Single Sign On
in scheme: dpv#
term status: accepted
created: 2020-11-04
type: Concept
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Paul Ryan
isSubTypeOf: Authentication Protocols
definition: Use of credentials or processes that enable using one set of credentials to authenticate multiple contexts.
broader: Authentication Protocols

Personal Data Handling
in scheme: dpv#
example: E0019
example: E0022
example: E0018
example: E0008
example: E0007
example: E0020
example: E0014
example: E0028
type: Concept
creator: Javier Fernández
creator: Axel Polleres
modified: 2020-11-04
term status: accepted
created: 2019-04-05
definition: A high-level Class to describe 'data handling'. This can consist of personal data being processed for a purpose, involving entities, using technical and organisational measures, applicable risks, rights, and legal basis.

Special Category Personal Data
in scheme: dpv#
source: oj
note: The term 'special category' is based on GDPR Art.9, but should not be considered as exlusive to it. DPV considers all Special Categories to also be Sensitive, but whose use is either prohibited or regulated and therefore requires additional legal basis for justification.
type: Concept
isSubTypeOf: Sensitive Personal Data
creator: Fajar Ekaputra
creator: Elmar Kiesling; Harshvardhan J. Pandit
created: 2019-05-07
example: E0015
term status: modified
broader: Sensitive Personal Data
definition: Sensitive Personal Data whose use requires specific legal permission or justification
modified: 2022-01-19

Privacy Preserving Protocol
in scheme: dpv#
isSubTypeOf: CrytographicMethods
created: 2022-08-17
type: Concept
broader: CrytographicMethods
term status: accepted
definition: Use of protocols designed with the intention of provided additional guarentees regarding privacy
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy

Anonymised Data
in scheme: dpv#
term status: accepted
created: 2022-01-19
note: It is advised to carefully consider indicating data is fully or completely anonymised by determining whether the data by itself or in combination with other data can identify a person. Failing this condition, the data should be denoted as PseudonymisedData. To indicate data is anonymised only for a specified entity (e.g. within an organisation), the concept AnonymisedDataWithinScope (as subclass of PseudonymisedData) should be used instead of AnonymisedData.
creator: Piero Bonatti
isSubTypeOf: Non-Personal Data
type: Concept
definition: Personal Data that has been (fully and completely) anonymised so that it is no longer considered Personal Data
broader: Non-Personal Data

Consumer
in scheme: dpv#
creator: Georg P. Krog
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Beatriz Esteves
creator: Paul Ryan
type: Concept
broader: Data Subject
definition: Data subjects that consume goods or services for direct use
term status: accepted
isSubTypeOf: Data Subject
created: 2022-04-06

Alter
in scheme: dpv#
narrower: Modify
type: Concept
isSubTypeOf: Transform
source: oj
created: 2019-05-07
broader: Transform
term status: accepted
definition: to change the data without changing it into something else

Data Processing Agreement
in scheme: dpv#
creator: Beatriz Esteves
creator: Georg P Krog
creator: Paul Ryan
creator: Julian Flake
creator: Harshvardhan J. Pandit
note: For specific role-based data processing agreements, see concepts for Processors and JointDataController agreements.
narrower: Joint Data Controllers Agreement
narrower: Controller-Processor Agreement
narrower: Sub-Processor Agreement
narrower: Third-Party Agreement
type: Concept
isSubTypeOf: Legal Agreement
created: 2022-01-26
broader: Legal Agreement
definition: An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data
term status: accepted

Social Media
in scheme: dpv#
type: Concept
isSubTypeOf: Marketing
definition: Conduct marketing through social media
created: 2020-11-04
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Beatriz Esteves
term status: accepted
broader: Marketing

Physical Access Control Method
in scheme: dpv#
term status: accepted
isSubTypeOf: Access Control Method
definition: Access control applied for physical access e.g. premises or equipement
broader: Access Control Method
creator: Georg P Krog
type: Concept
created: 2022-06-15

Compliance Status
in scheme: dpv#
term status: accepted
narrower: Compliant
narrower: Partially Compliant
narrower: Compliance Violation
narrower: Compliance Unknown
narrower: Non Compliant
narrower: Lawfulness (alt title: LegalComplianceStatus)
narrower: Compliance Indeterminate
isSubTypeOf: Status
broader: Status
creator: Harshvardhan J. Pandit
definition: Status associated with Compliance with some norms, objectives, or requirements
created: 2022-05-18
type: Concept

Consent Given
in scheme: dpv#
source: GConsent
type: Concept
definition: The state where consent has been given
term status: accepted
broader: Consent Status Valid for Processing
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P Krog
created: 2022-06-22
isInstanceOf: Consent Status Valid for Processing
note: An example of this state is when the individual clicks on a button, ticks a checkbox, verbally agrees - or any other form that communicates their decision agreeing to the processing of data

Network Security Protocols
in scheme: dpv#
created: 2022-08-17
type: Concept
term status: accepted
broader: Security Method
isSubTypeOf: Security Method
source: reference-incident-classification-taxonomy
creator: Harshvardhan J. Pandit
definition: Security implemented at or over networks protocols

Service Optimization
in scheme: dpv#
narrower: Optimisation for Consumer
narrower: Optimisation for Controller
creator: Javier Fernandez
creator: Elmar Kiesling
creator: Harshvardhan J. Pandit
creator: Fajar Ekaputra
creator: Axel Polleres
creator: Simon Steyskal
type: Concept
created: 2019-04-05
isSubTypeOf: Service Provision
term status: accepted
broader: Service Provision
definition: Optimise services or activities
note: Subclass of ServiceProvision since optimisation is usually considered part of providing services

Personnel Payment
in scheme: dpv#
term status: accepted
creator: Harshvardhan J. Pandit
definition: Management and execution of payment of personnel
broader: Personnel Management
isSubTypeOf: Personnel Management
created: 2022-04-20
type: Concept

Enforce Security
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Fajar Ekaputra
creator: Axel Polleres
creator: Javier Fernandez
creator: Simon Steyskal
creator: Elmar Kiesling
note: Was previous "Security". Prefixed to distinguish from TechOrg measures.
type: Concept
isSubTypeOf: Purpose
created: 2019-04-05
term status: accepted
narrower: Identity Verification
narrower: Enforce Access Control
narrower: Anti-Terrorism Operations
narrower: Fraud Prevention and Detection
definition: Ensure and enforce security e.g. of data, personnel
broader: Purpose

has context
in scheme: dpv#
definition: Indicates a purpose is restricted to the specified context(s)
type: Relation
type: Concept
term status: accepted
has domain: Concept
has range: Context
created: 2019-04-05

Automation of Processing
in scheme: dpv#
type: Concept
creator: Harshvardhan J. Pandit
narrower: Automated Processing with Human Input
narrower: Fully Automated Processing
narrower: Human Involvement
narrower: Partially Automated Processing
narrower: Completely Manual Processing
narrower: Automated Decision Making
narrower: Algorithmic Logic
narrower: Automated Processing with Human Oversight
narrower: Automated Processing with Human Review
broader: Processing Context
term status: accepted
created: 2022-06-15
definition: Contextual information about the degree of automation and human involvement associated with Processing
isSubTypeOf: Processing Context
note: It is difficult to provide a formal definition of automation since any and all processing may be considered automation. This concept instead is intended to explicitly signal the utilisation of automation and its extent towards some context - such as decision making, and to indicate the involvement of humans.

has withdrawal method
in scheme: dpv#
type: Relation
type: Concept
definition: Specifries the method by which consent can be/has been withdrawn
creator: Harshvardhan J. Pandit
creator: Bud Bruegger
creator: Mark Lizar
term status: sunset
modified: 2022-06-22
note: Can be used to record information of how to withdraw consent, e.g. by a click to a form, in writing, etc., by logging into a system and confirm per email, or with some additional authentication, etc.
created: 2019-04-05
editorial note: WARNING: This concept will be deprecated in future releases

Zero Knowledge Authentication
in scheme: dpv#
creator: Harshvardhan J. Pandit
term status: accepted
source: data-protection-engineering
isSubTypeOf: Authentication Protocols
isSubTypeOf: Cryptographic Methods
broader: Authentication Protocols
broader: Cryptographic Methods
type: Concept
definition: Authentication using Zero-Knowledge proofs
created: 2022-08-17

Technical_Measures Concepts
member: Differential Privacy
member: Information Flow Control
member: Security Method
member: Data Anonymisation Technique
member: Symmetric Encryption
member: Access Control Method
member: Authorisation Protocols
member: Physical Access Control Method
member: Hardware Security Protocols
member: Network Security Protocols
member: Post-Quantum Cryptography
member: Encryption in Use
member: Pseudonymisation
member: Multi-Factor Authentication (MFA)
member: Hash-based Message Authentication Code (HMAC)
member: Monotonic Counter Pseudonymisation
member: Authentication using PABC
member: Cryptographic Authentication
member: Usage Control
member: Virtualisation Security
member: Use of Synthetic Data
member: Deterministic Pseudonymisation
member: Authentication Protocols
member: Wireless Security Protocols
member: Encryption in Transfer
member: Network Proxy Routing
member: Encryption
member: Homomorphic Encryption
member: Distributed System Security
member: Data Backup Protocols
member: Operating System Security
member: Authentication using ABC
member: Intrusion Detection System
member: Biometric Authentication
member: Symmetric Cryptography
member: Asymmetric Cryptography
member: Web Security Protocols
member: File System Security
member: Data Redaction
member: Quantum Cryptography
member: Single Sign On
member: Document Security
member: Document Randomised Pseudonymisation
member: Anonymisation
member: Hash Functions
member: De-Identification
member: Cryptographic Key Management
member: Trusted Computing
member: Password Authentication
member: Encryption at Rest
member: Cryptographic Methods
member: End-to-End Encryption (E2EE)
member: RNG Pseudonymisation
member: Vulnerability Testing Methods
member: Data Sanitisation Technique
member: Activity Monitoring
member: Privacy Preserving Protocol
member: Fully Randomised Pseudonymisation
member: Digital Signatures
member: Trusted Execution Environments
member: Message Authentication Codes (MAC)
member: Private Information Retrieval
member: Digital Rights Management
member: Mobile Platform Security
member: WebBrowser Security
member: Secure Multi-Party Computation
member: Penetration Testing Methods
member: Asymmetric Encryption
member: Zero Knowledge Authentication
member: Secret Sharing Schemes
type: Collection

has data volume
in scheme: dpv#
type: Concept
type: Relation
creator: Harshvardhan J. Pandit
isSubTypeOf: Scale
broader: Scale
has range: Data Volume
term status: accepted
has domain: Concept
definition: Indicates the volume of data
created: 2022-06-22

has data source
in scheme: dpv#
term status: accepted
creator: Paul Ryan
creator: Harshvardhan J. Pandit
creator: Georg P. Krog
definition: Indicates the source or origin of data being processed
has domain: Concept
has range: Data Source
type: Relation
type: Concept
created: 2020-11-04

Processing Concepts
member: Anonymise
member: Structure
member: Disseminate
member: Alter
member: Derive
member: Consult
member: Adapt
member: Obtain
member: Analyse
member: Transfer
member: Transmit
member: Infer
member: Screen
member: Monitor
member: Make Available
member: has processing
member: Filter
member: Generate
member: Match
member: Record
member: Access
member: Combine
member: Organise
member: Collect
member: Use
member: Transform
member: Destruct
member: Observe
member: Move
member: Query
member: Store
member: Assess
member: Disclose by Transmission
member: Pseudonymise
member: Acquire
member: Disclose
member: Processing
member: Remove
member: Erase
member: Share
member: Modify
member: Profiling
member: Copy
member: Restrict
member: Align
member: Retrieve
type: Collection

Transform
in scheme: dpv#
narrower: Restrict
narrower: Align
narrower: Anonymise
narrower: Alter
narrower: Screen
narrower: Filter
narrower: Combine
narrower: Pseudonymise
narrower: Adapt
source: oj
created: 2019-05-07
type: Concept
definition: to change the form or nature of data
term status: accepted
isSubTypeOf: Processing
broader: Processing

has applicable law
in scheme: dpv#
has domain: Concept
type: Concept
type: Relation
creator: Harshvardhan J. Pandit
has range: Law
definition: Indicates applicability of a Law
term status: accepted
created: 2022-01-19

Processing Context
in scheme: dpv#
narrower: Evaluation and Scoring
narrower: Storage Condition
narrower: Decision Making
narrower: Innovative Use of New Technologies
narrower: Systematic Monitoring
narrower: Automation of Processing
narrower: Data Source
narrower: Evaluation of Individuals
narrower: Scoring of Individuals
narrower: Scale
type: Concept
term status: accepted
created: 2022-02-09
isSubTypeOf: Context
creator: Harshvardhan J. Pandit
definition: Context or conditions within which processing takes place
broader: Context

Data Subject
in scheme: dpv#
source: oj
broader: Legal Entity
broader: Natural Person
type: Concept
note: The term 'data subject' is specific to the GDPR, but is functionally equivalent to the term 'individual' and the ISO/IEC term 'PII Principle'.
definition: The individual (or category of individuals) whose personal data is being processed
term status: accepted
creator: Javier Fernández
creator: Axel Polleres
isSubTypeOf: Legal Entity
isSubTypeOf: Natural Person
modified: 2020-11-04
created: 2019-04-05
narrower: Citizen
narrower: Vulnerable Data Subject
narrower: Child
narrower: Employee
narrower: Participant
narrower: Guardian(s) of Data Subject
narrower: Patient
narrower: Immigrant
narrower: Applicant
narrower: Customer
narrower: Tourist
narrower: Adult
narrower: Student
narrower: User
narrower: Subscriber
narrower: Member
narrower: Consumer
narrower: Visitor
narrower: Parent(s) of Data Subject
narrower: NonCitizen

Vital Interest
in scheme: dpv#
type: Concept
narrower: Vital Interest of Natural Person
definition: Processing is necessary or required to protect vital interests of a data subject or other natural person
creator: Harshvardhan J. Pandit
term status: accepted
isSubTypeOf: Legal Basis
created: 2021-04-21
broader: Legal Basis

Authentication using ABC
in scheme: dpv#
creator: Harshvardhan J. Pandit
broader: Cryptographic Authentication
type: Concept
definition: Use of Attribute Based Credentials (ABC) to perform and manage authentication
created: 2022-08-17
term status: accepted
source: data-protection-engineering
isSubTypeOf: Cryptographic Authentication

Certification
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Rob Brennan
creator: Mark Lizar
creator: Axel Polleres
definition: Certification mechanisms, seals, and marks for the purpose of demonstrating compliance
type: Concept
isSubTypeOf: Certification and Seal
broader: Certification and Seal
created: 2019-04-05
term status: accepted

Visitor
in scheme: dpv#
creator: Georg P. Krog
creator: Beatriz Esteves
creator: Paul Ryan
creator: Julian Flake
creator: Harshvardhan J. Pandit
broader: Data Subject
type: Concept
term status: accepted
created: 2022-04-06
isSubTypeOf: Data Subject
definition: Data subjects that are temporary visitors

Non-Disclosure Agreement (NDA)
in scheme: dpv#
type: Concept
broader: Legal Agreement
term status: accepted
creator: Rob Brennan
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Axel Polleres
definition: Non-disclosure Agreements e.g. preserving confidentiality of information
created: 2019-04-05
isSubTypeOf: Legal Agreement

has indication method
in scheme: dpv#
has domain: Concept
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P Krog
type: Concept
type: Relation
term status: accepted
created: 2022-06-21
definition: Specifies the method by which an entity has indicated the specific context

Inferred Personal Data
in scheme: dpv#
broader: Derived Personal Data
broader: Generated Personal Data
isSubTypeOf: Derived Personal Data
isSubTypeOf: Generated Personal Data
definition: Personal Data that is obtained through inference from other data
type: Concept
term status: accepted
creator: Harshvardhan J. Pandit
created: 2022-01-19
note: Inferred Data is derived data generated from existing data, but which did not originally exist within it, e.g. inferring demographics from browsing history.

Document Randomised Pseudonymisation
in scheme: dpv#
created: 2022-08-17
definition: Use of randomised pseudonymisation where the same elements are assigned different values in the same document or database
type: Concept
term status: accepted
isSubTypeOf: Pseudonymisation
creator: Harshvardhan J. Pandit
source: data-pseudonymisation-advanced-techniques-and-use-cases
broader: Pseudonymisation

Temporal Duration
in scheme: dpv#
term status: modified
creator: Harshvardhan J. Pandit
modified: 2020-10-05
definition: Duration that has a fixed temporal duration e.g. 6 months
isSubTypeOf: Duration
type: Concept
broader: Duration
created: 2022-06-15

Vendor Payment
in scheme: dpv#
broader: Vendor Management
isSubTypeOf: Vendor Management
created: 2021-09-01
type: Concept
creator: David Hickey
creator: Georg P Krog
creator: Paul Ryan
creator: Harshvardhan J. Pandit
source: model-voor-een-register-van-de-verwerkingsactiviteiten
term status: accepted
definition: Manage payment of vendors

is residual risk of
in scheme: dpv#
type: Concept
type: Relation
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P Krog
creator: Julian Flake
has domain: Risk
term status: accepted
definition: Indicates this risk is the remaining or residual risk from applying mitigation measures or treatments to specified risk
created: 2022-07-20
has range: Risk

Consent Concepts
member: has expiry time
member: has provision method
member: has consent status
member: is indicated by
member: has expiry condition
member: has provision by justification
member: has indication method
member: has expiry
member: has withdrawal time
member: is indicated at time
member: has provision time
member: is explicit
member: has consent notice
member: has withdrawal by
member: has withdrawal method
member: has provision by
member: has withdrawal by justification
type: Collection

Consent_Types Concepts
member: Implied Consent
member: Expressed Consent
member: Explicitly Expressed Consent
member: Informed Consent
member: Uninformed Consent
type: Collection

Status
in scheme: dpv#
created: 2022-05-18
isSubTypeOf: Context
type: Concept
narrower: Audit Status
narrower: Activity Status
narrower: Conformance Status
narrower: Compliance Status
narrower: Consent Status
creator: Harshvardhan J. Pandit
definition: The status or state of something
term status: accepted
broader: Context

Secure Multi-Party Computation
in scheme: dpv#
creator: Harshvardhan J. Pandit
broader: CrytographicMethods
type: Concept
definition: Use of cryptographic methods for entities to jointly compute functions without revealing inputs
created: 2022-08-17
term status: accepted
isSubTypeOf: CrytographicMethods
source: reference-incident-classification-taxonomy

Optimisation for Controller
in scheme: dpv#
definition: Optimize activities and services for provider or controller
isSubTypeOf: Service Optimization
creator: Fajar Ekaputra
creator: Simon Steyskal
creator: Axel Polleres
creator: Javier Fernandez
creator: Elmar Kiesling
creator: Harshvardhan J. Pandit
type: Concept
created: 2019-04-05
broader: Service Optimization
narrower: Improve Internal CRM Processes
narrower: Internal Resource Optimisation
narrower: Improve Existing Products and Services
narrower: Increase Service Robustness
term status: accepted

Organisational Measure
in scheme: dpv#
created: 2019-04-05
creator: Axel Polleres
creator: Rob Brennan
creator: Mark Lizar
creator: Harshvardhan J. Pandit
term status: accepted
type: Concept
broader: Technical and Organisational Measure
example: E0017
definition: Organisational measures required/followed when processing data of the declared category
isSubTypeOf: Technical and Organisational Measure
narrower: Governance Procedures
narrower: Legal Agreement
narrower: Safeguard
narrower: Authorisation Procedure
narrower: Security Procedure
narrower: Records of Activities
narrower: Assessment
narrower: Notice
narrower: Privacy by Design
narrower: Consultation
narrower: Regularity of Re-certification
narrower: Review Procedure
narrower: Policy
narrower: GuidelinesPrinciple
narrower: Certification and Seal
narrower: Staff Training

Data
narrower: Personal Data
narrower: Synthetic Data
narrower: Non-Personal Data
in scheme: dpv#
type: Concept
definition: A broad concept representing 'data' or 'information'
term status: accepted
created: 2022-01-19
creator: Harshvardhan J. Pandit

Personal Data
in scheme: dpv#
term status: accepted
created: 2019-04-05
creator: Harshvardhan Pandit
isSubTypeOf: Data
related: AnyData
note: This definition of personal data encompasses the concepts used in GDPR Art.4-1 for 'personal data' and ISO/IEC 2700 for 'personally identifiable information (PII)'.
modified: 2022-01-19
broader: Data
definition: Data directly or indirectly associated or related to an individual.
source: oj
type: Concept
narrower: Sensitive Personal Data
narrower: Derived Personal Data
narrower: Pseudonymised Data
narrower: Generated Personal Data
narrower: Collected Personal Data

Processing
in scheme: dpv#
definition: The processing performed on personal data
example: E0011
example: E0005
example: E0014
created: 2019-04-05
creator: Javier Fernández
creator: Axel Polleres
source: specialprivacy.ercim.eu
type: Concept
term status: accepted
modified: 2020-11-04
related: AnyProcessing
narrower: Obtain
narrower: Transfer
narrower: Transform
narrower: Store
narrower: Organise
narrower: Use
narrower: Disclose
narrower: Remove
narrower: Copy

Consent Withdrawn
in scheme: dpv#
type: Concept
source: GConsent
note: This state can be considered a form of 'revocation' of consent, where the revocation can only be performed by the data subject. Therefore we suggest using ConsentRevoked when it is a non-data-subject entity, and ConsentWithdrawn when it is the data subject
broader: Consent Status Invalid for Processing
creator: Paul Ryan
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Georg P Krog
created: 2022-06-22
term status: accepted
isInstanceOf: Consent Status Invalid for Processing
definition: The state where the consent is withdrawn or revoked specifically by the data subject and which prevents it from being further used as a valid state

Evaluation and Scoring
in scheme: dpv#
definition: Processing that involves evaluation and scoring of individuals
source: oj
isSubTypeOf: Processing Context
creator: Piero Bonatti
creator: Harshvardhan J. Pandit
created: 2020-11-04
type: Concept
broader: Processing Context
term status: accepted

Password Authentication
in scheme: dpv#
type: Concept
creator: Harshvardhan J. Pandit
term status: accepted
source: reference-incident-classification-taxonomy
isSubTypeOf: Authentication Protocols
created: 2022-08-17
broader: Authentication Protocols
definition: Use of passwords to perform authentication

Personnel Management
in scheme: dpv#
type: Concept
narrower: Personnel Hiring
narrower: Personnel Payment
isSubTypeOf: HumanResources
broader: HumanResources
term status: accepted
definition: Management of personnel associated with the organisation e.g. evaluation and management of employees and intermediaries
source: model-voor-een-register-van-de-verwerkingsactiviteiten
creator: Harshvardhan J. Pandit
creator: Paul Ryan
created: 2022-03-30

Consent
in scheme: dpv#
type: Concept
broader: Legal Basis
example: E0024
example: E0023
example: E0025
example: E0019
example: E0026
example: E0022
term status: accepted
isSubTypeOf: Legal Basis
created: 2021-04-07
creator: Harshvardhan J. Pandit
definition: Consent of the Data Subject for specified processing
narrower: Uninformed Consent
narrower: Informed Consent

has compliance status
in scheme: dpv#
has domain: Concept
term status: accepted
definition: Indicates the status of compliance of specified concept
isSubTypeOf: has status
has range: Compliance Status
created: 2022-05-18
type: Concept
type: Relation
broader: has status
narrower: has lawfulness
creator: Harshvardhan J. Pandit

ReviewImpactAssessment
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Georg P Krog
type: Concept
created: 2022-10-22
term status: accepted

Location
narrower: Storage Location
narrower: Region
narrower: EconomicUnion
narrower: Country
narrower: City
narrower: Location Locality
narrower: SupraNationalUnion
in scheme: dpv#
created: 2022-01-19
creator: Georg P Krog
creator: Harshvardhan J. Pandit
term status: accepted
example: E0011
note: Location may be geographic, physical, or virtual.
type: Concept
definition: A location is a position, site, or area where something is located

Advertising
in scheme: dpv#
term status: accepted
narrower: Personalised Advertising
note: Advertising is a subset of Marketing. Advertising by itself does not indicate 'personalisation' i.e. personalised ads.
broader: Marketing
creator: Georg P Krog
creator: Beatriz Esteves
creator: Harshvardhan J. Pandit
type: Concept
created: 2020-11-04
isSubTypeOf: Marketing
definition: Conduct advertising i.e. process or artefact used to call attention to a product, service, etc. through announcements, notices, or other forms of communication

Human Resources Management
in scheme: dpv#
type: Concept
isSubTypeOf: Purpose
note: HR is a broad concept. Its management includes, amongst others - recruiting employees and intermediaries e.g. brokers, independent representatives; payroll administration, remunerations, commissions, and wages; and application of social legislation.
creator: David Hickey
creator: Paul Ryan
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Beatriz Esteves
source: model-voor-een-register-van-de-verwerkingsactiviteiten
broader: Purpose
term status: accepted
created: 2021-09-01
definition: Manage humans and 'human resources' within the organisation for effective and efficient operations.

Consent Expired
in scheme: dpv#
broader: Consent Status Invalid for Processing
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P Krog
definition: The state where the temporal or contextual validity of consent has 'expired'
type: Concept
source: GConsent
note: An example of this state is when the obtained consent has been assigned a duration - which has lapsed or 'expired', making it invalid to be used further for processing data
created: 2022-06-22
term status: accepted
isInstanceOf: Consent Status Invalid for Processing

Legal Obligation
in scheme: dpv#
type: Concept
term status: accepted
broader: Legal Basis
isSubTypeOf: Legal Basis
definition: Legal Obligation to conduct the specified processing
created: 2021-04-07
creator: Harshvardhan J. Pandit

Sub-Processor Agreement
in scheme: dpv#
creator: Paul Ryan
creator: Julian Flake
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Beatriz Esteves
broader: Data Processing Agreement
type: Concept
term status: accepted
definition: An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data between a Data Processor and a Data (Sub-)Processor
created: 2022-01-26
isSubTypeOf: Data Processing Agreement

Public Relations
in scheme: dpv#
created: 2021-09-01
creator: David Hickey
creator: Georg P Krog
creator: Paul Ryan
creator: Harshvardhan J. Pandit
source: model-voor-een-register-van-de-verwerkingsactiviteiten
type: Concept
term status: accepted
broader: Marketing
isSubTypeOf: Marketing
definition: Manage and conduct public relations processes. This includes creating goodwill for the organization.

