Data Privacy Vocabulary
abstract: The Data Privacy Vocabulary (DPV) provides terms (classes and properties) to represent information about legally compliant personal data handling, which includes purposes, processing, personal data, technical and organisational measures.
contributor: Axel Polleres
contributor: Beatriz Esteves
contributor: Bert Bos
contributor: Bud Bruegger
contributor: Elmar Kiesling
contributor: Eva Schlehahn
contributor: Fajar J. Ekaputra
contributor: Georg P Krog
contributor: Harshvardhan J. Pandit
contributor: Javier D. Fernández
contributor: Julian Flake
contributor: Mark Lizar
contributor: Paul Ryan
contributor: Piero Bonatti
contributor: Ramisa Gachpaz Hamed
contributor: Rigo Wenning
contributor: Rob Brennan
contributor: Simon Steyskal
created: 2019-06-18
creator: Axel Polleres
creator: Harshvardhan J. Pandit
license: doc-license
modified: 2022-10-22
source: dpvcg
preferred namespace prefix: dpv
preferred namespace uri: https://w3id.org/dpv#
type: Ontology
version info: 0.9

Academic Research
created: 2019-04-05
creator: Axel Polleres
creator: Elmar Kiesling
creator: Fajar Ekaputra
creator: Harshvardhan J. Pandit
creator: Javier Fernandez
creator: Simon Steyskal
type: Concept
term status: accepted
broader: Research and Development
definition: Conduct or assist with research conducted in an academic context e.g. within universities
in scheme: dpv#
related: Education
isSubTypeOf: Research and Development

AcademicScientificOrganisation
created: 2022-02-02
creator: Harshvardhan J. Pandit
modified: 2020-10-05
source: adms
type: Concept
term status: modified
broader: Organisation
definition: Organisations related to academia or scientific pursuits e.g. Universities, Schools, Research Bodies
in scheme: dpv#
isSubTypeOf: Organisation

Access
created: 2022-06-15
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Use
definition: to access data
in scheme: dpv#
isSubTypeOf: Use

Access Control Method
created: 2019-04-05
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Rob Brennan
example: E0016
type: Concept
term status: accepted
broader: Technical Measure
definition: Methods which restrict access to a place or resource
in scheme: dpv#
narrower: Physical Access Control Method
narrower: Usage Control
isSubTypeOf: Technical Measure

Account Management
created: 2021-09-08
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Purpose
definition: Create, maintain, and manage accounts for purposes of providing services
in scheme: dpv#
isSubTypeOf: Purpose

Acquire
created: 2019-05-07
source: oj
type: Concept
term status: accepted
broader: Obtain
definition: to come into possession or control of the data
in scheme: dpv#
isSubTypeOf: Obtain

Active Right
created: 2022-10-22
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J Pandit
creator: Paul Ryan
type: Concept
term status: accepted
broader: Right
definition: The right(s) applicable, provided, or expected that need to be (actively) exercised
in scheme: dpv#
isSubTypeOf: Right

Activity Completed
created: 2022-05-18
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Activity Status
definition: State of an activity that has completed i.e. is fully in the past
in scheme: dpv#
isInstanceOf: Activity Status

Activity Halted
created: 2022-05-18
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Activity Status
definition: State of an activity that was occuring in the past, and has been halted or paused or stoped
in scheme: dpv#
isInstanceOf: Activity Status

Activity Monitoring
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: Technical Measure
definition: Monitoring of activities including assessing whether they have been successfully initiated and completed
in scheme: dpv#
isSubTypeOf: Technical Measure

Activity Ongoing
created: 2022-05-18
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Activity Status
definition: State of an activity occuring in continuation i.e. currently ongoing
in scheme: dpv#
isInstanceOf: Activity Status

Activity Proposed
created: 2022-05-18
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Activity Status
definition: State of an activity being proposed or planned i.e. yet to occur
in scheme: dpv#
isInstanceOf: Activity Status

Activity Status
created: 2022-05-18
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Status
definition: Status associated with activity operations and lifecycles
in scheme: dpv#
narrower: Activity Completed
narrower: Activity Halted
narrower: Activity Ongoing
narrower: Activity Proposed
isSubTypeOf: Status

Adapt
created: 2019-05-07
source: oj
type: Concept
term status: accepted
broader: Transform
definition: to modify the data, often rewritten into a new form for a new use
in scheme: dpv#
isSubTypeOf: Transform

Adult
created: 2022-03-30
creator: Georg Krog
type: Concept
term status: accepted
broader: Data Subject
definition: A natural person that is not a child i.e. has attained some legally specified age of adulthood
in scheme: dpv#
isSubTypeOf: Data Subject

Advertising
created: 2020-11-04
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Marketing
definition: Conduct advertising i.e. process or artefact used to call attention to a product, service, etc. through announcements, notices, or other forms of communication
in scheme: dpv#
narrower: Personalised Advertising
note: Advertising is a subset of Marketing. Advertising by itself does not indicate 'personalisation' i.e. personalised ads.
isSubTypeOf: Marketing

Algorithmic Logic
created: 2022-01-26
creator: Harshvardhan J. Pandit
modified: 2022-06-15
type: Concept
term status: accepted
broader: Automation of Processing
definition: The algorithmic logic applied or used
in scheme: dpv#
note: Algorithmic Logic is intended as a broad concept for explaining the use of algorithms and automated decisions making within Processing. To describe the actual algorithm, see the Algorithm concept.
isSubTypeOf: Automation of Processing

Align
created: 2019-05-07
source: oj
type: Concept
term status: accepted
broader: Transform
definition: to adjust the data to be in relation to another data
in scheme: dpv#
isSubTypeOf: Transform

Alter
created: 2019-05-07
source: oj
type: Concept
term status: accepted
broader: Transform
definition: to change the data without changing it into something else
in scheme: dpv#
narrower: Modify
isSubTypeOf: Transform

Analyse
created: 2019-05-07
source: processing
type: Concept
term status: accepted
broader: Use
definition: to study or examine the data in detail
in scheme: dpv#
related: Analyse
isSubTypeOf: Use

Anonymisation
created: 2019-04-05
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Rob Brennan
modified: 2022-10-01
source: oj
type: Concept
term status: modified
broader: Data Anonymisation Technique
definition: Altering personal data irreversibly such that a data subject can no longer be identified directly or indirectly, either by the data controller alone or in collaboration with any other party
in scheme: dpv#
isSubTypeOf: Data Anonymisation Technique

Anonymise
created: 2019-05-07
source: processing
type: Concept
term status: accepted
broader: Transform
definition: to irreversibly alter personal data in such a way that an unique data subject can no longer be identified directly or indirectly or in combination with other data
in scheme: dpv#
related: Anonymise
isSubTypeOf: Transform

Anonymised Data
created: 2022-01-19
creator: Piero Bonatti
type: Concept
term status: accepted
broader: Non-Personal Data
definition: Personal Data that has been (fully and completely) anonymised so that it is no longer considered Personal Data
in scheme: dpv#
note: It is advised to carefully consider indicating data is fully or completely anonymised by determining whether the data by itself or in combination with other data can identify a person. Failing this condition, the data should be denoted as PseudonymisedData. To indicate data is anonymised only for a specified entity (e.g. within an organisation), the concept AnonymisedDataWithinScope (as subclass of PseudonymisedData) should be used instead of AnonymisedData.
isSubTypeOf: Non-Personal Data

Anti-Terrorism Operations
created: 2022-04-20
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Enforce Security
definition: Detect, prevent, mitigate, or otherwise act on anti-terrorism activities
in scheme: dpv#
isSubTypeOf: Enforce Security

Applicant
created: 2022-04-06
creator: Beatriz Esteves
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
term status: accepted
broader: Data Subject
definition: Data subjects that are applicants in some context
in scheme: dpv#
narrower: JobApplicant
isSubTypeOf: Data Subject

Assess
created: 2022-06-15
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Use
definition: to assess data for some criteria
in scheme: dpv#
isSubTypeOf: Use

Assessment
created: 2021-09-08
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Organisational Measure
definition: The document, plan, or process for assessment or determination towards a purpose e.g. assessment of legality or impact assessments
in scheme: dpv#
narrower: Cybersecurity Assessments
narrower: Effectiveness Determination Procedures
narrower: Impact Assessment
narrower: Legitimate Interest Assessment
narrower: Security Assessments
isSubTypeOf: Organisational Measure

Asset Management Procedures
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: 5g-cybersecurity-standards
type: Concept
term status: accepted
broader: Governance Procedures
definition: Procedures related to management of assets
in scheme: dpv#
isSubTypeOf: Governance Procedures

Asylum Seeker
created: 2022-06-15
creator: Georg P Krog
type: Concept
term status: accepted
broader: Vulnerable Data Subject
definition: Data subjects that are asylum seekers
in scheme: dpv#
isSubTypeOf: Vulnerable Data Subject

Asymmetric Cryptography
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: Cryptographic Methods
definition: Use of public-key cryptography or asymmetric cryptography involving a public and private pair of keys
in scheme: dpv#
isSubTypeOf: Cryptographic Methods

Asymmetric Encryption
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: data-pseudonymisation-advanced-techniques-and-use-cases
type: Concept
term status: accepted
broader: Encryption
definition: Use of asymmetric cryptography to encrypt data
in scheme: dpv#
isSubTypeOf: Encryption

Audit Approved
created: 2022-05-18
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Audit Status
definition: State of being approved through the audit
in scheme: dpv#
isInstanceOf: Audit Status

Audit Conditionally Approved
created: 2022-06-29
creator: Paul Ryan
type: Concept
term status: accepted
broader: Audit Status
definition: State of being conditionally approved through the audit
in scheme: dpv#
note: A "conditional approval" is intended to reflect states where the audit has identified further changes which must be implemented before considering the audit has been 'passed', without requiring another audit to validate them. This is distinct from the case where an audit has state 'rejected', which means changes must be made and submitted for review. The requirements of a 'conditional acceptance' are expected to be minor or not significant enough to warrant another audit to review them.
isInstanceOf: Audit Status

Audit Not Required
created: 2022-05-18
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Audit Status
definition: State where an audit is determined as not being required
in scheme: dpv#
isInstanceOf: Audit Status

Audit Rejected
created: 2022-05-18
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Audit Status
definition: State of not being approved or being rejected through the audit
in scheme: dpv#
isInstanceOf: Audit Status

Audit Requested
created: 2022-05-18
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Audit Status
definition: State of an audit being requested whose outcome is not yet known
in scheme: dpv#
isInstanceOf: Audit Status

Audit Required
created: 2022-05-18
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Audit Status
definition: State where an audit is determined as being required but has not been conducted
in scheme: dpv#
isInstanceOf: Audit Status

Audit Status
created: 2022-05-18
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Status
definition: Status associated with Auditing or Investigation
in scheme: dpv#
narrower: Audit Approved
narrower: Audit Conditionally Approved
narrower: Audit Not Required
narrower: Audit Rejected
narrower: Audit Requested
narrower: Audit Required
isSubTypeOf: Status

Authentication using ABC
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: data-protection-engineering
type: Concept
term status: accepted
broader: Cryptographic Authentication
definition: Use of Attribute Based Credentials (ABC) to perform and manage authentication
in scheme: dpv#
isSubTypeOf: Cryptographic Authentication

Authentication using PABC
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: data-protection-engineering
type: Concept
term status: accepted
broader: Cryptographic Authentication
definition: Use of Privacy-enhacing Attribute Based Credentials (ABC) to perform and manage authentication
in scheme: dpv#
isSubTypeOf: Cryptographic Authentication

