataSource concept with the hasDataSource relation
Personal Data that has been collected from another source such as the Data Subject
is exercised at
Indicates context or information about exercising a right
Human Involvement for Oversight
Human involvement for the purposes of having oversight over a system, its operations, inputs, or outputs
Vital Interest of Natural Person
Processing is necessary or required to protect vital interests of a natural person
Indicates applicability of specified jurisdiction
has jurisdiction
Indicates the severity associated with a concept
has severity
Fixed Location
Location that is fixed i.e. known to occur at a specific place
to gather data from someone
Collect
Account Management
Create, maintain, and manage accounts for purposes of providing services
MultiNationalScale
Geographic coverage spanning multiple nations
Practices and policies regarding training of staff members
Staff Training
A procedure or process that reviews the correctness and validity of other measures and processes
Review Procedure
Data subjects that receive medican attention, treatment, care, advice, or other health related services
Patient
Processing that takes place at medium scales (as specified by some criteria)
Medium Scale Processing
Data published by Data Subject
Data is published by the data subject
This refers to where that data was made publicly available by the data subject. An example of this would be a social media profile that the data subject has made publicly accessible.
Location that is or can be accessed by the public
Publicly Accessible Location
Automated decision making can be defined as “the ability to make decisions by technological means without human involvement.” (“Guidelines on Automated individual decision-making and Profiling for the purposes of Regulation 2016/679 (wp251rev.01)”, 2018, p. 8)
Automated Decision Making
Processing that involves automated decision making
Code of Conduct
A set of rules or procedures outlining the norms and practices for conducting activities
Calculating or determining the likelihood of impact of an existing or proposed process, which can involve risks or detriments.
Impact Assessment
has permission
Specifying applicability or inclusion of a permission rule within specified context
Scale
A measurement along some dimension
Scales are subjective concepts that need to be defined and interpreted within the context of their application. For example, what would be small within one context could be large within another.
Security implemented at or over web-based protocols
Web Security Protocols
Tied to compliance processes and documents, decide how to specify those
A ROPA is a document maintained by Data Controllers detailing processing activities carried out under their responsibility
Register of Processing Activities
International Organisation
An organisation and its subordinate bodies governed by public international law, or any other body which is set up by, or on the basis of, an agreement between two or more countries
Location Fixture
The fixture of location refers to whether the location is fixed
For example, a human watching metrics to ensure correctness of procedural values and outputs as processing takes place
Automated Processing with Human Oversight
Processing that is automated and involves oversight by Humans
Changed from "violation of compliance" for consistency with other terms
State where compliance cannot be achieved due to requirements being violated
Compliance Violation
Data subjects that are not citizens (for a jurisdiction)
NonCitizen
to make data known
Disclose
Educational Training
Training methods that are intended to provide education on topic(s)
A human or non-human 'thing' that constitutes as an entity and which is recognised and defined in law
Legal Entity
Authentication Protocols
Protocols involving validation of identity i.e. authentication of a person or information
has obligation
Specifying applicability or inclusion of an obligation rule within specified context
Asymmetric Cryptography
Use of public-key cryptography or asymmetric cryptography involving a public and private pair of keys
The definition of country is not intended for political interpretation. DPVCG welcomes alternate definitions based in existing sources with global scope, such as UN or ISO.
Country
A political entity indicative of a sovereign or non-sovereign territorial state comprising of distinct geographical areas
Assess
to assess data for some criteria
Measures intended to mitigate, minimise, or prevent risk.
Risk Mitigation Measure
State of being fully compliant
Compliant
Guardian(s) of Data Subject
Guardian(s) of data subjects such as children
Practices regarding incorporating data protection and privacy in the design of information and services
Privacy by Design
Consent Status
States are useful as information artefacts to implement them in controlling processing, and to reflect the process and flow of obtaining and maintaining consent. For example, a database table that stores consent states for specific processing and can be queried to obtain them in an efficient manner. States are also useful in investigations to determine the use and validity of consenting practices
The state or status of 'consent' that provides information reflecting its operational status and validity for processing data
to make a record (especially media)
Record
The systematic application of management policies, procedures and practices to the activities of communicating, consulting, establishing the context, and identifying, analysing, evaluating, treating, monitoring, and reviewing risk
Risk Management Process
Student
Data subjects that are students
Policy regarding repetition or renewal of existing certification(s)
Regularity of Re-certification
Contract Performance
Fulfilment or performance of a contract involving specified processing
Copy
to produce an exact reprodution of the data
Data Controller
The individual or organisation that decides (or controls) the purpose(s) of processing personal data.