Identity Verification
in scheme: dpv#
creator: Javier Fernandez
creator: Elmar Kiesling
creator: Simon Steyskal
creator: Harshvardhan J. Pandit
creator: Fajar Ekaputra
creator: Axel Polleres
isSubTypeOf: Enforce Security
broader: Enforce Security
term status: accepted
type: Concept
created: 2019-04-05
definition: Verify or authorize identity

Technical_Organisational_Measures Concepts
type: Collection
member: Technical Measure
member: Organisational Measure
member: is policy for
member: has policy
member: Technical and Organisational Measure
member: has technical and organisational measure
member: has organisational measure
member: has technical measure
member: has notice

LargeDataVolume
in scheme: dpv#
type: Concept
term status: accepted
creator: Harshvardhan J. Pandit
created: 2022-06-15
isInstanceOf: Data Volume
definition: Data volume that is considered large within the context
broader: Data Volume

Sell Insights from Data
in scheme: dpv#
isSubTypeOf: Sell Products
creator: Javier Fernandez
creator: Elmar Kiesling
creator: Harshvardhan J. Pandit
creator: Fajar Ekaputra
creator: Simon Steyskal
creator: Axel Polleres
definition: Sell data or information relevant to insights obtained from analysis of data
type: Concept
term status: accepted
broader: Sell Products
created: 2019-04-05
note: Sell here means exchange, submit, or provide in return for direct or indirect compensation. Was subclass of commercial interest, changed to reflect selling something

is indicated at time
in scheme: dpv#
creator: Georg P Krog
creator: Julian Flake
creator: Paul Ryan
creator: Harshvardhan J. Pandit
created: 2022-06-21
has domain: Concept
type: Concept
type: Relation
term status: accepted
definition: Specifies the temporal information for when the entity has indicated the specific context

Obtain
in scheme: dpv#
type: Concept
broader: Processing
narrower: Record
narrower: Observe
narrower: Acquire
narrower: Derive
narrower: Generate
narrower: Collect
term status: accepted
isSubTypeOf: Processing
source: oj
definition: to solicit or gather data from someone
created: 2019-05-07

Data Protection Impact Assessment (DPIA)
in scheme: dpv#
definition: A DPIA involves determining the potential and actual impact of processing activities on individuals or groups of individuals
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P Krog
type: Concept
isSubTypeOf: Impact Assessment
broader: Impact Assessment
created: 2020-11-04
term status: accepted
note: Top class: Impact Assessment, and DPIA is sub-class

User Interface Personalisation
in scheme: dpv#
type: Concept
creator: Javier Fernandez
creator: Elmar Kiesling
creator: Harshvardhan J. Pandit
creator: Fajar Ekaputra
creator: Simon Steyskal
creator: Axel Polleres
broader: Service Personalization
definition: Personalise interfaces presented to the user
term status: accepted
isSubTypeOf: Service Personalization
created: 2019-04-05

Damage
in scheme: dpv#
type: Concept
definition: Impact that acts as or causes damages
creator: Harshvardhan J. Pandit
narrower: Harm
narrower: Non-Material Damage
narrower: Material Damage
isSubTypeOf: Impact
created: 2022-03-30
term status: accepted
broader: Impact

Restrict
in scheme: dpv#
type: Concept
isSubTypeOf: Transform
broader: Transform
created: 2019-05-07
definition: to apply a restriction on the processsing of specific records
term status: accepted
source: oj

SupraNationalAuthority
in scheme: dpv#
definition: An authority tasked with overseeing legal compliance for a supra-national union e.g. EU
isSubTypeOf: Authority
created: 2022-02-02
type: Concept
source: adms
term status: accepted
creator: Harshvardhan J. Pandit
broader: Authority

has geographic coverage
in scheme: dpv#
creator: Harshvardhan J. Pandit
isSubTypeOf: Scale
definition: Indicate the geographic coverage (of specified context)
type: Relation
type: Concept
has range: Geographic Coverage
has domain: Concept
broader: Scale
created: 2022-06-22
term status: accepted

Effectiveness Determination Procedures
in scheme: dpv#
definition: Procedures intended to determine effectiveness of other measures
created: 2022-08-17
type: Concept
source: 5g-cybersecurity-standards
isSubTypeOf: Assessment
term status: accepted
broader: Assessment
creator: Harshvardhan J. Pandit

has withdrawal time
in scheme: dpv#
editorial note: WARNING: This concept will be deprecated in future releases
creator: Bud Bruegger
creator: Mark Lizar
creator: Harshvardhan J. Pandit
term status: sunset
created: 2019-04-05
type: Concept
type: Relation
modified: 2022-06-22
definition: Specifies the instant in time when consent was withdrawn

has recipient
in scheme: dpv#
type: Concept
type: Relation
source: specialprivacy.ercim.eu
creator: Harshvardhan J. Pandit
creator: Javier Fernández
creator: Axel Polleres
creator: Mark Lizar
creator: Bud Bruegger
has range: Recipient
has domain: Concept
modified: 2020-11-04
term status: accepted
definition: Indicates Recipient of Personal Data
created: 2019-04-04
broader: has entity
narrower: has recipient data controller
narrower: has data importer
narrower: has recipient third party
narrower: has data processor
isSubTypeOf: has entity

Third Country
in scheme: dpv#
definition: Represents a country outside applicable or compatible jurisdiction as outlined in law
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
created: 2022-02-09
isSubTypeOf: Country
broader: Country

Purpose
in scheme: dpv#
type: Concept
example: E0009
example: E0006
example: E0010
example: E0014
creator: Javier Fernández
creator: Axel Polleres
definition: The purpose of processing personal data
created: 2019-04-05
modified: 2020-11-04
term status: accepted
related: AnyPurpose
source: specialprivacy.ercim.eu
narrower: Human Resources Management
narrower: Customer Management
narrower: Enforce Security
narrower: Marketing
narrower: Research and Development
narrower: Account Management
narrower: Personalisation
narrower: Service Provision
narrower: Organisation Governance
narrower: Legal Compliance
narrower: Record Management
narrower: Vendor Management
narrower: Communication Management

LocalEnvironmentScale
in scheme: dpv#
definition: Geographic coverage spanning a specific environment within the locality
type: Concept
broader: Geographic Coverage
creator: Harshvardhan J. Pandit
isInstanceOf: Geographic Coverage
term status: accepted
note: For example, geographic scale of an event take place in a specific building or room
created: 2022-06-15

Certification and Seal
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Rob Brennan
creator: Mark Lizar
creator: Axel Polleres
term status: accepted
isSubTypeOf: Organisational Measure
type: Concept
definition: Certifications, seals, and marks indicating compliance to regulations or practices
broader: Organisational Measure
narrower: Certification
narrower: Seal
created: 2019-04-05

Customer Care
in scheme: dpv#
term status: accepted
creator: Simon Steyskal
creator: Javier Fernandez
creator: Elmar Kiesling
creator: Harshvardhan J. Pandit
creator: Fajar Ekaputra
creator: Axel Polleres
isSubTypeOf: Customer Management
created: 2019-04-05
narrower: Communication for Customer Care
type: Concept
definition: Provide assistance, resolve issues, ensure satisfaction in relation to services provided
broader: Customer Management
related: Feedback

Storage Restoration
in scheme: dpv#
type: Concept
creator: Axel Polleres
creator: Rob Brennan
creator: Mark Lizar
creator: Harshvardhan J. Pandit
definition: Regularity and temporal span of data restoration/backup mechanisms that guarantee that data is preserved
term status: accepted
broader: Storage Condition
isSubTypeOf: Storage Condition
created: 2019-04-05

has data controller
in scheme: dpv#
term status: accepted
has domain: Concept
definition: Indicates association with Data Controller
has range: Legal Entity
has range: Data Controller
created: 2019-04-04
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Javier Fernández
creator: Bud Bruegger
creator: Axel Polleres
type: Concept
type: Relation
modified: 2020-11-04
isSubTypeOf: has entity
broader: has entity
narrower: has joint data controllers

Law
in scheme: dpv#
type: Concept
creator: Harshvardhan J. Pandit
term status: accepted
created: 2022-01-19
definition: A law is a set of rules created by government or authorities

has name
in scheme: dpv#
type: Concept
type: Relation
creator: Harshvardhan J.Pandit
creator: Paul Ryan
creator: Georg P Krog
creator: Beatriz Esteves
has range: Concept
has domain: Entity
created: 2020-11-04
definition: Specifies name of a legal entity
term status: accepted

Storage Location
in scheme: dpv#
broader: Storage Condition
broader: Location
isSubTypeOf: Location
isSubTypeOf: Storage Condition
type: Concept
term status: accepted
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Axel Polleres
creator: Rob Brennan
definition: Location or geospatial scope where the data is stored
created: 2019-04-05

Decentralised Locations
in scheme: dpv#
broader: Location Fixture
isSubTypeOf: Location Fixture
modified: 2020-10-05
creator: Harshvardhan J. Pandit
definition: Location that is spread across multiple separate areas with no distinction between their importance
type: Concept
created: 2022-06-15
term status: modified

has consequence
in scheme: dpv#
created: 2020-11-04
type: Concept
type: Relation
has range: Consequence
creator: Harshvardhan J. Pandit
creator: Beatriz Esteves
creator: Georg P Krog
creator: Fajar Ekaputra
creator: Julian Flake
term status: accepted
note: Removed plural suffix for consistency
has domain: Concept
narrower: has impact
modified: 2021-09-21
definition: Indicates consenquence(s) possible or arising from specified concept

Policy
in scheme: dpv#
creator: David Hickey
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
isSubTypeOf: Organisational Measure
example: E0017
broader: Organisational Measure
narrower: Information Security Policy
narrower: Risk Management Policy
created: 2021-09-08
type: Concept
definition: A guidance document outlining any of: procedures, plans, principles, decisions, intent, or protocols.
term status: accepted

Organisational_Measures Concepts
member: Incident Reporting Communication
member: ReviewImpactAssessmentConformance
member: Privacy by Default
member: Effectiveness Determination Procedures
member: Data Processing Agreement
member: Code of Conduct
member: Disaster Recovery Procedures
member: Certification
member: Controller-Processor Agreement
member: Data Processing Records
member: Notice
member: Consultation with DPO
member: Credential Management
member: Educational Training
member: Privacy by Design
member: Consultation
member: Consent Notice
member: Register of Processing Activities
member: Cybersecurity Training
member: Non-Disclosure Agreement (NDA)
member: Privacy Notice
member: Contractual Terms
member: Risk Management Plan
member: ReviewImpactAssessment
member: Asset Management Procedures
member: Cybersecurity Assessments
member: Information Security Policy
member: Policy
member: Compliance Monitoring
member: Consultation with Authority
member: Privacy Impact Assessment
member: GuidelinesPrinciple
member: Professional Training
member: Consultation with Data Subject Representative
member: Data Protection Training
member: Monitoring Policies
member: Seal
member: Consultation with Data Subject
member: Incident Management Procedures
member: Security Knowledge Training
member: Certification and Seal
member: Staff Training
member: Consent Record
member: Third Party Security Procedures
member: Logging Policies
member: Sub-Processor Agreement
member: Impact Assessment
member: Third-Party Agreement
member: Background Checks
member: Legitimate Interest Assessment
member: Governance Procedures
member: Risk Management Policy
member: Design Standard
member: Security Assessments
member: Assessment
member: Legal Agreement
member: Data Transfer Impact Assessment
member: Identity Management Method
member: Trusted Third Party Utilisation
member: ReviewImpactAssessmentAdequacy
member: Data Protection Impact Assessment (DPIA)
member: Safeguard
member: Safeguard for Data Transfer
member: Authorisation Procedure
member: Regularity of Re-certification
member: Security Procedure
member: Records of Activities
member: Security Role Procedures
member: Review Procedure
member: Joint Data Controllers Agreement
type: Collection

Communication Management
in scheme: dpv#
creator: David Hickey
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
note: This purpose by itself does not sufficiently and clearly indicate what the communication is about. As such, it is recommended to combine it with another purpose to indicate the application. For example, Communication of Payment.
type: Concept
broader: Purpose
term status: accepted
isSubTypeOf: Purpose
definition: Manage communication or provide means for communication e.g. to send an email notifying some information
narrower: Communication for Customer Care
created: 2021-09-01

Organisation Governance
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: David Hickey
creator: Georg P Krog
creator: Paul Ryan
term status: accepted
narrower: Members and Partners Management
narrower: Organisation Risk Management
narrower: Organisation Compliance Management
narrower: Dispute Management
source: model-voor-een-register-van-de-verwerkingsactiviteiten
definition: Conduct activities and functions for organisation's governance
type: Concept
isSubTypeOf: Purpose
broader: Purpose
created: 2021-09-01

Contract
in scheme: dpv#
creator: Harshvardhan J. Pandit
definition: Creation, completion, fulfilment, or performance of a contract involving specified processing
isSubTypeOf: Legal Basis
isSubTypeOf: Legal Agreement
created: 2021-04-07
narrower: Enter Into Contract
narrower: Contract Performance
broader: Legal Agreement
broader: Legal Basis
type: Concept
term status: accepted

has legal basis
in scheme: dpv#
type: Concept
type: Relation
definition: Indicates use or applicability of a Legal Basis
term status: accepted
creator: Javier Fernández
creator: Axel Polleres
has range: Legal Basis
has domain: Concept
modified: 2020-11-04
created: 2019-04-04

Customer
in scheme: dpv#
isSubTypeOf: Data Subject
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Georg P. Krog
creator: Beatriz Esteves
creator: Paul Ryan
definition: Data subjects that purchase goods or services
created: 2022-04-06
narrower: Client
type: Concept
broader: Data Subject
term status: accepted
note: note: for B2B relations where customers are organisations, this concept only applies for data subjects

Importance
in scheme: dpv#
creator: Paul Ryan
creator: Georg P Krog
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Beatriz Esteves
narrower: Primary Importance
narrower: Secondary Importance
definition: An indication of 'importance' within a context
created: 2022-02-09
type: Concept
note: Importance can be used to express importance, desirability, relevance, or significance as a context.
broader: Context
isSubTypeOf: Context
term status: accepted

Virtualisation Security
in scheme: dpv#
type: Concept
isSubTypeOf: Security Method
term status: accepted
definition: Security implemented at or through virtualised environments
broader: Security Method
source: reference-incident-classification-taxonomy
creator: Harshvardhan J. Pandit
created: 2022-08-17

Necessity
in scheme: dpv#
example: E0028
created: 2022-02-12
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Beatriz Esteves
creator: Paul Ryan
creator: Georg P Krog
definition: An indication of 'necessity' within a context
note: Necessity can be used to express need, essentiality, requirement, or compulsion.
type: Concept
narrower: Optional
narrower: Not Required
narrower: Required
isSubTypeOf: Context
term status: accepted
broader: Context

has data protection officer
in scheme: dpv#
type: Relation
type: Concept
broader: has representative
term status: accepted
creator: Paul Ryan
creator: Rob Brennan
created: 2022-03-02
has domain: Concept
isSubTypeOf: has representative
definition: Specifices an associated data protection officer
has range: Data Protection Officer

Rule
in scheme: dpv#
type: Concept
definition: A rule describing a process or control that directs or determines if and how an activity should be conducted
term status: accepted
creator: Paul Ryan
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Beatriz Esteves
narrower: Obligation
narrower: has obligation
narrower: has permission
narrower: Permission
narrower: has prohibition
narrower: Prohibition
created: 2022-10-19

Status Concepts
type: Collection
member: Audit Approved
member: Status
member: NonConformant
member: Lawfulness Unknown
member: Compliance Status
member: Compliance Unknown
member: Compliant
member: Non Compliant
member: Partially Compliant
member: Compliance Violation
member: Audit Required
member: has activity status
member: has compliance status
member: has audit status
member: Activity Proposed
member: Activity Ongoing
member: Activity Completed
member: Audit Rejected
member: has status
member: Lawfulness (alt title: LegalComplianceStatus)
member: Conformant
member: Activity Halted
member: Lawful
member: Unlawful
member: Audit Conditionally Approved
member: Audit Status
member: Audit Not Required
member: Activity Status
member: has lawfulness
member: Conformance Status
member: Audit Requested
member: Compliance Indeterminate

Renewed Consent Given
in scheme: dpv#
creator: Paul Ryan
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Julian Flake
type: Concept
source: GConsent
note: An example of this state is when a previously given consent has expired, and the individual is presented a notice regarding continuing associated processing operations - to which they agree. This state can be useful to keep track of 'reconfirmed' or 'refreshed' consent within consent records, assist notices and contextual agents to create better consenting dialogues, and assist with specific legal obligations related to subsequent consenting
term status: accepted
broader: Consent Status Valid for Processing
definition: The state where a previously given consent has been 'renewed' or 'refreshed' or 'reaffirmed' to form a new instance of given consent
created: 2022-06-22
isInstanceOf: Consent Status Valid for Processing

User
in scheme: dpv#
type: Concept
creator: Harshvardhan J. Pandit
creator: Beatriz Esteves
creator: Paul Ryan
creator: Julian Flake
creator: Georg P. Krog
definition: Data subjects that use service(s)
term status: accepted
isSubTypeOf: Data Subject
created: 2022-04-06
broader: Data Subject

has notice
in scheme: dpv#
has range: Notice
term status: accepted
isSubTypeOf: has organisational measure
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P Krog
type: Concept
type: Relation
created: 2022-06-22
broader: has organisational measure
has domain: Concept
definition: Indicates the use or applicability of a Notice for the specified context

Subscriber
in scheme: dpv#
isSubTypeOf: Data Subject
creator: Georg P. Krog
creator: Beatriz Esteves
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Julian Flake
type: Concept
term status: accepted
broader: Data Subject
created: 2022-04-06
note: note: subscriber can be customer or consumer
definition: Data subjects that subscribe to service(s)

Organisation Risk Management
in scheme: dpv#
creator: David Hickey
creator: Paul Ryan
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
broader: Organisation Governance
term status: accepted
isSubTypeOf: Organisation Governance
created: 2021-09-01
definition: Manage risk for organisation's activities

Anonymisation
in scheme: dpv#
type: Concept
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Rob Brennan
creator: Mark Lizar
created: 2019-04-05
term status: modified
modified: 2022-10-01
source: oj
isSubTypeOf: Data Anonymisation Technique
broader: Data Anonymisation Technique
definition: Altering personal data irreversibly such that a data subject can no longer be identified directly or indirectly, either by the data controller alone or in collaboration with any other party

Cybersecurity Assessments
in scheme: dpv#
created: 2022-08-17
isSubTypeOf: SecurityAssessment
isSubTypeOf: Assessment
type: Concept
source: 5g-cybersecurity-standards
broader: SecurityAssessment
broader: Assessment
definition: Assessment of cybersecurity capabilities in terms of vulnerabilities and effectiveness of controls
term status: accepted
creator: Harshvardhan J. Pandit

Data Importer
in scheme: dpv#
type: Concept
source: recommendations-012020-measures-supplement-transfer en
term status: accepted
creator: Georg Krog
creator: Harshvardhan Pandit
creator: Paul Ryan
creator: David Hickey
isSubTypeOf: Recipient
definition: An entity that 'imports' data where importing is considered a form of data transfer
created: 2021-09-08
broader: Recipient
note: The EU, in particular the EDPB, uses data importing the context of cross-border data transfers/flows. These concepts are not bound by jurisdictional or geopolitical scopes within DPV and can thus be used for any notion of importing

Vendor Management
in scheme: dpv#
definition: Manage orders, payment, evaluation, and prospecting related to vendors
source: model-voor-een-register-van-de-verwerkingsactiviteiten
narrower: Vendor Selection Assessment
narrower: Vendor Records Management
narrower: Vendor Payment
broader: Purpose
term status: accepted
creator: David Hickey
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
created: 2021-09-01
isSubTypeOf: Purpose

Generated Personal Data
in scheme: dpv#
term status: accepted
created: 2022-03-30
narrower: Inferred Personal Data
definition: Personal Data that is generated or brought into existence without relation to existing data i.e. it is not derived or inferred from other data
type: Concept
broader: Personal Data
note: Generated Data is used to indicate data that is produced and is not derived or inferred from other data
creator: Harshvardhan J. Pandit
isSubTypeOf: Personal Data

Within Device
in scheme: dpv#
type: Concept
modified: 2020-10-05
creator: Harshvardhan J. Pandit
broader: Local Location
created: 2022-06-15
term status: modified
definition: Location is local and entirely within a device, such as a smartphone
isSubTypeOf: Local Location

Consent Revoked
in scheme: dpv#
creator: Georg P Krog
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
note: An example of this state is when a Data Controller stops utilising previously obtaining consent, such as when that service no longer exists
source: GConsent
definition: The state where the consent is revoked by an entity other than the data subject and which prevents it from being further used as a valid state
broader: Consent Status Invalid for Processing
created: 2022-06-22
term status: accepted
isInstanceOf: Consent Status Invalid for Processing

Lawful
in scheme: dpv#
type: Concept
term status: accepted
broader: Lawfulness (alt title: LegalComplianceStatus)
isInstanceOf: Lawfulness (alt title: LegalComplianceStatus)
definition: State of being lawful or legally compliant

Legitimate Interest of Controller
in scheme: dpv#
isSubTypeOf: Legitimate Interest
term status: accepted
created: 2021-05-19
type: Concept
definition: Legitimate Interests of a Data Controller in conducting specified processing
broader: Legitimate Interest
creator: Paul Ryan
creator: Harshvardhan J. Pandit
creator: Georg P Krog

Data Subject Scale
in scheme: dpv#
narrower: SmallScaleOfDataSubjects
narrower: LargeScaleOfDataSubjects
narrower: SporadicScaleOfDataSubjects
narrower: HugeScaleOfDataSubjects
narrower: MediumScaleOfDataSubjects
narrower: SingularScaleOfDataSubjects
type: Concept
creator: Harshvardhan J. Pandit
creator: Rana Saniei
creator: Georg P Krog
isSubTypeOf: Scale
term status: accepted
created: 2022-06-15
broader: Scale
definition: Scale of Data Subject(s)

Secondary Importance
in scheme: dpv#
type: Concept
creator: Harshvardhan J. Pandit
creator: Beatriz Esteves
creator: Paul Ryan
creator: Georg P Krog
creator: Julian Flake
created: 2022-02-11
term status: accepted
isInstanceOf: Importance
definition: Indication of 'secondary' or 'minor' or 'auxiliary' importance
broader: Importance

Rules Concepts
member: has permission
member: has prohibition
member: Permission
member: Prohibition
member: Rule
member: has obligation
member: Obligation
member: has rule
type: Collection

Authority
in scheme: dpv#
isSubTypeOf: GovernmentalOrganisation
isSubTypeOf: Legal Entity
type: Concept
creator: Georg Krog
creator: Harshvardhan Pandit
creator: Paul Ryan
narrower: Data Protection Authority
narrower: SupraNationalAuthority
narrower: NationalAuthority
narrower: RegionalAuthority
broader: Legal Entity
broader: GovernmentalOrganisation
created: 2020-11-04
term status: accepted
definition: An authority with the power to create or enforce laws, or determine their compliance.

MaintainCreditCheckingDatabase
in scheme: dpv#
type: Concept
isSubTypeOf: Credit Checking
definition: Maintain Credit Checking Database
creator: Georg P Krog
creator: Harshvardhan J. Pandit
broader: Credit Checking
created: 2022-06-15
term status: accepted

Professional Training
in scheme: dpv#
broader: Staff Training
type: Concept
isSubTypeOf: Staff Training
definition: Training methods that are intended to provide professional knowledge and expertise
term status: accepted
created: 2022-08-17
source: reference-incident-classification-taxonomy
creator: Harshvardhan J. Pandit

Recipient
in scheme: dpv#
type: Concept
example: E0019
related: AnyRecipient
definition: Entities that receive personal data
isSubTypeOf: Legal Entity
source: specialprivacy.ercim.eu
source: oj
creator: Javier Fernández
creator: Axel Polleres
modified: 2020-11-04
note: A recipient of personal data can be used to indicate any entity that receives personal data. This can be a Third Party, Processor (GDPR), or even a Controller.
term status: accepted
broader: Legal Entity
created: 2019-04-05
narrower: Data Processor
narrower: Third Party
narrower: Data Importer

NonGovernmentalOrganisation
in scheme: dpv#
term status: modified
broader: Organisation
modified: 2020-10-05
type: Concept
definition: An organisation not part of or independent from the government
source: adms
created: 2022-02-02
creator: Harshvardhan J. Pandit
isSubTypeOf: Organisation

Uninformed Consent
in scheme: dpv#
isSubTypeOf: Consent
creator: Julian Flake
creator: Georg P Krog
creator: Paul Ryan
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Consent
created: 2022-06-21
definition: Consent that is uninformed i.e. without requirement to provide sufficient information to make a consenting decision

is before
in scheme: dpv#
created: 2022-03-02
has domain: Concept
creator: Julian Flake
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
has range: Concept
type: Relation
type: Concept
term status: accepted
definition: Indicates the specified concepts is 'before' this concept in some context

NationalAuthority
in scheme: dpv#
definition: An authority tasked with overseeing legal compliance for a nation
creator: Harshvardhan J. Pandit
term status: accepted
type: Concept
broader: Authority
isSubTypeOf: Authority
created: 2022-02-02
source: adms

Non-Public Data Source
in scheme: dpv#
creator: Paul Ryan
creator: Georg P Krog
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Beatriz Esteves
term status: accepted
isInstanceOf: Data Source
created: 2022-01-26
definition: A source of data that is not publicly accessible or available
type: Concept
broader: Data Source

AcademicScientificOrganisation
in scheme: dpv#
isSubTypeOf: Organisation
type: Concept
source: adms
modified: 2020-10-05
created: 2022-02-02
creator: Harshvardhan J. Pandit
term status: modified
broader: Organisation
definition: Organisations related to academia or scientific pursuits e.g. Universities, Schools, Research Bodies

Data Privacy Vocabulary
contributor: Axel Polleres
contributor: Piero Bonatti
contributor: Julian Flake
contributor: Elmar Kiesling
contributor: Simon Steyskal
contributor: Rigo Wenning
contributor: Ramisa Gachpaz Hamed
contributor: Javier D. Fernández
contributor: Beatriz Esteves
contributor: Bert Bos
contributor: Fajar J. Ekaputra
contributor: Mark Lizar
contributor: Bud Bruegger
contributor: Rob Brennan
contributor: Harshvardhan J. Pandit
contributor: Eva Schlehahn
contributor: Paul Ryan
contributor: Georg P Krog
type: Ontology
modified: 2022-10-22
preferred namespace uri: https://w3id.org/dpv#
description: The Data Privacy Vocabulary (DPV) provides terms (classes and properties) to represent information about legally compliant personal data handling, which includes purposes, processing, personal data, technical and organisational measures.
preferred namespace prefix: dpv
created: 2019-06-18
creator: Harshvardhan J. Pandit
creator: Axel Polleres
source: dpvcg
version info: 0.9
license: doc-license

Data Exporter
in scheme: dpv#
creator: David Hickey
creator: Georg Krog
creator: Harshvardhan Pandit
creator: Paul Ryan
created: 2021-09-08
type: Concept
definition: An entity that 'exports' data where exporting is considered a form of data transfer
isSubTypeOf: Legal Entity
source: recommendations-012020-measures-supplement-transfer en
term status: accepted
broader: Legal Entity
note: The EU, in particular the EDPB, uses data exporter the context of cross-border data transfers/flows. These concepts are not bound by jurisdictional or geopolitical scopes within DPV and can thus be used for any notion of exporting

Within Virtual Environment
in scheme: dpv#
definition: Location is local and entirely within a virtual environment, such as a shared network directory
type: Concept
creator: Harshvardhan J. Pandit
isSubTypeOf: Local Location
created: 2020-10-06
broader: Local Location
term status: accepted

Entities_Datasubject Concepts
member: Data Subject
member: Consumer
member: Parent(s) of Data Subject
member: NonCitizen
member: has data subject
member: Child
member: Employee
member: Participant
member: Elderly Data Subject
member: Patient
member: Visitor
member: Client
member: Immigrant
member: Citizen
member: Customer
member: Tourist
member: Mentally Vulnerable Data Subject
member: Vulnerable Data Subject
member: Adult
member: Student
member: Guardian(s) of Data Subject
member: has relation with data subject
member: JobApplicant
member: Applicant
member: User
member: Subscriber
member: Asylum Seeker
member: Member
type: Collection

Entities_Authority Concepts
member: has authority
member: NationalAuthority
member: RegionalAuthority
member: Authority
member: is authority for
member: Data Protection Authority
member: SupraNationalAuthority
type: Collection

Cryptographic Authentication
in scheme: dpv#
narrower: Authentication using PABC
narrower: Hash-based Message Authentication Code (HMAC)
narrower: Authentication using ABC
narrower: Message Authentication Codes (MAC)
isSubTypeOf: Authentication Protocols
isSubTypeOf: Cryptographic Methods
definition: Use of crytography for authentication
created: 2022-08-17
broader: Authentication Protocols
broader: Cryptographic Methods
type: Concept
term status: accepted
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy

Symmetric Cryptography
in scheme: dpv#
created: 2022-08-17
broader: CrytographicMethods
type: Concept
term status: accepted
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
definition: Use of crytography where the same keys are utilised for encryption and descryption of information
isSubTypeOf: CrytographicMethods

Data Transfer Legal Basis
in scheme: dpv#
creator: David Hickey
creator: Georg P Krogg
type: Concept
broader: Legal Basis
isSubTypeOf: Legal Basis
definition: Specific or special categories and instances of legal basis intended for justifying data transfers
term status: accepted
created: 2021-09-08

Context
in scheme: dpv#
narrower: Importance
narrower: Necessity
narrower: Frequency
narrower: Duration
narrower: Justification
narrower: Scope
narrower: Status
narrower: Processing Context
creator: Simon Steyskal
creator: Javier Fernandez
creator: Elmar Kiesling
creator: Harshvardhan J. Pandit
creator: Axel Polleres
creator: Fajar Ekaputra
term status: modified
created: 2019-04-05
example: E0028
modified: 2022-06-15
definition: Contextually relevant information not possible to represent through other core concepts
type: Concept