Authentication Protocols
created: 2019-04-05
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Rob Brennan
type: Concept
term status: accepted
broader: Technical Measure
definition: Protocols involving validation of identity i.e. authentication of a person or information
in scheme: dpv#
narrower: Biometric Authentication
narrower: Cryptographic Authentication
narrower: Multi-Factor Authentication (MFA)
narrower: Password Authentication
narrower: Single Sign On
narrower: Zero Knowledge Authentication
isSubTypeOf: Technical Measure

Authorisation Procedure
created: 2019-04-05
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Rob Brennan
type: Concept
term status: accepted
broader: Organisational Measure
definition: Procedures for determining authorisation through permission or authority
in scheme: dpv#
narrower: Credential Management
narrower: Identity Management Method
note: non-technical authorisation procedures: How is it described on an organisational level, who gets access to the data
isSubTypeOf: Organisational Measure

Authorisation Protocols
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: Technical Measure
definition: Protocols involving authorisation of roles or profiles to determine permission, rights, or privileges
in scheme: dpv#
isSubTypeOf: Technical Measure

Authority
created: 2020-11-04
creator: Georg Krog
creator: Harshvardhan Pandit
creator: Paul Ryan
type: Concept
term status: accepted
broader: GovernmentalOrganisation
broader: Legal Entity
definition: An authority with the power to create or enforce laws, or determine their compliance.
in scheme: dpv#
narrower: Data Protection Authority
narrower: NationalAuthority
narrower: RegionalAuthority
narrower: SupraNationalAuthority
isSubTypeOf: GovernmentalOrganisation
isSubTypeOf: Legal Entity

Automated Decision Making
created: 2020-11-04
creator: Harshvardhan J. Pandit
creator: Piero Bonatti
modified: 2022-09-07
source: oj
type: Concept
term status: modified
broader: Automation of Processing
broader: Decision Making
definition: Processing that involves automated decision making
in scheme: dpv#
note: Automated decision making can be defined as “the ability to make decisions by technological means without human involvement.” (“Guidelines on Automated individual decision-making and Profiling for the purposes of Regulation 2016/679 (wp251rev.01)”, 2018, p. 8)
isSubTypeOf: Automation of Processing
isSubTypeOf: Decision Making

Automated Processing with Human Input
created: 2022-06-15
creator: Harshvardhan J. Pandit
modified: 2022-09-07
type: Concept
term status: accepted
broader: Automation of Processing
broader: Human Involvement for Input
definition: Processing that is automated and involves inputs by Humans
in scheme: dpv#
note: For example, an algorithm that takes inputs from humans and performs operations based on them
isInstanceOf: Automation of Processing
isInstanceOf: Human Involvement for Input

Automated Processing with Human Oversight
created: 2022-06-15
creator: Harshvardhan J. Pandit
modified: 2022-09-07
type: Concept
term status: accepted
broader: Automation of Processing
broader: Human Involvement for Oversight
definition: Processing that is automated and involves oversight by Humans
in scheme: dpv#
note: For example, a human watching metrics to ensure correctness of procedural values and outputs as processing takes place
isInstanceOf: Automation of Processing
isInstanceOf: Human Involvement for Oversight

Automated Processing with Human Review
created: 2022-06-15
creator: Harshvardhan J. Pandit
modified: 2020-10-05
type: Concept
term status: modified
broader: Automation of Processing
broader: Human Involvement for Verification
definition: Processing that is automated and involves review by Humans
in scheme: dpv#
note: For example, a human verifying outputs of an algorithm for correctness or impact to individuals
isInstanceOf: Automation of Processing
isInstanceOf: Human Involvement for Verification

Automation of Processing
created: 2022-06-15
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Processing Context
definition: Contextual information about the degree of automation and human involvement associated with Processing
in scheme: dpv#
narrower: Algorithmic Logic
narrower: Automated Decision Making
narrower: Automated Processing with Human Input
narrower: Automated Processing with Human Oversight
narrower: Automated Processing with Human Review
narrower: Completely Manual Processing
narrower: Fully Automated Processing
narrower: Human Involvement
narrower: Partially Automated Processing
note: It is difficult to provide a formal definition of automation since any and all processing may be considered automation. This concept instead is intended to explicitly signal the utilisation of automation and its extent towards some context - such as decision making, and to indicate the involvement of humans.
isSubTypeOf: Processing Context

Background Checks
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: 5g-cybersecurity-standards
type: Concept
term status: accepted
broader: Security Procedure
definition: Procedure where the background of an entity is assessed to identity vulnerabilities and threats due to their current or intended role
in scheme: dpv#
isSubTypeOf: Security Procedure

Base Concepts
type: Collection
member: Data Controller
member: Data Subject
member: Data Subject Right
member: Legal Basis
member: Personal Data
member: Personal Data Handling
member: Processing
member: Purpose
member: Recipient
member: Right
member: Risk
member: Technical and Organisational Measure
member: has data controller
member: has data subject
member: has legal basis
member: has personal data
member: has personal data handling
member: has processing
member: has purpose
member: has recipient
member: has right
member: has risk
member: has technical and organisational measure

Benefit
created: 2022-03-23
creator: Axel Polleres
creator: Beatriz Esteves
creator: Fajar Ekaputra
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
type: Concept
term status: accepted
broader: Impact
definition: Impact(s) that acts as or causes benefits
in scheme: dpv#
isSubTypeOf: Impact

Biometric Authentication
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: Authentication Protocols
definition: Use of biometric data for authentication
in scheme: dpv#
isSubTypeOf: Authentication Protocols

Certification
created: 2019-04-05
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Rob Brennan
type: Concept
term status: accepted
broader: Certification and Seal
definition: Certification mechanisms, seals, and marks for the purpose of demonstrating compliance
in scheme: dpv#
isSubTypeOf: Certification and Seal

Certification and Seal
created: 2019-04-05
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Rob Brennan
type: Concept
term status: accepted
broader: Organisational Measure
definition: Certifications, seals, and marks indicating compliance to regulations or practices
in scheme: dpv#
narrower: Certification
narrower: Seal
isSubTypeOf: Organisational Measure

Child
created: 2020-11-25
creator: Harshvardhan J. Pandit
modified: 2022-06-22
type: Concept
term status: changed
broader: Data Subject
definition: A 'child' is a natural legal person who is below a certain legal age depending on the legal jurisdiction.
in scheme: dpv#
note: The legality of age defining a child varies by jurisdiction. In addition, 'child' is distinct from a 'minor'. For example, the legal age for consumption of alcohol can be 21, which makes a person of age 20 a 'minor' in this context. In other cases, 'minor' and 'child' are used interchangeably to refer to a person below some legally defined age.
isSubTypeOf: Data Subject

Citizen
created: 2022-04-06
creator: Beatriz Esteves
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
term status: accepted
broader: Data Subject
definition: Data subjects that are citizens (for a jurisdiction)
in scheme: dpv#
isSubTypeOf: Data Subject

City
created: 2022-10-22
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Location
definition: A region consisting of urban population and commerce
in scheme: dpv#
isSubTypeOf: Location

Client
created: 2022-04-06
creator: Beatriz Esteves
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
term status: accepted
broader: Customer
definition: Data subjects that are clients or recipients of services
in scheme: dpv#
isSubTypeOf: Customer

Cloud Location
created: 2022-06-15
creator: Harshvardhan J. Pandit
modified: 2020-10-05
type: Concept
term status: modified
broader: Remote Location
definition: Location that is in the 'cloud' i.e. a logical location operated over the internet
in scheme: dpv#
isSubTypeOf: Remote Location

Code of Conduct
created: 2019-04-05
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Rob Brennan
type: Concept
term status: accepted
broader: GuidelinesPrinciple
definition: A set of rules or procedures outlining the norms and practices for conducting activities
in scheme: dpv#
isSubTypeOf: GuidelinesPrinciple

Collect
created: 2019-05-07
source: oj
source: processing
example: E0018
type: Concept
term status: accepted
broader: Obtain
definition: to gather data from someone
in scheme: dpv#
related: Collect
isSubTypeOf: Obtain

Collected Personal Data
created: 2022-03-30
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Personal Data
definition: Personal Data that has been collected from another source such as the Data Subject
in scheme: dpv#
narrower: Observed Personal Data
note: To indicate the source of data, use the DataSource concept with the hasDataSource relation
isSubTypeOf: Personal Data

Combine
created: 2019-05-07
source: oj
source: processing
type: Concept
term status: accepted
broader: Transform
definition: to join or merge data
in scheme: dpv#
related: Aggregate
isSubTypeOf: Transform

Commercial Research
created: 2019-04-05
creator: Axel Polleres
creator: Elmar Kiesling
creator: Fajar Ekaputra
creator: Harshvardhan J. Pandit
creator: Javier Fernandez
creator: Simon Steyskal
type: Concept
term status: accepted
broader: Research and Development
definition: Conduct research in a commercial setting or with intention to commercialise e.g. in a company or sponsored by a company
in scheme: dpv#
related: Develop
isSubTypeOf: Research and Development

Communication for Customer Care
created: 2020-11-04
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Communication Management
broader: Customer Care
definition: Communicate with customers for assisting them, resolving issues, ensuring satisfaction in relation to services provided
in scheme: dpv#
isSubTypeOf: Communication Management
isSubTypeOf: Customer Care

Communication Management
created: 2021-09-01
creator: David Hickey
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
term status: accepted
broader: Purpose
definition: Manage communication or provide means for communication e.g. to send an email notifying some information
in scheme: dpv#
narrower: Communication for Customer Care
note: This purpose by itself does not sufficiently and clearly indicate what the communication is about. As such, it is recommended to combine it with another purpose to indicate the application. For example, Communication of Payment.
isSubTypeOf: Purpose

Completely Manual Processing
created: 2022-06-15
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Automation of Processing
definition: Processing that is completely un-automated or fully manual
in scheme: dpv#
note: For example, a human performing some processing operation
isInstanceOf: Automation of Processing

Compliance Indeterminate
created: 2022-09-07
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Compliance Status
definition: State where the status of compliance has not been fully assessed, evaluated, or determined
in scheme: dpv#
isInstanceOf: Compliance Status

Compliance Monitoring
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: 5g-cybersecurity-standards
type: Concept
term status: accepted
broader: Governance Procedures
definition: Monitoring of compliance (e.g. internal policy, regulations)
in scheme: dpv#
isSubTypeOf: Governance Procedures

Compliance Status
created: 2022-05-18
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Status
definition: Status associated with Compliance with some norms, objectives, or requirements
in scheme: dpv#
narrower: Compliance Indeterminate
narrower: Compliance Unknown
narrower: Compliance Violation
narrower: Compliant
narrower: Lawfulness (alt title: LegalComplianceStatus)
narrower: Non Compliant
narrower: Partially Compliant
isSubTypeOf: Status

Compliance Unknown
created: 2022-09-07
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Compliance Status
definition: State where the status of compliance is unknown
in scheme: dpv#
isInstanceOf: Compliance Status

Compliance Violation
created: 2022-05-18
creator: Harshvardhan J. Pandit
modified: 2022-09-07
type: Concept
term status: changed
broader: Compliance Status
definition: State where compliance cannot be achieved due to requirements being violated
in scheme: dpv#
note: Changed from "violation of compliance" for consistency with other terms
isInstanceOf: Compliance Status