The terms 'Controller' is usually the more common form of indicating a Data Controller. In ISO/IEC the term 'PII Controller' is used.
Procedures associated with assessing, implementing, and evaluating security
Security Procedure
An entity within or authorised by an organisation to monitor internal compliance, inform and advise on data protection obligations and act as a contact point for data subjects and the supervisory authority.
Data Protection Officer
Geographic Coverage
Indicate of scale in terms of geographic coverage
A form of documentation providing reaosns, explanations, or justifications
Justification
Network Proxy Routing
Use of network routing using proxy
Not Required
Indication of neither being required nor optional i.e. not relevant or needed
Audit Requested
State of an audit being requested whose outcome is not yet known
A safeguard is a precautionary measure for the protection against or mitigation of negative effects
This concept is relevant given the requirement to assert safeguards in cross-border data transfers
Safeguard
The consequence(s) possible or arising from failure of specified context
Consequence of Failure
has withdrawal by
Specifies the entity that withdrew consent
Normally this would be the dataSubject, but in some exceptional cases, the consent might be withdraawn on behalf by someone else, e.g. parents of minors.
State of being conditionally approved through the audit
Audit Conditionally Approved
A "conditional approval" is intended to reflect states where the audit has identified further changes which must be implemented before considering the audit has been 'passed', without requiring another audit to validate them. This is distinct from the case where an audit has state 'rejected', which means changes must be made and submitted for review. The requirements of a 'conditional acceptance' are expected to be minor or not significant enough to warrant another audit to review them.
The consequence(s) possible or arising as a side-effect of specified context
Consequence as Side-Effect
is implemented by entity
The use of 'entity' is inclusive of entities (e.g. Data Processor) as well as 'agent' (e.g. DPO). For indicating technological implementation, the property isImplementedByTechnology should be used.
Indicates implementation details such as entities or agents
Federated Locations
Location that is federated across multiple separate areas with designation of a primary or central location
Indicates association with Data Subject
has data subject
An organisation managed or part of government
GovernmentalOrganisation
Technical Measure
Technical measures required/followed when processing data of the declared category
Use of Synthetic Data
Use of synthetic data to preserve privacy, security, or other effects and side-effects
Client
Data subjects that are clients or recipients of services
Maintain registry of shareholders, members, or partners for governance, administration, and management functions
Members and Partners Management
to organize data for arranging or classifying
Organise
Trusted Execution Environments
Use of cryptographic methods to restrict access and execution to trusted parties and code within a dedicated execution environment
State where information about consent is not available or is unknown
Consent Unknown
Consent states can be unknown, for example, when information is not available, or cannot be trusted, or is known to be inaccurate
A Record of Consent or Consent related activities
Consent Record
Implied consent is expected to also be Informed Consent. An example is a CCTV notice outside a monitored area that informs the individuals that by walking in they would be consenting to the use of camera for surveillance.
Implied Consent
Consent that is implied indirectly through an action not associated solely with conveying a consenting decision
Data volume that is considered sporadic or sparse within the context
SporadicDataVolume
is authority for
Indicates area, scope, or applicability of an Authority
Personal Data that is obtained or derived from other data
Derived Personal Data
Derived Data is data that is obtained through processing of existing data, e.g. deriving first name from full name. To indicate data that is derived but which was not present or evident within the source data, InferredPersonalData should be used.
A scheme within the risk management framework specifying the approach, the management components, and resources to be applied to the management of risk
Risk Management Plan
Registration and Authentication
Register, authenticate, and identify users or agents in context of a service
A policy or statement of the overall intentions and direction of an organisation related to risk management
Risk Management Policy
Asylum Seeker
Data subjects that are asylum seekers
Processing necessary or authorised through the official authority granted to or vested in the Data Controller
Official Authority of Controller
Specifies representative of the legal entity
has representative
The exact definition of what constitutes "scale" depends on use of jurisdictional, domain-specific, or other forms of externally defined criterias. Where possible, this should be reflected by extending the scales provided with the appropriate context.