Data Anonymisation Technique
in scheme: dpv#
term status: accepted
source: reference-incident-classification-taxonomy
creator: Harshvardhan J. Pandit
narrower: Pseudonymisation
narrower: Anonymisation
narrower: De-Identification
type: Concept
definition: Use of anonymisation techniques that reduce the identifiability in data
created: 2022-08-17
isSubTypeOf: Data Sanitisation Technique
broader: Data Sanitisation Technique

Jurisdiction Concepts
member: Within Device
member: has country
member: Local Location
member: Location
member: Fixed Singular Location
member: Location Locality
member: Fixed Multiple Locations
member: SupraNationalUnion
member: Variable Location
member: Publicly Accessible Location
member: has applicable law
member: Third Country
member: Remote Location
member: has location
member: Region
member: Federated Locations
member: Country
member: has third country
member: Within Physical Environment
member: Random Location
member: Within Virtual Environment
member: Law
member: Location Fixture
member: Cloud Location
member: Decentralised Locations
member: City
member: Private Location
member: EconomicUnion
member: Fixed Location
member: has jurisdiction
type: Collection

Delivery of Goods
in scheme: dpv#
isSubTypeOf: Requested Service Provision
term status: accepted
creator: Javier Fernandez
creator: Elmar Kiesling
creator: Harshvardhan J. Pandit
creator: Fajar Ekaputra
creator: Simon Steyskal
creator: Axel Polleres
definition: Deliver goods and services requested or asked by consumer
type: Concept
related: Delivery
broader: Requested Service Provision
created: 2019-04-05

Audit Required
in scheme: dpv#
created: 2022-05-18
type: Concept
creator: Harshvardhan J. Pandit
definition: State where an audit is determined as being required but has not been conducted
term status: accepted
broader: Audit Status
isInstanceOf: Audit Status

Incident Management Procedures
in scheme: dpv#
type: Concept
isSubTypeOf: Governance Procedures
created: 2022-08-17
definition: Procedures related to management of incidents
broader: Governance Procedures
source: 5g-cybersecurity-standards
term status: accepted
creator: Harshvardhan J. Pandit

Optimise User Interface
in scheme: dpv#
isSubTypeOf: Optimisation for Consumer
type: Concept
definition: Optimize interfaces presented to the user
creator: Simon Steyskal
creator: Javier Fernandez
creator: Elmar Kiesling
creator: Harshvardhan J. Pandit
creator: Fajar Ekaputra
creator: Axel Polleres
term status: accepted
broader: Optimisation for Consumer
created: 2019-04-05

Usage Control
in scheme: dpv#
created: 2022-08-17
type: Concept
term status: accepted
isSubTypeOf: Access Control Method
creator: Harshvardhan J. Pandit
broader: Access Control Method
source: reference-incident-classification-taxonomy
definition: Management of usage, which is intended to be broader than access control and may cover trust, digital rights, or other relevant controls

Encryption
in scheme: dpv#
creator: Rob Brennan
creator: Mark Lizar
creator: Axel Polleres
creator: Harshvardhan J. Pandit
narrower: Symmetric Encryption
narrower: Encryption in Transfer
narrower: Encryption in Use
narrower: Encryption at Rest
narrower: End-to-End Encryption (E2EE)
narrower: Asymmetric Encryption
type: Concept
definition: Technical measures consisting of encryption
example: E0016
created: 2019-04-05
term status: accepted
isSubTypeOf: Technical Measure
broader: Technical Measure

has activity status
in scheme: dpv#
has domain: Concept
created: 2022-05-18
has range: Activity Status
type: Concept
type: Relation
isSubTypeOf: has status
creator: Harshvardhan J. Pandit
definition: Indicates the status of activity of specified concept
term status: accepted
broader: has status

Transfer
in scheme: dpv#
broader: Processing
related: Transfer
type: Concept
source: processing
definition: to move data from one place to another
created: 2019-05-07
example: E0020
narrower: Move
term status: accepted
isSubTypeOf: Processing

NonConformant
in scheme: dpv#
type: Concept
term status: accepted
broader: Conformance Status
created: 2022-10-22
isInstanceOf: Conformance Status
definition: State of being non-conformant
creator: Harshvardhan J. Pandit

Service Order Management
in scheme: dpv#
type: Concept
isSubTypeOf: Service Provision
created: 2021-09-08
term status: accepted
broader: Service Provision
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Beatriz Esteves
definition: Manage invoicing, orders, and records in relation to services

Asset Management Procedures
in scheme: dpv#
type: Concept
broader: Governance Procedures
source: 5g-cybersecurity-standards
term status: accepted
creator: Harshvardhan J. Pandit
isSubTypeOf: Governance Procedures
definition: Procedures related to management of assets
created: 2022-08-17

Decision Making
in scheme: dpv#
definition: Processing that involves decision making
term status: accepted
broader: Processing Context
narrower: Automated Decision Making
isSubTypeOf: Processing Context
type: Concept
creator: Harshvardhan J. Pandit
created: 2022-09-07

Security Role Procedures
in scheme: dpv#
creator: Harshvardhan J. Pandit
broader: Security Procedure
type: Concept
source: 5g-cybersecurity-standards
term status: accepted
created: 2022-08-17
definition: Procedures related to security roles
isSubTypeOf: Security Procedure

City
in scheme: dpv#
definition: A region consisting of urban population and commerce
broader: Location
term status: accepted
created: 2022-10-22
creator: Harshvardhan J. Pandit
isSubTypeOf: Location
type: Concept

Representative
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Beatriz Esteves
creator: Georg Krog
creator: Paul Ryan
source: oj
broader: Legal Entity
isSubTypeOf: Legal Entity
type: Concept
created: 2020-11-04
term status: accepted
definition: A representative of a legal entity
narrower: Data Protection Officer

Notice
in scheme: dpv#
created: 2021-09-08
type: Concept
creator: Paul Ryan
creator: Harshvardhan J. Pandit
creator: David Hickey
creator: Georg P Krog
broader: Organisational Measure
definition: A notice is an artefact for providing information, choices, or controls
example: E0025
narrower: Privacy Notice
term status: accepted
isSubTypeOf: Organisational Measure

Activity Proposed
in scheme: dpv#
broader: Activity Status
definition: State of an activity being proposed or planned i.e. yet to occur
created: 2022-05-18
type: Concept
isInstanceOf: Activity Status
creator: Harshvardhan J. Pandit
term status: accepted

Entity
in scheme: dpv#
creator: Harshvardhan J. Pandit
type: Concept
created: 2022-02-02
narrower: Legal Entity
narrower: Natural Person
narrower: Organisational Unit
definition: A human or non-human 'thing' that constitutes as an entity
example: E0027
term status: accepted

has recipient data controller
in scheme: dpv#
has domain: Concept
term status: accepted
creator: Paul Ryan
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
created: 2022-02-09
type: Concept
type: Relation
broader: has recipient
isSubTypeOf: has recipient
definition: Indiciates inclusion or applicability of a Data Controller as a Recipient of persona data
has range: Data Controller

Audit Status
in scheme: dpv#
isSubTypeOf: Status
narrower: Audit Rejected
narrower: Audit Conditionally Approved
narrower: Audit Requested
narrower: Audit Approved
narrower: Audit Not Required
narrower: Audit Required
created: 2022-05-18
broader: Status
type: Concept
creator: Harshvardhan J. Pandit
term status: accepted
definition: Status associated with Auditing or Investigation

Consent Status Valid for Processing
in scheme: dpv#
type: Concept
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P Krog
created: 2022-06-22
note: Practically, given consent is the only valid state for processing
definition: States of consent that can be used as valid justifications for processing data
narrower: Renewed Consent Given
narrower: Consent Given
broader: Consent Status
term status: accepted
source: GConsent
isSubTypeOf: Consent Status

GuidelinesPrinciple
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Rob Brennan
creator: Mark Lizar
creator: Axel Polleres
narrower: Privacy by Default
narrower: Code of Conduct
narrower: Design Standard
isSubTypeOf: Organisational Measure
type: Concept
broader: Organisational Measure
created: 2019-04-05
definition: Guidelines or Principles regarding processing and operational measures
term status: accepted

Primary Importance
in scheme: dpv#
type: Concept
broader: Importance
creator: Harshvardhan J. Pandit
creator: Beatriz Esteves
creator: Paul Ryan
creator: Julian Flake
creator: Georg P Krog
isInstanceOf: Importance
definition: Indication of 'primary' or 'main' or 'core' importance
created: 2022-02-10
term status: accepted

Expressed Consent
in scheme: dpv#
isSubTypeOf: Informed Consent
term status: accepted
created: 2022-06-21
definition: Consent that is expressed through an action intended to convey a consenting decision
type: Concept
narrower: Explicitly Expressed Consent
creator: Julian Flake
creator: Georg P Krog
creator: Paul Ryan
creator: Harshvardhan J. Pandit
note: Expressed consent requires the individual take a specific and unambigious action that directly indicates their consent. This action may be a part of other processes such as setting preferences, or agreeing to a contract, or other matters not relating to consent. An example of expressed consent is interacting with a checkbox within a dashboard or clicking a button on a web form
broader: Informed Consent

has frequency
in scheme: dpv#
has range: Frequency
created: 2022-02-16
type: Concept
type: Relation
creator: Harshvardhan J. Pandit
definition: Indicates the frequency with which something takes place
has domain: Concept
term status: accepted

Right
in scheme: dpv#
narrower: Data Subject Right
narrower: Active Right
narrower: Passive Right
type: Concept
definition: The right(s) applicable, provided, or expected.
definition: The right(s) applicable, provided, or expected
creator: Beatriz Esteves
creator: Harshvardhan J Pandit
creator: Georg P Krog
term status: accepted
note: A 'right' is a legal, social, or ethical principle of freedom or entitlement which dictate the norms regarding what is allowed or owed.. Rights as a concept encompass a broad area of norms and entities, and are not specific to Individuals or Data Protection / Privacy. For individual specific rights, see dpv:DataSubjectRight
created: 2020-11-18

has provision time
in scheme: dpv#
type: Concept
type: Relation
creator: Mark Lizar
creator: Harshvardhan J. Pandit
creator: Bud Bruegger
term status: sunset
definition: Specifies the instant in time when consent was given
modified: 2022-06-22
editorial note: WARNING: This concept will be deprecated in future releases
created: 2019-04-05

Create Personalised Recommendations
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Rudy Jacob
created: 2019-11-26
narrower: Create Product Recommendations
narrower: Create Event Recommendations
isSubTypeOf: Service Personalization
broader: Service Personalization
source: specialprivacy.ercim.eu
type: Concept
modified: 2022-10-14
definition: Create and provide personalised recommendations
term status: modified

IndustryConsortium
in scheme: dpv#
created: 2022-02-02
term status: modified
broader: Organisation
definition: A consortium established and comprising on industry organisations
creator: Harshvardhan J. Pandit
type: Concept
isSubTypeOf: Organisation
source: adms
modified: 2020-10-05

Required
in scheme: dpv#
type: Concept
creator: Harshvardhan J. Pandit
creator: Beatriz Esteves
creator: Paul Ryan
creator: Julian Flake
creator: Georg P Krog
definition: Indication of 'required' or 'necessary'
broader: Necessity
isInstanceOf: Necessity
created: 2022-02-13
term status: accepted

Frequency
in scheme: dpv#
created: 2022-02-16
isSubTypeOf: Context
narrower: Singular Frequency
narrower: Continous Frequency
narrower: Sporadic Frequency
narrower: Often Frequency
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
definition: The frequency or information about periods and repetitions in terms of recurrence.
broader: Context

has provision by justification
in scheme: dpv#
creator: Bud Bruegger
creator: Mark Lizar
creator: Harshvardhan J. Pandit
created: 2019-04-05
type: Concept
type: Relation
note: This field can be used to proivde a justification why the provision was provided by another DataSubject or legal entity, e.g. declariing the relationship (parent, guardian), in combination with the field provisionBy
editorial note: WARNING: This concept will be deprecated in future releases
definition: Specifies the justification for entity providing consent
term status: sunset
modified: 2022-06-22

Data Processing Records
in scheme: dpv#
broader: Records of Activities
creator: Harshvardhan J. Pandit
definition: Records of personal data processing, whether ex-ante or ex-post
created: 2021-09-08
type: Concept
isSubTypeOf: Records of Activities
narrower: Register of Processing Activities
term status: accepted

SupraNationalUnion
in scheme: dpv#
type: Concept
definition: A political union of two or more countries with an establishment of common authority
term status: accepted
isSubTypeOf: Location
creator: Harshvardhan J. Pandit
created: 2022-01-19
broader: Location

has algorithmic logic
in scheme: dpv#
has domain: Concept
term status: changed
has range: Algorithmic Logic
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
modified: 2022-06-15
created: 2020-11-04
type: Concept
type: Relation
definition: Indicates the logic used in processing such as for automated decision making

Likelihood
in scheme: dpv#
term status: accepted
creator: Harshvardhan J. Pandit
created: 2022-07-22
type: Concept
note: Likelihood can be expressed in a subjective manner, such as 'Unlikely', or in a quantitative manner such as "Twice in a Day" (frequency per period). The suggestion is to use quantitative values, or to associate them with subjective terms used so as to enable accurate interpretations and interoperability. See the concepts related to Frequency and Duration for possible uses as a combination to express Likelihood.
definition: The likelihood or probability or chance of something taking place or occuring

Activity Completed
in scheme: dpv#
definition: State of an activity that has completed i.e. is fully in the past
created: 2022-05-18
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Activity Status
isInstanceOf: Activity Status

Privacy by Default
in scheme: dpv#
creator: Mark Lizar
creator: Axel Polleres
creator: Rob Brennan
creator: Harshvardhan J. Pandit
broader: GuidelinesPrinciple
created: 2019-04-05
term status: accepted
type: Concept
definition: Practices regarding selecting appropriate data protection and privacy measures as the 'default' in an activity or service
isSubTypeOf: GuidelinesPrinciple

Organisation Compliance Management
in scheme: dpv#
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: David Hickey
isSubTypeOf: Organisation Governance
broader: Organisation Governance
type: Concept
definition: Manage compliance for organisation in relation to internal policies
term status: accepted
created: 2021-09-01

Commercial Research
in scheme: dpv#
definition: Conduct research in a commercial setting or with intention to commercialise e.g. in a company or sponsored by a company
type: Concept
creator: Axel Polleres
creator: Simon Steyskal
creator: Javier Fernandez
creator: Elmar Kiesling
creator: Harshvardhan J. Pandit
creator: Fajar Ekaputra
isSubTypeOf: Research and Development
created: 2019-04-05
related: Develop
term status: accepted
broader: Research and Development

Rights Concepts
member: Active Right
member: has right
member: is exercised at
member: Right
member: Data Subject Right
member: Passive Right
member: Right Exercise
type: Collection

has contact
in scheme: dpv#
creator: Beatriz Esteves
creator: Harshvardhan J.Pandit
creator: Paul Ryan
creator: Georg P Krog
created: 2020-11-04
has range: Concept
has domain: Entity
definition: Specifies contact details of a legal entity such as phone or email
type: Concept
type: Relation
term status: accepted

Lawfulness (alt title: LegalComplianceStatus)
in scheme: dpv#
narrower: Lawful
narrower: Unlawful
narrower: Lawfulness Unknown
type: Concept
isSubTypeOf: Compliance Status
definition: Status associated with being lawful
term status: accepted
broader: Compliance Status

Processing_Context Concepts
member: Completely Manual Processing
member: Decision Making
member: Automated Decision Making
member: has human involvement
member: Innovative Use of New Technologies
member: Systematic Monitoring
member: Human Involvement for Verification
member: Automation of Processing
member: Data published by Data Subject
member: Storage Restoration
member: Human Involvement
member: Data Source
member: Human Involvement for Input
member: Processing Context
member: Partially Automated Processing
member: has data source
member: Human Involvement for Oversight
member: has algorithmic logic
member: Scoring of Individuals
member: Public Data Source
member: Algorithmic Logic
member: Automated Processing with Human Oversight
member: Evaluation and Scoring
member: Storage Deletion
member: Automated Processing with Human Review
member: Storage Duration
member: has storage condition
member: Storage Location
member: Evaluation of Individuals
member: Automated Processing with Human Input
member: Non-Public Data Source
member: Storage Condition
member: has processing automation
member: Fully Automated Processing
type: Collection

Non-Personal Data
in scheme: dpv#
type: Concept
note: The term NonPersonalData is provided to distinguish between PersonalData and other data, e.g. for indicating which data is regulated by privacy laws. To specify personal data that has been anonymised, the concept AnonymisedData should be used.
creator: Harshvardhan J. Pandit
isSubTypeOf: Data
narrower: Anonymised Data
created: 2022-01-19
broader: Data
definition: Data that is not Personal Data
term status: accepted

Enforce Access Control
in scheme: dpv#
related: Login
definition: Conduct or enforce access control
broader: Enforce Security
note: Was previously "Access Control". Prefixed to distinguish from Technical Measure.
term status: accepted
creator: Javier Fernandez
creator: Elmar Kiesling
creator: Harshvardhan J. Pandit
creator: Fajar Ekaputra
creator: Simon Steyskal
creator: Axel Polleres
type: Concept
isSubTypeOf: Enforce Security
created: 2019-04-05

SingularScaleOfDataSubjects
in scheme: dpv#
type: Concept
creator: Harshvardhan J. Pandit
definition: Scale of data subjects considered singular i.e. a specific data subject
broader: Data Subject Scale
term status: accepted
isInstanceOf: Data Subject Scale
created: 2022-06-15

Risk Concepts
type: Collection
member: has severity
member: Severity
member: Harm
member: Non-Material Damage
member: Risk Mitigation Measure
member: Consequence of Failure
member: has likelihood
member: Likelihood
member: has impact on
member: has risk level
member: Benefit
member: Risk Level
member: Material Damage
member: has impact
member: is residual risk of
member: Risk Management Process
member: Detriment
member: has consequence
member: Impact
member: mitigates risk
member: Damage
member: Consequence as Side-Effect
member: has residual risk
member: has risk
member: Consequence
member: is mitigated by measure
member: Risk
member: Consequence of Success

Informed Consent
in scheme: dpv#
broader: Consent
term status: accepted
note: The specifics for what information should be provided or made available will depend on the context, use-case, or relevant legal requirements
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Paul Ryan
narrower: Implied Consent
narrower: Expressed Consent
type: Concept
created: 2022-06-21
isSubTypeOf: Consent
definition: Consent that is informed i.e. with the requirement to provide sufficient information to make a consenting decision

Governance Procedures
in scheme: dpv#
narrower: Monitoring Policies
narrower: Logging Policies
narrower: Incident Reporting Communication
narrower: Disaster Recovery Procedures
narrower: Asset Management Procedures
narrower: Compliance Monitoring
narrower: Incident Management Procedures
creator: Harshvardhan J. Pandit
isSubTypeOf: Organisational Measure
broader: Organisational Measure
created: 2022-08-17
type: Concept
definition: Procedures related to governance (e.g. organisation, unit, team, process, system)
source: 5g-cybersecurity-standards
term status: accepted

Within Physical Environment
in scheme: dpv#
term status: accepted
type: Concept
creator: Harshvardhan J. Pandit
isSubTypeOf: Local Location
created: 2020-10-06
definition: Location is local and entirely within a physical environment, such as a room
broader: Local Location

Encryption in Transfer
in scheme: dpv#
definition: Encryption of data in transit e.g. when being transferred from one location to another, including sharing
type: Concept
creator: Harshvardhan J. Pandit
creator: Rob Brennan
creator: Mark Lizar
creator: Axel Polleres
isSubTypeOf: Encryption
broader: Encryption
created: 2019-04-05
term status: accepted

Service Personalization
in scheme: dpv#
isSubTypeOf: Personalisation
isSubTypeOf: Service Provision
created: 2019-04-05
term status: accepted
broader: Service Provision
broader: Personalisation
narrower: User Interface Personalisation
narrower: Personalised Benefits
narrower: Create Personalised Recommendations
type: Concept
creator: Simon Steyskal
creator: Javier Fernandez
creator: Elmar Kiesling
creator: Harshvardhan J. Pandit
creator: Fajar Ekaputra
creator: Axel Polleres
definition: Personalise services or product or activities
note: Subclass of ServiceProvision since personalisation is usually considered part of providing services

Monotonic Counter Pseudonymisation
in scheme: dpv#
definition: A simple pseudonymisation method where identifiers are substituted by a number chosen by a monotonic counter
term status: modified
creator: Harshvardhan J. Pandit
isSubTypeOf: Pseudonymisation
source: data-pseudonymisation-advanced-techniques-and-use-cases
broader: Pseudonymisation
created: 2022-08-17
type: Concept
modified: 2022-10-13

Automated Processing with Human Review
in scheme: dpv#
note: For example, a human verifying outputs of an algorithm for correctness or impact to individuals
isInstanceOf: Automation of Processing
isInstanceOf: Human Involvement for Verification
term status: modified
broader: Human Involvement for Verification
broader: Automation of Processing
modified: 2020-10-05
type: Concept
creator: Harshvardhan J. Pandit
definition: Processing that is automated and involves review by Humans
created: 2022-06-15

Document Security
in scheme: dpv#
type: Concept
definition: Security measures enacted over documents to protect against tampering or restrict access
isSubTypeOf: Security Method
creator: Harshvardhan J. Pandit
term status: accepted
broader: Security Method
source: reference-incident-classification-taxonomy
created: 2022-08-17

has personal data
in scheme: dpv#
definition: Indicates association with Personal Data
type: Concept
type: Relation
creator: Harshvardhan J. Pandit
created: 2022-01-19
term status: accepted
has domain: Concept
has range: Personal Data
isSubTypeOf: has data
broader: has data

Conformance Status
in scheme: dpv#
narrower: NonConformant
narrower: Conformant
created: 2022-10-22
definition: Status associated with conformance to a standard, guideline, code, or recommendation
broader: Status
isSubTypeOf: Status
type: Concept
creator: Harshvardhan J. Pandit
term status: accepted

Mentally Vulnerable Data Subject
in scheme: dpv#
type: Concept
isSubTypeOf: Vulnerable Data Subject
term status: accepted
created: 2022-06-15
creator: Georg P Krog
broader: Vulnerable Data Subject
definition: Data subjects that are considered mentally vulnerable

Storage Duration
in scheme: dpv#
created: 2019-04-05
creator: Mark Lizar
creator: Harshvardhan J. Pandit
creator: Axel Polleres
creator: Rob Brennan
definition: Duration or temporal limitation on storage of personal data
term status: accepted
broader: Storage Condition
broader: Duration
isSubTypeOf: Duration
isSubTypeOf: Storage Condition
type: Concept

has provision method
in scheme: dpv#
note: Can be used to record information of how consent was provided e.g. by a click to a form, in writing, etc., by logging into a system and confirm per email, or with some additional authentication, etc.
term status: sunset
modified: 2022-06-22
creator: Bud Bruegger
creator: Harshvardhan J. Pandit
creator: Mark Lizar
editorial note: WARNING: This concept will be deprecated in future releases
created: 2019-04-05
type: Concept
type: Relation
definition: Specifies the method by which consent was provisioned or provided

is explicit
in scheme: dpv#
term status: sunset
created: 2019-04-05
type: Relation
type: Concept
modified: 2022-06-22
creator: Mark Lizar
creator: Harshvardhan J. Pandit
creator: Bud Bruegger
has range: boolean
note: The conditions for what is considered 'explicit consent' differ by norms and laws.
definition: Specifies consent is 'explicit'
editorial note: WARNING: This concept will be deprecated in future releases

Human Involvement for Verification
in scheme: dpv#
type: Concept
term status: accepted
isInstanceOf: Human Involvement
narrower: Automated Processing with Human Review
broader: Human Involvement
creator: Harshvardhan J. Pandit
created: 2022-09-07
definition: Human involvement for the purposes of verification of a system, its operations, inputs, or outputs

Customer Order Management
in scheme: dpv#
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Beatriz
isSubTypeOf: Customer Management
source: model-voor-een-register-van-de-verwerkingsactiviteiten
broader: Customer Management
created: 2021-09-08
type: Concept
definition: Manage customer orders
term status: accepted

Activity Monitoring
in scheme: dpv#
definition: Monitoring of activities including assessing whether they have been successfully initiated and completed
type: Concept
created: 2022-08-17
isSubTypeOf: Technical Measure
broader: Technical Measure
source: reference-incident-classification-taxonomy
creator: Harshvardhan J. Pandit
term status: accepted

Right Exercise
in scheme: dpv#
type: Concept
term status: accepted
creator: Georg P Krog
creator: Harshvardhan J Pandit
creator: Paul Ryan
creator: Beatriz Esteves
created: 2022-10-22
definition: The exercising of an active right

Base Concepts
type: Collection
member: Legal Basis
member: Processing
member: Recipient
member: has right
member: Data Subject
member: Technical and Organisational Measure
member: has recipient
member: has data controller
member: Data Controller
member: has data subject
member: Risk
member: has legal basis
member: Right
member: has purpose
member: Personal Data
member: Purpose
member: has risk
member: has technical and organisational measure
member: Personal Data Handling
member: has personal data
member: has personal data handling
member: has processing
member: Data Subject Right

has rule
in scheme: dpv#
type: Relation
type: Concept
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P Krog
creator: Beatriz Esteves
definition: Specifying applicability or inclusion of a rule within specified context
has domain: Context
has range: Rule
term status: accepted
created: 2022-10-19

has data exporter
in scheme: dpv#
type: Relation
type: Concept
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P. Krog
term status: accepted
has range: Data Exporter
definition: Indiciates inclusion or applicability of a LegalEntity in the role of Data Exporter
isSubTypeOf: has entity
has domain: Concept
created: 2022-02-09
broader: has entity

Data Protection Authority
in scheme: dpv#
type: Concept
term status: accepted
broader: Authority
definition: An authority tasked with overseeing legal compliance regarding privacy and data protection laws.
isSubTypeOf: Authority
created: 2020-11-04
creator: Georg Krog
creator: Harshvardhan Pandit
creator: Paul Ryan

has outcome
in scheme: dpv#
definition: Indicates an outcome of specified concept or context
has domain: Concept
term status: accepted
has range: Concept
created: 2022-05-18
type: Concept
type: Relation
creator: Harshvardhan J. Pandit

Legitimate Interest of Data Subject
in scheme: dpv#
definition: Legitimate Interests of the Data Subject in conducting specified processing
creator: Georg P Krog
type: Concept
created: 2022-10-22
isSubTypeOf: Legitimate Interest
term status: accepted
broader: Legitimate Interest

Privacy Impact Assessment
in scheme: dpv#
definition: Carrying out an impact assessment regarding privacy risks
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
isSubTypeOf: Impact Assessment
broader: Impact Assessment
created: 2020-11-04
term status: accepted

Create Product Recommendations
in scheme: dpv#
broader: Create Personalised Recommendations
definition: Create and provide product recommendations e.g. suggest similar products
type: Concept
creator: Simon Steyskal
creator: Javier Fernandez
creator: Elmar Kiesling
creator: Harshvardhan J. Pandit
creator: Fajar Ekaputra
creator: Axel Polleres
modified: 2022-10-14
isSubTypeOf: Create Personalised Recommendations
related: Marketing
created: 2019-04-05
term status: modified

Public Data Source
in scheme: dpv#
type: Concept
definition: A source of data that is publicly accessible or available
broader: Data Source
note: The term 'Public' is used here in a broad sense. Actual consideration of what is 'Public Data' can vary based on several contextual or jurisdictional factors such as definition of open, methods of access, permissions and licenses.
creator: Paul Ryan
creator: Georg P Krog
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Beatriz Esteves
term status: accepted
isInstanceOf: Data Source
created: 2022-01-26

Differential Privacy
in scheme: dpv#
creator: Harshvardhan J. Pandit
definition: Utilisation of differential privacy where information is shared as patterns or groups to withold individual elements
isSubTypeOf: Cryptographic Methods
created: 2022-08-17
type: Concept
broader: Cryptographic Methods
term status: accepted
source: data-protection-engineering