Compliant
created: 2022-05-18
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Compliance Status
definition: State of being fully compliant
in scheme: dpv#
isInstanceOf: Compliance Status

Concept
subclass of: Concept

Conformance Status
created: 2022-10-22
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Status
definition: Status associated with conformance to a standard, guideline, code, or recommendation
in scheme: dpv#
narrower: Conformant
narrower: NonConformant
isSubTypeOf: Status

Conformant
created: 2022-10-22
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Conformance Status
definition: State of being conformant
in scheme: dpv#
isInstanceOf: Conformance Status

Consent
created: 2021-04-07
creator: Harshvardhan J. Pandit
example: E0019
example: E0022
example: E0023
example: E0024
example: E0025
example: E0026
type: Concept
term status: accepted
broader: Legal Basis
definition: Consent of the Data Subject for specified processing
in scheme: dpv#
narrower: Informed Consent
narrower: Uninformed Consent
isSubTypeOf: Legal Basis

Consent Concepts
type: Collection
member: has consent notice
member: has consent status
member: has expiry
member: has expiry condition
member: has expiry time
member: has indication method
member: has provision by
member: has provision by justification
member: has provision method
member: has provision time
member: has withdrawal by
member: has withdrawal by justification
member: has withdrawal method
member: has withdrawal time
member: is explicit
member: is indicated at time
member: is indicated by

Consent Expired
created: 2022-06-22
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
source: GConsent
type: Concept
term status: accepted
broader: Consent Status Invalid for Processing
definition: The state where the temporal or contextual validity of consent has 'expired'
in scheme: dpv#
note: An example of this state is when the obtained consent has been assigned a duration - which has lapsed or 'expired', making it invalid to be used further for processing data
isInstanceOf: Consent Status Invalid for Processing

Consent Given
created: 2022-06-22
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
source: GConsent
type: Concept
term status: accepted
broader: Consent Status Valid for Processing
definition: The state where consent has been given
in scheme: dpv#
note: An example of this state is when the individual clicks on a button, ticks a checkbox, verbally agrees - or any other form that communicates their decision agreeing to the processing of data
isInstanceOf: Consent Status Valid for Processing

Consent Invalidated
created: 2022-06-22
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
source: GConsent
type: Concept
term status: accepted
broader: Consent Status Invalid for Processing
definition: The state where consent has been deemed to be invalid
in scheme: dpv#
note: An example of this state is where an investigating authority or a court finds the collected consent did not meet requirements, and 'invalidates' both prior and future uses of it to carry out processing
isInstanceOf: Consent Status Invalid for Processing

Consent Notice
created: 2022-06-21
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
term status: accepted
broader: Privacy Notice
definition: A Notice for information provision associated with Consent
in scheme: dpv#
isSubTypeOf: Privacy Notice

Consent Record
created: 2022-06-22
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
example: E0019
type: Concept
term status: accepted
broader: DataProcessingRecord
definition: A Record of Consent or Consent related activities
in scheme: dpv#
isSubTypeOf: DataProcessingRecord

Consent Refused
created: 2022-06-22
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
source: GConsent
type: Concept
term status: accepted
broader: Consent Status Invalid for Processing
definition: The state where consent has been refused
in scheme: dpv#
note: An example of this state is when the individual clicks on a 'disagree' or 'reject' or 'refuse' button, or leaves a checkbox unticked
isInstanceOf: Consent Status Invalid for Processing

Consent Request Deferred
created: 2022-06-22
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
source: GConsent
type: Concept
term status: accepted
broader: Consent Status Invalid for Processing
definition: State where a request for consent has been deferred without a decision
in scheme: dpv#
note: An example of this state is when the individual closes or dismisses a notice without making a decision. This state is intended for making the distinction between a notice being provided (as a consent request) and the individual interacting with the notice without making a decision - where the 'ignoring of a notice' is taken as consent being neither given nor refused
isInstanceOf: Consent Status Invalid for Processing

Consent Requested
created: 2022-06-22
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
source: GConsent
type: Concept
term status: accepted
broader: Consent Status Invalid for Processing
definition: State where a request for consent has been made and is awaiting a decision
in scheme: dpv#
note: An example of this state is when a notice has been presented to the individual but they have not made a decision
isInstanceOf: Consent Status Invalid for Processing

Consent Revoked
created: 2022-06-22
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
source: GConsent
type: Concept
term status: accepted
broader: Consent Status Invalid for Processing
definition: The state where the consent is revoked by an entity other than the data subject and which prevents it from being further used as a valid state
in scheme: dpv#
note: An example of this state is when a Data Controller stops utilising previously obtaining consent, such as when that service no longer exists
isInstanceOf: Consent Status Invalid for Processing

Consent Status
created: 2022-06-22
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
source: GConsent
example: E0019
example: E0024
example: E0025
example: E0026
type: Concept
term status: accepted
broader: Status
definition: The state or status of 'consent' that provides information reflecting its operational status and validity for processing data
in scheme: dpv#
narrower: Consent Status Invalid for Processing
narrower: Consent Status Valid for Processing
note: States are useful as information artefacts to implement them in controlling processing, and to reflect the process and flow of obtaining and maintaining consent. For example, a database table that stores consent states for specific processing and can be queried to obtain them in an efficient manner. States are also useful in investigations to determine the use and validity of consenting practices
isSubTypeOf: Status

Consent Status Invalid for Processing
created: 2022-06-22
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
source: GConsent
type: Concept
term status: accepted
broader: Consent Status
definition: States of consent that cannot be used as valid justifications for processing data
in scheme: dpv#
narrower: Consent Expired
narrower: Consent Invalidated
narrower: Consent Refused
narrower: Consent Request Deferred
narrower: Consent Requested
narrower: Consent Revoked
narrower: Consent Unknown
narrower: Consent Withdrawn
note: This identifies the stages associated with consent that should not be used to process data
isSubTypeOf: Consent Status

Consent Status Valid for Processing
created: 2022-06-22
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
source: GConsent
type: Concept
term status: accepted
broader: Consent Status
definition: States of consent that can be used as valid justifications for processing data
in scheme: dpv#
narrower: Consent Given
narrower: Renewed Consent Given
note: Practically, given consent is the only valid state for processing
isSubTypeOf: Consent Status

Consent Unknown
created: 2022-06-22
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
source: GConsent
type: Concept
term status: accepted
broader: Consent Status Invalid for Processing
definition: State where information about consent is not available or is unknown
in scheme: dpv#
note: Consent states can be unknown, for example, when information is not available, or cannot be trusted, or is known to be inaccurate
isInstanceOf: Consent Status Invalid for Processing

Consent Withdrawn
created: 2022-06-22
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
source: GConsent
type: Concept
term status: accepted
broader: Consent Status Invalid for Processing
definition: The state where the consent is withdrawn or revoked specifically by the data subject and which prevents it from being further used as a valid state
in scheme: dpv#
note: This state can be considered a form of 'revocation' of consent, where the revocation can only be performed by the data subject. Therefore we suggest using ConsentRevoked when it is a non-data-subject entity, and ConsentWithdrawn when it is the data subject
isInstanceOf: Consent Status Invalid for Processing

Consent_Status Concepts
type: Collection
member: Consent Expired
member: Consent Given
member: Consent Invalidated
member: Consent Refused
member: Consent Request Deferred
member: Consent Requested
member: Consent Revoked
member: Consent Status
member: Consent Status Invalid for Processing
member: Consent Status Valid for Processing
member: Consent Unknown
member: Consent Withdrawn
member: Renewed Consent Given

Consent_Types Concepts
type: Collection
member: Explicitly Expressed Consent
member: Expressed Consent
member: Implied Consent
member: Informed Consent
member: Uninformed Consent

Consequence
created: 2022-01-26
creator: Harshvardhan J. Pandit
example: E0029
type: Concept
term status: accepted
definition: The consequence(s) possible or arising from specified context
in scheme: dpv#
narrower: Consequence as Side-Effect
narrower: Consequence of Failure
narrower: Consequence of Success
narrower: Impact

Consequence as Side-Effect
created: 2022-03-30
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Consequence
definition: The consequence(s) possible or arising as a side-effect of specified context
in scheme: dpv#
isSubTypeOf: Consequence

Consequence of Failure
created: 2022-03-23
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Consequence
definition: The consequence(s) possible or arising from failure of specified context
in scheme: dpv#
isSubTypeOf: Consequence

Consequence of Success
created: 2022-03-23
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Consequence
definition: The consequence(s) possible or arising from success of specified context
in scheme: dpv#
isSubTypeOf: Consequence

Consult
created: 2019-05-07
source: oj
source: processing
type: Concept
term status: accepted
broader: Use
definition: to consult or query data
in scheme: dpv#
narrower: Monitor
narrower: Query
related: Query
isSubTypeOf: Use

Consultation
created: 2020-11-04
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
term status: accepted
broader: Organisational Measure
definition: Consultation is a process of receiving feedback, advice, or opinion from an external agency
in scheme: dpv#
narrower: Consultation with Authority
narrower: Consultation with DPO
narrower: Consultation with Data Subject
isSubTypeOf: Organisational Measure

Consultation with Authority
created: 2020-11-04
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
term status: accepted
broader: Consultation
definition: Consultation with an authority or authoritative entity
in scheme: dpv#
isSubTypeOf: Consultation

Consultation with DPO
created: 2022-06-15
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Consultation
definition: Consultation with Data Protection Officer(s)
in scheme: dpv#
isSubTypeOf: Consultation

Consultation with Data Subject
created: 2022-06-15
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Consultation
definition: Consultation with data subject(s) or their representative(s)
in scheme: dpv#
narrower: Consultation with Data Subject Representative
isSubTypeOf: Consultation

Consultation with Data Subject Representative
created: 2022-10-22
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Consultation with Data Subject
definition: Consultation with representative of data subject(s)
in scheme: dpv#
isSubTypeOf: Consultation with Data Subject

Consumer
created: 2022-04-06
creator: Beatriz Esteves
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
term status: accepted
broader: Data Subject
definition: Data subjects that consume goods or services for direct use
in scheme: dpv#
isSubTypeOf: Data Subject

Context
created: 2019-04-05
creator: Axel Polleres
creator: Elmar Kiesling
creator: Fajar Ekaputra
creator: Harshvardhan J. Pandit
creator: Javier Fernandez
creator: Simon Steyskal
modified: 2022-06-15
example: E0028
type: Concept
term status: modified
definition: Contextually relevant information not possible to represent through other core concepts
in scheme: dpv#
narrower: Duration
narrower: Frequency
narrower: Importance
narrower: Justification
narrower: Necessity
narrower: Processing Context
narrower: Scope
narrower: Status

Context Concepts
type: Collection
member: Context
member: Continous Frequency
member: Duration
member: Endless Duration
member: Fixed Occurences Duration
member: Frequency
member: Importance
member: Justification
member: Necessity
member: Not Required
member: Often Frequency
member: Optional
member: Primary Importance
member: Required
member: Scope
member: Secondary Importance
member: Singular Frequency
member: Sporadic Frequency
member: Technology
member: Temporal Duration
member: Until Event Duration
member: Until Time Duration
member: has context
member: has duration
member: has frequency
member: has identifier
member: has justification
member: has outcome
member: has scope
member: is after
member: is before
member: is implemented by entity
member: is implemented using technology