Processing Scale
Scale of Processing
Examples (non-exhaustive) include: Algorithm, Process, Method, Skill, Database, Cookies, Server, Device
Technology
The technology, technological implementation, or any techniques, skills, methods, and processes used or applied
Security implemented over a mobile platform
Mobile Platform Security
Compliance Unknown
State where the status of compliance is unknown
Protocols or plans for backing up of data
Data Backup Protocols
Impact(s) that acts as or causes benefits
Benefit
Indicates inclusion or applicability of a Joint Data Controller
has joint data controllers
State of an activity that was occuring in the past, and has been halted or paused or stoped
Activity Halted
LocalityScale
For example, geographic scale of a city or an area within a city
Geographic coverage spanning a specific locality
has residual risk
Indicates the associated risk is the remaining or residual risk from applying mitigation measures or treatments to this risk
Frequency where occurences are singular i.e. they take place only once
Singular Frequency
Specifying applicability or inclusion of a prohibition rule within specified context
has prohibition
Audit Approved
State of being approved through the audit
For example, an algorithm that takes inputs from humans and performs operations based on them
Automated Processing with Human Input
Processing that is automated and involves inputs by Humans
Processing that is partially automated or semi-automated
For example, a series of distinct processing operations that are automated individually or have some human involvement
Partially Automated Processing
MediumDataVolume
Data volume that is considered medium i.e. neither large nor small within the context
Security Method
Methods that relate to creating and providing security
to transform or publish data to be used
Make Available
Record Management
Manage creation, storage, and use of records relevant to operations, events, and processes e.g. to store logs or access requests
Activity Status
Status associated with activity operations and lifecycles
Management of credentials and their use in authorisations
Credential Management
Create and provide personalised benefits for a service
Personalised Benefits
Internal Resource Optimisation
Optimize internal resource availability and usage for organisation
Manage and provide technical processes and functions necessary for delivering services
Technical Service Provision
Explicitly expressed consent is a more specific form of Expressed consent where the action taken must 'explicitly' relate to only the consent decision. Expressed consent where the consenting is part of other matters therefore cannot satisfy the requirements of explicitly expressed consent. An example of explicit action expressing the consenting decision is a button on a web form where the form only relates to consent, or it is accompanied with suitable text that reiterates what the consenting decision is about
Explicitly Expressed Consent
Consent that is expressed through an explicit action solely conveying a consenting decision
Share
to give data (or a portion of it) to others
to remove data for some criteria
Screen
Active Right
The right(s) applicable, provided, or expected that need to be (actively) exercised
A seal or a mark indicating proof of certification to some certification or standard
Seal
Indicates applicability or relevance of a 'third country'
has third country
Communicate with customers for assisting them, resolving issues, ensuring satisfaction in relation to services provided
Communication for Customer Care
Research and Development
Conduct research and development for new methods, products, or services
Algorithmic Logic
Algorithmic Logic is intended as a broad concept for explaining the use of algorithms and automated decisions making within Processing. To describe the actual algorithm, see the Algorithm concept.
The algorithmic logic applied or used
Create and provide customisation based on attributes and/or needs of person(s) or context(s).
Personalisation
This term is a blanket purpose category for indicating personalisation of some other purpose, e.g. by creating a subclass of the other concept and Personalisation
Synthetic Data
Synthetic data reffers to artificially created data such that it is intended to resemble real data (personal or non-personal), but does not refer to any specific identified or identifiable individual, or to the real measure of an observable parameter in the case of non-personal data
Passive Right
The right(s) applicable, provided, or expected that are always (passively) applicable
Indicates the thing (e.g. plan, process, or entity) affected by an impact
has impact on
Sell Products to Data Subject
Was subclass of commercial interest, changed to reflect selling something
Sell products or services to the user, consumer, or data subjects
Vital Interest of Data Subject
Processing is necessary or required to protect vital interests of a data subject
to use data
Use
Represents a safeguard used for data transfer. Can include technical or organisational measures.