Compliance Indeterminate
in scheme: dpv#
broader: Compliance Status
term status: accepted
definition: State where the status of compliance has not been fully assessed, evaluated, or determined
isInstanceOf: Compliance Status
type: Concept
creator: Harshvardhan J. Pandit
created: 2022-09-07

Sensitive Personal Data
in scheme: dpv#
note: Sensitivity' is a matter of context, and may be defined within legal frameworks. For GDPR, Special categories of personal data are considered a subset of sensitive data. To illustrate the difference between the two, consider the situation where Location data is collected, and which is considered 'sensitive' but not 'special'. As a probable rule, sensitive data require additional considerations whereas special category data requires additional legal basis / justifications.
term status: accepted
type: Concept
broader: Personal Data
narrower: Special Category Personal Data
example: E0015
creator: Harshvardhan J. Pandit
definition: Personal data that is considered 'sensitive' in terms of privacy and/or impact, and therefore requires additional considerations and/or protection
isSubTypeOf: Personal Data
created: 2022-01-19

Remote Location
in scheme: dpv#
modified: 2020-10-05
definition: Location is remote i.e. not local
type: Concept
broader: Location Locality
narrower: Cloud Location
created: 2022-06-15
term status: modified
creator: Harshvardhan J. Pandit
isSubTypeOf: Location Locality

Data Redaction
in scheme: dpv#
broader: Data Sanitisation Technique
type: Concept
term status: accepted
creator: Harshvardhan J. Pandit
definition: Removal of sensitive information from a data or document
created: 2020-10-01
isSubTypeOf: Data Sanitisation Technique

Legal Agreement
in scheme: dpv#
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Rob Brennan
creator: Mark Lizar
term status: accepted
isSubTypeOf: Organisational Measure
broader: Organisational Measure
narrower: Non-Disclosure Agreement (NDA)
narrower: Data Processing Agreement
narrower: Contractual Terms
narrower: Contract
created: 2019-04-05
type: Concept
definition: A legally binding agreement

Data Source
in scheme: dpv#
example: E0020
example: E0012
narrower: Public Data Source
narrower: Non-Public Data Source
narrower: Data published by Data Subject
created: 2020-11-04
broader: Processing Context
type: Concept
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
term status: accepted
note: Source' is the direct point of data collection; 'origin' would indicate the original/others points of where the data originates from.
definition: The source or origin of data
isSubTypeOf: Processing Context

has technical and organisational measure
in scheme: dpv#
type: Concept
type: Relation
creator: Harshvardhan J. Pandit
creator: Javier Fernández
creator: Bud Bruegger
creator: Axel Polleres
creator: Mark Lizar
has range: Technical and Organisational Measure
has domain: Concept
modified: 2020-11-04
definition: Indicates use or applicability of Technical or Organisational measure
term status: accepted
created: 2019-04-04
narrower: is mitigated by measure
narrower: has policy
narrower: has organisational measure
narrower: has technical measure

NationalScale
in scheme: dpv#
broader: Geographic Coverage
type: Concept
creator: Harshvardhan J. Pandit
created: 2022-06-15
isInstanceOf: Geographic Coverage
term status: accepted
definition: Geographic coverage spanning a nation

RegionalScale
in scheme: dpv#
type: Concept
definition: Geographic coverage spanning a specific region or regions
creator: Harshvardhan J. Pandit
isInstanceOf: Geographic Coverage
created: 2022-06-15
term status: accepted
broader: Geographic Coverage

has impact
in scheme: dpv#
type: Relation
type: Concept
creator: Harshvardhan J. Pandit
creator: Beatriz Esteves
creator: Fajar Ekaputra
creator: Julian Flake
creator: Georg P Krog
broader: has consequence
has domain: Concept
term status: accepted
definition: Indicates impact(s) possible or arising as consequences from specified concept
isSubTypeOf: has consequence
has range: Impact
created: 2022-05-18

Participant
in scheme: dpv#
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Georg P. Krog
creator: Beatriz Esteves
creator: Paul Ryan
isSubTypeOf: Data Subject
created: 2022-04-06
definition: Data subjects that participate in some context such as volunteers in a function
broader: Data Subject
type: Concept
term status: accepted

Purposes Concepts
member: Customer Management
member: Sell Data to Third Parties
member: has sector
member: Service Usage Analytics
member: Customer Care
member: Service Optimization
member: Optimise User Interface
member: Counter Money Laundering
member: Create Personalised Recommendations
member: MaintainCreditCheckingDatabase
member: Service Personalization
member: Vendor Selection Assessment
member: Internal Resource Optimisation
member: Enforce Security
member: Sector
member: Advertising
member: Credit Checking
member: Increase Service Robustness
member: Vendor Records Management
member: Communication for Customer Care
member: Fraud Prevention and Detection
member: Purpose
member: MaintainCreditRatingDatabase
member: Public Relations
member: Customer Order Management
member: Marketing
member: Non-Commercial Research
member: Research and Development
member: Account Management
member: Identity Verification
member: Sell Insights from Data
member: Enforce Access Control
member: Anti-Terrorism Operations
member: User Interface Personalisation
member: Service Provision
member: Registration and Authentication
member: Optimisation for Consumer
member: Optimisation for Controller
member: MaintainFraudDatabase
member: Legal Compliance
member: Delivery of Goods
member: Social Media
member: Personnel Hiring
member: Personnel Payment
member: Organisation Compliance Management
member: Personnel Management
member: Personalised Benefits
member: Sell Products to Data Subject
member: Academic Research
member: Sell Products
member: Direct Marketing
member: Dispute Management
member: Requested Service Provision
member: Customer Claims Management
member: Customer Relationship Management
member: Commercial Research
member: Record Management
member: Human Resources Management
member: Vendor Payment
member: Technical Service Provision
member: Improve Internal CRM Processes
member: Create Event Recommendations
member: Organisation Risk Management
member: Vendor Management
member: Communication Management
member: Improve Existing Products and Services
member: Personalised Advertising
member: Identify and Repair Impairments
member: Create Product Recommendations
member: Targeted Advertising
member: Service Order Management
member: Members and Partners Management
member: Payment
member: Personalisation
member: has purpose
member: Customer Solvency Monitoring
member: Organisation Governance
type: Collection

Information Security Policy
in scheme: dpv#
type: Concept
source: 5g-cybersecurity-standards
term status: accepted
definition: Policy regarding security of information
isSubTypeOf: Policy
creator: Harshvardhan J. Pandit
broader: Policy
created: 2022-08-17

has withdrawal by justification
in scheme: dpv#
editorial note: WARNING: This concept will be deprecated in future releases
created: 2019-04-05
type: Concept
type: Relation
creator: Mark Lizar
creator: Harshvardhan J. Pandit
creator: Bud Bruegger
term status: sunset
modified: 2022-06-22
definition: Specifies the justification for entity withdrawing consent
note: This field can be used to proivde a justification why the weithdrawal was done by another DataSubject or legal entity, e.g. declariing the relationship (parent, guardian), in combination with the field withdrawalBy

Authentication using PABC
in scheme: dpv#
creator: Harshvardhan J. Pandit
source: data-protection-engineering
isSubTypeOf: Cryptographic Authentication
created: 2022-08-17
broader: Cryptographic Authentication
type: Concept
definition: Use of Privacy-enhacing Attribute Based Credentials (ABC) to perform and manage authentication
term status: accepted

Endless Duration
in scheme: dpv#
type: Concept
modified: 2020-10-05
definition: Duration that is (known or intended to be) open ended or without an end
broader: Duration
created: 2022-06-15
isInstanceOf: Duration
creator: Harshvardhan J. Pandit
term status: modified

Erase
in scheme: dpv#
type: Concept
term status: accepted
isSubTypeOf: Remove
broader: Remove
definition: to delete data
source: oj
created: 2019-05-07

Customer Claims Management
in scheme: dpv#
creator: Beatriz
creator: Georg P Krog
creator: Harshvardhan J. Pandit
definition: Manage claims, including repayment of monies owed
type: Concept
isSubTypeOf: Customer Management
source: model-voor-een-register-van-de-verwerkingsactiviteiten
broader: Customer Management
created: 2021-09-08
term status: accepted

Remove
in scheme: dpv#
created: 2019-05-07
type: Concept
term status: accepted
isSubTypeOf: Processing
narrower: Erase
narrower: Destruct
broader: Processing
source: oj
definition: to destruct or erase data

has personal data handling
in scheme: dpv#
type: Concept
type: Relation
term status: accepted
creator: Harshvardhan J. Pandit
creator: Georg P Krog
created: 2022-01-19
definition: Indicates association with Personal Data Handling
has domain: Concept
has range: Personal Data Handling

Immigrant
in scheme: dpv#
type: Concept
definition: Data subjects that are immigrants (for a jurisdiction)
creator: Julian Flake
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Beatriz Esteves
term status: accepted
isSubTypeOf: Data Subject
created: 2022-04-06
broader: Data Subject

is implemented using technology
in scheme: dpv#
creator: Beatriz Esteves
creator: Paul Ryan
creator: Julian Flake
creator: Harshvardhan J. Pandit
has domain: Concept
note: The term 'technology' is inclusive of technologies, processes, and methods.
has range: Technology
created: 2022-01-26
definition: Indicates implementation details such as technologies or processes
modified: 2022-06-15
type: Concept
type: Relation
term status: changed

Security Knowledge Training
in scheme: dpv#
creator: Harshvardhan J. Pandit
isSubTypeOf: Staff Training
created: 2022-08-17
broader: Staff Training
type: Concept
source: 5g-cybersecurity-standards
term status: accepted
definition: Training intended to increase knowledge regarding security

Child
in scheme: dpv#
type: Concept
creator: Harshvardhan J. Pandit
term status: changed
isSubTypeOf: Data Subject
modified: 2022-06-22
definition: A 'child' is a natural legal person who is below a certain legal age depending on the legal jurisdiction.
note: The legality of age defining a child varies by jurisdiction. In addition, 'child' is distinct from a 'minor'. For example, the legal age for consumption of alcohol can be 21, which makes a person of age 20 a 'minor' in this context. In other cases, 'minor' and 'child' are used interchangeably to refer to a person below some legally defined age.
created: 2020-11-25
broader: Data Subject

Storage Condition
in scheme: dpv#
isSubTypeOf: Processing Context
narrower: Storage Deletion
narrower: Storage Duration
narrower: Storage Location
narrower: Storage Restoration
type: Concept
broader: Processing Context
creator: Harshvardhan J. Pandit
creator: Axel Polleres
creator: Rob Brennan
creator: Mark Lizar
definition: Conditions required or followed regarding storage of data
created: 2019-04-05
term status: accepted
example: E0011

Post-Quantum Cryptography
in scheme: dpv#
created: 2022-08-17
definition: Use of algorithms that are intended to be secure against cryptanalytic attack by a quantum computer
type: Concept
term status: accepted
isSubTypeOf: CrytographicMethods
source: reference-incident-classification-taxonomy
creator: Harshvardhan J. Pandit
broader: CrytographicMethods

Until Event Duration
in scheme: dpv#
isSubTypeOf: Duration
modified: 2020-10-05
type: Concept
broader: Duration
creator: Harshvardhan J. Pandit
created: 2022-06-15
definition: Duration that takes place until a specific event occurs e.g. Account Closure
term status: modified

Citizen
in scheme: dpv#
created: 2022-04-06
definition: Data subjects that are citizens (for a jurisdiction)
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Georg P. Krog
creator: Beatriz Esteves
creator: Paul Ryan
isSubTypeOf: Data Subject
type: Concept
term status: accepted
broader: Data Subject

Region
in scheme: dpv#
term status: accepted
isSubTypeOf: Location
definition: A region is an area or site that is considered a location
type: Concept
creator: Harshvardhan J. Pandit
broader: Location
created: 2022-01-19

Optimisation for Consumer
in scheme: dpv#
created: 2019-04-05
type: Concept
term status: accepted
related: Custom
creator: Javier Fernandez
creator: Elmar Kiesling
creator: Harshvardhan J. Pandit
creator: Fajar Ekaputra
creator: Simon Steyskal
creator: Axel Polleres
narrower: Optimise User Interface
definition: Optimize activities and services for consumer or user
isSubTypeOf: Service Optimization
broader: Service Optimization

Match
in scheme: dpv#
type: Concept
definition: to combine, compare, or match data from different sources
term status: accepted
isSubTypeOf: Use
source: https://ec.europa.eu/newsroom/article29/items/611236
broader: Use
creator: Harshvardhan J. Pandit
created: 2022-04-20

Marketing
in scheme: dpv#
created: 2020-11-04
type: Concept
definition: Conduct marketing in relation to organisation or products or services e.g. promoting, selling, and distributing
term status: accepted
broader: Purpose
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Beatriz Esteves
narrower: Public Relations
narrower: Social Media
narrower: Advertising
narrower: Direct Marketing
note: Was commercial interest, changed to consider Marketing a separate Purpose category by itself
isSubTypeOf: Purpose

Direct Marketing
in scheme: dpv#
isSubTypeOf: Marketing
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Beatriz Esteves
term status: accepted
broader: Marketing
type: Concept
created: 2020-11-04
definition: Conduct direct marketing i.e. marketing communicated directly to the individual

Compliance Monitoring
in scheme: dpv#
type: Concept
broader: Governance Procedures
source: 5g-cybersecurity-standards
term status: accepted
creator: Harshvardhan J. Pandit
definition: Monitoring of compliance (e.g. internal policy, regulations)
created: 2022-08-17
isSubTypeOf: Governance Procedures

Fraud Prevention and Detection
in scheme: dpv#
creator: Javier Fernandez
creator: Simon Steyskal
creator: Elmar Kiesling
creator: Harshvardhan J. Pandit
creator: Fajar Ekaputra
creator: Axel Polleres
type: Concept
definition: Detect and prevent fraud
narrower: Counter Money Laundering
narrower: MaintainFraudDatabase
isSubTypeOf: Enforce Security
term status: accepted
created: 2019-04-05
related: Government
broader: Enforce Security

Collected Personal Data
in scheme: dpv#
creator: Harshvardhan J. Pandit
isSubTypeOf: Personal Data
term status: accepted
created: 2022-03-30
note: To indicate the source of data, use the DataSource concept with the hasDataSource relation
narrower: Observed Personal Data
definition: Personal Data that has been collected from another source such as the Data Subject
type: Concept
broader: Personal Data

is exercised at
in scheme: dpv#
definition: Indicates context or information about exercising a right
has range: RightExerciseService
creator: Georg P Krog
creator: Harshvardhan J Pandit
creator: Paul Ryan
creator: Beatriz Esteves
type: Concept
type: Relation
term status: accepted
created: 2022-10-22
has domain: Active Right

Human Involvement for Oversight
in scheme: dpv#
isInstanceOf: Human Involvement
created: 2022-09-07
narrower: Automated Processing with Human Oversight
type: Concept
creator: Harshvardhan J. Pandit
broader: Human Involvement
term status: accepted
definition: Human involvement for the purposes of having oversight over a system, its operations, inputs, or outputs

Vital Interest of Natural Person
in scheme: dpv#
creator: Paul Ryan
creator: Georg P Krog
creator: Harshvardhan J. Pandit
broader: Vital Interest
created: 2021-04-21
narrower: Vital Interest of Data Subject
type: Concept
isSubTypeOf: Vital Interest
definition: Processing is necessary or required to protect vital interests of a natural person
term status: accepted

has jurisdiction
in scheme: dpv#
type: Relation
type: Concept
creator: Harshvardhan J. Pandit
term status: accepted
created: 2022-01-19
definition: Indicates applicability of specified jurisdiction
has range: Location
has domain: Concept

has severity
in scheme: dpv#
has range: Severity
created: 2022-07-20
has domain: Concept
term status: accepted
creator: Paul Ryan
creator: Julian Flake
creator: Georg P Krog
creator: Harshvardhan J. Pandit
definition: Indicates the severity associated with a concept
type: Concept
type: Relation

Entities_Organisation Concepts
member: ForProfitOrganisation
member: International Organisation
member: Organisation
member: GovernmentalOrganisation
member: AcademicScientificOrganisation
member: Organisational Unit
member: IndustryConsortium
member: NonProfitOrganisation
member: NonGovernmentalOrganisation
type: Collection

Fixed Location
in scheme: dpv#
isSubTypeOf: Location Fixture
term status: modified
created: 2022-06-15
broader: Location Fixture
narrower: Fixed Singular Location
narrower: Fixed Multiple Locations
modified: 2020-10-05
type: Concept
creator: Harshvardhan J. Pandit
definition: Location that is fixed i.e. known to occur at a specific place

Collect
in scheme: dpv#
created: 2019-05-07
definition: to gather data from someone
type: Concept
term status: accepted
related: Collect
isSubTypeOf: Obtain
example: E0018
broader: Obtain
source: processing
source: oj

Account Management
in scheme: dpv#
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Beatriz Esteves
created: 2021-09-08
type: Concept
isSubTypeOf: Purpose
term status: accepted
definition: Create, maintain, and manage accounts for purposes of providing services
broader: Purpose

MultiNationalScale
in scheme: dpv#
creator: Harshvardhan J. Pandit
type: Concept
broader: Geographic Coverage
isInstanceOf: Geographic Coverage
term status: accepted
created: 2022-06-15
definition: Geographic coverage spanning multiple nations

Staff Training
in scheme: dpv#
definition: Practices and policies regarding training of staff members
narrower: Professional Training
narrower: Data Protection Training
narrower: Security Knowledge Training
narrower: Educational Training
narrower: Cybersecurity Training
type: Concept
creator: Harshvardhan J. Pandit
creator: Rob Brennan
creator: Mark Lizar
creator: Axel Polleres
term status: accepted
isSubTypeOf: Organisational Measure
example: E0017
broader: Organisational Measure
created: 2019-04-05

Review Procedure
in scheme: dpv#
type: Concept
created: 2022-10-22
creator: Harshvardhan J. Pandit
creator: Georg P Krog
term status: accepted
definition: A procedure or process that reviews the correctness and validity of other measures and processes
isSubTypeOf: Organisational Measure
broader: Organisational Measure

Patient
in scheme: dpv#
term status: accepted
creator: Julian Flake
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Beatriz Esteves
definition: Data subjects that receive medican attention, treatment, care, advice, or other health related services
isSubTypeOf: Data Subject
created: 2022-04-06
broader: Data Subject
type: Concept

Medium Scale Processing
in scheme: dpv#
isInstanceOf: Processing Scale
type: Concept
creator: Harshvardhan J. Pandit
created: 2022-09-07
definition: Processing that takes place at medium scales (as specified by some criteria)
term status: accepted
broader: Processing Scale

Data published by Data Subject
in scheme: dpv#
creator: Julian Flake
type: Concept
created: 2022-08-24
definition: Data is published by the data subject
note: This refers to where that data was made publicly available by the data subject. An example of this would be a social media profile that the data subject has made publicly accessible.
term status: accepted
isInstanceOf: Data Source
broader: Data Source

Publicly Accessible Location
in scheme: dpv#
definition: Location that is or can be accessed by the public
isSubTypeOf: Local Location
type: Concept
broader: Local Location
term status: accepted
creator: Georg P Krog
created: 2022-10-22

Automated Decision Making
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Piero Bonatti
note: Automated decision making can be defined as “the ability to make decisions by technological means without human involvement.” (“Guidelines on Automated individual decision-making and Profiling for the purposes of Regulation 2016/679 (wp251rev.01)”, 2018, p. 8)
modified: 2022-09-07
term status: modified
isSubTypeOf: Decision Making
isSubTypeOf: Automation of Processing
source: oj
definition: Processing that involves automated decision making
broader: Decision Making
broader: Automation of Processing
created: 2020-11-04
type: Concept

Code of Conduct
in scheme: dpv#
type: Concept
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Rob Brennan
creator: Mark Lizar
term status: accepted
isSubTypeOf: GuidelinesPrinciple
broader: GuidelinesPrinciple
definition: A set of rules or procedures outlining the norms and practices for conducting activities
created: 2019-04-05

Impact Assessment
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P Krog
narrower: Data Transfer Impact Assessment
narrower: Data Protection Impact Assessment (DPIA)
narrower: Privacy Impact Assessment
definition: Calculating or determining the likelihood of impact of an existing or proposed process, which can involve risks or detriments.
type: Concept
term status: accepted
isSubTypeOf: Assessment
broader: Assessment
created: 2020-11-04

has permission
in scheme: dpv#
created: 2022-10-19
type: Concept
type: Relation
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P Krog
creator: Beatriz Esteves
has domain: Context
term status: accepted
has range: Permission
broader: Rule
isSubTypeOf: Rule
definition: Specifying applicability or inclusion of a permission rule within specified context

Scale
in scheme: dpv#
creator: Rana Saniei
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
narrower: Processing Scale
narrower: has data subject scale
narrower: Geographic Coverage
narrower: Data Volume
narrower: has data volume
narrower: Data Subject Scale
narrower: has geographic coverage
created: 2022-06-15
term status: accepted
definition: A measurement along some dimension
note: Scales are subjective concepts that need to be defined and interpreted within the context of their application. For example, what would be small within one context could be large within another.
isSubTypeOf: Processing Context
broader: Processing Context

Web Security Protocols
in scheme: dpv#
type: Concept
isSubTypeOf: Security Method
source: reference-incident-classification-taxonomy
creator: Harshvardhan J. Pandit
term status: accepted
definition: Security implemented at or over web-based protocols
broader: Security Method
created: 2022-08-17

Register of Processing Activities
in scheme: dpv#
note: Tied to compliance processes and documents, decide how to specify those
type: Concept
creator: Paul Ryan
creator: Harshvardhan J. Pandit
creator: Georg P Krog
definition: A ROPA is a document maintained by Data Controllers detailing processing activities carried out under their responsibility
term status: accepted
isSubTypeOf: Data Processing Records
broader: Data Processing Records
created: 2021-09-08

International Organisation
in scheme: dpv#
broader: Organisation
creator: Julian Flake
creator: Georg P. Krog
created: 2022-03-23
source: oj
term status: modified
isSubTypeOf: Organisation
type: Concept
modified: 2020-10-05
definition: An organisation and its subordinate bodies governed by public international law, or any other body which is set up by, or on the basis of, an agreement between two or more countries

Location Fixture
in scheme: dpv#
narrower: Decentralised Locations
narrower: Variable Location
narrower: Federated Locations
narrower: Fixed Location
narrower: Random Location
type: Concept
creator: Harshvardhan J. Pandit
created: 2022-06-15
definition: The fixture of location refers to whether the location is fixed
term status: accepted

Automated Processing with Human Oversight
in scheme: dpv#
broader: Human Involvement for Oversight
broader: Automation of Processing
term status: accepted
created: 2022-06-15
isInstanceOf: Automation of Processing
isInstanceOf: Human Involvement for Oversight
note: For example, a human watching metrics to ensure correctness of procedural values and outputs as processing takes place
modified: 2022-09-07
type: Concept
creator: Harshvardhan J. Pandit
definition: Processing that is automated and involves oversight by Humans

Compliance Violation
in scheme: dpv#
created: 2022-05-18
type: Concept
creator: Harshvardhan J. Pandit
note: Changed from "violation of compliance" for consistency with other terms
isInstanceOf: Compliance Status
definition: State where compliance cannot be achieved due to requirements being violated
modified: 2022-09-07
broader: Compliance Status
term status: changed

NonCitizen
in scheme: dpv#
type: Concept
creator: Harshvardhan J. Pandit
creator: Beatriz Esteves
creator: Paul Ryan
creator: Julian Flake
creator: Georg P. Krog
definition: Data subjects that are not citizens (for a jurisdiction)
term status: accepted
isSubTypeOf: Data Subject
created: 2022-04-06
broader: Data Subject

Disclose
in scheme: dpv#
narrower: Disseminate
narrower: Transmit
narrower: Make Available
narrower: Disclose by Transmission
narrower: Share
type: Concept
term status: accepted
created: 2019-05-07
isSubTypeOf: Processing
broader: Processing
definition: to make data known
source: oj

Educational Training
in scheme: dpv#
source: reference-incident-classification-taxonomy
creator: Harshvardhan J. Pandit
isSubTypeOf: Staff Training
broader: Staff Training
created: 2022-08-17
type: Concept
term status: accepted
definition: Training methods that are intended to provide education on topic(s)

Legal Entity
narrower: Data Subject
narrower: Data Controller
narrower: Recipient
narrower: Representative
narrower: Authority
narrower: Data Exporter
narrower: Organisation
in scheme: dpv#
broader: Entity
created: 2019-04-05
definition: A human or non-human 'thing' that constitutes as an entity and which is recognised and defined in law
type: Concept
term status: accepted
isSubTypeOf: Entity
creator: Harshvardhan J. Pandit

Authentication Protocols
in scheme: dpv#
creator: Rob Brennan
creator: Mark Lizar
creator: Axel Polleres
creator: Harshvardhan J. Pandit
narrower: Multi-Factor Authentication (MFA)
narrower: Zero Knowledge Authentication
narrower: Cryptographic Authentication
narrower: Biometric Authentication
narrower: Single Sign On
narrower: Password Authentication
type: Concept
definition: Protocols involving validation of identity i.e. authentication of a person or information
created: 2019-04-05
isSubTypeOf: Technical Measure
broader: Technical Measure
term status: accepted

has obligation
in scheme: dpv#
created: 2022-10-19
type: Concept
type: Relation
term status: accepted
creator: Paul Ryan
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Beatriz Esteves
has domain: Context
broader: Rule
isSubTypeOf: Rule
definition: Specifying applicability or inclusion of an obligation rule within specified context
has range: Obligation

Asymmetric Cryptography
in scheme: dpv#
term status: accepted
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
isSubTypeOf: Cryptographic Methods
definition: Use of public-key cryptography or asymmetric cryptography involving a public and private pair of keys
type: Concept
created: 2022-08-17
broader: Cryptographic Methods

Country
in scheme: dpv#
note: The definition of country is not intended for political interpretation. DPVCG welcomes alternate definitions based in existing sources with global scope, such as UN or ISO.
creator: Georg P Krog
creator: Harshvardhan J. Pandit
isSubTypeOf: Location
definition: A political entity indicative of a sovereign or non-sovereign territorial state comprising of distinct geographical areas
type: Concept
term status: accepted
created: 2022-01-19
broader: Location
narrower: Third Country

Assess
in scheme: dpv#
type: Concept
broader: Use
term status: accepted
creator: Georg P Krog
creator: Harshvardhan J. Pandit
definition: to assess data for some criteria
created: 2022-06-15
isSubTypeOf: Use

Risk Mitigation Measure
in scheme: dpv#
isSubTypeOf: Technical and Organisational Measure
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P Krog
broader: Technical and Organisational Measure
created: 2020-11-04
example: E0029
type: Concept
definition: Measures intended to mitigate, minimise, or prevent risk.
term status: accepted

Compliant
in scheme: dpv#
definition: State of being fully compliant
broader: Compliance Status
isInstanceOf: Compliance Status
created: 2022-05-18
type: Concept
creator: Harshvardhan J. Pandit
term status: accepted

Guardian(s) of Data Subject
in scheme: dpv#
creator: Georg P Krog
isSubTypeOf: Data Subject
created: 2022-08-03
definition: Guardian(s) of data subjects such as children
broader: Data Subject
type: Concept
term status: accepted

Privacy by Design
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Rob Brennan
creator: Mark Lizar
creator: Axel Polleres
isSubTypeOf: Organisational Measure
definition: Practices regarding incorporating data protection and privacy in the design of information and services
type: Concept
broader: Organisational Measure
created: 2019-04-05
term status: accepted

Consent Status
in scheme: dpv#
creator: Paul Ryan
creator: Georg P Krog
creator: Julian Flake
creator: Harshvardhan J. Pandit
source: GConsent
example: E0025
example: E0024
example: E0019
example: E0026
narrower: Consent Status Invalid for Processing
narrower: Consent Status Valid for Processing
type: Concept
broader: Status
note: States are useful as information artefacts to implement them in controlling processing, and to reflect the process and flow of obtaining and maintaining consent. For example, a database table that stores consent states for specific processing and can be queried to obtain them in an efficient manner. States are also useful in investigations to determine the use and validity of consenting practices
term status: accepted
isSubTypeOf: Status
created: 2022-06-22
definition: The state or status of 'consent' that provides information reflecting its operational status and validity for processing data