Continous Frequency
created: 2022-06-15
creator: Harshvardhan J. Pandit
modified: 2020-10-05
type: Concept
term status: modified
broader: Frequency
definition: Frequency where occurences are continous
in scheme: dpv#
isSubTypeOf: Frequency

Contract
created: 2021-04-07
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Legal Agreement
broader: Legal Basis
definition: Creation, completion, fulfilment, or performance of a contract involving specified processing
in scheme: dpv#
narrower: Contract Performance
narrower: Enter Into Contract
isSubTypeOf: Legal Agreement
isSubTypeOf: Legal Basis

Contract Performance
created: 2021-04-07
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
term status: accepted
broader: Contract
definition: Fulfilment or performance of a contract involving specified processing
in scheme: dpv#
isSubTypeOf: Contract

Contractual Terms
created: 2019-04-05
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Rob Brennan
type: Concept
term status: accepted
broader: Legal Agreement
definition: Contractual terms governing data handling within or with an entity
in scheme: dpv#
isSubTypeOf: Legal Agreement

Controller-Processor Agreement
created: 2022-01-26
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
example: E0020
example: E0021
type: Concept
term status: accepted
broader: Data Processing Agreement
definition: An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data between a Data Controller and a Data Processor
in scheme: dpv#
isSubTypeOf: Data Processing Agreement

Copy
created: 2019-05-07
source: processing
type: Concept
term status: accepted
broader: Processing
definition: to produce an exact reprodution of the data
in scheme: dpv#
related: Copy
isSubTypeOf: Processing

Counter Money Laundering
created: 2022-04-20
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Fraud Prevention and Detection
definition: Detect and prevent or mitigate money laundering
in scheme: dpv#
isSubTypeOf: Fraud Prevention and Detection

Country
created: 2022-01-19
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Location
definition: A political entity indicative of a sovereign or non-sovereign territorial state comprising of distinct geographical areas
in scheme: dpv#
narrower: Third Country
note: The definition of country is not intended for political interpretation. DPVCG welcomes alternate definitions based in existing sources with global scope, such as UN or ISO.
isSubTypeOf: Location

Create Event Recommendations
created: 2019-11-26
creator: Harshvardhan J. Pandit
creator: Rudy Jacob
modified: 2022-10-14
source: specialprivacy.ercim.eu
type: Concept
term status: modified
broader: Create Personalised Recommendations
definition: Create and provide personalised recommendations for events
in scheme: dpv#
isSubTypeOf: Create Personalised Recommendations

Create Personalised Recommendations
created: 2019-11-26
creator: Harshvardhan J. Pandit
creator: Rudy Jacob
modified: 2022-10-14
source: specialprivacy.ercim.eu
type: Concept
term status: modified
broader: Service Personalization
definition: Create and provide personalised recommendations
in scheme: dpv#
narrower: Create Event Recommendations
narrower: Create Product Recommendations
isSubTypeOf: Service Personalization

Create Product Recommendations
created: 2019-04-05
creator: Axel Polleres
creator: Elmar Kiesling
creator: Fajar Ekaputra
creator: Harshvardhan J. Pandit
creator: Javier Fernandez
creator: Simon Steyskal
modified: 2022-10-14
type: Concept
term status: modified
broader: Create Personalised Recommendations
definition: Create and provide product recommendations e.g. suggest similar products
in scheme: dpv#
related: Marketing
isSubTypeOf: Create Personalised Recommendations

Credential Management
created: 2022-06-15
creator: Georg P Krog
type: Concept
term status: accepted
broader: Authorisation Procedure
definition: Management of credentials and their use in authorisations
in scheme: dpv#
isSubTypeOf: Authorisation Procedure

Credit Checking
created: 2022-04-20
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Customer Solvency Monitoring
definition: Monitor, perform, or assess credit worthiness or solvency
in scheme: dpv#
narrower: MaintainCreditCheckingDatabase
narrower: MaintainCreditRatingDatabase
isSubTypeOf: Customer Solvency Monitoring

Cryptographic Authentication
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: Authentication Protocols
broader: Cryptographic Methods
definition: Use of crytography for authentication
in scheme: dpv#
narrower: Authentication using ABC
narrower: Authentication using PABC
narrower: Hash-based Message Authentication Code (HMAC)
narrower: Message Authentication Codes (MAC)
isSubTypeOf: Authentication Protocols
isSubTypeOf: Cryptographic Methods

Cryptographic Key Management
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: Cryptographic Methods
definition: Management of crytographic keys, including their generation, storage, assessment, and safekeeping
in scheme: dpv#
isSubTypeOf: Cryptographic Methods

Cryptographic Methods
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: Technical Measure
definition: Use of cryptographic methods to perform tasks
in scheme: dpv#
narrower: Asymmetric Cryptography
narrower: Cryptographic Authentication
narrower: Cryptographic Key Management
narrower: Differential Privacy
narrower: Digital Signatures
narrower: Hash Functions
narrower: Homomorphic Encryption
narrower: Zero Knowledge Authentication
isSubTypeOf: Technical Measure

Customer
created: 2022-04-06
creator: Beatriz Esteves
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
term status: accepted
broader: Data Subject
definition: Data subjects that purchase goods or services
in scheme: dpv#
narrower: Client
note: note: for B2B relations where customers are organisations, this concept only applies for data subjects
isSubTypeOf: Data Subject

Customer Care
created: 2019-04-05
creator: Axel Polleres
creator: Elmar Kiesling
creator: Fajar Ekaputra
creator: Harshvardhan J. Pandit
creator: Javier Fernandez
creator: Simon Steyskal
type: Concept
term status: accepted
broader: Customer Management
definition: Provide assistance, resolve issues, ensure satisfaction in relation to services provided
in scheme: dpv#
narrower: Communication for Customer Care
related: Feedback
isSubTypeOf: Customer Management

Customer Claims Management
created: 2021-09-08
creator: Beatriz
creator: Georg P Krog
creator: Harshvardhan J. Pandit
source: model-voor-een-register-van-de-verwerkingsactiviteiten
type: Concept
term status: accepted
broader: Customer Management
definition: Manage claims, including repayment of monies owed
in scheme: dpv#
isSubTypeOf: Customer Management

Customer Management
created: 2021-09-08
creator: Beatriz
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Purpose
definition: Manage past, current, and future customers
in scheme: dpv#
narrower: Customer Care
narrower: Customer Claims Management
narrower: Customer Order Management
narrower: Customer Relationship Management
narrower: Customer Solvency Monitoring
isSubTypeOf: Purpose

Customer Order Management
created: 2021-09-08
creator: Beatriz
creator: Georg P Krog
creator: Harshvardhan J. Pandit
source: model-voor-een-register-van-de-verwerkingsactiviteiten
type: Concept
term status: accepted
broader: Customer Management
definition: Manage customer orders
in scheme: dpv#
isSubTypeOf: Customer Management

Customer Relationship Management
created: 2021-09-08
creator: Beatriz
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Customer Management
definition: Manage and analyse interactions with past, current, and potential customers
in scheme: dpv#
narrower: Improve Internal CRM Processes
isSubTypeOf: Customer Management

Customer Solvency Monitoring
created: 2021-09-08
creator: Beatriz
creator: Georg P Krog
creator: Harshvardhan J. Pandit
source: model-voor-een-register-van-de-verwerkingsactiviteiten
type: Concept
term status: accepted
broader: Customer Management
definition: Monitor solvency of customers for financial diligence
in scheme: dpv#
narrower: Credit Checking
isSubTypeOf: Customer Management

Cybersecurity Assessments
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: 5g-cybersecurity-standards
type: Concept
term status: accepted
broader: Assessment
broader: SecurityAssessment
definition: Assessment of cybersecurity capabilities in terms of vulnerabilities and effectiveness of controls
in scheme: dpv#
isSubTypeOf: Assessment
isSubTypeOf: SecurityAssessment

Cybersecurity Training
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: Staff Training
definition: Training methods related to cybersecurity
in scheme: dpv#
isSubTypeOf: Staff Training

Data Protection Impact Assessment (DPIA)
created: 2020-11-04
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
term status: accepted
broader: Impact Assessment
definition: A DPIA involves determining the potential and actual impact of processing activities on individuals or groups of individuals
in scheme: dpv#
note: Top class: Impact Assessment, and DPIA is sub-class
isSubTypeOf: Impact Assessment

Damage
created: 2022-03-30
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Impact
definition: Impact that acts as or causes damages
in scheme: dpv#
narrower: Harm
narrower: Material Damage
narrower: Non-Material Damage
isSubTypeOf: Impact

Data
created: 2022-01-19
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
definition: A broad concept representing 'data' or 'information'
in scheme: dpv#
narrower: Non-Personal Data
narrower: Personal Data
narrower: Synthetic Data

Data Anonymisation Technique
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: Data Sanitisation Technique
definition: Use of anonymisation techniques that reduce the identifiability in data
in scheme: dpv#
narrower: Anonymisation
narrower: De-Identification
narrower: Pseudonymisation
isSubTypeOf: Data Sanitisation Technique

Data Backup Protocols
created: 2022-06-15
creator: Georg P Krog
type: Concept
term status: accepted
broader: Technical Measure
definition: Protocols or plans for backing up of data
in scheme: dpv#
isSubTypeOf: Technical Measure

Data Controller
created: 2019-04-05
creator: Axel Polleres
creator: Javier Fernández
modified: 2020-11-04
source: oj
example: E0019
type: Concept
term status: accepted
broader: Legal Entity
definition: The individual or organisation that decides (or controls) the purpose(s) of processing personal data.
in scheme: dpv#
narrower: Joint Data Controllers
note: The terms 'Controller' is usually the more common form of indicating a Data Controller. In ISO/IEC the term 'PII Controller' is used.
isSubTypeOf: Legal Entity

Data Exporter
created: 2021-09-08
creator: David Hickey
creator: Georg Krog
creator: Harshvardhan Pandit
creator: Paul Ryan
source: recommendations-012020-measures-supplement-transfer en
type: Concept
term status: accepted
broader: Legal Entity
definition: An entity that 'exports' data where exporting is considered a form of data transfer
in scheme: dpv#
note: The EU, in particular the EDPB, uses data exporter the context of cross-border data transfers/flows. These concepts are not bound by jurisdictional or geopolitical scopes within DPV and can thus be used for any notion of exporting
isSubTypeOf: Legal Entity

Data Importer
created: 2021-09-08
creator: David Hickey
creator: Georg Krog
creator: Harshvardhan Pandit
creator: Paul Ryan
source: recommendations-012020-measures-supplement-transfer en
type: Concept
term status: accepted
broader: Recipient
definition: An entity that 'imports' data where importing is considered a form of data transfer
in scheme: dpv#
note: The EU, in particular the EDPB, uses data importing the context of cross-border data transfers/flows. These concepts are not bound by jurisdictional or geopolitical scopes within DPV and can thus be used for any notion of importing
isSubTypeOf: Recipient

Data Processing Agreement
created: 2022-01-26
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
term status: accepted
broader: Legal Agreement
definition: An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data
in scheme: dpv#
narrower: Controller-Processor Agreement
narrower: Joint Data Controllers Agreement
narrower: Sub-Processor Agreement
narrower: Third-Party Agreement
note: For specific role-based data processing agreements, see concepts for Processors and JointDataController agreements.
isSubTypeOf: Legal Agreement

Data Processing Records
created: 2021-09-08
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Records of Activities
definition: Records of personal data processing, whether ex-ante or ex-post
in scheme: dpv#
narrower: Register of Processing Activities
isSubTypeOf: Records of Activities