Safeguard for Data Transfer
Processing that involves use of innovative and new technologies
Innovative Use of New Technologies
Use of cryptographic methods to perform tasks
Cryptographic Methods
to filter or keep data for some criteria
Filter
Indicate a risk is mitigated by specified measure
is mitigated by measure
Policy for logging of information
Logging Policies
Random Location
Location that is random or unknown
has identifier
Indicates an identifier associated for identification or reference
Systematic Monitoring
Processing that involves systematic monitoring of individuals
Frequency where occurences are sporadic or infrequent or sparse
Sporadic Frequency
Encryption of data when it is being used
Encryption in Use
has expiry
Generic property specifying when or under which condition(s) the consent will expire
Use of cryptographic methods to restrict access and execution to trusted parties and code
Trusted Computing
Use of cryptographic methods to authenticate messages
Message Authentication Codes (MAC)
Data Protection Training
Training intended to increase knowledge regarding data protection
Secret Sharing Schemes
Use of secret sharing schemes where the secret can only be reconstructed through combination of sufficient number of individuals
Consultation with Data Subject
Consultation with data subject(s) or their representative(s)
Indicates information about duration
has duration
has right
Indicates use or applicability of Right
Third Party Security Procedures
Procedures related to security associated with Third Parties
Procedure where the background of an entity is assessed to identity vulnerabilities and threats due to their current or intended role
Background Checks
Personal Data that has been collected through observation of the Data Subject(s)
Observed Personal Data
Adult
A natural person that is not a child i.e. has attained some legally specified age of adulthood
parent property for controller, processor, data subject, authority, etc.?
Indicates inclusion or applicability of an entity to some concept
has entity
Information Flow Control
Use of measures to control information flows
Disclose by Transmission
to disclose data by means of transmission
Technical and Organisational Measure
The Technical and Organisational measures used.
A general term reflecting a company or a business or a group acting as a unit
Organisation
to modify the data, often rewritten into a new form for a new use
Adapt
to modify or change data
Modify
Indiciates inclusion or applicability of a Third Party as a Recipient of persona data
has recipient third party
An example of this state is when a notice has been presented to the individual but they have not made a decision
State where a request for consent has been made and is awaiting a decision
Consent Requested
Data Processor
A ‘processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
Legal Compliance
Fulfilment of obligations or requirements towards achieving compliance with law or regulations
Indicates the status of audit associated with specified concept
has audit status
SmallDataVolume
Data volume that is considered small or limited within the context
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data between Controllers within a Joint Controllers relationship
Joint Data Controllers Agreement
Parent(s) of Data Subject
Parent(s) of data subjects such as children
Unlawful
State of being unlawful or legally non-compliant
Scale of data subjects considered large within the context
LargeScaleOfDataSubjects
Fixed Multiple Locations
Location that is fixed with multiple places e.g. multiple cities
To indicate the membership, hasDataController may be used
A group of Data Controllers that jointly determine the purposes and means of processing
Joint Data Controllers
Improve robustness and resilience of services
Increase Service Robustness
Scoring of Individuals
Processing that involves scoring of individuals
Duration that has a fixed end date e.g. 2022-12-31
Until Time Duration
Records of activities within some context such as maintainence tasks or governance functions
Records of Activities
State of the lawfulness not being known
Lawfulness Unknown
An authority tasked with overseeing legal compliance for a region
RegionalAuthority
Wireless Security Protocols
Security implemented at or over wireless communication protocols
Privacy Notice
Represents a notice or document outlining information regarding privacy
Authorisation Protocols
Protocols involving authorisation of roles or profiles to determine permission, rights, or privileges
Multi-Factor Authentication (MFA)
An authentication system that uses two or more methods to authenticate
to adjust the data to be in relation to another data
Align
Enter Into Contract
Processing necessary to enter into contract
Maintain Credit Rating Database
MaintainCreditRatingDatabase
Combine
to join or merge data
Third-Party Agreement
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data between a Data Controller or Processor and a Third Party
Data volume that is considered singular i.e. a specific instance or single item
SingularDataVolume
Provide service or product or activities
Service Provision
Consultation with Data Subject Representative
Consultation with representative of data subject(s)
Trusted Third Party Utilisation
Utilisation of a trusted third party to provide or carry out a measure
to infer data from existing data
Infer
Infer indicates data that is derived without it being present or obtainable from existing data. For data that is presented, and is 'extracted' or 'obtained' from existing data, see Derive.