Record
in scheme: dpv#
source: oj
created: 2019-05-07
type: Concept
term status: accepted
isSubTypeOf: Obtain
broader: Obtain
definition: to make a record (especially media)

Risk Management Process
in scheme: dpv#
source: iso-31000-risk-management.html
source: 79637.html
definition: The systematic application of management policies, procedures and practices to the activities of communicating, consulting, establishing the context, and identifying, analysing, evaluating, treating, monitoring, and reviewing risk
type: Concept
isSubTypeOf: Security Procedure
term status: accepted
creator: Harshvardhan J. Pandit
created: 2022-08-18
broader: Security Procedure

Student
in scheme: dpv#
creator: Georg P. Krog
creator: Beatriz Esteves
creator: Paul Ryan
creator: Julian Flake
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
created: 2022-04-06
definition: Data subjects that are students
broader: Data Subject
isSubTypeOf: Data Subject

Regularity of Re-certification
in scheme: dpv#
creator: Rob Brennan
creator: Mark Lizar
creator: Axel Polleres
creator: Harshvardhan J. Pandit
definition: Policy regarding repetition or renewal of existing certification(s)
isSubTypeOf: Organisational Measure
type: Concept
broader: Organisational Measure
created: 2019-04-05
term status: accepted

Contract Performance
in scheme: dpv#
creator: Georg P Krog
creator: Paul Ryan
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Contract
created: 2021-04-07
isSubTypeOf: Contract
definition: Fulfilment or performance of a contract involving specified processing

Copy
in scheme: dpv#
created: 2019-05-07
type: Concept
related: Copy
term status: accepted
isSubTypeOf: Processing
broader: Processing
source: processing
definition: to produce an exact reprodution of the data

Data Controller
in scheme: dpv#
created: 2019-04-05
modified: 2020-11-04
source: oj
example: E0019
definition: The individual or organisation that decides (or controls) the purpose(s) of processing personal data.
type: Concept
isSubTypeOf: Legal Entity
note: The terms 'Controller' is usually the more common form of indicating a Data Controller. In ISO/IEC the term 'PII Controller' is used.
term status: accepted
creator: Javier Fernández
creator: Axel Polleres
broader: Legal Entity
narrower: Joint Data Controllers

Security Procedure
narrower: Risk Management Process
narrower: Third Party Security Procedures
narrower: Background Checks
narrower: Risk Management Policy
narrower: Security Assessments
narrower: Trusted Third Party Utilisation
narrower: Security Role Procedures
narrower: Risk Management Plan
in scheme: dpv#
definition: Procedures associated with assessing, implementing, and evaluating security
type: Concept
created: 2022-08-24
creator: Harshvardhan J. Pandit
term status: accepted
isSubTypeOf: Organisational Measure
broader: Organisational Measure

Data Protection Officer
in scheme: dpv#
type: Concept
creator: Georg Krog
creator: Paul Ryan
source: oj
definition: An entity within or authorised by an organisation to monitor internal compliance, inform and advise on data protection obligations and act as a contact point for data subjects and the supervisory authority.
term status: modified
isSubTypeOf: Representative
created: 2020-11-04
modified: 2021-12-08
broader: Representative

Geographic Coverage
in scheme: dpv#
narrower: LocalEnvironmentScale
narrower: RegionalScale
narrower: NationalScale
narrower: NearlyGlobalScale
narrower: MultiNationalScale
narrower: GlobalScale
narrower: LocalityScale
term status: accepted
created: 2022-06-15
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
isSubTypeOf: Scale
type: Concept
definition: Indicate of scale in terms of geographic coverage
broader: Scale

Justification
in scheme: dpv#
term status: accepted
definition: A form of documentation providing reaosns, explanations, or justifications
isSubTypeOf: Context
type: Concept
creator: Harshvardhan J. Pandit
broader: Context
created: 2022-06-15

Network Proxy Routing
in scheme: dpv#
type: Concept
created: 2022-08-17
definition: Use of network routing using proxy
isSubTypeOf: Security Method
term status: accepted
broader: Security Method
source: data-protection-engineering
creator: Harshvardhan J. Pandit

Not Required
in scheme: dpv#
type: Concept
creator: Harshvardhan J. Pandit
creator: Beatriz Esteves
creator: Paul Ryan
creator: Julian Flake
creator: Georg P Krog
isInstanceOf: Necessity
created: 2022-02-15
term status: accepted
definition: Indication of neither being required nor optional i.e. not relevant or needed
broader: Necessity

Audit Requested
in scheme: dpv#
type: Concept
term status: accepted
broader: Audit Status
definition: State of an audit being requested whose outcome is not yet known
isInstanceOf: Audit Status
created: 2022-05-18
creator: Harshvardhan J. Pandit

Safeguard
in scheme: dpv#
definition: A safeguard is a precautionary measure for the protection against or mitigation of negative effects
note: This concept is relevant given the requirement to assert safeguards in cross-border data transfers
type: Concept
creator: Paul Ryan
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: David Hickey
term status: accepted
created: 2021-09-22
isSubTypeOf: Organisational Measure
broader: Organisational Measure
narrower: Safeguard for Data Transfer

Consequence of Failure
in scheme: dpv#
type: Concept
isSubTypeOf: Consequence
definition: The consequence(s) possible or arising from failure of specified context
term status: accepted
created: 2022-03-23
creator: Georg P Krog
creator: Harshvardhan J. Pandit
broader: Consequence

has withdrawal by
in scheme: dpv#
creator: Mark Lizar
creator: Harshvardhan J. Pandit
creator: Bud Bruegger
type: Relation
type: Concept
term status: sunset
modified: 2022-06-22
has range: Legal Entity
editorial note: WARNING: This concept will be deprecated in future releases
created: 2019-04-05
definition: Specifies the entity that withdrew consent
note: Normally this would be the dataSubject, but in some exceptional cases, the consent might be withdraawn on behalf by someone else, e.g. parents of minors.

Audit Conditionally Approved
in scheme: dpv#
type: Concept
definition: State of being conditionally approved through the audit
term status: accepted
creator: Paul Ryan
isInstanceOf: Audit Status
broader: Audit Status
created: 2022-06-29
note: A "conditional approval" is intended to reflect states where the audit has identified further changes which must be implemented before considering the audit has been 'passed', without requiring another audit to validate them. This is distinct from the case where an audit has state 'rejected', which means changes must be made and submitted for review. The requirements of a 'conditional acceptance' are expected to be minor or not significant enough to warrant another audit to review them.

Consequence as Side-Effect
in scheme: dpv#
broader: Consequence
type: Concept
creator: Harshvardhan J. Pandit
definition: The consequence(s) possible or arising as a side-effect of specified context
isSubTypeOf: Consequence
term status: accepted
created: 2022-03-30

is implemented by entity
in scheme: dpv#
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Beatriz Esteves
creator: Axel Polleres
term status: modified
modified: 2022-01-26
type: Concept
type: Relation
note: The use of 'entity' is inclusive of entities (e.g. Data Processor) as well as 'agent' (e.g. DPO). For indicating technological implementation, the property isImplementedByTechnology should be used.
has range: Entity
definition: Indicates implementation details such as entities or agents
created: 2019-05-07
has domain: Concept

Federated Locations
in scheme: dpv#
created: 2022-06-15
isSubTypeOf: Location Fixture
term status: modified
definition: Location that is federated across multiple separate areas with designation of a primary or central location
broader: Location Fixture
type: Concept
modified: 2020-10-05
creator: Harshvardhan J. Pandit

has data subject
in scheme: dpv#
creator: Bud Bruegger
creator: Axel Polleres
creator: Mark Lizar
creator: Harshvardhan J. Pandit
creator: Javier Fernández
has range: Data Subject
has domain: Concept
modified: 2020-11-04
definition: Indicates association with Data Subject
created: 2019-04-04
type: Concept
type: Relation
term status: accepted
isSubTypeOf: has entity
broader: has entity

GovernmentalOrganisation
narrower: Authority
in scheme: dpv#
isSubTypeOf: Organisation
modified: 2020-10-05
type: Concept
definition: An organisation managed or part of government
created: 2022-02-02
creator: Harshvardhan J. Pandit
term status: modified
broader: Organisation

Technical Measure
in scheme: dpv#
type: Concept
creator: Mark Lizar
creator: Harshvardhan J. Pandit
creator: Axel Polleres
creator: Rob Brennan
example: E0016
broader: Technical and Organisational Measure
definition: Technical measures required/followed when processing data of the declared category
isSubTypeOf: Technical and Organisational Measure
created: 2019-04-05
term status: accepted
narrower: Information Flow Control
narrower: Security Method
narrower: Access Control Method
narrower: Authorisation Protocols
narrower: Authentication Protocols
narrower: Encryption
narrower: Data Backup Protocols
narrower: Cryptographic Methods
narrower: Data Sanitisation Technique
narrower: Activity Monitoring
narrower: Digital Rights Management

Use of Synthetic Data
in scheme: dpv#
definition: Use of synthetic data to preserve privacy, security, or other effects and side-effects
created: 2022-08-17
type: Concept
term status: accepted
source: data-protection-engineering
isSubTypeOf: Security Method
creator: Harshvardhan J. Pandit
broader: Security Method

Client
in scheme: dpv#
term status: accepted
broader: Customer
creator: Julian Flake
creator: Georg P. Krog
creator: Beatriz Esteves
creator: Harshvardhan J. Pandit
creator: Paul Ryan
created: 2022-04-06
type: Concept
definition: Data subjects that are clients or recipients of services
isSubTypeOf: Customer

Members and Partners Management
in scheme: dpv#
creator: David Hickey
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
isSubTypeOf: Organisation Governance
broader: Organisation Governance
source: model-voor-een-register-van-de-verwerkingsactiviteiten
term status: accepted
definition: Maintain registry of shareholders, members, or partners for governance, administration, and management functions
created: 2021-09-01

Organise
in scheme: dpv#
broader: Processing
source: oj
narrower: Structure
definition: to organize data for arranging or classifying
type: Concept
created: 2019-05-07
term status: accepted
isSubTypeOf: Processing

Trusted Execution Environments
in scheme: dpv#
type: Concept
term status: accepted
source: data-protection-engineering
isSubTypeOf: CrytographicMethods
creator: Harshvardhan J. Pandit
broader: CrytographicMethods
definition: Use of cryptographic methods to restrict access and execution to trusted parties and code within a dedicated execution environment
created: 2022-08-17

Consent Unknown
in scheme: dpv#
creator: Georg P Krog
creator: Julian Flake
creator: Paul Ryan
creator: Harshvardhan J. Pandit
type: Concept
definition: State where information about consent is not available or is unknown
source: GConsent
created: 2022-06-22
term status: accepted
isInstanceOf: Consent Status Invalid for Processing
note: Consent states can be unknown, for example, when information is not available, or cannot be trusted, or is known to be inaccurate
broader: Consent Status Invalid for Processing

Consent Record
in scheme: dpv#
type: Concept
definition: A Record of Consent or Consent related activities
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Paul Ryan
creator: Julian Flake
term status: accepted
example: E0019
created: 2022-06-22
isSubTypeOf: DataProcessingRecord
broader: DataProcessingRecord

Implied Consent
in scheme: dpv#
creator: Paul Ryan
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Georg P Krog
isSubTypeOf: Informed Consent
term status: accepted
type: Concept
note: Implied consent is expected to also be Informed Consent. An example is a CCTV notice outside a monitored area that informs the individuals that by walking in they would be consenting to the use of camera for surveillance.
definition: Consent that is implied indirectly through an action not associated solely with conveying a consenting decision
broader: Informed Consent
created: 2022-06-21

SporadicDataVolume
in scheme: dpv#
definition: Data volume that is considered sporadic or sparse within the context
type: Concept
broader: Data Volume
creator: Harshvardhan J. Pandit
created: 2022-06-15
isInstanceOf: Data Volume
term status: accepted

is authority for
in scheme: dpv#
type: Relation
type: Concept
creator: Harshvardhan J. Pandit
creator: Georg P Krog
term status: accepted
created: 2022-01-19
has range: Concept
has domain: Authority
definition: Indicates area, scope, or applicability of an Authority

Derived Personal Data
in scheme: dpv#
broader: Personal Data
created: 2019-05-07
type: Concept
definition: Personal Data that is obtained or derived from other data
term status: accepted
source: dpvcg
isSubTypeOf: Personal Data
related: Derived
creator: Elmar Kiesling; Harshvardhan J. Pandit
creator: Fajar Ekaputra
narrower: Inferred Personal Data
note: Derived Data is data that is obtained through processing of existing data, e.g. deriving first name from full name. To indicate data that is derived but which was not present or evident within the source data, InferredPersonalData should be used.
modified: 2022-01-19

Risk Management Plan
in scheme: dpv#
created: 2022-08-18
definition: A scheme within the risk management framework specifying the approach, the management components, and resources to be applied to the management of risk
type: Concept
term status: accepted
broader: Security Procedure
source: 79637.html
isSubTypeOf: Security Procedure
creator: Harshvardhan J. Pandit

Registration and Authentication
in scheme: dpv#
isSubTypeOf: Service Provision
created: 2020-11-04
type: Concept
term status: accepted
definition: Register, authenticate, and identify users or agents in context of a service
broader: Service Provision
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Beatriz Esteves

Risk Management Policy
in scheme: dpv#
term status: accepted
source: 79637.html
isSubTypeOf: Security Procedure
isSubTypeOf: Policy
creator: Harshvardhan J. Pandit
broader: Security Procedure
broader: Policy
definition: A policy or statement of the overall intentions and direction of an organisation related to risk management
type: Concept
created: 2022-08-18

Asylum Seeker
in scheme: dpv#
term status: accepted
created: 2022-06-15
broader: Vulnerable Data Subject
creator: Georg P Krog
type: Concept
definition: Data subjects that are asylum seekers
isSubTypeOf: Vulnerable Data Subject

Official Authority of Controller
in scheme: dpv#
creator: Georg P Krog
creator: Paul Ryan
creator: Harshvardhan J. Pandit
definition: Processing necessary or authorised through the official authority granted to or vested in the Data Controller
broader: Legal Basis
created: 2021-05-05
term status: accepted
type: Concept
isSubTypeOf: Legal Basis

has representative
in scheme: dpv#
creator: Paul Ryan
creator: Harshvardhan J.Pandit
creator: Georg P Krog
creator: Beatriz Esteves
has range: Representative
broader: has entity
has domain: Entity
type: Relation
type: Concept
definition: Specifies representative of the legal entity
created: 2020-11-04
term status: accepted
isSubTypeOf: has entity
narrower: has data protection officer

Processing Scale
in scheme: dpv#
isSubTypeOf: Scale
narrower: Small Scale Processing
narrower: Large Scale Processing
narrower: Medium Scale Processing
creator: Harshvardhan J. Pandit
creator: Piero Bonatti
created: 2022-09-07
type: Concept
broader: Scale
term status: accepted
note: The exact definition of what constitutes "scale" depends on use of jurisdictional, domain-specific, or other forms of externally defined criterias. Where possible, this should be reflected by extending the scales provided with the appropriate context.
definition: Scale of Processing

Technology
in scheme: dpv#
creator: Harshvardhan J. Pandit
note: Examples (non-exhaustive) include: Algorithm, Process, Method, Skill, Database, Cookies, Server, Device
type: Concept
term status: accepted
created: 2022-01-26
definition: The technology, technological implementation, or any techniques, skills, methods, and processes used or applied

Mobile Platform Security
in scheme: dpv#
created: 2022-08-17
type: Concept
isSubTypeOf: Security Method
term status: accepted
broader: Security Method
source: reference-incident-classification-taxonomy
definition: Security implemented over a mobile platform
creator: Harshvardhan J. Pandit

Compliance Unknown
in scheme: dpv#
created: 2022-09-07
isInstanceOf: Compliance Status
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
definition: State where the status of compliance is unknown
broader: Compliance Status

Data Backup Protocols
in scheme: dpv#
definition: Protocols or plans for backing up of data
type: Concept
term status: accepted
isSubTypeOf: Technical Measure
creator: Georg P Krog
broader: Technical Measure
created: 2022-06-15

Benefit
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Beatriz Esteves
creator: Axel Polleres
creator: Fajar Ekaputra
creator: Georg P Krog
creator: Julian Flake
type: Concept
isSubTypeOf: Impact
definition: Impact(s) that acts as or causes benefits
term status: accepted
broader: Impact
created: 2022-03-23

has joint data controllers
in scheme: dpv#
broader: has data controller
creator: Paul Ryan
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
has domain: Concept
term status: accepted
definition: Indicates inclusion or applicability of a Joint Data Controller
created: 2022-02-09
has range: Joint Data Controllers
isSubTypeOf: has data controller
type: Concept
type: Relation

Activity Halted
in scheme: dpv#
broader: Activity Status
isInstanceOf: Activity Status
created: 2022-05-18
creator: Harshvardhan J. Pandit
type: Concept
definition: State of an activity that was occuring in the past, and has been halted or paused or stoped
term status: accepted

LocalityScale
in scheme: dpv#
type: Concept
isInstanceOf: Geographic Coverage
term status: accepted
created: 2022-06-15
note: For example, geographic scale of a city or an area within a city
creator: Harshvardhan J. Pandit
definition: Geographic coverage spanning a specific locality
broader: Geographic Coverage

has residual risk
in scheme: dpv#
has range: Risk
type: Concept
type: Relation
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Julian Flake
creator: Georg P Krog
has domain: Risk
term status: accepted
definition: Indicates the associated risk is the remaining or residual risk from applying mitigation measures or treatments to this risk
created: 2022-07-20

Singular Frequency
in scheme: dpv#
term status: modified
definition: Frequency where occurences are singular i.e. they take place only once
creator: Harshvardhan J. Pandit
modified: 2020-10-05
type: Concept
isSubTypeOf: Frequency
broader: Frequency
created: 2022-06-15

has prohibition
in scheme: dpv#
created: 2022-10-19
creator: Paul Ryan
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Beatriz Esteves
type: Concept
type: Relation
broader: Rule
has range: Prohibition
isSubTypeOf: Rule
definition: Specifying applicability or inclusion of a prohibition rule within specified context
has domain: Context
term status: accepted

Audit Approved
in scheme: dpv#
type: Concept
term status: accepted
broader: Audit Status
isInstanceOf: Audit Status
created: 2022-05-18
definition: State of being approved through the audit
creator: Harshvardhan J. Pandit

Automated Processing with Human Input
in scheme: dpv#
creator: Harshvardhan J. Pandit
note: For example, an algorithm that takes inputs from humans and performs operations based on them
type: Concept
definition: Processing that is automated and involves inputs by Humans
broader: Automation of Processing
broader: Human Involvement for Input
term status: accepted
isInstanceOf: Human Involvement for Input
isInstanceOf: Automation of Processing
created: 2022-06-15
modified: 2022-09-07

Partially Automated Processing
in scheme: dpv#
created: 2022-06-15
isInstanceOf: Automation of Processing
definition: Processing that is partially automated or semi-automated
type: Concept
creator: Harshvardhan J. Pandit
broader: Automation of Processing
term status: accepted
note: For example, a series of distinct processing operations that are automated individually or have some human involvement

MediumDataVolume
in scheme: dpv#
term status: accepted
created: 2022-06-15
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
broader: Data Volume
type: Concept
isInstanceOf: Data Volume
definition: Data volume that is considered medium i.e. neither large nor small within the context

Security Method
in scheme: dpv#
narrower: WebBrowser Security
narrower: Penetration Testing Methods
narrower: Virtualisation Security
narrower: Network Security Protocols
narrower: Web Security Protocols
narrower: Use of Synthetic Data
narrower: Wireless Security Protocols
narrower: Network Proxy Routing
narrower: Distributed System Security
narrower: Operating System Security
narrower: Intrusion Detection System
narrower: File System Security
narrower: Mobile Platform Security
narrower: Document Security
narrower: Hardware Security Protocols
narrower: Vulnerability Testing Methods
type: Concept
definition: Methods that relate to creating and providing security
term status: accepted
isSubTypeOf: Technical Measure
broader: Technical Measure
creator: Harshvardhan J. Pandit
created: 2022-08-24

Make Available
in scheme: dpv#
type: Concept
term status: accepted
broader: Disclose
isSubTypeOf: Disclose
definition: to transform or publish data to be used
source: oj
created: 2019-05-07

Record Management
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: David Hickey
creator: Georg P Krog
creator: Paul Ryan
type: Concept
isSubTypeOf: Purpose
created: 2021-09-01
definition: Manage creation, storage, and use of records relevant to operations, events, and processes e.g. to store logs or access requests
term status: accepted
broader: Purpose

Activity Status
in scheme: dpv#
type: Concept
narrower: Activity Proposed
narrower: Activity Ongoing
narrower: Activity Completed
narrower: Activity Halted
definition: Status associated with activity operations and lifecycles
term status: accepted
isSubTypeOf: Status
created: 2022-05-18
broader: Status
creator: Harshvardhan J. Pandit

Credential Management
in scheme: dpv#
isSubTypeOf: Authorisation Procedure
type: Concept
term status: accepted
broader: Authorisation Procedure
creator: Georg P Krog
definition: Management of credentials and their use in authorisations
created: 2022-06-15

Personalised Benefits
in scheme: dpv#
type: Concept
creator: Javier Fernandez
creator: Simon Steyskal
creator: Elmar Kiesling
creator: Harshvardhan J. Pandit
creator: Fajar Ekaputra
creator: Axel Polleres
definition: Create and provide personalised benefits for a service
isSubTypeOf: Service Personalization
broader: Service Personalization
created: 2019-04-05
term status: accepted

Internal Resource Optimisation
in scheme: dpv#
type: Concept
creator: Simon Steyskal
creator: Axel Polleres
creator: Javier Fernandez
creator: Elmar Kiesling
creator: Harshvardhan J. Pandit
creator: Fajar Ekaputra
isSubTypeOf: Optimisation for Controller
created: 2019-04-05
definition: Optimize internal resource availability and usage for organisation
term status: accepted
broader: Optimisation for Controller

Technical Service Provision
in scheme: dpv#
definition: Manage and provide technical processes and functions necessary for delivering services
creator: Harshvardhan J. Pandit
created: 2021-09-08
type: Concept
isSubTypeOf: Service Provision
term status: accepted
broader: Service Provision

Explicitly Expressed Consent
in scheme: dpv#
creator: Julian Flake
creator: Georg P Krog
creator: Paul Ryan
creator: Harshvardhan J. Pandit
note: Explicitly expressed consent is a more specific form of Expressed consent where the action taken must 'explicitly' relate to only the consent decision. Expressed consent where the consenting is part of other matters therefore cannot satisfy the requirements of explicitly expressed consent. An example of explicit action expressing the consenting decision is a button on a web form where the form only relates to consent, or it is accompanied with suitable text that reiterates what the consenting decision is about
definition: Consent that is expressed through an explicit action solely conveying a consenting decision
isSubTypeOf: Expressed Consent
type: Concept
created: 2022-06-21
term status: accepted
broader: Expressed Consent

Share
in scheme: dpv#
term status: accepted
definition: to give data (or a portion of it) to others
isSubTypeOf: Disclose
broader: Disclose
source: oj
type: Concept
created: 2019-05-07

Screen
in scheme: dpv#
type: Concept
definition: to remove data for some criteria
creator: Harshvardhan J. Pandit
creator: Georg P Krog
term status: accepted
isSubTypeOf: Transform
created: 2022-06-15
broader: Transform

Active Right
in scheme: dpv#
broader: Right
creator: Paul Ryan
creator: Beatriz Esteves
creator: Harshvardhan J Pandit
creator: Georg P Krog
term status: accepted
type: Concept
created: 2022-10-22
definition: The right(s) applicable, provided, or expected that need to be (actively) exercised
isSubTypeOf: Right

Processing_Scale Concepts
member: LocalEnvironmentScale
member: Data Volume
member: Geographic Coverage
member: SingularDataVolume
member: HugeScaleOfDataSubjects
member: RegionalScale
member: SmallScaleOfDataSubjects
member: NationalScale
member: SmallDataVolume
member: Large Scale Processing
member: Medium Scale Processing
member: has data volume
member: Scale
member: SporadicScaleOfDataSubjects
member: MediumDataVolume
member: NearlyGlobalScale
member: MediumScaleOfDataSubjects
member: Data Subject Scale
member: SingularScaleOfDataSubjects
member: MultiNationalScale
member: LargeScaleOfDataSubjects
member: has geographic coverage
member: GlobalScale
member: has scale
member: SporadicDataVolume
member: Small Scale Processing
member: Processing Scale
member: HugeDataVolume
member: LargeDataVolume
member: has data subject scale
member: LocalityScale
type: Collection

Seal
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Axel Polleres
creator: Rob Brennan
type: Concept
definition: A seal or a mark indicating proof of certification to some certification or standard
isSubTypeOf: Certification and Seal
broader: Certification and Seal
created: 2019-04-05
term status: accepted

Personal_Data Concepts
member: Data
member: Generated Personal Data
member: Personal Data
member: Collected Personal Data
member: Synthetic Data
member: Non-Personal Data
member: Special Category Personal Data
member: Anonymised Data
member: has personal data
member: Sensitive Personal Data
member: Inferred Personal Data
member: has data
member: Derived Personal Data
member: Pseudonymised Data
member: Observed Personal Data
type: Collection

has third country
in scheme: dpv#
definition: Indicates applicability or relevance of a 'third country'
has domain: Concept
term status: accepted
created: 2022-02-09
creator: Georg P Krog
creator: Harshvardhan J. Pandit
isSubTypeOf: has country
broader: has country
type: Concept
type: Relation
has range: Third Country

Communication for Customer Care
in scheme: dpv#
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Beatriz Esteves
broader: Customer Care
broader: Communication Management
definition: Communicate with customers for assisting them, resolving issues, ensuring satisfaction in relation to services provided
isSubTypeOf: Customer Care
isSubTypeOf: Communication Management
type: Concept
created: 2020-11-04
term status: accepted

Research and Development
in scheme: dpv#
narrower: Non-Commercial Research
narrower: Academic Research
narrower: Commercial Research
creator: Javier Fernandez
creator: Simon Steyskal
creator: Elmar Kiesling
creator: Harshvardhan J. Pandit
creator: Fajar Ekaputra
creator: Axel Polleres
type: Concept
isSubTypeOf: Purpose
definition: Conduct research and development for new methods, products, or services
created: 2019-04-05
broader: Purpose
term status: accepted

Algorithmic Logic
in scheme: dpv#
modified: 2022-06-15
isSubTypeOf: Automation of Processing
note: Algorithmic Logic is intended as a broad concept for explaining the use of algorithms and automated decisions making within Processing. To describe the actual algorithm, see the Algorithm concept.
definition: The algorithmic logic applied or used
broader: Automation of Processing
type: Concept
term status: accepted
created: 2022-01-26
creator: Harshvardhan J. Pandit

Personalisation
in scheme: dpv#
narrower: Service Personalization
narrower: Personalised Advertising
created: 2021-09-01
type: Concept
broader: Purpose
creator: Harshvardhan J. Pandit
definition: Create and provide customisation based on attributes and/or needs of person(s) or context(s).
isSubTypeOf: Purpose
term status: accepted
note: This term is a blanket purpose category for indicating personalisation of some other purpose, e.g. by creating a subclass of the other concept and Personalisation

Synthetic Data
in scheme: dpv#
isSubTypeOf: Data
type: Concept
created: 2022-08-18
creator: Harshvardhan J. Pandit
source: data-protection-engineering
broader: Data
definition: Synthetic data reffers to artificially created data such that it is intended to resemble real data (personal or non-personal), but does not refer to any specific identified or identifiable individual, or to the real measure of an observable parameter in the case of non-personal data
term status: accepted