Data Processor
created: 2019-06-04
creator: Harshvardhan J. Pandit
source: oj
example: E0011
type: Concept
term status: accepted
broader: Recipient
definition: A ‘processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
in scheme: dpv#
narrower: Data Sub-Processor
isSubTypeOf: Recipient

Data Protection Authority
created: 2020-11-04
creator: Georg Krog
creator: Harshvardhan Pandit
creator: Paul Ryan
type: Concept
term status: accepted
broader: Authority
definition: An authority tasked with overseeing legal compliance regarding privacy and data protection laws.
in scheme: dpv#
isSubTypeOf: Authority

Data Protection Officer
created: 2020-11-04
creator: Georg Krog
creator: Paul Ryan
modified: 2021-12-08
source: oj
type: Concept
term status: modified
broader: Representative
definition: An entity within or authorised by an organisation to monitor internal compliance, inform and advise on data protection obligations and act as a contact point for data subjects and the supervisory authority.
in scheme: dpv#
isSubTypeOf: Representative

Data Protection Training
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: 5g-cybersecurity-standards
type: Concept
term status: accepted
broader: Staff Training
definition: Training intended to increase knowledge regarding data protection
in scheme: dpv#
isSubTypeOf: Staff Training

Data published by Data Subject
created: 2022-08-24
creator: Julian Flake
type: Concept
term status: accepted
broader: Data Source
definition: Data is published by the data subject
in scheme: dpv#
note: This refers to where that data was made publicly available by the data subject. An example of this would be a social media profile that the data subject has made publicly accessible.
isInstanceOf: Data Source

Data Redaction
created: 2020-10-01
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Data Sanitisation Technique
definition: Removal of sensitive information from a data or document
in scheme: dpv#
isSubTypeOf: Data Sanitisation Technique

Data Sanitisation Technique
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: Technical Measure
definition: Cleaning or any removal or re-organisation of elements in data based on selective criteria
in scheme: dpv#
narrower: Data Anonymisation Technique
narrower: Data Redaction
isSubTypeOf: Technical Measure

Data Source
created: 2020-11-04
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
example: E0012
example: E0020
type: Concept
term status: accepted
broader: Processing Context
definition: The source or origin of data
in scheme: dpv#
narrower: Data published by Data Subject
narrower: Non-Public Data Source
narrower: Public Data Source
note: Source' is the direct point of data collection; 'origin' would indicate the original/others points of where the data originates from.
isSubTypeOf: Processing Context

Data Sub-Processor
created: 2020-11-25
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Data Processor
definition: A 'sub-processor' is a processor engaged by another processor
in scheme: dpv#
note: sub-processor' is a commonly used term similar to 'sub-contractor' and does not have a specific legal definition
isSubTypeOf: Data Processor

Data Subject
created: 2019-04-05
creator: Axel Polleres
creator: Javier Fernández
modified: 2020-11-04
source: oj
type: Concept
term status: accepted
broader: Legal Entity
broader: Natural Person
definition: The individual (or category of individuals) whose personal data is being processed
in scheme: dpv#
narrower: Adult
narrower: Applicant
narrower: Child
narrower: Citizen
narrower: Consumer
narrower: Customer
narrower: Employee
narrower: Guardian(s) of Data Subject
narrower: Immigrant
narrower: Member
narrower: NonCitizen
narrower: Parent(s) of Data Subject
narrower: Participant
narrower: Patient
narrower: Student
narrower: Subscriber
narrower: Tourist
narrower: User
narrower: Visitor
narrower: Vulnerable Data Subject
note: The term 'data subject' is specific to the GDPR, but is functionally equivalent to the term 'individual' and the ISO/IEC term 'PII Principle'.
isSubTypeOf: Legal Entity
isSubTypeOf: Natural Person

Data Subject Right
created: 2020-11-18
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan Pandit
type: Concept
term status: accepted
broader: Right
definition: The rights applicable or provided to a Data Subject
in scheme: dpv#
note: Based on use of definitions, the notion of 'Data Subject Right' can be equivalent to 'Individual Right' or 'Right of a Person'
isSubTypeOf: Right

Data Subject Scale
created: 2022-06-15
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Rana Saniei
type: Concept
term status: accepted
broader: Scale
definition: Scale of Data Subject(s)
in scheme: dpv#
narrower: HugeScaleOfDataSubjects
narrower: LargeScaleOfDataSubjects
narrower: MediumScaleOfDataSubjects
narrower: SingularScaleOfDataSubjects
narrower: SmallScaleOfDataSubjects
narrower: SporadicScaleOfDataSubjects
isSubTypeOf: Scale

Data Transfer Impact Assessment
created: 2021-09-08
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
term status: accepted
broader: Impact Assessment
definition: Impact Assessment for conducting data transfers
in scheme: dpv#
isSubTypeOf: Impact Assessment

Data Transfer Legal Basis
created: 2021-09-08
creator: David Hickey
creator: Georg P Krogg
type: Concept
term status: accepted
broader: Legal Basis
definition: Specific or special categories and instances of legal basis intended for justifying data transfers
in scheme: dpv#
isSubTypeOf: Legal Basis

Data Volume
created: 2022-06-15
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Rana Saniei
type: Concept
term status: accepted
broader: Scale
definition: Volume or Scale of Data
in scheme: dpv#
narrower: HugeDataVolume
narrower: LargeDataVolume
narrower: MediumDataVolume
narrower: SingularDataVolume
narrower: SmallDataVolume
narrower: SporadicDataVolume
isSubTypeOf: Scale

Decentralised Locations
created: 2022-06-15
creator: Harshvardhan J. Pandit
modified: 2020-10-05
type: Concept
term status: modified
broader: Location Fixture
definition: Location that is spread across multiple separate areas with no distinction between their importance
in scheme: dpv#
isSubTypeOf: Location Fixture

Decision Making
created: 2022-09-07
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Processing Context
definition: Processing that involves decision making
in scheme: dpv#
narrower: Automated Decision Making
isSubTypeOf: Processing Context

De-Identification
created: 2019-04-05
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Rob Brennan
type: Concept
term status: accepted
broader: Data Anonymisation Technique
definition: Removal of identity or information to reduce identifiability
in scheme: dpv#
isSubTypeOf: Data Anonymisation Technique

Delivery of Goods
created: 2019-04-05
creator: Axel Polleres
creator: Elmar Kiesling
creator: Fajar Ekaputra
creator: Harshvardhan J. Pandit
creator: Javier Fernandez
creator: Simon Steyskal
type: Concept
term status: accepted
broader: Requested Service Provision
definition: Deliver goods and services requested or asked by consumer
in scheme: dpv#
related: Delivery
isSubTypeOf: Requested Service Provision

Derive
created: 2019-05-07
source: processing
example: E0014
type: Concept
term status: accepted
broader: Obtain
definition: to create new derivative data from the original data
in scheme: dpv#
narrower: Infer
note: Derive indicates data is present or obtainable from existing data. For data that is created without such existence, see Infer.
related: Derive
isSubTypeOf: Obtain

Derived Personal Data
created: 2019-05-07
creator: Elmar Kiesling; Harshvardhan J. Pandit
creator: Fajar Ekaputra
modified: 2022-01-19
source: dpvcg
type: Concept
term status: accepted
broader: Personal Data
definition: Personal Data that is obtained or derived from other data
in scheme: dpv#
narrower: Inferred Personal Data
note: Derived Data is data that is obtained through processing of existing data, e.g. deriving first name from full name. To indicate data that is derived but which was not present or evident within the source data, InferredPersonalData should be used.
related: Derived
isSubTypeOf: Personal Data

Design Standard
created: 2019-04-05
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Rob Brennan
type: Concept
term status: accepted
broader: GuidelinesPrinciple
definition: A set of rules or guidelines outlining criterias for design
in scheme: dpv#
isSubTypeOf: GuidelinesPrinciple

Destruct
created: 2019-05-07
source: oj
type: Concept
term status: accepted
broader: Remove
definition: to process data in a way it no longer exists or cannot be repaired
in scheme: dpv#
isSubTypeOf: Remove

Deterministic Pseudonymisation
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: data-pseudonymisation-advanced-techniques-and-use-cases
type: Concept
term status: accepted
broader: Pseudonymisation
definition: Pseudonymisation achieved through a deterministic function
in scheme: dpv#
isSubTypeOf: Pseudonymisation

Detriment
created: 2022-03-23
creator: Beatriz Esteves
creator: Fajar Ekaputra
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
type: Concept
term status: accepted
broader: Impact
definition: Impact that acts as or causes detriments
in scheme: dpv#
isSubTypeOf: Impact

Differential Privacy
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: data-protection-engineering
type: Concept
term status: accepted
broader: Cryptographic Methods
definition: Utilisation of differential privacy where information is shared as patterns or groups to withold individual elements
in scheme: dpv#
isSubTypeOf: Cryptographic Methods

Digital Rights Management
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: Technical Measure
definition: Management of access, use, and other operations associated with digital content
in scheme: dpv#
isSubTypeOf: Technical Measure

Digital Signatures
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: Cryptographic Methods
definition: Expression and authentication of identity through digital information containing cryptographic signatures
in scheme: dpv#
isSubTypeOf: Cryptographic Methods

Direct Marketing
created: 2020-11-04
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Marketing
definition: Conduct direct marketing i.e. marketing communicated directly to the individual
in scheme: dpv#
isSubTypeOf: Marketing

Disaster Recovery Procedures
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: 5g-cybersecurity-standards
type: Concept
term status: accepted
broader: Governance Procedures
definition: Procedures related to management of disasters and recovery
in scheme: dpv#
isSubTypeOf: Governance Procedures

Disclose
created: 2019-05-07
source: oj
type: Concept
term status: accepted
broader: Processing
definition: to make data known
in scheme: dpv#
narrower: Disclose by Transmission
narrower: Disseminate
narrower: Make Available
narrower: Share
narrower: Transmit
isSubTypeOf: Processing

Disclose by Transmission
created: 2019-05-07
source: oj
type: Concept
term status: accepted
broader: Disclose
definition: to disclose data by means of transmission
in scheme: dpv#
isSubTypeOf: Disclose

Dispute Management
created: 2021-09-08
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
source: model-voor-een-register-van-de-verwerkingsactiviteiten
type: Concept
term status: accepted
broader: Organisation Governance
definition: Manage disputes by natural persons, private bodies, or public authorities relevant to organisation
in scheme: dpv#
isSubTypeOf: Organisation Governance

Disseminate
created: 2019-05-07
source: oj
type: Concept
term status: accepted
broader: Disclose
definition: to spread data throughout
in scheme: dpv#
isSubTypeOf: Disclose

Distributed System Security
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: Security Method
definition: Security implementations provided using or over a distributed system
in scheme: dpv#
isSubTypeOf: Security Method

Document Randomised Pseudonymisation
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: data-pseudonymisation-advanced-techniques-and-use-cases
type: Concept
term status: accepted
broader: Pseudonymisation
definition: Use of randomised pseudonymisation where the same elements are assigned different values in the same document or database
in scheme: dpv#
isSubTypeOf: Pseudonymisation

Document Security
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: Security Method
definition: Security measures enacted over documents to protect against tampering or restrict access
in scheme: dpv#
isSubTypeOf: Security Method