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data between a Data Controller and a Data Processor
Controller-Processor Agreement
has consent notice
The actual notice that the Data Subject received to consent to, either a text or link to a document, which should be usable to decide whether the form or consent was compliant to legislation, e.g. documenting how the user has been informed about rights and implications (such as, right to data portability,right to recitffy, right to erasure, right to restrict processing, right to object, rights regarding automated decision making or profiling, processors, third parties, sub-processors, outside-EEA transfers, automated decision-making, or other necessary details of the privacy-policy). Can be TextOrDocumentOrURI.
Specifies the notice provided in context of consent
State where an audit is determined as not being required
Audit Not Required
has likelihood
Indicates the likelihood associated with a concept
Move
to move data from one location to another including deleting the original copy
Asymmetric Encryption
Use of asymmetric cryptography to encrypt data
Personal Data that has undergone a pseudonymisation process or a partial (incomplete) anonymisation process such that it is still considered Personal Data
Pseudonymised Data
Impact Assessment for conducting data transfers
Data Transfer Impact Assessment
Consent Notice
A Notice for information provision associated with Consent
Data subjects that are considered elderly (i.e. based on age)
Elderly Data Subject
Profiling
to create a profile that describes or represents a person
Use of Homomorphic encryption that permits computations on encrypted data without decrypting it
Homomorphic Encryption
Create and provide personalised advertising
Personalised Advertising
Legitimate Interest Assessment
Indicates an assessment regarding the use of legitimate interest as a lawful basis by the data controller
is indicated by
Specifies entity who indicates the specific context
Impact that acts as or causes harms
Harm
has consent status
Specifies the state or status of consent
Create Event Recommendations
Create and provide personalised recommendations for events
has expiry time
Specifies the expiry time or duration for consent
The state where consent has been refused
An example of this state is when the individual clicks on a 'disagree' or 'reject' or 'refuse' button, or leaves a checkbox unticked
Consent Refused
Specifies the indicated entity is responsible within some context
has responsible entity
Indicates information about storage condition
has storage condition
Optional
Indication of 'optional' or 'voluntary'
Human Involvement for Input
Human involvement for the purposes of providing inputs
isInstanceOf
Consultation
Consultation is a process of receiving feedback, advice, or opinion from an external agency
Processing that takes place at large scales (as specified by some criteria)
The exact definition of what constitutes "large scale" depends on use of jurisdictional, domain-specific, or other forms of externally defined criterias. Where possible, this should be reflected by extending this term with the appropriate context.
Large Scale Processing
Location Locality
Locality refers to whether the specified location is local within some context, e.g. for the user
Data Sanitisation Technique
Cleaning or any removal or re-organisation of elements in data based on selective criteria
Volume or Scale of Data
Data Volume
A set of rules or guidelines outlining criterias for design
Design Standard
A human
Natural Person
has authority
Indicates applicability of authority for a jurisdiction
Customer Management
Manage past, current, and future customers
Duration that takes place a fixed number of times e.g. 3 times
Fixed Occurences Duration
HugeDataVolume
Data volume that is considered huge or more than large within the context
has expiry condition
Specifies the condition or event that determines the expiry of consent
Can be TextOrDocumentOrURI
has data processor
Indiciates inclusion or applicability of a Data Processor
Derive indicates data is present or obtainable from existing data. For data that is created without such existence, see Infer.