Passive Right
in scheme: dpv#
creator: Georg P Krog
creator: Harshvardhan J Pandit
creator: Paul Ryan
creator: Beatriz Esteves
type: Concept
term status: accepted
created: 2022-10-22
broader: Right
isSubTypeOf: Right
definition: The right(s) applicable, provided, or expected that are always (passively) applicable

has impact on
in scheme: dpv#
isSubTypeOf: hasConsequenceOn
definition: Indicates the thing (e.g. plan, process, or entity) affected by an impact
creator: Beatriz Esteves
creator: Fajar Ekaputra
creator: Julian Flake
creator: Georg P Krog
creator: Harshvardhan J. Pandit
has domain: Impact
term status: accepted
has range: Concept
broader: hasConsequenceOn
created: 2022-05-18
type: Concept
type: Relation

Sell Products to Data Subject
in scheme: dpv#
type: Concept
creator: Axel Polleres
creator: Simon Steyskal
creator: Javier Fernandez
creator: Elmar Kiesling
creator: Harshvardhan J. Pandit
creator: Fajar Ekaputra
created: 2019-04-05
term status: accepted
isSubTypeOf: Sell Products
broader: Sell Products
note: Was subclass of commercial interest, changed to reflect selling something
definition: Sell products or services to the user, consumer, or data subjects

Vital Interest of Data Subject
in scheme: dpv#
type: Concept
broader: Vital Interest of Natural Person
definition: Processing is necessary or required to protect vital interests of a data subject
creator: Paul Ryan
creator: Harshvardhan J. Pandit
creator: Georg P Krog
isSubTypeOf: Vital Interest of Natural Person
term status: accepted
created: 2021-04-21

Use
in scheme: dpv#
definition: to use data
narrower: Assess
narrower: Profiling
narrower: Retrieve
narrower: Consult
narrower: Analyse
narrower: Match
narrower: Access
source: oj
created: 2019-05-07
type: Concept
isSubTypeOf: Processing
term status: accepted
broader: Processing

Safeguard for Data Transfer
in scheme: dpv#
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: David Hickey
creator: Paul Ryan
isSubTypeOf: Safeguard
broader: Safeguard
definition: Represents a safeguard used for data transfer. Can include technical or organisational measures.
type: Concept
term status: accepted
created: 2021-09-22

Innovative Use of New Technologies
in scheme: dpv#
source: oj
definition: Processing that involves use of innovative and new technologies
isSubTypeOf: Processing Context
creator: Piero Bonatti
creator: Harshvardhan J. Pandit
created: 2020-11-04
type: Concept
broader: Processing Context
term status: accepted

Cryptographic Methods
in scheme: dpv#
narrower: Differential Privacy
narrower: Cryptographic Key Management
narrower: Digital Signatures
narrower: Zero Knowledge Authentication
narrower: Cryptographic Authentication
narrower: Homomorphic Encryption
narrower: Asymmetric Cryptography
narrower: Hash Functions
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
broader: Technical Measure
created: 2022-08-17
type: Concept
isSubTypeOf: Technical Measure
definition: Use of cryptographic methods to perform tasks
term status: accepted

Filter
in scheme: dpv#
definition: to filter or keep data for some criteria
type: Concept
isSubTypeOf: Transform
created: 2022-06-15
broader: Transform
term status: accepted
creator: Georg P Krog
creator: Harshvardhan J. Pandit

is mitigated by measure
in scheme: dpv#
type: Relation
type: Concept
creator: Harshvardhan J. Pandit
definition: Indicate a risk is mitigated by specified measure
has domain: Risk
isSubTypeOf: has technical and organisational measure
has range: Risk Mitigation Measure
term status: accepted
broader: has technical and organisational measure
created: 2022-02-09

Logging Policies
in scheme: dpv#
type: Concept
creator: Harshvardhan J. Pandit
created: 2022-08-17
broader: Governance Procedures
definition: Policy for logging of information
source: 5g-cybersecurity-standards
isSubTypeOf: Governance Procedures
term status: accepted

Random Location
in scheme: dpv#
broader: Location Fixture
isInstanceOf: Location Fixture
modified: 2020-10-05
type: Concept
creator: Harshvardhan J. Pandit
created: 2022-06-15
definition: Location that is random or unknown
term status: modified

has identifier
in scheme: dpv#
term status: accepted
created: 2020-11-25
creator: Georg P Krog
creator: Harshvardhan J.Pandit
creator: Beatriz Esteves
creator: Paul Ryan
definition: Indicates an identifier associated for identification or reference
type: Relation
type: Concept
has range: Concept
has domain: Concept

Systematic Monitoring
in scheme: dpv#
isSubTypeOf: Processing Context
created: 2020-11-04
creator: Piero Bonatti
creator: Harshvardhan J. Pandit
type: Concept
broader: Processing Context
definition: Processing that involves systematic monitoring of individuals
term status: accepted
source: oj

Sporadic Frequency
in scheme: dpv#
definition: Frequency where occurences are sporadic or infrequent or sparse
term status: modified
isSubTypeOf: Frequency
type: Concept
modified: 2020-10-05
creator: Harshvardhan J. Pandit
broader: Frequency
created: 2022-06-15

Encryption in Use
in scheme: dpv#
broader: Encryption
type: Concept
term status: accepted
definition: Encryption of data when it is being used
creator: Harshvardhan J. Pandit
isSubTypeOf: Encryption
created: 2022-10-22

has expiry
in scheme: dpv#
creator: Mark Lizar
creator: Harshvardhan J. Pandit
creator: Bud Bruegger
type: Relation
type: Concept
modified: 2022-06-22
definition: Generic property specifying when or under which condition(s) the consent will expire
editorial note: WARNING: This concept will be deprecated in future releases
created: 2019-04-05
term status: sunset

Trusted Computing
in scheme: dpv#
source: reference-incident-classification-taxonomy
creator: Harshvardhan J. Pandit
broader: CrytographicMethods
isSubTypeOf: CrytographicMethods
definition: Use of cryptographic methods to restrict access and execution to trusted parties and code
created: 2022-08-17
type: Concept
term status: accepted

Message Authentication Codes (MAC)
in scheme: dpv#
definition: Use of cryptographic methods to authenticate messages
isSubTypeOf: Cryptographic Authentication
source: reference-incident-classification-taxonomy
created: 2022-08-17
broader: Cryptographic Authentication
type: Concept
term status: accepted
creator: Harshvardhan J. Pandit

Data Protection Training
in scheme: dpv#
isSubTypeOf: Staff Training
broader: Staff Training
created: 2022-08-17
type: Concept
source: 5g-cybersecurity-standards
term status: accepted
definition: Training intended to increase knowledge regarding data protection
creator: Harshvardhan J. Pandit

Secret Sharing Schemes
in scheme: dpv#
isSubTypeOf: CrytographicMethods
created: 2022-08-17
broader: CrytographicMethods
type: Concept
term status: accepted
creator: Harshvardhan J. Pandit
definition: Use of secret sharing schemes where the secret can only be reconstructed through combination of sufficient number of individuals
source: data-pseudonymisation-advanced-techniques-and-use-cases

Consultation with Data Subject
in scheme: dpv#
broader: Consultation
creator: Harshvardhan J. Pandit
creator: Georg P Krog
type: Concept
created: 2022-06-15
narrower: Consultation with Data Subject Representative
term status: accepted
definition: Consultation with data subject(s) or their representative(s)
isSubTypeOf: Consultation

has duration
in scheme: dpv#
created: 2019-04-05
definition: Indicates information about duration
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Axel Polleres
creator: Rob Brennan
source: specialprivacy.ercim.eu
type: Concept
type: Relation
has domain: Concept
has range: Duration
term status: accepted

has right
in scheme: dpv#
has domain: Concept
term status: accepted
has range: Right
created: 2020-11-18
type: Concept
type: Relation
definition: Indicates use or applicability of Right
creator: Harshvardhan J. Pandit

Third Party Security Procedures
in scheme: dpv#
creator: Harshvardhan J. Pandit
broader: Security Procedure
type: Concept
created: 2022-08-17
definition: Procedures related to security associated with Third Parties
isSubTypeOf: Security Procedure
source: 5g-cybersecurity-standards
term status: accepted

Background Checks
in scheme: dpv#
type: Concept
definition: Procedure where the background of an entity is assessed to identity vulnerabilities and threats due to their current or intended role
source: 5g-cybersecurity-standards
created: 2022-08-17
term status: accepted
isSubTypeOf: Security Procedure
creator: Harshvardhan J. Pandit
broader: Security Procedure

Observed Personal Data
in scheme: dpv#
type: Concept
created: 2022-08-24
term status: accepted
definition: Personal Data that has been collected through observation of the Data Subject(s)
isSubTypeOf: Collected Personal Data
creator: Georg P Krog
broader: Collected Personal Data

Adult
in scheme: dpv#
definition: A natural person that is not a child i.e. has attained some legally specified age of adulthood
isSubTypeOf: Data Subject
type: Concept
creator: Georg Krog
broader: Data Subject
term status: accepted
created: 2022-03-30

has entity
in scheme: dpv#
narrower: has responsible entity
narrower: has representative
narrower: has recipient
narrower: has data controller
narrower: has data exporter
narrower: has relation with data subject
narrower: has data subject
has range: Entity
note: parent property for controller, processor, data subject, authority, etc.?
has domain: Concept
type: Concept
type: Relation
created: 2022-02-09
creator: Harshvardhan J. Pandit
definition: Indicates inclusion or applicability of an entity to some concept
term status: accepted

Information Flow Control
in scheme: dpv#
isSubTypeOf: Technical Measure
type: Concept
creator: Harshvardhan J. Pandit
term status: accepted
broader: Technical Measure
source: reference-incident-classification-taxonomy
created: 2022-08-17
definition: Use of measures to control information flows

Disclose by Transmission
in scheme: dpv#
term status: accepted
broader: Disclose
source: oj
type: Concept
created: 2019-05-07
isSubTypeOf: Disclose
definition: to disclose data by means of transmission

Technical and Organisational Measure
in scheme: dpv#
type: Concept
modified: 2020-11-04
term status: accepted
creator: Bud Bruegger
definition: The Technical and Organisational measures used.
created: 2019-04-05
narrower: Risk Mitigation Measure
narrower: Technical Measure
narrower: Organisational Measure

Organisation
in scheme: dpv#
type: Concept
creator: Harshvardhan J. Pandit
term status: accepted
narrower: AcademicScientificOrganisation
narrower: IndustryConsortium
narrower: NonProfitOrganisation
narrower: NonGovernmentalOrganisation
narrower: ForProfitOrganisation
narrower: International Organisation
narrower: GovernmentalOrganisation
broader: Legal Entity
isSubTypeOf: Legal Entity
definition: A general term reflecting a company or a business or a group acting as a unit
created: 2022-02-02

Adapt
in scheme: dpv#
created: 2019-05-07
definition: to modify the data, often rewritten into a new form for a new use
type: Concept
broader: Transform
term status: accepted
isSubTypeOf: Transform
source: oj

Modify
in scheme: dpv#
isSubTypeOf: Alter
type: Concept
broader: Alter
created: 2022-06-15
definition: to modify or change data
term status: accepted
creator: Georg P Krog
creator: Harshvardhan J. Pandit

has recipient third party
in scheme: dpv#
type: Concept
type: Relation
broader: has recipient
creator: Paul Ryan
creator: Harshvardhan J. Pandit
creator: Georg P. Krog
definition: Indiciates inclusion or applicability of a Third Party as a Recipient of persona data
term status: accepted
has domain: Concept
created: 2022-02-09
has range: Third Party
isSubTypeOf: has recipient

Consent Requested
in scheme: dpv#
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Paul Ryan
type: Concept
created: 2022-06-22
term status: accepted
isInstanceOf: Consent Status Invalid for Processing
note: An example of this state is when a notice has been presented to the individual but they have not made a decision
source: GConsent
definition: State where a request for consent has been made and is awaiting a decision
broader: Consent Status Invalid for Processing

Data Processor
in scheme: dpv#
example: E0011
broader: Recipient
created: 2019-06-04
narrower: Data Sub-Processor
type: Concept
creator: Harshvardhan J. Pandit
term status: accepted
isSubTypeOf: Recipient
source: oj
definition: A ‘processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

Legal Compliance
in scheme: dpv#
type: Concept
isSubTypeOf: Purpose
created: 2020-11-04
broader: Purpose
term status: accepted
definition: Fulfilment of obligations or requirements towards achieving compliance with law or regulations
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Beatriz Esteves

has audit status
in scheme: dpv#
broader: has status
has domain: Concept
created: 2022-06-22
definition: Indicates the status of audit associated with specified concept
has range: Audit Status
type: Concept
type: Relation
isSubTypeOf: has status
creator: Harshvardhan J. Pandit
term status: accepted

SmallDataVolume
in scheme: dpv#
type: Concept
creator: Harshvardhan J. Pandit
term status: accepted
created: 2022-06-15
isInstanceOf: Data Volume
definition: Data volume that is considered small or limited within the context
broader: Data Volume

Joint Data Controllers Agreement
in scheme: dpv#
type: Concept
creator: Paul Ryan
creator: Julian Flake
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Beatriz Esteves
broader: Data Processing Agreement
definition: An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data between Controllers within a Joint Controllers relationship
term status: accepted
created: 2022-01-26
isSubTypeOf: Data Processing Agreement

Parent(s) of Data Subject
in scheme: dpv#
term status: accepted
isSubTypeOf: Data Subject
creator: Georg P Krog
broader: Data Subject
type: Concept
created: 2022-08-03
definition: Parent(s) of data subjects such as children

Unlawful
in scheme: dpv#
isInstanceOf: Lawfulness (alt title: LegalComplianceStatus)
definition: State of being unlawful or legally non-compliant
type: Concept
broader: Lawfulness (alt title: LegalComplianceStatus)
term status: accepted

LargeScaleOfDataSubjects
in scheme: dpv#
definition: Scale of data subjects considered large within the context
type: Concept
creator: Harshvardhan J. Pandit
broader: Data Subject Scale
created: 2022-06-15
term status: accepted
isInstanceOf: Data Subject Scale

Fixed Multiple Locations
in scheme: dpv#
type: Concept
creator: Harshvardhan J. Pandit
broader: Fixed Location
definition: Location that is fixed with multiple places e.g. multiple cities
created: 2022-06-15
term status: modified
isSubTypeOf: Fixed Location
modified: 2020-10-05

Joint Data Controllers
in scheme: dpv#
creator: Georg Krog
creator: Harshvardhan Pandit
isSubTypeOf: Data Controller
created: 2022-02-02
type: Concept
note: To indicate the membership, hasDataController may be used
broader: Data Controller
definition: A group of Data Controllers that jointly determine the purposes and means of processing
term status: accepted

Increase Service Robustness
in scheme: dpv#
creator: Javier Fernandez
creator: Elmar Kiesling
creator: Harshvardhan J. Pandit
creator: Fajar Ekaputra
creator: Simon Steyskal
creator: Axel Polleres
broader: Optimisation for Controller
type: Concept
isSubTypeOf: Optimisation for Controller
definition: Improve robustness and resilience of services
created: 2019-04-05
term status: accepted

Scoring of Individuals
in scheme: dpv#
created: 2022-10-22
source: oj
isSubTypeOf: Processing Context
type: Concept
definition: Processing that involves scoring of individuals
broader: Processing Context
creator: Harshvardhan J. Pandit
term status: accepted

Until Time Duration
in scheme: dpv#
term status: modified
definition: Duration that has a fixed end date e.g. 2022-12-31
type: Concept
isSubTypeOf: Duration
modified: 2020-10-05
creator: Harshvardhan J. Pandit
broader: Duration
created: 2022-06-15

Records of Activities
in scheme: dpv#
broader: Organisational Measure
type: Concept
definition: Records of activities within some context such as maintainence tasks or governance functions
narrower: Data Processing Records
term status: accepted
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
isSubTypeOf: Organisational Measure
created: 2021-09-08

Lawfulness Unknown
in scheme: dpv#
definition: State of the lawfulness not being known
type: Concept
broader: Lawfulness (alt title: LegalComplianceStatus)
term status: accepted
isInstanceOf: Lawfulness (alt title: LegalComplianceStatus)

RegionalAuthority
in scheme: dpv#
term status: accepted
broader: Authority
definition: An authority tasked with overseeing legal compliance for a region
type: Concept
isSubTypeOf: Authority
created: 2022-02-02
source: adms
creator: Harshvardhan J. Pandit

Wireless Security Protocols
in scheme: dpv#
creator: Harshvardhan J. Pandit
broader: Security Method
created: 2022-08-17
type: Concept
term status: accepted
isSubTypeOf: Security Method
source: reference-incident-classification-taxonomy
definition: Security implemented at or over wireless communication protocols

Privacy Notice
in scheme: dpv#
created: 2021-09-08
broader: Notice
type: Concept
narrower: Consent Notice
creator: Paul Ryan
creator: Harshvardhan J. Pandit
creator: David Hickey
creator: Georg P Krog
example: E0025
example: E0018
term status: accepted
definition: Represents a notice or document outlining information regarding privacy
isSubTypeOf: Notice

Authorisation Protocols
in scheme: dpv#
term status: accepted
type: Concept
created: 2022-08-17
definition: Protocols involving authorisation of roles or profiles to determine permission, rights, or privileges
isSubTypeOf: Technical Measure
source: reference-incident-classification-taxonomy
broader: Technical Measure
creator: Harshvardhan J. Pandit

Multi-Factor Authentication (MFA)
in scheme: dpv#
creator: Harshvardhan J. Pandit
isSubTypeOf: Authentication Protocols
broader: Authentication Protocols
created: 2022-08-17
type: Concept
term status: accepted
definition: An authentication system that uses two or more methods to authenticate
source: reference-incident-classification-taxonomy

Align
in scheme: dpv#
definition: to adjust the data to be in relation to another data
type: Concept
isSubTypeOf: Transform
source: oj
broader: Transform
created: 2019-05-07
term status: accepted

Enter Into Contract
in scheme: dpv#
type: Concept
broader: Contract
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P Krog
term status: accepted
definition: Processing necessary to enter into contract
created: 2021-04-07
isSubTypeOf: Contract

MaintainCreditRatingDatabase
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Georg P Krog
definition: Maintain Credit Rating Database
type: Concept
isSubTypeOf: Credit Checking
broader: Credit Checking
created: 2022-06-15
term status: accepted

Combine
in scheme: dpv#
definition: to join or merge data
source: processing
source: oj
created: 2019-05-07
type: Concept
isSubTypeOf: Transform
broader: Transform
term status: accepted
related: Aggregate

Third-Party Agreement
in scheme: dpv#
broader: Data Processing Agreement
creator: Harshvardhan J. Pandit
type: Concept
definition: An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data between a Data Controller or Processor and a Third Party
created: 2022-02-09
term status: accepted
isSubTypeOf: Data Processing Agreement

SingularDataVolume
in scheme: dpv#
created: 2022-06-15
term status: accepted
broader: Data Volume
definition: Data volume that is considered singular i.e. a specific instance or single item
type: Concept
creator: Harshvardhan J. Pandit
isInstanceOf: Data Volume

Service Provision
in scheme: dpv#
created: 2019-04-05
broader: Purpose
term status: accepted
narrower: Registration and Authentication
narrower: Sell Products
narrower: Requested Service Provision
narrower: Technical Service Provision
narrower: Identify and Repair Impairments
narrower: Service Order Management
narrower: Payment
narrower: Service Usage Analytics
narrower: Service Optimization
narrower: Service Personalization
creator: Javier Fernandez
creator: Simon Steyskal
creator: Elmar Kiesling
creator: Harshvardhan J. Pandit
creator: Fajar Ekaputra
creator: Axel Polleres
definition: Provide service or product or activities
type: Concept
example: E0018
isSubTypeOf: Purpose

Consultation with Data Subject Representative
in scheme: dpv#
broader: Consultation with Data Subject
created: 2022-10-22
type: Concept
term status: accepted
creator: Harshvardhan J. Pandit
creator: Georg P Krog
definition: Consultation with representative of data subject(s)
isSubTypeOf: Consultation with Data Subject

Trusted Third Party Utilisation
in scheme: dpv#
term status: accepted
creator: Harshvardhan J. Pandit
broader: Security Procedure
type: Concept
source: data-pseudonymisation-advanced-techniques-and-use-cases
created: 2022-08-17
definition: Utilisation of a trusted third party to provide or carry out a measure
isSubTypeOf: Security Procedure

Infer
in scheme: dpv#
type: Concept
creator: Harshvardhan J. Pandit
modified: 2022-10-14
created: 2022-04-20
isSubTypeOf: Derive
example: E0014
definition: to infer data from existing data
broader: Derive
term status: modified
note: Infer indicates data that is derived without it being present or obtainable from existing data. For data that is presented, and is 'extracted' or 'obtained' from existing data, see Derive.

Controller-Processor Agreement
in scheme: dpv#
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Beatriz Esteves
creator: Georg P Krog
creator: Paul Ryan
created: 2022-01-26
example: E0020
example: E0021
definition: An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data between a Data Controller and a Data Processor
isSubTypeOf: Data Processing Agreement
broader: Data Processing Agreement
type: Concept
term status: accepted

has consent notice
in scheme: dpv#
creator: Mark Lizar
creator: Harshvardhan J. Pandit
creator: Bud Bruegger
type: Concept
type: Relation
term status: sunset
modified: 2022-06-22
editorial note: WARNING: This concept will be deprecated in future releases
note: The actual notice that the Data Subject received to consent to, either a text or link to a document, which should be usable to decide whether the form or consent was compliant to legislation, e.g. documenting how the user has been informed about rights and implications (such as, right to data portability,right to recitffy, right to erasure, right to restrict processing, right to object, rights regarding automated decision making or profiling, processors, third parties, sub-processors, outside-EEA transfers, automated decision-making, or other necessary details of the privacy-policy). Can be TextOrDocumentOrURI.
definition: Specifies the notice provided in context of consent
created: 2019-04-05

Audit Not Required
in scheme: dpv#
definition: State where an audit is determined as not being required
broader: Audit Status
isInstanceOf: Audit Status
created: 2022-05-18
type: Concept
creator: Harshvardhan J. Pandit
term status: accepted

has likelihood
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P Krog
creator: Julian Flake
has range: Likelihood
created: 2022-07-20
has domain: Concept
type: Relation
type: Concept
definition: Indicates the likelihood associated with a concept
term status: accepted

Move
in scheme: dpv#
source: processing
related: Move
isSubTypeOf: Transfer
type: Concept
broader: Transfer
created: 2019-05-07
term status: accepted
definition: to move data from one location to another including deleting the original copy

Asymmetric Encryption
in scheme: dpv#
term status: accepted
creator: Harshvardhan J. Pandit
isSubTypeOf: Encryption
type: Concept
source: data-pseudonymisation-advanced-techniques-and-use-cases
definition: Use of asymmetric cryptography to encrypt data
created: 2022-08-17
broader: Encryption

Pseudonymised Data
in scheme: dpv#
broader: Personal Data
isSubTypeOf: Personal Data
definition: Personal Data that has undergone a pseudonymisation process or a partial (incomplete) anonymisation process such that it is still considered Personal Data
type: Concept
term status: accepted
created: 2022-01-19
creator: Harshvardhan J. Pandit

Data Transfer Impact Assessment
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Paul Ryan
term status: accepted
definition: Impact Assessment for conducting data transfers
created: 2021-09-08
type: Concept
isSubTypeOf: Impact Assessment
broader: Impact Assessment

Consent Notice
in scheme: dpv#
isSubTypeOf: Privacy Notice
broader: Privacy Notice
type: Concept
creator: Paul Ryan
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Georg P Krog
definition: A Notice for information provision associated with Consent
created: 2022-06-21
term status: accepted

Elderly Data Subject
in scheme: dpv#
type: Concept
broader: Vulnerable Data Subject
isSubTypeOf: Vulnerable Data Subject
definition: Data subjects that are considered elderly (i.e. based on age)
term status: accepted
creator: Georg P Krog
created: 2022-06-15

Profiling
in scheme: dpv#
source: oj
created: 2019-05-07
isSubTypeOf: Use
type: Concept
broader: Use
term status: accepted
definition: to create a profile that describes or represents a person

Homomorphic Encryption
in scheme: dpv#
definition: Use of Homomorphic encryption that permits computations on encrypted data without decrypting it
isSubTypeOf: Cryptographic Methods
created: 2022-08-17
type: Concept
broader: Cryptographic Methods
term status: accepted
source: reference-incident-classification-taxonomy
creator: Harshvardhan J. Pandit

Personalised Advertising
in scheme: dpv#
broader: Personalisation
broader: Advertising
isSubTypeOf: Advertising
isSubTypeOf: Personalisation
definition: Create and provide personalised advertising
type: Concept
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Beatriz Esteves
narrower: Targeted Advertising
term status: accepted
created: 2020-11-04

Legitimate Interest Assessment
in scheme: dpv#
type: Concept
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Paul Ryan
broader: Assessment
created: 2021-09-08
definition: Indicates an assessment regarding the use of legitimate interest as a lawful basis by the data controller
isSubTypeOf: Assessment
term status: accepted

is indicated by
in scheme: dpv#
created: 2022-06-21
term status: accepted
has domain: Concept
type: Concept
type: Relation
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P Krog
has range: Entity
definition: Specifies entity who indicates the specific context

Harm
in scheme: dpv#
type: Concept
creator: Beatriz Esteves
creator: Fajar Ekaputra
creator: Georg P Krog
creator: Julian Flake
creator: Harshvardhan J. Pandit
created: 2022-08-13
example: E0029
definition: Impact that acts as or causes harms
isSubTypeOf: Damage
term status: changed
broader: Damage

has consent status
in scheme: dpv#
has domain: Concept
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P Krog
type: Concept
type: Relation
term status: accepted
has range: Consent Status
definition: Specifies the state or status of consent
created: 2022-06-21

Create Event Recommendations
in scheme: dpv#
type: Concept
modified: 2022-10-14
source: specialprivacy.ercim.eu
isSubTypeOf: Create Personalised Recommendations
creator: Rudy Jacob
creator: Harshvardhan J. Pandit
term status: modified
created: 2019-11-26
broader: Create Personalised Recommendations
definition: Create and provide personalised recommendations for events

Entities_Legalrole Concepts
member: Data Sub-Processor
member: Data Protection Officer
member: has recipient data controller
member: Third Party
member: has data importer
member: Recipient
member: has data protection officer
member: has joint data controllers
member: Data Controller
member: has data exporter
member: Data Importer
member: Data Exporter
member: has recipient third party
member: has data processor
member: has recipient
member: Data Processor
member: has data controller
member: Joint Data Controllers
type: Collection

has expiry time
in scheme: dpv#
created: 2019-04-05
type: Concept
type: Relation
broader: expiry
term status: sunset
isSubTypeOf: expiry
creator: Mark Lizar
creator: Harshvardhan J. Pandit
creator: Bud Bruegger
definition: Specifies the expiry time or duration for consent
modified: 2022-06-22
editorial note: WARNING: This concept will be deprecated in future releases

Consent Refused
in scheme: dpv#
definition: The state where consent has been refused
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P Krog
creator: Julian Flake
note: An example of this state is when the individual clicks on a 'disagree' or 'reject' or 'refuse' button, or leaves a checkbox unticked
type: Concept
source: GConsent
created: 2022-06-22
term status: accepted
isInstanceOf: Consent Status Invalid for Processing
broader: Consent Status Invalid for Processing

has responsible entity
in scheme: dpv#
broader: has entity
has range: Entity
creator: Harshvardhan J. Pandit
created: 2022-03-02
has domain: Concept
type: Concept
type: Relation
term status: accepted
isSubTypeOf: has entity
definition: Specifies the indicated entity is responsible within some context

has storage condition
in scheme: dpv#
has range: Storage Condition
source: specialprivacy.ercim.eu
type: Concept
type: Relation
creator: Harshvardhan J. Pandit
creator: Axel Polleres
creator: Rob Brennan
creator: Mark Lizar
created: 2022-08-13
definition: Indicates information about storage condition
has domain: Concept
term status: changed

Optional
in scheme: dpv#
isInstanceOf: Necessity
creator: Georg P Krog
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Beatriz Esteves
creator: Paul Ryan
created: 2022-02-14
type: Concept
broader: Necessity
term status: accepted
definition: Indication of 'optional' or 'voluntary'