Duration
created: 2022-02-09
creator: Harshvardhan J. Pandit
example: E0011
example: E0019
type: Concept
term status: accepted
broader: Context
definition: The duration or temporal limitation
in scheme: dpv#
narrower: Endless Duration
narrower: Fixed Occurences Duration
narrower: Storage Duration
narrower: Temporal Duration
narrower: Until Event Duration
narrower: Until Time Duration
isSubTypeOf: Context

EconomicUnion
created: 2022-01-19
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Location
definition: A political union of two or more countries based on economic or trade agreements
in scheme: dpv#
isSubTypeOf: Location

Educational Training
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: Staff Training
definition: Training methods that are intended to provide education on topic(s)
in scheme: dpv#
isSubTypeOf: Staff Training

Effectiveness Determination Procedures
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: 5g-cybersecurity-standards
type: Concept
term status: accepted
broader: Assessment
definition: Procedures intended to determine effectiveness of other measures
in scheme: dpv#
isSubTypeOf: Assessment

Elderly Data Subject
created: 2022-06-15
creator: Georg P Krog
type: Concept
term status: accepted
broader: Vulnerable Data Subject
definition: Data subjects that are considered elderly (i.e. based on age)
in scheme: dpv#
isSubTypeOf: Vulnerable Data Subject

Employee
created: 2022-04-06
creator: Beatriz Esteves
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
term status: accepted
broader: Data Subject
definition: Data subjects that are employees
in scheme: dpv#
isSubTypeOf: Data Subject

Encryption
created: 2019-04-05
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Rob Brennan
example: E0016
type: Concept
term status: accepted
broader: Technical Measure
definition: Technical measures consisting of encryption
in scheme: dpv#
narrower: Asymmetric Encryption
narrower: Encryption at Rest
narrower: Encryption in Transfer
narrower: Encryption in Use
narrower: End-to-End Encryption (E2EE)
narrower: Symmetric Encryption
isSubTypeOf: Technical Measure

Encryption at Rest
created: 2019-04-05
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Rob Brennan
type: Concept
term status: accepted
broader: Encryption
definition: Encryption of data when being stored (persistent encryption)
in scheme: dpv#
isSubTypeOf: Encryption

Encryption in Transfer
created: 2019-04-05
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Rob Brennan
type: Concept
term status: accepted
broader: Encryption
definition: Encryption of data in transit e.g. when being transferred from one location to another, including sharing
in scheme: dpv#
isSubTypeOf: Encryption

Encryption in Use
created: 2022-10-22
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Encryption
definition: Encryption of data when it is being used
in scheme: dpv#
isSubTypeOf: Encryption

End-to-End Encryption (E2EE)
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: data-protection-engineering
type: Concept
term status: accepted
broader: Encryption
definition: Encrypted communications where data is encrypted by the sender and decrypted by the intended receiver to prevent access to any third party
in scheme: dpv#
isSubTypeOf: Encryption

Endless Duration
created: 2022-06-15
creator: Harshvardhan J. Pandit
modified: 2020-10-05
type: Concept
term status: modified
broader: Duration
definition: Duration that is (known or intended to be) open ended or without an end
in scheme: dpv#
isInstanceOf: Duration

Enforce Access Control
created: 2019-04-05
creator: Axel Polleres
creator: Elmar Kiesling
creator: Fajar Ekaputra
creator: Harshvardhan J. Pandit
creator: Javier Fernandez
creator: Simon Steyskal
type: Concept
term status: accepted
broader: Enforce Security
definition: Conduct or enforce access control
in scheme: dpv#
note: Was previously "Access Control". Prefixed to distinguish from Technical Measure.
related: Login
isSubTypeOf: Enforce Security

Enforce Security
created: 2019-04-05
creator: Axel Polleres
creator: Elmar Kiesling
creator: Fajar Ekaputra
creator: Harshvardhan J. Pandit
creator: Javier Fernandez
creator: Simon Steyskal
type: Concept
term status: accepted
broader: Purpose
definition: Ensure and enforce security e.g. of data, personnel
in scheme: dpv#
narrower: Anti-Terrorism Operations
narrower: Enforce Access Control
narrower: Fraud Prevention and Detection
narrower: Identity Verification
note: Was previous "Security". Prefixed to distinguish from TechOrg measures.
isSubTypeOf: Purpose

Enter Into Contract
created: 2021-04-07
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
term status: accepted
broader: Contract
definition: Processing necessary to enter into contract
in scheme: dpv#
isSubTypeOf: Contract

Entities Concepts
type: Collection
member: Entity
member: Legal Entity
member: Natural Person
member: Representative
member: has address
member: has contact
member: has entity
member: has name
member: has representative
member: has responsible entity

Entities_Authority Concepts
type: Collection
member: Authority
member: Data Protection Authority
member: NationalAuthority
member: RegionalAuthority
member: SupraNationalAuthority
member: has authority
member: is authority for

Entities_Datasubject Concepts
type: Collection
member: Adult
member: Applicant
member: Asylum Seeker
member: Child
member: Citizen
member: Client
member: Consumer
member: Customer
member: Data Subject
member: Elderly Data Subject
member: Employee
member: Guardian(s) of Data Subject
member: Immigrant
member: JobApplicant
member: Member
member: Mentally Vulnerable Data Subject
member: NonCitizen
member: Parent(s) of Data Subject
member: Participant
member: Patient
member: Student
member: Subscriber
member: Tourist
member: User
member: Visitor
member: Vulnerable Data Subject
member: has data subject
member: has relation with data subject

Entities_Legalrole Concepts
type: Collection
member: Data Controller
member: Data Exporter
member: Data Importer
member: Data Processor
member: Data Protection Officer
member: Data Sub-Processor
member: Joint Data Controllers
member: Recipient
member: Third Party
member: has data controller
member: has data exporter
member: has data importer
member: has data processor
member: has data protection officer
member: has joint data controllers
member: has recipient
member: has recipient data controller
member: has recipient third party

Entities_Organisation Concepts
type: Collection
member: AcademicScientificOrganisation
member: ForProfitOrganisation
member: GovernmentalOrganisation
member: IndustryConsortium
member: International Organisation
member: NonGovernmentalOrganisation
member: NonProfitOrganisation
member: Organisation
member: Organisational Unit

Entity
created: 2022-02-02
creator: Harshvardhan J. Pandit
example: E0027
type: Concept
term status: accepted
definition: A human or non-human 'thing' that constitutes as an entity
in scheme: dpv#
narrower: Legal Entity
narrower: Natural Person
narrower: Organisational Unit

Erase
created: 2019-05-07
source: oj
type: Concept
term status: accepted
broader: Remove
definition: to delete data
in scheme: dpv#
isSubTypeOf: Remove

Evaluation of Individuals
created: 2022-10-22
creator: Harshvardhan J. Pandit
source: oj
type: Concept
term status: accepted
broader: Processing Context
definition: Processing that involves evaluation of individuals
in scheme: dpv#
isSubTypeOf: Processing Context

Evaluation and Scoring
created: 2020-11-04
creator: Harshvardhan J. Pandit
creator: Piero Bonatti
source: oj
type: Concept
term status: accepted
broader: Processing Context
definition: Processing that involves evaluation and scoring of individuals
in scheme: dpv#
isSubTypeOf: Processing Context

Explicitly Expressed Consent
created: 2022-06-21
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
term status: accepted
broader: Expressed Consent
definition: Consent that is expressed through an explicit action solely conveying a consenting decision
in scheme: dpv#
note: Explicitly expressed consent is a more specific form of Expressed consent where the action taken must 'explicitly' relate to only the consent decision. Expressed consent where the consenting is part of other matters therefore cannot satisfy the requirements of explicitly expressed consent. An example of explicit action expressing the consenting decision is a button on a web form where the form only relates to consent, or it is accompanied with suitable text that reiterates what the consenting decision is about
isSubTypeOf: Expressed Consent

Expressed Consent
created: 2022-06-21
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
term status: accepted
broader: Informed Consent
definition: Consent that is expressed through an action intended to convey a consenting decision
in scheme: dpv#
narrower: Explicitly Expressed Consent
note: Expressed consent requires the individual take a specific and unambigious action that directly indicates their consent. This action may be a part of other processes such as setting preferences, or agreeing to a contract, or other matters not relating to consent. An example of expressed consent is interacting with a checkbox within a dashboard or clicking a button on a web form
isSubTypeOf: Informed Consent

Federated Locations
created: 2022-06-15
creator: Harshvardhan J. Pandit
modified: 2020-10-05
type: Concept
term status: modified
broader: Location Fixture
definition: Location that is federated across multiple separate areas with designation of a primary or central location
in scheme: dpv#
isSubTypeOf: Location Fixture

File System Security
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: Security Method
definition: Security implemented over a file system
in scheme: dpv#
isSubTypeOf: Security Method

Filter
created: 2022-06-15
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Transform
definition: to filter or keep data for some criteria
in scheme: dpv#
isSubTypeOf: Transform

Fixed Location
created: 2022-06-15
creator: Harshvardhan J. Pandit
modified: 2020-10-05
type: Concept
term status: modified
broader: Location Fixture
definition: Location that is fixed i.e. known to occur at a specific place
in scheme: dpv#
narrower: Fixed Multiple Locations
narrower: Fixed Singular Location
isSubTypeOf: Location Fixture

Fixed Multiple Locations
created: 2022-06-15
creator: Harshvardhan J. Pandit
modified: 2020-10-05
type: Concept
term status: modified
broader: Fixed Location
definition: Location that is fixed with multiple places e.g. multiple cities
in scheme: dpv#
isSubTypeOf: Fixed Location

Fixed Occurences Duration
created: 2022-06-15
creator: Harshvardhan J. Pandit
modified: 2020-10-05
type: Concept
term status: modified
broader: Duration
definition: Duration that takes place a fixed number of times e.g. 3 times
in scheme: dpv#
isSubTypeOf: Duration

Fixed Singular Location
created: 2022-06-15
creator: Harshvardhan J. Pandit
modified: 2020-10-05
type: Concept
term status: modified
broader: Fixed Location
definition: Location that is fixed at a specific place e.g. a city
in scheme: dpv#
isSubTypeOf: Fixed Location

ForProfitOrganisation
created: 2022-02-02
creator: Harshvardhan J. Pandit
modified: 2020-10-05
type: Concept
term status: modified
broader: Organisation
definition: An organisation that aims to achieve profit as its primary goal
in scheme: dpv#
isSubTypeOf: Organisation

Fraud Prevention and Detection
created: 2019-04-05
creator: Axel Polleres
creator: Elmar Kiesling
creator: Fajar Ekaputra
creator: Harshvardhan J. Pandit
creator: Javier Fernandez
creator: Simon Steyskal
type: Concept
term status: accepted
broader: Enforce Security
definition: Detect and prevent fraud
in scheme: dpv#
narrower: Counter Money Laundering
narrower: MaintainFraudDatabase
related: Government
isSubTypeOf: Enforce Security

Frequency
created: 2022-02-16
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Context
definition: The frequency or information about periods and repetitions in terms of recurrence.
in scheme: dpv#
narrower: Continous Frequency
narrower: Often Frequency
narrower: Singular Frequency
narrower: Sporadic Frequency
isSubTypeOf: Context

Fully Automated Processing
created: 2022-06-15
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Automation of Processing
definition: Processing that is fully automated
in scheme: dpv#
isInstanceOf: Automation of Processing

Fully Randomised Pseudonymisation
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: data-pseudonymisation-advanced-techniques-and-use-cases
type: Concept
term status: accepted
broader: Pseudonymisation
definition: Use of randomised pseudonymisation where the same elements are assigned different values each time they occur
in scheme: dpv#
isSubTypeOf: Pseudonymisation