to create new derivative data from the original data
Derive
Methods which restrict access to a place or resource
Access Control Method
Destruct
to process data in a way it no longer exists or cannot be repaired
Organisational Unit
Entity within an organisation that does not constitute as a separate legal entity
Indicates association with Purpose
has purpose
Improve Existing Products and Services
Improve existing products and services
Customer Solvency Monitoring
Monitor solvency of customers for financial diligence
has data importer
Indiciates inclusion or applicability of a LegalEntity in the role of Data Importer
Disaster Recovery Procedures
Procedures related to management of disasters and recovery
Contractual Terms
Contractual terms governing data handling within or with an entity
Indicates associated with Data (may or may not be personal)
has data
State where a request for consent has been deferred without a decision
An example of this state is when the individual closes or dismisses a notice without making a decision. This state is intended for making the distinction between a notice being provided (as a consent request) and the individual interacting with the notice without making a decision - where the 'ignoring of a notice' is taken as consent being neither given nor refused
Consent Request Deferred
Local Location
Location is local
has policy
Indicates policy applicable or used
Impact
The impact(s) possible or arising as a consequence from specified context
Impact is a stronger notion of consequence in terms of influence, change, or effect on something e.g. for impact assessments
Encryption at Rest
Encryption of data when being stored (persistent encryption)
SmallScaleOfDataSubjects
Scale of data subjects considered small or limited within the context
State of non-compliance where objectives have not been met, but have not been violated
Non Compliant
Changed from not compliant for consistency in commonly used terms
Use of cryptographic methods to retrieve a record from a system without revealing which record is retrieved
Private Information Retrieval
Sell Data to Third Parties
Sell data or information to third parties
Indicates the scale of data subjects
has data subject scale
Consultation with an authority or authoritative entity
Consultation with Authority
State of not being approved or being rejected through the audit
Audit Rejected
A rule describing a permission to perform an activity
Permission
has processing automation
Indicates the use or extent of automation associated with processing
has human involvement
Indicates Involvement of humans in processing such as within automated decision making process
Human involvement is also relevant to 'human in the loop'
Location that is not or cannot be accessed by the public and is controlled as a private space
Private Location
Fully Automated Processing
Processing that is fully automated
Legitimate Interests of a Party as justification for specified processing
Legitimate Interest
Use of measures to detect intrusions and other unauthorised attempts to gain access to a system
Intrusion Detection System
Cloud Location
Location that is in the 'cloud' i.e. a logical location operated over the internet
Authorisation Procedure
non-technical authorisation procedures: How is it described on an organisational level, who gets access to the data
Procedures for determining authorisation through permission or authority
to arrange data according to a structure
Structure
has status
Indicates the status of specified concept
Consult
to consult or query data
The duration or temporal limitation
Duration
Data Sub-Processor
sub-processor' is a commonly used term similar to 'sub-contractor' and does not have a specific legal definition
A 'sub-processor' is a processor engaged by another processor
Risk Levels can be defined as a combination of different characteristics. For example, ISO 31073:2022 defines it as a combination of consequences and their likelihood. Another example would be the Risk Matrix where Risk Level is defined as a combination of Likelihood and Severity associated with the Risk.
Risk Level
The magnitude of a risk expressed as an indication to aid in its management
NonProfitOrganisation
An organisation that does not aim to achieve profit as its primary goal
Specifies the entity that provisioned or provided consent
has provision by
Normally this would be the dataSubject, but in some exceptional cases, the consent might be given on behalf by someone else, e.g. parents of minors.
Retrieve
to retrieve data, often in an automated manner
The rights applicable or provided to a Data Subject
Based on use of definitions, the notion of 'Data Subject Right' can be equivalent to 'Individual Right' or 'Right of a Person'
Data Subject Right
Transmit
to send out data
State of an activity occuring in continuation i.e. currently ongoing
Activity Ongoing
to come into possession or control of the data
Acquire
Vendor Records Management
Manage orders related to vendors
Fully Randomised Pseudonymisation
Use of randomised pseudonymisation where the same elements are assigned different values each time they occur
Anonymise
to irreversibly alter personal data in such a way that an unique data subject can no longer be identified directly or indirectly or in combination with other data
Identity Management Method
Management of identity and identity-based processes
Pseudonymisation means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person;
Pseudonymisation
Impact that acts as or causes detriments
Detriment
to query or make enquiries over data
Query
Consent Invalidated
The state where consent has been deemed to be invalid
An example of this state is where an investigating authority or a court finds the collected consent did not meet requirements, and 'invalidates' both prior and future uses of it to carry out processing
Data subjects that apply for jobs or employments
JobApplicant
Legitimate Interest of Third Party
Legitimate Interests of a Third Party in conducting specified processing
Variable Location
Location that is known but is variable e.g. somewhere within a given area
States of consent that cannot be used as valid justifications for processing data
Consent Status Invalid for Processing
This identifies the stages associated with consent that should not be used to process data
Indicates applicability of specified country
has country
Consultation with DPO
Consultation with Data Protection Officer(s)
The Legal basis used to justify processing of personal data
Legal Basis
Legal basis (plural: legal bases) are defined by legislations and regulations, whose applicability is usually restricted to specific jurisdictions.