Human Involvement for Input
in scheme: dpv#
created: 2022-09-07
type: Concept
broader: Human Involvement
creator: Harshvardhan J. Pandit
narrower: Automated Processing with Human Input
term status: accepted
isInstanceOf: Human Involvement
definition: Human involvement for the purposes of providing inputs

isInstanceOf
sub property of: semanticRelation

Consultation
in scheme: dpv#
isSubTypeOf: Organisational Measure
type: Concept
creator: Paul Ryan
creator: Harshvardhan J. Pandit
creator: Georg P Krog
broader: Organisational Measure
narrower: Consultation with DPO
narrower: Consultation with Authority
narrower: Consultation with Data Subject
created: 2020-11-04
term status: accepted
definition: Consultation is a process of receiving feedback, advice, or opinion from an external agency

Large Scale Processing
in scheme: dpv#
term status: modified
definition: Processing that takes place at large scales (as specified by some criteria)
broader: Processing Scale
creator: Piero Bonatti
creator: Harshvardhan J. Pandit
isInstanceOf: Processing Scale
created: 2020-11-04
type: Concept
note: The exact definition of what constitutes "large scale" depends on use of jurisdictional, domain-specific, or other forms of externally defined criterias. Where possible, this should be reflected by extending this term with the appropriate context.
modified: 2022-09-07
source: oj

Location Locality
in scheme: dpv#
isSubTypeOf: Location
narrower: Local Location
narrower: Remote Location
type: Concept
creator: Harshvardhan J. Pandit
broader: Location
created: 2022-06-15
modified: 2022-10-04
definition: Locality refers to whether the specified location is local within some context, e.g. for the user
term status: modified

Data Sanitisation Technique
in scheme: dpv#
narrower: Data Anonymisation Technique
narrower: Data Redaction
source: reference-incident-classification-taxonomy
created: 2022-08-17
type: Concept
isSubTypeOf: Technical Measure
creator: Harshvardhan J. Pandit
broader: Technical Measure
term status: accepted
definition: Cleaning or any removal or re-organisation of elements in data based on selective criteria

Data Volume
in scheme: dpv#
created: 2022-06-15
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Rana Saniei
narrower: SmallDataVolume
narrower: LargeDataVolume
narrower: SingularDataVolume
narrower: MediumDataVolume
narrower: SporadicDataVolume
narrower: HugeDataVolume
definition: Volume or Scale of Data
type: Concept
isSubTypeOf: Scale
broader: Scale
term status: accepted

Design Standard
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Rob Brennan
creator: Mark Lizar
creator: Axel Polleres
isSubTypeOf: GuidelinesPrinciple
broader: GuidelinesPrinciple
type: Concept
definition: A set of rules or guidelines outlining criterias for design
term status: accepted
created: 2019-04-05

Natural Person
in scheme: dpv#
definition: A human
type: Concept
broader: Entity
term status: accepted
created: 2022-02-09
isSubTypeOf: Entity
creator: Harshvardhan J. Pandit
narrower: Data Subject

has authority
in scheme: dpv#
definition: Indicates applicability of authority for a jurisdiction
type: Relation
type: Concept
creator: Harshvardhan J. Pandit
creator: Georg P Krog
term status: accepted
created: 2022-01-19
has range: Authority
has domain: Concept

Customer Management
in scheme: dpv#
creator: Beatriz
creator: Georg P Krog
creator: Harshvardhan J. Pandit
broader: Purpose
type: Concept
narrower: Customer Order Management
narrower: Customer Claims Management
narrower: Customer Relationship Management
narrower: Customer Solvency Monitoring
narrower: Customer Care
definition: Manage past, current, and future customers
term status: accepted
created: 2021-09-08
isSubTypeOf: Purpose

Fixed Occurences Duration
in scheme: dpv#
term status: modified
isSubTypeOf: Duration
definition: Duration that takes place a fixed number of times e.g. 3 times
type: Concept
modified: 2020-10-05
creator: Harshvardhan J. Pandit
created: 2022-06-15
broader: Duration

HugeDataVolume
in scheme: dpv#
broader: Data Volume
type: Concept
creator: Harshvardhan J. Pandit
isInstanceOf: Data Volume
created: 2022-06-15
term status: accepted
definition: Data volume that is considered huge or more than large within the context

has expiry condition
in scheme: dpv#
creator: Mark Lizar
creator: Bud Bruegger
creator: Harshvardhan J. Pandit
type: Relation
type: Concept
term status: sunset
isSubTypeOf: expiry
modified: 2022-06-22
editorial note: WARNING: This concept will be deprecated in future releases
definition: Specifies the condition or event that determines the expiry of consent
note: Can be TextOrDocumentOrURI
created: 2019-04-05
broader: expiry

has data processor
in scheme: dpv#
type: Relation
type: Concept
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P. Krog
broader: has recipient
has domain: Concept
term status: accepted
definition: Indiciates inclusion or applicability of a Data Processor
has range: Data Processor
isSubTypeOf: has recipient
created: 2022-02-09

Derive
in scheme: dpv#
term status: accepted
note: Derive indicates data is present or obtainable from existing data. For data that is created without such existence, see Infer.
isSubTypeOf: Obtain
example: E0014
broader: Obtain
source: processing
definition: to create new derivative data from the original data
created: 2019-05-07
type: Concept
narrower: Infer
related: Derive

Access Control Method
in scheme: dpv#
creator: Mark Lizar
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Rob Brennan
example: E0016
created: 2019-04-05
definition: Methods which restrict access to a place or resource
isSubTypeOf: Technical Measure
type: Concept
broader: Technical Measure
term status: accepted
narrower: Physical Access Control Method
narrower: Usage Control

Destruct
in scheme: dpv#
created: 2019-05-07
term status: accepted
isSubTypeOf: Remove
broader: Remove
type: Concept
definition: to process data in a way it no longer exists or cannot be repaired
source: oj

Organisational Unit
in scheme: dpv#
broader: Entity
isSubTypeOf: Entity
type: Concept
creator: Harshvardhan J. Pandit
creator: Paul Ryan
term status: accepted
created: 2022-03-23
definition: Entity within an organisation that does not constitute as a separate legal entity

has purpose
in scheme: dpv#
type: Concept
type: Relation
source: specialprivacy.ercim.eu
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Javier Fernández
creator: Bud Bruegger
creator: Axel Polleres
term status: accepted
has domain: Concept
modified: 2020-11-04
created: 2019-04-04
definition: Indicates association with Purpose
has range: Purpose

Improve Existing Products and Services
in scheme: dpv#
creator: Javier Fernandez
creator: Elmar Kiesling
creator: Harshvardhan J. Pandit
creator: Fajar Ekaputra
creator: Simon Steyskal
creator: Axel Polleres
broader: Optimisation for Controller
type: Concept
term status: accepted
isSubTypeOf: Optimisation for Controller
definition: Improve existing products and services
created: 2019-04-05

Customer Solvency Monitoring
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Beatriz
creator: Georg P Krog
isSubTypeOf: Customer Management
created: 2021-09-08
type: Concept
definition: Monitor solvency of customers for financial diligence
source: model-voor-een-register-van-de-verwerkingsactiviteiten
broader: Customer Management
narrower: Credit Checking
term status: accepted

has data importer
in scheme: dpv#
type: Concept
type: Relation
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P. Krog
has range: Data Importer
broader: has recipient
isSubTypeOf: has recipient
definition: Indiciates inclusion or applicability of a LegalEntity in the role of Data Importer
has domain: Concept
term status: accepted
created: 2022-02-09

Disaster Recovery Procedures
in scheme: dpv#
type: Concept
creator: Harshvardhan J. Pandit
isSubTypeOf: Governance Procedures
created: 2022-08-17
source: 5g-cybersecurity-standards
term status: accepted
definition: Procedures related to management of disasters and recovery
broader: Governance Procedures

Contractual Terms
in scheme: dpv#
creator: Rob Brennan
creator: Mark Lizar
creator: Axel Polleres
creator: Harshvardhan J. Pandit
type: Concept
created: 2019-04-05
isSubTypeOf: Legal Agreement
broader: Legal Agreement
definition: Contractual terms governing data handling within or with an entity
term status: accepted

has data
in scheme: dpv#
definition: Indicates associated with Data (may or may not be personal)
has domain: Concept
type: Concept
type: Relation
has range: Data
creator: Harshvardhan J. Pandit
narrower: has personal data
term status: accepted
created: 2022-08-18

Consent Request Deferred
in scheme: dpv#
isInstanceOf: Consent Status Invalid for Processing
type: Concept
broader: Consent Status Invalid for Processing
definition: State where a request for consent has been deferred without a decision
note: An example of this state is when the individual closes or dismisses a notice without making a decision. This state is intended for making the distinction between a notice being provided (as a consent request) and the individual interacting with the notice without making a decision - where the 'ignoring of a notice' is taken as consent being neither given nor refused
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P Krog
created: 2022-06-22
source: GConsent
term status: accepted

Local Location
in scheme: dpv#
type: Concept
narrower: Private Location
narrower: Within Device
narrower: Publicly Accessible Location
narrower: Within Physical Environment
narrower: Within Virtual Environment
broader: Location Locality
term status: modified
modified: 2020-10-05
definition: Location is local
creator: Harshvardhan J. Pandit
isSubTypeOf: Location Locality
created: 2022-06-15

has policy
in scheme: dpv#
has domain: Concept
type: Concept
type: Relation
creator: Harshvardhan J. Pandit
term status: accepted
created: 2022-01-26
broader: has technical and organisational measure
has range: Policy
definition: Indicates policy applicable or used
isSubTypeOf: has technical and organisational measure

Impact
in scheme: dpv#
type: Concept
creator: Beatriz Esteves
creator: Fajar Ekaputra
creator: Julian Flake
creator: Georg P Krog
creator: Harshvardhan J. Pandit
isSubTypeOf: Consequence
term status: accepted
narrower: Benefit
narrower: Detriment
narrower: Damage
definition: The impact(s) possible or arising as a consequence from specified context
note: Impact is a stronger notion of consequence in terms of influence, change, or effect on something e.g. for impact assessments
broader: Consequence
example: E0029
created: 2022-03-23

Encryption at Rest
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Rob Brennan
creator: Mark Lizar
creator: Axel Polleres
isSubTypeOf: Encryption
broader: Encryption
created: 2019-04-05
type: Concept
term status: accepted
definition: Encryption of data when being stored (persistent encryption)

SmallScaleOfDataSubjects
in scheme: dpv#
type: Concept
broader: Data Subject Scale
term status: accepted
created: 2022-06-15
isInstanceOf: Data Subject Scale
creator: Harshvardhan J. Pandit
definition: Scale of data subjects considered small or limited within the context

Non Compliant
in scheme: dpv#
definition: State of non-compliance where objectives have not been met, but have not been violated
created: 2022-05-18
type: Concept
isInstanceOf: Compliance Status
creator: Harshvardhan J. Pandit
modified: 2022-09-07
broader: Compliance Status
term status: changed
note: Changed from not compliant for consistency in commonly used terms

Private Information Retrieval
in scheme: dpv#
definition: Use of cryptographic methods to retrieve a record from a system without revealing which record is retrieved
creator: Harshvardhan J. Pandit
isSubTypeOf: CrytographicMethods
created: 2022-08-17
broader: CrytographicMethods
type: Concept
term status: accepted
source: data-protection-engineering

Sell Data to Third Parties
in scheme: dpv#
term status: accepted
creator: Javier Fernandez
creator: Elmar Kiesling
creator: Harshvardhan J. Pandit
creator: Fajar Ekaputra
creator: Simon Steyskal
creator: Axel Polleres
isSubTypeOf: Sell Products
broader: Sell Products
note: Sell here means exchange, submit, or provide in return for direct or indirect compensation. Was subclass of commercial interest, changed to reflect selling something
type: Concept
created: 2019-04-05
definition: Sell data or information to third parties

has data subject scale
in scheme: dpv#
created: 2022-06-22
definition: Indicates the scale of data subjects
isSubTypeOf: Scale
creator: Harshvardhan J. Pandit
has range: Data Subject Scale
type: Relation
type: Concept
broader: Scale
term status: accepted
has domain: Concept

Consultation with Authority
in scheme: dpv#
term status: accepted
definition: Consultation with an authority or authoritative entity
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
isSubTypeOf: Consultation
broader: Consultation
type: Concept
created: 2020-11-04

Audit Rejected
in scheme: dpv#
isInstanceOf: Audit Status
created: 2022-05-18
type: Concept
creator: Harshvardhan J. Pandit
term status: accepted
definition: State of not being approved or being rejected through the audit
broader: Audit Status

Permission
in scheme: dpv#
type: Concept
creator: Beatriz Esteves
creator: Paul Ryan
creator: Harshvardhan J. Pandit
creator: Georg P Krog
definition: A rule describing a permission to perform an activity
isSubTypeOf: Rule
created: 2022-10-19
term status: accepted
broader: Rule

has processing automation
in scheme: dpv#
type: Concept
type: Relation
creator: Harshvardhan J. Pandit
created: 2022-08-13
definition: Indicates the use or extent of automation associated with processing
has domain: Concept
term status: accepted
has range: Automation of Processing

has human involvement
in scheme: dpv#
type: Concept
type: Relation
creator: Paul Ryan
creator: Harshvardhan J. Pandit
creator: Georg P. Krog
has range: Human Involvement
definition: Indicates Involvement of humans in processing such as within automated decision making process
term status: accepted
has domain: Concept
note: Human involvement is also relevant to 'human in the loop'
created: 2020-11-04

Private Location
in scheme: dpv#
type: Concept
definition: Location that is not or cannot be accessed by the public and is controlled as a private space
broader: Local Location
term status: accepted
created: 2022-10-22
creator: Harshvardhan J. Pandit
isSubTypeOf: Local Location

Fully Automated Processing
in scheme: dpv#
type: Concept
creator: Harshvardhan J. Pandit
broader: Automation of Processing
definition: Processing that is fully automated
created: 2022-06-15
isInstanceOf: Automation of Processing
term status: accepted

Legitimate Interest
in scheme: dpv#
isSubTypeOf: Legal Basis
definition: Legitimate Interests of a Party as justification for specified processing
narrower: Legitimate Interest of Third Party
narrower: Legitimate Interest of Data Subject
narrower: Legitimate Interest of Controller
type: Concept
created: 2021-05-19
broader: Legal Basis
creator: Harshvardhan J. Pandit
term status: accepted

Intrusion Detection System
in scheme: dpv#
created: 2022-08-17
definition: Use of measures to detect intrusions and other unauthorised attempts to gain access to a system
type: Concept
isSubTypeOf: Security Method
broader: Security Method
source: reference-incident-classification-taxonomy
creator: Harshvardhan J. Pandit
term status: accepted

Cloud Location
in scheme: dpv#
type: Concept
isSubTypeOf: Remote Location
created: 2022-06-15
term status: modified
broader: Remote Location
modified: 2020-10-05
creator: Harshvardhan J. Pandit
definition: Location that is in the 'cloud' i.e. a logical location operated over the internet

Authorisation Procedure
in scheme: dpv#
type: Concept
broader: Organisational Measure
narrower: Credential Management
narrower: Identity Management Method
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Rob Brennan
creator: Mark Lizar
created: 2019-04-05
note: non-technical authorisation procedures: How is it described on an organisational level, who gets access to the data
term status: accepted
isSubTypeOf: Organisational Measure
definition: Procedures for determining authorisation through permission or authority

Structure
in scheme: dpv#
created: 2019-05-07
definition: to arrange data according to a structure
broader: Organise
type: Concept
term status: accepted
source: oj
isSubTypeOf: Organise

has status
in scheme: dpv#
type: Relation
type: Concept
has range: Status
narrower: has compliance status
narrower: has audit status
narrower: has activity status
has domain: Concept
term status: accepted
created: 2022-05-18
definition: Indicates the status of specified concept
creator: Harshvardhan J. Pandit

Consult
in scheme: dpv#
broader: Use
type: Concept
related: Query
term status: accepted
definition: to consult or query data
narrower: Query
narrower: Monitor
source: processing
source: oj
created: 2019-05-07
isSubTypeOf: Use

Duration
in scheme: dpv#
narrower: Endless Duration
narrower: Fixed Occurences Duration
narrower: Until Event Duration
narrower: Temporal Duration
narrower: Until Time Duration
narrower: Storage Duration
creator: Harshvardhan J. Pandit
broader: Context
term status: accepted
example: E0011
example: E0019
created: 2022-02-09
definition: The duration or temporal limitation
type: Concept
isSubTypeOf: Context

Data Sub-Processor
in scheme: dpv#
created: 2020-11-25
term status: accepted
broader: Data Processor
note: sub-processor' is a commonly used term similar to 'sub-contractor' and does not have a specific legal definition
isSubTypeOf: Data Processor
definition: A 'sub-processor' is a processor engaged by another processor
type: Concept
creator: Harshvardhan J. Pandit

Risk Level
in scheme: dpv#
note: Risk Levels can be defined as a combination of different characteristics. For example, ISO 31073:2022 defines it as a combination of consequences and their likelihood. Another example would be the Risk Matrix where Risk Level is defined as a combination of Likelihood and Severity associated with the Risk.
type: Concept
creator: Harshvardhan J. Pandit
term status: accepted
definition: The magnitude of a risk expressed as an indication to aid in its management
created: 2022-07-20

NonProfitOrganisation
in scheme: dpv#
isSubTypeOf: Organisation
type: Concept
source: adms
created: 2022-02-02
modified: 2020-10-05
definition: An organisation that does not aim to achieve profit as its primary goal
creator: Harshvardhan J. Pandit
term status: modified
broader: Organisation

has provision by
in scheme: dpv#
created: 2019-04-05
type: Concept
type: Relation
term status: sunset
modified: 2022-06-22
definition: Specifies the entity that provisioned or provided consent
creator: Mark Lizar
creator: Harshvardhan J. Pandit
creator: Bud Bruegger
note: Normally this would be the dataSubject, but in some exceptional cases, the consent might be given on behalf by someone else, e.g. parents of minors.
has range: Legal Entity
editorial note: WARNING: This concept will be deprecated in future releases

Consent_Status Concepts
type: Collection
member: Consent Status Invalid for Processing
member: Consent Expired
member: Consent Status
member: Consent Withdrawn
member: Consent Status Valid for Processing
member: Consent Revoked
member: Renewed Consent Given
member: Consent Unknown
member: Consent Request Deferred
member: Consent Given
member: Consent Requested
member: Consent Invalidated
member: Consent Refused

Retrieve
in scheme: dpv#
source: oj
type: Concept
term status: accepted
created: 2019-05-07
isSubTypeOf: Use
broader: Use
definition: to retrieve data, often in an automated manner

Data Subject Right
in scheme: dpv#
broader: Right
created: 2020-11-18
term status: accepted
creator: Harshvardhan Pandit
creator: Georg P Krog
creator: Beatriz Esteves
definition: The rights applicable or provided to a Data Subject
note: Based on use of definitions, the notion of 'Data Subject Right' can be equivalent to 'Individual Right' or 'Right of a Person'
isSubTypeOf: Right
type: Concept

Transmit
in scheme: dpv#
term status: accepted
isSubTypeOf: Disclose
broader: Disclose
source: oj
created: 2019-05-07
type: Concept
definition: to send out data

Activity Ongoing
in scheme: dpv#
broader: Activity Status
definition: State of an activity occuring in continuation i.e. currently ongoing
term status: accepted
isInstanceOf: Activity Status
created: 2022-05-18
type: Concept
creator: Harshvardhan J. Pandit

Acquire
in scheme: dpv#
definition: to come into possession or control of the data
type: Concept
isSubTypeOf: Obtain
broader: Obtain
source: oj
term status: accepted
created: 2019-05-07

Vendor Records Management
in scheme: dpv#
broader: Vendor Management
creator: David Hickey
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
source: model-voor-een-register-van-de-verwerkingsactiviteiten
term status: accepted
type: Concept
isSubTypeOf: Vendor Management
created: 2021-09-01
definition: Manage orders related to vendors

Fully Randomised Pseudonymisation
in scheme: dpv#
type: Concept
isSubTypeOf: Pseudonymisation
source: data-pseudonymisation-advanced-techniques-and-use-cases
broader: Pseudonymisation
created: 2022-08-17
definition: Use of randomised pseudonymisation where the same elements are assigned different values each time they occur
term status: accepted
creator: Harshvardhan J. Pandit

Anonymise
in scheme: dpv#
type: Concept
broader: Transform
term status: accepted
isSubTypeOf: Transform
source: processing
definition: to irreversibly alter personal data in such a way that an unique data subject can no longer be identified directly or indirectly or in combination with other data
created: 2019-05-07
related: Anonymise

Identity Management Method
in scheme: dpv#
created: 2022-08-17
definition: Management of identity and identity-based processes
type: Concept
isSubTypeOf: Authorisation Procedure
term status: accepted
broader: Authorisation Procedure
source: reference-incident-classification-taxonomy
creator: Harshvardhan J. Pandit

Pseudonymisation
in scheme: dpv#
broader: Data Anonymisation Technique
type: Concept
narrower: Monotonic Counter Pseudonymisation
narrower: RNG Pseudonymisation
narrower: Document Randomised Pseudonymisation
narrower: Fully Randomised Pseudonymisation
narrower: Deterministic Pseudonymisation
creator: Mark Lizar
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Rob Brennan
created: 2019-04-05
definition: Pseudonymisation means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person;
term status: accepted
source: oj
isSubTypeOf: Data Anonymisation Technique

Detriment
in scheme: dpv#
type: Concept
isSubTypeOf: Impact
creator: Beatriz Esteves
creator: Georg P Krog
creator: Fajar Ekaputra
creator: Julian Flake
creator: Harshvardhan J. Pandit
term status: accepted
created: 2022-03-23
definition: Impact that acts as or causes detriments
broader: Impact

Query
in scheme: dpv#
isSubTypeOf: Consult
type: Concept
broader: Consult
created: 2022-06-15
definition: to query or make enquiries over data
term status: accepted
creator: Harshvardhan J. Pandit

Consent Invalidated
in scheme: dpv#
term status: accepted
creator: Georg P Krog
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
source: GConsent
definition: The state where consent has been deemed to be invalid
isInstanceOf: Consent Status Invalid for Processing
note: An example of this state is where an investigating authority or a court finds the collected consent did not meet requirements, and 'invalidates' both prior and future uses of it to carry out processing
broader: Consent Status Invalid for Processing
created: 2022-06-22

JobApplicant
in scheme: dpv#
created: 2022-04-06
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Beatriz Esteves
creator: Julian Flake
type: Concept
term status: accepted
definition: Data subjects that apply for jobs or employments
isSubTypeOf: Applicant
broader: Applicant

Legitimate Interest of Third Party
in scheme: dpv#
type: Concept
created: 2021-05-19
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P Krog
term status: accepted
definition: Legitimate Interests of a Third Party in conducting specified processing
broader: Legitimate Interest
isSubTypeOf: Legitimate Interest

Variable Location
in scheme: dpv#
type: Concept
modified: 2020-10-05
creator: Harshvardhan J. Pandit
created: 2022-06-15
definition: Location that is known but is variable e.g. somewhere within a given area
broader: Location Fixture
isSubTypeOf: Location Fixture
term status: modified

Legal_Basis Concepts
member: Legitimate Interest of Controller
member: Contract Performance
member: Public Interest
member: Legitimate Interest of Data Subject
member: Enter Into Contract
member: Legitimate Interest
member: Legitimate Interest of Third Party
member: Consent
member: Data Transfer Legal Basis
member: Vital Interest
member: Vital Interest of Natural Person
member: Legal Obligation
member: has legal basis
member: Legal Basis
member: Vital Interest of Data Subject
member: Contract
member: Official Authority of Controller
type: Collection

Consent Status Invalid for Processing
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Julian Flake
creator: Paul Ryan
created: 2022-06-22
narrower: Consent Refused
narrower: Consent Withdrawn
narrower: Consent Revoked
narrower: Consent Expired
narrower: Consent Unknown
narrower: Consent Request Deferred
narrower: Consent Invalidated
narrower: Consent Requested
isSubTypeOf: Consent Status
source: GConsent
definition: States of consent that cannot be used as valid justifications for processing data
type: Concept
broader: Consent Status
term status: accepted
note: This identifies the stages associated with consent that should not be used to process data

has country
in scheme: dpv#
type: Concept
type: Relation
term status: accepted
definition: Indicates applicability of specified country
creator: Harshvardhan J. Pandit
creator: Georg P Krog
narrower: has third country
created: 2022-01-19
isSubTypeOf: has location
has range: Country
broader: has location
has domain: Concept

Consultation with DPO
in scheme: dpv#
creator: Georg P Krog
creator: Harshvardhan J. Pandit
isSubTypeOf: Consultation
broader: Consultation
definition: Consultation with Data Protection Officer(s)
type: Concept
created: 2022-06-15
term status: accepted

Legal Basis
in scheme: dpv#
definition: The Legal basis used to justify processing of personal data
example: E0022
example: E0023
type: Concept
note: Legal basis (plural: legal bases) are defined by legislations and regulations, whose applicability is usually restricted to specific jurisdictions.
term status: accepted
created: 2019-04-05
modified: 2020-11-04
narrower: Legitimate Interest
narrower: Consent
narrower: Data Transfer Legal Basis
narrower: Vital Interest
narrower: Legal Obligation
narrower: Contract
narrower: Official Authority of Controller
narrower: Public Interest
creator: Javier Fernández
creator: Axel Polleres

Third Party
in scheme: dpv#
isSubTypeOf: Recipient
broader: Recipient
definition: A ‘third party’ means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and people who, under the direct authority of the controller or processor, are authorised to process personal data.
type: Concept
creator: Harshvardhan J. Pandit
created: 2019-06-04
source: oj
term status: accepted

has risk
in scheme: dpv#
has domain: Concept
has range: Risk
created: 2020-11-18
type: Concept
type: Relation
creator: Harshvardhan J. Pandit
definition: Indicates applicability of Risk
definition: Indicates applicability of Risk for this concept
term status: accepted

Penetration Testing Methods
in scheme: dpv#
broader: Security Method
isSubTypeOf: Security Method
source: reference-incident-classification-taxonomy
creator: Harshvardhan J. Pandit
created: 2022-08-17
type: Concept
definition: Use of penetration testing to identity weaknessess and vulnerabilities through simulations
term status: accepted

Small Scale Processing
in scheme: dpv#
definition: Processing that takes place at small scales (as specified by some criteria)
broader: Processing Scale
type: Concept
creator: Harshvardhan J. Pandit
created: 2022-09-07
isInstanceOf: Processing Scale
term status: accepted

has organisational measure
in scheme: dpv#
type: Relation
type: Concept
broader: has technical and organisational measure
isSubTypeOf: has technical and organisational measure
definition: Indicates use or applicability of Organisational measure
narrower: has notice
has range: Organisational Measure
has domain: Concept
created: 2022-02-09
creator: Harshvardhan J. Pandit
term status: accepted

Hash-based Message Authentication Code (HMAC)
in scheme: dpv#
definition: Use of HMAC where message authentication code (MAC) utilise a cryptographic hash function and a secret cryptographic key
isSubTypeOf: Cryptographic Authentication
creator: Harshvardhan J. Pandit
broader: Cryptographic Authentication
type: Concept
created: 2022-08-17
source: 5g-cybersecurity-standards
term status: accepted

GlobalScale
in scheme: dpv#
term status: accepted
definition: Geographic coverage spanning the entire globe
broader: Geographic Coverage
type: Concept
creator: Harshvardhan J. Pandit
created: 2022-06-15
isInstanceOf: Geographic Coverage

Pseudonymise
in scheme: dpv#
type: Concept
isSubTypeOf: Transform
definition: to replace personal identifiable information by artificial identifiers
source: oj
broader: Transform
created: 2019-05-07
term status: modified
creator: 2022-10-14

Scope
in scheme: dpv#
term status: accepted
definition: Indication of the extent or range or boundaries associated with(in) a context
type: Concept
creator: Harshvardhan J. Pandit
created: 2022-06-15
broader: Context
isSubTypeOf: Context

ForProfitOrganisation
in scheme: dpv#
type: Concept
modified: 2020-10-05
created: 2022-02-02
isSubTypeOf: Organisation
definition: An organisation that aims to achieve profit as its primary goal
term status: modified
broader: Organisation
creator: Harshvardhan J. Pandit