Generate
created: 2022-04-20
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Obtain
definition: to generate or create data
in scheme: dpv#
isSubTypeOf: Obtain

Generated Personal Data
created: 2022-03-30
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Personal Data
definition: Personal Data that is generated or brought into existence without relation to existing data i.e. it is not derived or inferred from other data
in scheme: dpv#
narrower: Inferred Personal Data
note: Generated Data is used to indicate data that is produced and is not derived or inferred from other data
isSubTypeOf: Personal Data

Geographic Coverage
created: 2022-06-15
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
term status: accepted
broader: Scale
definition: Indicate of scale in terms of geographic coverage
in scheme: dpv#
narrower: GlobalScale
narrower: LocalEnvironmentScale
narrower: LocalityScale
narrower: MultiNationalScale
narrower: NationalScale
narrower: NearlyGlobalScale
narrower: RegionalScale
isSubTypeOf: Scale

GlobalScale
created: 2022-06-15
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Geographic Coverage
definition: Geographic coverage spanning the entire globe
in scheme: dpv#
isInstanceOf: Geographic Coverage

Governance Procedures
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: 5g-cybersecurity-standards
type: Concept
term status: accepted
broader: Organisational Measure
definition: Procedures related to governance (e.g. organisation, unit, team, process, system)
in scheme: dpv#
narrower: Asset Management Procedures
narrower: Compliance Monitoring
narrower: Disaster Recovery Procedures
narrower: Incident Management Procedures
narrower: Incident Reporting Communication
narrower: Logging Policies
narrower: Monitoring Policies
isSubTypeOf: Organisational Measure

GovernmentalOrganisation
created: 2022-02-02
creator: Harshvardhan J. Pandit
modified: 2020-10-05
type: Concept
term status: modified
broader: Organisation
definition: An organisation managed or part of government
in scheme: dpv#
narrower: Authority
isSubTypeOf: Organisation

Guardian(s) of Data Subject
created: 2022-08-03
creator: Georg P Krog
type: Concept
term status: accepted
broader: Data Subject
definition: Guardian(s) of data subjects such as children
in scheme: dpv#
isSubTypeOf: Data Subject

GuidelinesPrinciple
created: 2019-04-05
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Rob Brennan
type: Concept
term status: accepted
broader: Organisational Measure
definition: Guidelines or Principles regarding processing and operational measures
in scheme: dpv#
narrower: Code of Conduct
narrower: Design Standard
narrower: Privacy by Default
isSubTypeOf: Organisational Measure

Hardware Security Protocols
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: Security Method
definition: Security protocols implemented at or within hardware
in scheme: dpv#
isSubTypeOf: Security Method

Harm
created: 2022-08-13
creator: Beatriz Esteves
creator: Fajar Ekaputra
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
example: E0029
type: Concept
term status: changed
broader: Damage
definition: Impact that acts as or causes harms
in scheme: dpv#
isSubTypeOf: Damage

Hash Functions
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: Cryptographic Methods
definition: Use of hash functions to map information or to retrieve a prior categorisation
in scheme: dpv#
isSubTypeOf: Cryptographic Methods

Hash-based Message Authentication Code (HMAC)
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: 5g-cybersecurity-standards
type: Concept
term status: accepted
broader: Cryptographic Authentication
definition: Use of HMAC where message authentication code (MAC) utilise a cryptographic hash function and a secret cryptographic key
in scheme: dpv#
isSubTypeOf: Cryptographic Authentication

Homomorphic Encryption
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: Cryptographic Methods
definition: Use of Homomorphic encryption that permits computations on encrypted data without decrypting it
in scheme: dpv#
isSubTypeOf: Cryptographic Methods

HugeDataVolume
created: 2022-06-15
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Data Volume
definition: Data volume that is considered huge or more than large within the context
in scheme: dpv#
isInstanceOf: Data Volume

HugeScaleOfDataSubjects
created: 2022-06-15
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Data Subject Scale
definition: Scale of data subjects considered huge or more than large within the context
in scheme: dpv#
isInstanceOf: Data Subject Scale

Human Involvement
created: 2022-01-26
creator: Harshvardhan J. Pandit
modified: 2022-06-15
type: Concept
term status: accepted
broader: Automation of Processing
definition: The involvement of humans in specified context
in scheme: dpv#
narrower: Human Involvement for Input
narrower: Human Involvement for Oversight
narrower: Human Involvement for Verification
note: Human Involvement here broadly refers to any involvement by a human in the context of carrying out processing. This may include verification of outcomes, providing input data for making decisions, or overseeing activities.
isSubTypeOf: Automation of Processing

Human Involvement for Input
created: 2022-09-07
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Human Involvement
definition: Human involvement for the purposes of providing inputs
in scheme: dpv#
narrower: Automated Processing with Human Input
isInstanceOf: Human Involvement

Human Involvement for Oversight
created: 2022-09-07
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Human Involvement
definition: Human involvement for the purposes of having oversight over a system, its operations, inputs, or outputs
in scheme: dpv#
narrower: Automated Processing with Human Oversight
isInstanceOf: Human Involvement

Human Involvement for Verification
created: 2022-09-07
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Human Involvement
definition: Human involvement for the purposes of verification of a system, its operations, inputs, or outputs
in scheme: dpv#
narrower: Automated Processing with Human Review
isInstanceOf: Human Involvement

Human Resources Management
created: 2021-09-01
creator: Beatriz Esteves
creator: David Hickey
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
source: model-voor-een-register-van-de-verwerkingsactiviteiten
type: Concept
term status: accepted
broader: Purpose
definition: Manage humans and 'human resources' within the organisation for effective and efficient operations.
in scheme: dpv#
note: HR is a broad concept. Its management includes, amongst others - recruiting employees and intermediaries e.g. brokers, independent representatives; payroll administration, remunerations, commissions, and wages; and application of social legislation.
isSubTypeOf: Purpose

Identify and Repair Impairments
created: 2022-08-24
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Service Provision
definition: Identify, rectify, or otherwise under take activities intended to fix or repair impairments to existing functionalities
in scheme: dpv#
note: An example of identifying and rectifying impairments is the process of finding and fixing errors in products, commonly referred to as debugging
isSubTypeOf: Service Provision

Identity Management Method
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: Authorisation Procedure
definition: Management of identity and identity-based processes
in scheme: dpv#
isSubTypeOf: Authorisation Procedure

Identity Verification
created: 2019-04-05
creator: Axel Polleres
creator: Elmar Kiesling
creator: Fajar Ekaputra
creator: Harshvardhan J. Pandit
creator: Javier Fernandez
creator: Simon Steyskal
type: Concept
term status: accepted
broader: Enforce Security
definition: Verify or authorize identity
in scheme: dpv#
isSubTypeOf: Enforce Security

Immigrant
created: 2022-04-06
creator: Beatriz Esteves
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
term status: accepted
broader: Data Subject
definition: Data subjects that are immigrants (for a jurisdiction)
in scheme: dpv#
isSubTypeOf: Data Subject

Impact
created: 2022-03-23
creator: Beatriz Esteves
creator: Fajar Ekaputra
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
example: E0029
type: Concept
term status: accepted
broader: Consequence
definition: The impact(s) possible or arising as a consequence from specified context
in scheme: dpv#
narrower: Benefit
narrower: Damage
narrower: Detriment
note: Impact is a stronger notion of consequence in terms of influence, change, or effect on something e.g. for impact assessments
isSubTypeOf: Consequence

Impact Assessment
created: 2020-11-04
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
term status: accepted
broader: Assessment
definition: Calculating or determining the likelihood of impact of an existing or proposed process, which can involve risks or detriments.
in scheme: dpv#
narrower: Data Protection Impact Assessment (DPIA)
narrower: Data Transfer Impact Assessment
narrower: Privacy Impact Assessment
isSubTypeOf: Assessment

Implied Consent
created: 2022-06-21
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
term status: accepted
broader: Informed Consent
definition: Consent that is implied indirectly through an action not associated solely with conveying a consenting decision
in scheme: dpv#
note: Implied consent is expected to also be Informed Consent. An example is a CCTV notice outside a monitored area that informs the individuals that by walking in they would be consenting to the use of camera for surveillance.
isSubTypeOf: Informed Consent

Importance
created: 2022-02-09
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
term status: accepted
broader: Context
definition: An indication of 'importance' within a context
in scheme: dpv#
narrower: Primary Importance
narrower: Secondary Importance
note: Importance can be used to express importance, desirability, relevance, or significance as a context.
isSubTypeOf: Context

Improve Existing Products and Services
created: 2019-04-05
creator: Axel Polleres
creator: Elmar Kiesling
creator: Fajar Ekaputra
creator: Harshvardhan J. Pandit
creator: Javier Fernandez
creator: Simon Steyskal
type: Concept
term status: accepted
broader: Optimisation for Controller
definition: Improve existing products and services
in scheme: dpv#
isSubTypeOf: Optimisation for Controller

Improve Internal CRM Processes
created: 2019-04-05
creator: Axel Polleres
creator: Elmar Kiesling
creator: Fajar Ekaputra
creator: Harshvardhan J. Pandit
creator: Javier Fernandez
creator: Simon Steyskal
type: Concept
term status: accepted
broader: Customer Relationship Management
broader: Optimisation for Controller
definition: Improve customer-relationship management (CRM) processes
in scheme: dpv#
isSubTypeOf: Customer Relationship Management
isSubTypeOf: Optimisation for Controller

Incident Management Procedures
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: 5g-cybersecurity-standards
type: Concept
term status: accepted
broader: Governance Procedures
definition: Procedures related to management of incidents
in scheme: dpv#
isSubTypeOf: Governance Procedures

Incident Reporting Communication
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: 5g-cybersecurity-standards
type: Concept
term status: accepted
broader: Governance Procedures
definition: Procedures related to management of incident reporting
in scheme: dpv#
isSubTypeOf: Governance Procedures

Increase Service Robustness
created: 2019-04-05
creator: Axel Polleres
creator: Elmar Kiesling
creator: Fajar Ekaputra
creator: Harshvardhan J. Pandit
creator: Javier Fernandez
creator: Simon Steyskal
type: Concept
term status: accepted
broader: Optimisation for Controller
definition: Improve robustness and resilience of services
in scheme: dpv#
isSubTypeOf: Optimisation for Controller

IndustryConsortium
created: 2022-02-02
creator: Harshvardhan J. Pandit
modified: 2020-10-05
source: adms
type: Concept
term status: modified
broader: Organisation
definition: A consortium established and comprising on industry organisations
in scheme: dpv#
isSubTypeOf: Organisation

Infer
created: 2022-04-20
creator: Harshvardhan J. Pandit
modified: 2022-10-14
example: E0014
type: Concept
term status: modified
broader: Derive
definition: to infer data from existing data
in scheme: dpv#
note: Infer indicates data that is derived without it being present or obtainable from existing data. For data that is presented, and is 'extracted' or 'obtained' from existing data, see Derive.
isSubTypeOf: Derive

Inferred Personal Data
created: 2022-01-19
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Derived Personal Data
broader: Generated Personal Data
definition: Personal Data that is obtained through inference from other data
in scheme: dpv#
note: Inferred Data is derived data generated from existing data, but which did not originally exist within it, e.g. inferring demographics from browsing history.
isSubTypeOf: Derived Personal Data
isSubTypeOf: Generated Personal Data