Third Party
A ‘third party’ means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and people who, under the direct authority of the controller or processor, are authorised to process personal data.
has risk
Indicates applicability of Risk
Indicates applicability of Risk for this concept
Penetration Testing Methods
Use of penetration testing to identity weaknessess and vulnerabilities through simulations
Processing that takes place at small scales (as specified by some criteria)
Small Scale Processing
has organisational measure
Indicates use or applicability of Organisational measure
Use of HMAC where message authentication code (MAC) utilise a cryptographic hash function and a secret cryptographic key
Hash-based Message Authentication Code (HMAC)
Geographic coverage spanning the entire globe
GlobalScale
to replace personal identifiable information by artificial identifiers
Pseudonymise
Scope
Indication of the extent or range or boundaries associated with(in) a context
An organisation that aims to achieve profit as its primary goal
ForProfitOrganisation
Conduct analysis and reporting related to usage of services or products
Service Usage Analytics
Was "UsageAnalytics", prefixed with Service to better reflect scope
Continous Frequency
Frequency where occurences are continous
Anti-Terrorism Operations
Detect, prevent, mitigate, or otherwise act on anti-terrorism activities
Sell here means exchange, submit, or provide in return for direct or indirect compensation.
Sell products or services
Sell Products
Detect and prevent or mitigate money laundering
Counter Money Laundering
Scale of data subjects considered sporadic or sparse within the context
SporadicScaleOfDataSubjects
has location
Indicates information about location
to obtain data through observation
Observe
Deletion or Erasure of data including any deletion guarantees
Storage Deletion
has range
Payment
Process payment transactions in relation to service
A rule describing a prohibition to perform an activity
Prohibition
Indicates the purpose is associated with activities in the indicated (Economic) Sector(s)
has sector
Removal of identity or information to reduce identifiability
De-Identification
Impact that acts as or causes material damages
Material Damage
Credit Checking
Monitor, perform, or assess credit worthiness or solvency
Indicates association with Processing
has processing
Manage selection, assessment, and evaluation related to vendors
Vendor Selection Assessment
Indicates the specified concepts is 'after' this concept in some context
is after
to study or examine the data in detail
Analyse
Incident Reporting Communication
Procedures related to management of incident reporting
Use of hash functions to map information or to retrieve a prior categorisation
Hash Functions
File System Security
Security implemented over a file system
Use of biometric data for authentication
Biometric Authentication
Conduct or assist with research conducted in an academic context e.g. within universities
Academic Research
Quantum Cryptography
Cryptographic methods that utilise quantum mechanical properties to perform cryptographic tasks
Security Assessments
Assessment of security intended to identity gaps, vulnerabilities, risks, and effectiveness of controls
Sector
There are various sector codes used commonly to indicate the domain of an organisation or business. Examples include NACE (EU), ISIC (UN), SIC and NAICS (USA).
Indicate or restrict scope for interpretation and application of purpose in a domain e.g. Agriculture, Banking
Identify, rectify, or otherwise under take activities intended to fix or repair impairments to existing functionalities
Identify and Repair Impairments
An example of identifying and rectifying impairments is the process of finding and fixing errors in products, commonly referred to as debugging
RNG Pseudonymisation
A pseudonymisation method where identifiers are substituted by a number chosen by a Random Number Generator (RNG)
Create and provide pesonalised advertisement where the personalisation is targeted to a specific individual or group of individuals
Targeted Advertising
Indicates a justification for specified concept or context
has justification
Use of symmetric crytography to encrypt data
Symmetric Encryption
has risk level
Indicates the associated risk level associated with a risk
Expression and authentication of identity through digital information containing cryptographic signatures
Digital Signatures
Data subjects that are members of a group, organisation, or other collectives
Member
This concept denotes a Data Subject or a group are vulnerable, but not what vulnerability they possess or its context. This information can be provided additionally as comments, or as separate concepts and relations. Proposals for this are welcome.