Service Usage Analytics
in scheme: dpv#
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
isSubTypeOf: Service Provision
definition: Conduct analysis and reporting related to usage of services or products
created: 2020-11-04
broader: Service Provision
modified: 2022-10-05
note: Was "UsageAnalytics", prefixed with Service to better reflect scope
term status: modified

Continous Frequency
in scheme: dpv#
isSubTypeOf: Frequency
modified: 2020-10-05
type: Concept
definition: Frequency where occurences are continous
creator: Harshvardhan J. Pandit
created: 2022-06-15
broader: Frequency
term status: modified

Anti-Terrorism Operations
in scheme: dpv#
creator: Harshvardhan J. Pandit
isSubTypeOf: Enforce Security
broader: Enforce Security
definition: Detect, prevent, mitigate, or otherwise act on anti-terrorism activities
term status: accepted
created: 2022-04-20
type: Concept

Sell Products
in scheme: dpv#
narrower: Sell Products to Data Subject
narrower: Sell Data to Third Parties
narrower: Sell Insights from Data
created: 2021-09-08
type: Concept
broader: Service Provision
isSubTypeOf: Service Provision
term status: accepted
note: Sell here means exchange, submit, or provide in return for direct or indirect compensation.
definition: Sell products or services
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Beatriz Esteves

Counter Money Laundering
in scheme: dpv#
creator: Harshvardhan J. Pandit
broader: Fraud Prevention and Detection
type: Concept
created: 2022-04-20
isSubTypeOf: Fraud Prevention and Detection
definition: Detect and prevent or mitigate money laundering
term status: accepted

SporadicScaleOfDataSubjects
in scheme: dpv#
type: Concept
creator: Harshvardhan J. Pandit
broader: Data Subject Scale
term status: accepted
definition: Scale of data subjects considered sporadic or sparse within the context
created: 2022-06-15
isInstanceOf: Data Subject Scale

has location
in scheme: dpv#
definition: Indicates information about location
type: Concept
type: Relation
source: specialprivacy.ercim.eu
creator: Harshvardhan J. Pandit
creator: Axel Polleres
creator: Rob Brennan
creator: Mark Lizar
term status: accepted
has range: Location
created: 2019-04-05
has domain: Concept
narrower: has country

Context Concepts
member: has duration
member: Justification
member: Often Frequency
member: Optional
member: Scope
member: Endless Duration
member: has scope
member: has identifier
member: is after
member: Technology
member: Importance
member: Fixed Occurences Duration
member: has frequency
member: has justification
member: Necessity
member: Frequency
member: Duration
member: Required
member: has outcome
member: is before
member: Until Event Duration
member: Temporal Duration
member: is implemented using technology
member: is implemented by entity
member: Singular Frequency
member: Context
member: Continous Frequency
member: Sporadic Frequency
member: Secondary Importance
member: Not Required
member: has context
member: Until Time Duration
member: Primary Importance
type: Collection

Observe
in scheme: dpv#
type: Concept
created: 2022-06-15
definition: to obtain data through observation
term status: accepted
isSubTypeOf: Obtain
creator: Georg P Krog
creator: Harshvardhan J. Pandit
broader: Obtain

Storage Deletion
in scheme: dpv#
type: Concept
creator: Axel Polleres
creator: Rob Brennan
creator: Mark Lizar
creator: Harshvardhan J. Pandit
term status: accepted
definition: Deletion or Erasure of data including any deletion guarantees
isSubTypeOf: Storage Condition
created: 2019-04-05
broader: Storage Condition

has range
sub property of: semanticRelation

Payment
in scheme: dpv#
isSubTypeOf: Service Provision
created: 2020-11-04
type: Concept
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Beatriz Esteves
definition: Process payment transactions in relation to service
term status: accepted
broader: Service Provision

Prohibition
in scheme: dpv#
broader: Rule
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
isSubTypeOf: Rule
type: Concept
created: 2022-10-19
definition: A rule describing a prohibition to perform an activity
term status: accepted

has sector
in scheme: dpv#
type: Concept
type: Relation
created: 2019-04-05
term status: accepted
has domain: Concept
definition: Indicates the purpose is associated with activities in the indicated (Economic) Sector(s)
has range: Sector

De-Identification
in scheme: dpv#
term status: accepted
created: 2019-04-05
type: Concept
isSubTypeOf: Data Anonymisation Technique
creator: Harshvardhan J. Pandit
creator: Rob Brennan
creator: Mark Lizar
creator: Axel Polleres
definition: Removal of identity or information to reduce identifiability
broader: Data Anonymisation Technique

Material Damage
in scheme: dpv#
term status: accepted
created: 2022-03-30
broader: Damage
definition: Impact that acts as or causes material damages
isSubTypeOf: Damage
type: Concept
creator: Harshvardhan J. Pandit

Credit Checking
in scheme: dpv#
broader: Customer Solvency Monitoring
type: Concept
narrower: MaintainCreditCheckingDatabase
narrower: MaintainCreditRatingDatabase
term status: accepted
created: 2022-04-20
isSubTypeOf: Customer Solvency Monitoring
creator: Harshvardhan J. Pandit
definition: Monitor, perform, or assess credit worthiness or solvency

has processing
in scheme: dpv#
has domain: Concept
created: 2019-04-04
creator: Mark Lizar
creator: Harshvardhan J. Pandit
creator: Javier Fernández
creator: Bud Bruegger
creator: Axel Polleres
definition: Indicates association with Processing
source: specialprivacy.ercim.eu
type: Concept
type: Relation
has range: Processing
modified: 2020-11-04
term status: accepted

Vendor Selection Assessment
in scheme: dpv#
isSubTypeOf: Vendor Management
created: 2021-09-01
type: Concept
broader: Vendor Management
creator: David Hickey
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
definition: Manage selection, assessment, and evaluation related to vendors
source: model-voor-een-register-van-de-verwerkingsactiviteiten
term status: accepted

is after
in scheme: dpv#
has range: Concept
definition: Indicates the specified concepts is 'after' this concept in some context
term status: accepted
created: 2022-03-02
creator: Georg P. Krog
creator: Julian Flake
creator: Harshvardhan J. Pandit
has domain: Concept
type: Concept
type: Relation

Analyse
in scheme: dpv#
definition: to study or examine the data in detail
created: 2019-05-07
type: Concept
broader: Use
term status: accepted
isSubTypeOf: Use
related: Analyse
source: processing

Incident Reporting Communication
in scheme: dpv#
isSubTypeOf: Governance Procedures
created: 2022-08-17
type: Concept
broader: Governance Procedures
source: 5g-cybersecurity-standards
term status: accepted
definition: Procedures related to management of incident reporting
creator: Harshvardhan J. Pandit

Hash Functions
in scheme: dpv#
source: reference-incident-classification-taxonomy
definition: Use of hash functions to map information or to retrieve a prior categorisation
type: Concept
broader: Cryptographic Methods
isSubTypeOf: Cryptographic Methods
term status: accepted
created: 2022-08-17
creator: Harshvardhan J. Pandit

File System Security
in scheme: dpv#
type: Concept
created: 2022-08-17
definition: Security implemented over a file system
isSubTypeOf: Security Method
creator: Harshvardhan J. Pandit
term status: accepted
broader: Security Method
source: reference-incident-classification-taxonomy

Biometric Authentication
in scheme: dpv#
type: Concept
term status: accepted
source: reference-incident-classification-taxonomy
isSubTypeOf: Authentication Protocols
creator: Harshvardhan J. Pandit
broader: Authentication Protocols
definition: Use of biometric data for authentication
created: 2022-08-17

Academic Research
in scheme: dpv#
creator: Fajar Ekaputra
creator: Axel Polleres
creator: Javier Fernandez
creator: Simon Steyskal
creator: Elmar Kiesling
creator: Harshvardhan J. Pandit
broader: Research and Development
related: Education
type: Concept
isSubTypeOf: Research and Development
created: 2019-04-05
term status: accepted
definition: Conduct or assist with research conducted in an academic context e.g. within universities

Quantum Cryptography
in scheme: dpv#
type: Concept
term status: accepted
creator: Harshvardhan J. Pandit
isSubTypeOf: CrytographicMethods
source: reference-incident-classification-taxonomy
broader: CrytographicMethods
definition: Cryptographic methods that utilise quantum mechanical properties to perform cryptographic tasks
created: 2022-08-17

Security Assessments
in scheme: dpv#
broader: Security Procedure
broader: Assessment
created: 2022-08-17
type: Concept
source: 5g-cybersecurity-standards
isSubTypeOf: Assessment
isSubTypeOf: Security Procedure
term status: accepted
definition: Assessment of security intended to identity gaps, vulnerabilities, risks, and effectiveness of controls
creator: Harshvardhan J. Pandit

Sector
in scheme: dpv#
creator: Axel Polleres
creator: Javier Fernandez
creator: Elmar Kiesling
creator: Fajar Ekaputra
creator: Simon Steyskal
creator: Harshvardhan J. Pandit
note: There are various sector codes used commonly to indicate the domain of an organisation or business. Examples include NACE (EU), ISIC (UN), SIC and NAICS (USA).
term status: accepted
type: Concept
definition: Indicate or restrict scope for interpretation and application of purpose in a domain e.g. Agriculture, Banking
created: 2019-04-05
example: E0010

Identify and Repair Impairments
in scheme: dpv#
type: Concept
definition: Identify, rectify, or otherwise under take activities intended to fix or repair impairments to existing functionalities
isSubTypeOf: Service Provision
note: An example of identifying and rectifying impairments is the process of finding and fixing errors in products, commonly referred to as debugging
creator: Harshvardhan J. Pandit
broader: Service Provision
created: 2022-08-24
term status: accepted

RNG Pseudonymisation
in scheme: dpv#
type: Concept
creator: Harshvardhan J. Pandit
isSubTypeOf: Pseudonymisation
source: data-pseudonymisation-advanced-techniques-and-use-cases
broader: Pseudonymisation
created: 2022-08-17
term status: modified
definition: A pseudonymisation method where identifiers are substituted by a number chosen by a Random Number Generator (RNG)
modified: 2022-10-13

Targeted Advertising
in scheme: dpv#
type: Concept
created: 2022-03-30
definition: Create and provide pesonalised advertisement where the personalisation is targeted to a specific individual or group of individuals
term status: accepted
isSubTypeOf: Personalised Advertising
creator: Harshvardhan J. Pandit
broader: Personalised Advertising

Entities Concepts
member: has entity
member: has contact
member: Entity
member: has representative
member: has name
member: has address
member: Representative
member: has responsible entity
member: Legal Entity
member: Natural Person
type: Collection

has justification
in scheme: dpv#
created: 2022-06-15
definition: Indicates a justification for specified concept or context
term status: accepted
has domain: Concept
has range: Justification
type: Concept
type: Relation
creator: Harshvardhan J. Pandit

Symmetric Encryption
in scheme: dpv#
type: Concept
creator: Harshvardhan J. Pandit
isSubTypeOf: Encryption
definition: Use of symmetric crytography to encrypt data
source: data-pseudonymisation-advanced-techniques-and-use-cases
broader: Encryption
term status: accepted
created: 2022-08-17

has risk level
in scheme: dpv#
type: Concept
type: Relation
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P Krog
creator: Julian Flake
term status: accepted
definition: Indicates the associated risk level associated with a risk
has domain: Risk
has range: Risk Level
created: 2022-07-20

Digital Signatures
in scheme: dpv#
source: reference-incident-classification-taxonomy
creator: Harshvardhan J. Pandit
definition: Expression and authentication of identity through digital information containing cryptographic signatures
isSubTypeOf: Cryptographic Methods
created: 2022-08-17
type: Concept
broader: Cryptographic Methods
term status: accepted

Member
in scheme: dpv#
creator: Paul Ryan
creator: Georg P. Krog
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Beatriz Esteves
definition: Data subjects that are members of a group, organisation, or other collectives
created: 2022-04-06
type: Concept
isSubTypeOf: Data Subject
broader: Data Subject
term status: accepted

Vulnerable Data Subject
in scheme: dpv#
narrower: Asylum Seeker
narrower: Elderly Data Subject
narrower: Mentally Vulnerable Data Subject
creator: Harshvardhan Pandit
creator: Georg Krog
creator: Paul Ryan
term status: accepted
isSubTypeOf: Data Subject
created: 2020-11-04
type: Concept
note: This concept denotes a Data Subject or a group are vulnerable, but not what vulnerability they possess or its context. This information can be provided additionally as comments, or as separate concepts and relations. Proposals for this are welcome.
broader: Data Subject
definition: Data Subjects which should be considered 'vulnerable' and therefore would require additional measures and safeguards

Access
in scheme: dpv#
isSubTypeOf: Use
type: Concept
broader: Use
term status: accepted
creator: Harshvardhan J. Pandit
creator: Georg P Krog
definition: to access data
created: 2022-06-15

Public Interest
in scheme: dpv#
broader: Legal Basis
isSubTypeOf: Legal Basis
creator: Harshvardhan J. Pandit
created: 2021-04-21
definition: Processing is necessary or beneficial for interest of the public or society at large
type: Concept
term status: accepted

has technical measure
in scheme: dpv#
created: 2022-02-09
creator: Harshvardhan J. Pandit
term status: accepted
has range: Technical Measure
type: Relation
type: Concept
definition: Indicates use or applicability of Technical measure
broader: has technical and organisational measure
isSubTypeOf: has technical and organisational measure
has domain: Concept

Customer Relationship Management
in scheme: dpv#
type: Concept
term status: accepted
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Beatriz
isSubTypeOf: Customer Management
created: 2021-09-08
narrower: Improve Internal CRM Processes
definition: Manage and analyse interactions with past, current, and potential customers
broader: Customer Management

Store
in scheme: dpv#
broader: Processing
source: oj
type: Concept
definition: to keep data for future use
term status: accepted
created: 2019-05-07
isSubTypeOf: Processing

Consequence of Success
in scheme: dpv#
term status: accepted
creator: Georg P Krog
creator: Harshvardhan J. Pandit
broader: Consequence
definition: The consequence(s) possible or arising from success of specified context
isSubTypeOf: Consequence
type: Concept
created: 2022-03-23

has address
in scheme: dpv#
type: Concept
type: Relation
term status: accepted
creator: Paul Ryan
creator: Harshvardhan J.Pandit
creator: Georg P Krog
creator: Beatriz Esteves
definition: Specifies address of a legal entity such as street address or pin code
created: 2020-11-04
has range: Concept
has domain: Entity

Dispute Management
in scheme: dpv#
definition: Manage disputes by natural persons, private bodies, or public authorities relevant to organisation
term status: accepted
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Beatriz Esteves
isSubTypeOf: Organisation Governance
created: 2021-09-08
type: Concept
broader: Organisation Governance
source: model-voor-een-register-van-de-verwerkingsactiviteiten

ReviewImpactAssessmentConformance
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Georg P Krog
term status: accepted
type: Concept
created: 2022-10-22

Often Frequency
in scheme: dpv#
modified: 2020-10-05
definition: Frequency where occurences are often or frequent, but not continous
term status: modified
type: Concept
isSubTypeOf: Frequency
creator: Harshvardhan J. Pandit
broader: Frequency
created: 2022-06-15

Human Involvement
in scheme: dpv#
term status: accepted
note: Human Involvement here broadly refers to any involvement by a human in the context of carrying out processing. This may include verification of outcomes, providing input data for making decisions, or overseeing activities.
created: 2022-01-26
definition: The involvement of humans in specified context
narrower: Human Involvement for Verification
narrower: Human Involvement for Input
narrower: Human Involvement for Oversight
type: Concept
creator: Harshvardhan J. Pandit
isSubTypeOf: Automation of Processing
broader: Automation of Processing
modified: 2022-06-15

Requested Service Provision
in scheme: dpv#
creator: Harshvardhan J. Pandit
creator: Beatriz Esteves
creator: Georg P Krog
created: 2021-09-08
type: Concept
narrower: Delivery of Goods
definition: Deliver service as requested by user or consumer
isSubTypeOf: Service Provision
term status: accepted
broader: Service Provision

has scale
in scheme: dpv#
type: Concept
type: Relation
term status: accepted
created: 2022-06-15
has domain: Concept
definition: Indicates the scale of specified concept
has range: Scale
creator: Harshvardhan J. Pandit

Employee
in scheme: dpv#
isSubTypeOf: Data Subject
created: 2022-04-06
creator: Georg P. Krog
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Beatriz Esteves
creator: Paul Ryan
type: Concept
term status: accepted
broader: Data Subject
definition: Data subjects that are employees

Risk
in scheme: dpv#
type: Concept
note: Risks can be associated with one or more different concepts such as purpose, processing, personal data, technical or organisational measure.
definition: A risk or possibility or uncertainty of negative effects, impacts, or consequences.
term status: accepted
created: 2020-11-18
creator: Harshvardhan J. Pandit

Evaluation of Individuals
in scheme: dpv#
term status: accepted
source: oj
isSubTypeOf: Processing Context
created: 2022-10-22
type: Concept
creator: Harshvardhan J. Pandit
broader: Processing Context
definition: Processing that involves evaluation of individuals

Completely Manual Processing
in scheme: dpv#
isInstanceOf: Automation of Processing
term status: accepted
note: For example, a human performing some processing operation
broader: Automation of Processing
creator: Harshvardhan J. Pandit
definition: Processing that is completely un-automated or fully manual
type: Concept
created: 2022-06-15

Obligation
in scheme: dpv#
creator: Paul Ryan
creator: Harshvardhan J. Pandit
creator: Georg P Krog
creator: Beatriz Esteves
isSubTypeOf: Rule
type: Concept
created: 2022-10-19
definition: A rule describing an obligation for performing an activity
term status: accepted
broader: Rule

Conformant
in scheme: dpv#
isInstanceOf: Conformance Status
created: 2022-10-22
definition: State of being conformant
type: Concept
creator: Harshvardhan J. Pandit
term status: accepted
broader: Conformance Status

Personnel Hiring
in scheme: dpv#
creator: Harshvardhan J. Pandit
broader: Personnel Management
type: Concept
created: 2022-04-20
isSubTypeOf: Personnel Management
definition: Management and execution of hiring processes of personnel
term status: accepted

Disseminate
in scheme: dpv#
source: oj
type: Concept
definition: to spread data throughout
created: 2019-05-07
isSubTypeOf: Disclose
broader: Disclose
term status: accepted

has relation with data subject
in scheme: dpv#
creator: Julian Flake
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P Krog
type: Concept
type: Relation
has range: Concept
created: 2022-06-21
term status: accepted
broader: has entity
definition: Indicates the relation between specified Entity and Data Subject
isSubTypeOf: has entity
has domain: Entity

Improve Internal CRM Processes
in scheme: dpv#
broader: Customer Relationship Management
broader: Optimisation for Controller
creator: Simon Steyskal
creator: Elmar Kiesling
creator: Harshvardhan J. Pandit
creator: Fajar Ekaputra
creator: Axel Polleres
creator: Javier Fernandez
term status: accepted
isSubTypeOf: Optimisation for Controller
isSubTypeOf: Customer Relationship Management
definition: Improve customer-relationship management (CRM) processes
type: Concept
created: 2019-04-05

Distributed System Security
in scheme: dpv#
type: Concept
isSubTypeOf: Security Method
term status: accepted
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
broader: Security Method
definition: Security implementations provided using or over a distributed system
created: 2022-08-17

Generate
in scheme: dpv#
broader: Obtain
type: Concept
term status: accepted
definition: to generate or create data
created: 2022-04-20
creator: Harshvardhan J. Pandit
isSubTypeOf: Obtain

Monitoring Policies
in scheme: dpv#
type: Concept
broader: Governance Procedures
source: 5g-cybersecurity-standards
term status: accepted
creator: Harshvardhan J. Pandit
isSubTypeOf: Governance Procedures
definition: Policy for monitoring (e.g. progress, performance)
created: 2022-08-17

Relation
sub property of: semanticRelation

Assessment
in scheme: dpv#
creator: Harshvardhan J. Pandit
isSubTypeOf: Organisational Measure
broader: Organisational Measure
type: Concept
created: 2021-09-08
narrower: Cybersecurity Assessments
narrower: Effectiveness Determination Procedures
narrower: Impact Assessment
narrower: Legitimate Interest Assessment
narrower: Security Assessments
definition: The document, plan, or process for assessment or determination towards a purpose e.g. assessment of legality or impact assessments
term status: accepted

Applicant
in scheme: dpv#
narrower: JobApplicant
creator: Julian Flake
creator: Georg P. Krog
creator: Beatriz Esteves
creator: Harshvardhan J. Pandit
creator: Paul Ryan
isSubTypeOf: Data Subject
created: 2022-04-06
broader: Data Subject
type: Concept
definition: Data subjects that are applicants in some context
term status: accepted

has lawfulness
in scheme: dpv#
has range: Lawfulness (alt title: LegalComplianceStatus)
created: 2022-10-22
broader: has compliance status
type: Concept
type: Relation
creator: Harshvardhan J. Pandit
has domain: Concept
term status: accepted
definition: Indicates the status of being lawful or legally compliant
isSubTypeOf: has compliance status

Hardware Security Protocols
in scheme: dpv#
created: 2022-08-17
type: Concept
isSubTypeOf: Security Method
term status: accepted
definition: Security protocols implemented at or within hardware
broader: Security Method
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy

Monitor
in scheme: dpv#
term status: accepted
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
definition: to monitor data for some criteria
isSubTypeOf: Consult
created: 2022-06-15
broader: Consult

Tourist
in scheme: dpv#
type: Concept
broader: Data Subject
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Beatriz Esteves
creator: Julian Flake
creator: Georg P. Krog
term status: accepted
definition: Data subjects that are tourists i.e. not citizens and not immigrants
isSubTypeOf: Data Subject
created: 2022-04-06

MaintainFraudDatabase
in scheme: dpv#
created: 2022-06-15
broader: Fraud Prevention and Detection
definition: Maintain Fraud Database
creator: Harshvardhan J. Pandit
creator: Georg P Krog
term status: accepted
type: Concept
isSubTypeOf: Fraud Prevention and Detection

WebBrowser Security
in scheme: dpv#
created: 2022-08-17
type: Concept
isSubTypeOf: Security Method
term status: accepted
definition: Security implemented at or over web browsers
source: reference-incident-classification-taxonomy
creator: Harshvardhan J. Pandit
broader: Security Method

Partially Compliant
in scheme: dpv#
type: Concept
created: 2022-05-18
isInstanceOf: Compliance Status
creator: Harshvardhan J. Pandit
term status: accepted
definition: State of partially being compliant i.e. only some objectives have been met, and others have not been in violation
broader: Compliance Status

MediumScaleOfDataSubjects
in scheme: dpv#
definition: Scale of data subjects considered medium i.e. neither large nor small within the context
isInstanceOf: Data Subject Scale
type: Concept
creator: Harshvardhan J. Pandit
creator: Paul Ryan
creator: Georg P Krog
broader: Data Subject Scale
term status: accepted
created: 2022-06-15

HugeScaleOfDataSubjects
in scheme: dpv#
broader: Data Subject Scale
term status: accepted
created: 2022-06-15
isInstanceOf: Data Subject Scale
type: Concept
definition: Scale of data subjects considered huge or more than large within the context
creator: Harshvardhan J. Pandit

Non-Commercial Research
in scheme: dpv#
creator: Axel Polleres
creator: Javier Fernandez
creator: Elmar Kiesling
creator: Harshvardhan J. Pandit
creator: Fajar Ekaputra
creator: Simon Steyskal
isSubTypeOf: Research and Development
term status: accepted
definition: Conduct research in a non-commercial setting e.g. for a non-profit-organisation (NGO)
created: 2019-04-05
type: Concept
broader: Research and Development

Operating System Security
in scheme: dpv#
created: 2022-08-17
type: Concept
term status: accepted
definition: Security implemented at or through operating systems
source: reference-incident-classification-taxonomy
isSubTypeOf: Security Method
creator: Harshvardhan J. Pandit
broader: Security Method

Consequence
in scheme: dpv#
definition: The consequence(s) possible or arising from specified context
narrower: Impact
narrower: Consequence as Side-Effect
narrower: Consequence of Success
narrower: Consequence of Failure
type: Concept
creator: Harshvardhan J. Pandit
example: E0029
term status: accepted
created: 2022-01-26

isSubTypeOf
sub property of: broader

has scope
in scheme: dpv#
type: Relation
type: Concept
creator: Harshvardhan J. Pandit
term status: accepted
definition: Indicates the scope of specified concept or context
created: 2022-06-15
has domain: Concept
has range: Scope

Cryptographic Key Management
in scheme: dpv#
type: Concept
creator: Harshvardhan J. Pandit
term status: accepted
definition: Management of crytographic keys, including their generation, storage, assessment, and safekeeping
source: reference-incident-classification-taxonomy
isSubTypeOf: Cryptographic Methods
broader: Cryptographic Methods
created: 2022-08-17

ReviewImpactAssessmentAdequacy
in scheme: dpv#
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
created: 2022-10-22

Severity
in scheme: dpv#
term status: accepted
type: Concept
creator: Harshvardhan J. Pandit
created: 2022-07-21
definition: The magnitude of being unwanted or having negative effects such as harmful impacts
note: Severity can be associated with Risk, or its Consequences and Impacts

EconomicUnion
in scheme: dpv#
created: 2022-01-19
type: Concept
creator: Harshvardhan J. Pandit
isSubTypeOf: Location
term status: accepted
definition: A political union of two or more countries based on economic or trade agreements
broader: Location

Cybersecurity Training
in scheme: dpv#
isSubTypeOf: Staff Training
created: 2022-08-17
broader: Staff Training
type: Concept
definition: Training methods related to cybersecurity
term status: accepted
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy

Deterministic Pseudonymisation
in scheme: dpv#
type: Concept
term status: accepted
creator: Harshvardhan J. Pandit
isSubTypeOf: Pseudonymisation
broader: Pseudonymisation
source: data-pseudonymisation-advanced-techniques-and-use-cases
definition: Pseudonymisation achieved through a deterministic function
created: 2022-08-17

End-to-End Encryption (E2EE)
in scheme: dpv#
creator: Harshvardhan J. Pandit
isSubTypeOf: Encryption
created: 2022-08-17
type: Concept
broader: Encryption
term status: accepted
definition: Encrypted communications where data is encrypted by the sender and decrypted by the intended receiver to prevent access to any third party
source: data-protection-engineering

Vulnerability Testing Methods
in scheme: dpv#
isSubTypeOf: Security Method
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
definition: Methods that assess or discover vulnerabilities in a system
broader: Security Method
created: 2022-08-17
type: Concept
term status: accepted

Non-Material Damage
in scheme: dpv#
definition: Impact that acts as or causes non-material damages
creator: Harshvardhan J. Pandit
broader: Damage
created: 2022-03-30
term status: accepted
isSubTypeOf: Damage
type: Concept

Digital Rights Management
in scheme: dpv#
isSubTypeOf: Technical Measure
type: Concept
broader: Technical Measure
creator: Harshvardhan J. Pandit
term status: accepted
source: reference-incident-classification-taxonomy
created: 2022-08-17
definition: Management of access, use, and other operations associated with digital content

NearlyGlobalScale
in scheme: dpv#
creator: Harshvardhan J. Pandit
broader: Geographic Coverage
created: 2022-06-15
isInstanceOf: Geographic Coverage
type: Concept
definition: Geographic coverage nearly spanning the entire globe
term status: accepted

is policy for
in scheme: dpv#
type: Relation
type: Concept
creator: Harshvardhan J. Pandit
created: 2022-01-26
has range: Concept
definition: Indicates the context or application of policy
has domain: Policy
term status: accepted

has domain
sub property of: semanticRelation

mitigates risk
in scheme: dpv#
type: Concept
type: Relation
creator: Harshvardhan J. Pandit
term status: accepted
definition: Indicates risks mitigated by this concept
has range: Risk
has domain: Risk Mitigation Measure
created: 2020-11-04

Fixed Singular Location
in scheme: dpv#
created: 2022-06-15
modified: 2020-10-05
term status: modified
isSubTypeOf: Fixed Location
definition: Location that is fixed at a specific place e.g. a city
broader: Fixed Location
type: Concept
creator: Harshvardhan J. Pandit

Concept
subclass of: Concept