Data Subjects which should be considered 'vulnerable' and therefore would require additional measures and safeguards
Vulnerable Data Subject
Access
to access data
Processing is necessary or beneficial for interest of the public or society at large
Public Interest
has technical measure
Indicates use or applicability of Technical measure
Manage and analyse interactions with past, current, and potential customers
Customer Relationship Management
to keep data for future use
Store
Consequence of Success
The consequence(s) possible or arising from success of specified context
has address
Specifies address of a legal entity such as street address or pin code
Manage disputes by natural persons, private bodies, or public authorities relevant to organisation
Dispute Management
Often Frequency
Frequency where occurences are often or frequent, but not continous
Human Involvement
Human Involvement here broadly refers to any involvement by a human in the context of carrying out processing. This may include verification of outcomes, providing input data for making decisions, or overseeing activities.
The involvement of humans in specified context
Deliver service as requested by user or consumer
Requested Service Provision
has scale
Indicates the scale of specified concept
Employee
Data subjects that are employees
Risks can be associated with one or more different concepts such as purpose, processing, personal data, technical or organisational measure.
A risk or possibility or uncertainty of negative effects, impacts, or consequences.
Risk
Processing that involves evaluation of individuals
Evaluation of Individuals
For example, a human performing some processing operation
Completely Manual Processing
Processing that is completely un-automated or fully manual
Obligation
A rule describing an obligation for performing an activity
Conformant
State of being conformant
Management and execution of hiring processes of personnel
Personnel Hiring
Disseminate
to spread data throughout
has relation with data subject
Indicates the relation between specified Entity and Data Subject
Improve Internal CRM Processes
Improve customer-relationship management (CRM) processes
Distributed System Security
Security implementations provided using or over a distributed system
Generate
to generate or create data
Monitoring Policies
Policy for monitoring (e.g. progress, performance)
Relation
Assessment
The document, plan, or process for assessment or determination towards a purpose e.g. assessment of legality or impact assessments
Applicant
Data subjects that are applicants in some context
has lawfulness
Indicates the status of being lawful or legally compliant
Security protocols implemented at or within hardware
Hardware Security Protocols
to monitor data for some criteria
Monitor
Tourist
Data subjects that are tourists i.e. not citizens and not immigrants
Maintain Fraud Database
MaintainFraudDatabase
Security implemented at or over web browsers
WebBrowser Security
State of partially being compliant i.e. only some objectives have been met, and others have not been in violation
Partially Compliant
Scale of data subjects considered medium i.e. neither large nor small within the context
MediumScaleOfDataSubjects
Scale of data subjects considered huge or more than large within the context
HugeScaleOfDataSubjects
Conduct research in a non-commercial setting e.g. for a non-profit-organisation (NGO)
Non-Commercial Research
Security implemented at or through operating systems
Operating System Security
The consequence(s) possible or arising from specified context
Consequence
isSubTypeOf
has scope
Indicates the scope of specified concept or context
Management of crytographic keys, including their generation, storage, assessment, and safekeeping
Cryptographic Key Management
Severity
The magnitude of being unwanted or having negative effects such as harmful impacts
Severity can be associated with Risk, or its Consequences and Impacts
EconomicUnion
A political union of two or more countries based on economic or trade agreements
Training methods related to cybersecurity
Cybersecurity Training
Deterministic Pseudonymisation
Pseudonymisation achieved through a deterministic function
End-to-End Encryption (E2EE)
Encrypted communications where data is encrypted by the sender and decrypted by the intended receiver to prevent access to any third party
Methods that assess or discover vulnerabilities in a system
Vulnerability Testing Methods
Impact that acts as or causes non-material damages
Non-Material Damage
Digital Rights Management
Management of access, use, and other operations associated with digital content
NearlyGlobalScale
Geographic coverage nearly spanning the entire globe
is policy for
Indicates the context or application of policy
has domain
mitigates risk
Indicates risks mitigated by this concept
Location that is fixed at a specific place e.g. a city
Fixed Singular Location
Concept