Information Flow Control
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: Technical Measure
definition: Use of measures to control information flows
in scheme: dpv#
isSubTypeOf: Technical Measure

Information Security Policy
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: 5g-cybersecurity-standards
type: Concept
term status: accepted
broader: Policy
definition: Policy regarding security of information
in scheme: dpv#
isSubTypeOf: Policy

Informed Consent
created: 2022-06-21
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
term status: accepted
broader: Consent
definition: Consent that is informed i.e. with the requirement to provide sufficient information to make a consenting decision
in scheme: dpv#
narrower: Expressed Consent
narrower: Implied Consent
note: The specifics for what information should be provided or made available will depend on the context, use-case, or relevant legal requirements
isSubTypeOf: Consent

Innovative Use of New Technologies
created: 2020-11-04
creator: Harshvardhan J. Pandit
creator: Piero Bonatti
source: oj
type: Concept
term status: accepted
broader: Processing Context
definition: Processing that involves use of innovative and new technologies
in scheme: dpv#
isSubTypeOf: Processing Context

Internal Resource Optimisation
created: 2019-04-05
creator: Axel Polleres
creator: Elmar Kiesling
creator: Fajar Ekaputra
creator: Harshvardhan J. Pandit
creator: Javier Fernandez
creator: Simon Steyskal
type: Concept
term status: accepted
broader: Optimisation for Controller
definition: Optimize internal resource availability and usage for organisation
in scheme: dpv#
isSubTypeOf: Optimisation for Controller

International Organisation
created: 2022-03-23
creator: Georg P. Krog
creator: Julian Flake
modified: 2020-10-05
source: oj
type: Concept
term status: modified
broader: Organisation
definition: An organisation and its subordinate bodies governed by public international law, or any other body which is set up by, or on the basis of, an agreement between two or more countries
in scheme: dpv#
isSubTypeOf: Organisation

Intrusion Detection System
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: Security Method
definition: Use of measures to detect intrusions and other unauthorised attempts to gain access to a system
in scheme: dpv#
isSubTypeOf: Security Method

JobApplicant
created: 2022-04-06
creator: Beatriz Esteves
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
term status: accepted
broader: Applicant
definition: Data subjects that apply for jobs or employments
in scheme: dpv#
isSubTypeOf: Applicant

Joint Data Controllers
created: 2022-02-02
creator: Georg Krog
creator: Harshvardhan Pandit
type: Concept
term status: accepted
broader: Data Controller
definition: A group of Data Controllers that jointly determine the purposes and means of processing
in scheme: dpv#
note: To indicate the membership, hasDataController may be used
isSubTypeOf: Data Controller

Joint Data Controllers Agreement
created: 2022-01-26
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
term status: accepted
broader: Data Processing Agreement
definition: An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data between Controllers within a Joint Controllers relationship
in scheme: dpv#
isSubTypeOf: Data Processing Agreement

Jurisdiction Concepts
type: Collection
member: City
member: Cloud Location
member: Country
member: Decentralised Locations
member: EconomicUnion
member: Federated Locations
member: Fixed Location
member: Fixed Multiple Locations
member: Fixed Singular Location
member: Law
member: Local Location
member: Location
member: Location Fixture
member: Location Locality
member: Private Location
member: Publicly Accessible Location
member: Random Location
member: Region
member: Remote Location
member: SupraNationalUnion
member: Third Country
member: Variable Location
member: Within Device
member: Within Physical Environment
member: Within Virtual Environment
member: has applicable law
member: has country
member: has jurisdiction
member: has location
member: has third country

Justification
created: 2022-06-15
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Context
definition: A form of documentation providing reaosns, explanations, or justifications
in scheme: dpv#
isSubTypeOf: Context

LargeDataVolume
created: 2022-06-15
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Data Volume
definition: Data volume that is considered large within the context
in scheme: dpv#
isInstanceOf: Data Volume

LargeScaleOfDataSubjects
created: 2022-06-15
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Data Subject Scale
definition: Scale of data subjects considered large within the context
in scheme: dpv#
isInstanceOf: Data Subject Scale

Large Scale Processing
created: 2020-11-04
creator: Harshvardhan J. Pandit
creator: Piero Bonatti
modified: 2022-09-07
source: oj
type: Concept
term status: modified
broader: Processing Scale
definition: Processing that takes place at large scales (as specified by some criteria)
in scheme: dpv#
note: The exact definition of what constitutes "large scale" depends on use of jurisdictional, domain-specific, or other forms of externally defined criterias. Where possible, this should be reflected by extending this term with the appropriate context.
isInstanceOf: Processing Scale

Law
created: 2022-01-19
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
definition: A law is a set of rules created by government or authorities
in scheme: dpv#

Lawful
type: Concept
term status: accepted
broader: Lawfulness (alt title: LegalComplianceStatus)
definition: State of being lawful or legally compliant
in scheme: dpv#
isInstanceOf: Lawfulness (alt title: LegalComplianceStatus)

Lawfulness (alt title: LegalComplianceStatus)
type: Concept
term status: accepted
broader: Compliance Status
definition: Status associated with being lawful
in scheme: dpv#
narrower: Lawful
narrower: Lawfulness Unknown
narrower: Unlawful
isSubTypeOf: Compliance Status

Lawfulness Unknown
type: Concept
term status: accepted
broader: Lawfulness (alt title: LegalComplianceStatus)
definition: State of the lawfulness not being known
in scheme: dpv#
isInstanceOf: Lawfulness (alt title: LegalComplianceStatus)

Legal Agreement
created: 2019-04-05
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Rob Brennan
type: Concept
term status: accepted
broader: Organisational Measure
definition: A legally binding agreement
in scheme: dpv#
narrower: Contract
narrower: Contractual Terms
narrower: Data Processing Agreement
narrower: Non-Disclosure Agreement (NDA)
isSubTypeOf: Organisational Measure

Legal Basis
created: 2019-04-05
creator: Axel Polleres
creator: Javier Fernández
modified: 2020-11-04
example: E0022
example: E0023
type: Concept
term status: accepted
definition: The Legal basis used to justify processing of personal data
in scheme: dpv#
narrower: Consent
narrower: Contract
narrower: Data Transfer Legal Basis
narrower: Legal Obligation
narrower: Legitimate Interest
narrower: Official Authority of Controller
narrower: Public Interest
narrower: Vital Interest
note: Legal basis (plural: legal bases) are defined by legislations and regulations, whose applicability is usually restricted to specific jurisdictions.

Legal Compliance
created: 2020-11-04
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Purpose
definition: Fulfilment of obligations or requirements towards achieving compliance with law or regulations
in scheme: dpv#
isSubTypeOf: Purpose

Legal Entity
created: 2019-04-05
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Entity
definition: A human or non-human 'thing' that constitutes as an entity and which is recognised and defined in law
in scheme: dpv#
narrower: Authority
narrower: Data Controller
narrower: Data Exporter
narrower: Data Subject
narrower: Organisation
narrower: Recipient
narrower: Representative
isSubTypeOf: Entity

Legal Obligation
created: 2021-04-07
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Legal Basis
definition: Legal Obligation to conduct the specified processing
in scheme: dpv#
isSubTypeOf: Legal Basis

Legal_Basis Concepts
type: Collection
member: Consent
member: Contract
member: Contract Performance
member: Data Transfer Legal Basis
member: Enter Into Contract
member: Legal Basis
member: Legal Obligation
member: Legitimate Interest
member: Legitimate Interest of Controller
member: Legitimate Interest of Data Subject
member: Legitimate Interest of Third Party
member: Official Authority of Controller
member: Public Interest
member: Vital Interest
member: Vital Interest of Data Subject
member: Vital Interest of Natural Person
member: has legal basis

Legitimate Interest
created: 2021-05-19
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Legal Basis
definition: Legitimate Interests of a Party as justification for specified processing
in scheme: dpv#
narrower: Legitimate Interest of Controller
narrower: Legitimate Interest of Data Subject
narrower: Legitimate Interest of Third Party
isSubTypeOf: Legal Basis

Legitimate Interest Assessment
created: 2021-09-08
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
term status: accepted
broader: Assessment
definition: Indicates an assessment regarding the use of legitimate interest as a lawful basis by the data controller
in scheme: dpv#
isSubTypeOf: Assessment

Legitimate Interest of Controller
created: 2021-05-19
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
term status: accepted
broader: Legitimate Interest
definition: Legitimate Interests of a Data Controller in conducting specified processing
in scheme: dpv#
isSubTypeOf: Legitimate Interest

Legitimate Interest of Data Subject
created: 2022-10-22
creator: Georg P Krog
type: Concept
term status: accepted
broader: Legitimate Interest
definition: Legitimate Interests of the Data Subject in conducting specified processing
in scheme: dpv#
isSubTypeOf: Legitimate Interest

Legitimate Interest of Third Party
created: 2021-05-19
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
term status: accepted
broader: Legitimate Interest
definition: Legitimate Interests of a Third Party in conducting specified processing
in scheme: dpv#
isSubTypeOf: Legitimate Interest

Likelihood
created: 2022-07-22
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
definition: The likelihood or probability or chance of something taking place or occuring
in scheme: dpv#
note: Likelihood can be expressed in a subjective manner, such as 'Unlikely', or in a quantitative manner such as "Twice in a Day" (frequency per period). The suggestion is to use quantitative values, or to associate them with subjective terms used so as to enable accurate interpretations and interoperability. See the concepts related to Frequency and Duration for possible uses as a combination to express Likelihood.

LocalEnvironmentScale
created: 2022-06-15
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Geographic Coverage
definition: Geographic coverage spanning a specific environment within the locality
in scheme: dpv#
note: For example, geographic scale of an event take place in a specific building or room
isInstanceOf: Geographic Coverage

Local Location
created: 2022-06-15
creator: Harshvardhan J. Pandit
modified: 2020-10-05
type: Concept
term status: modified
broader: Location Locality
definition: Location is local
in scheme: dpv#
narrower: Private Location
narrower: Publicly Accessible Location
narrower: Within Device
narrower: Within Physical Environment
narrower: Within Virtual Environment
isSubTypeOf: Location Locality

LocalityScale
created: 2022-06-15
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Geographic Coverage
definition: Geographic coverage spanning a specific locality
in scheme: dpv#
note: For example, geographic scale of a city or an area within a city
isInstanceOf: Geographic Coverage

Location
created: 2022-01-19
creator: Georg P Krog
creator: Harshvardhan J. Pandit
example: E0011
type: Concept
term status: accepted
definition: A location is a position, site, or area where something is located
in scheme: dpv#
narrower: City
narrower: Country
narrower: EconomicUnion
narrower: Location Locality
narrower: Region
narrower: Storage Location
narrower: SupraNationalUnion
note: Location may be geographic, physical, or virtual.

Location Fixture
created: 2022-06-15
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
definition: The fixture of location refers to whether the location is fixed
in scheme: dpv#
narrower: Decentralised Locations
narrower: Federated Locations
narrower: Fixed Location
narrower: Random Location
narrower: Variable Location

Location Locality
created: 2022-06-15
creator: Harshvardhan J. Pandit
modified: 2022-10-04
type: Concept
term status: modified
broader: Location
definition: Locality refers to whether the specified location is local within some context, e.g. for the user
in scheme: dpv#
narrower: Local Location
narrower: Remote Location
isSubTypeOf: Location

Logging Policies
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: 5g-cybersecurity-standards
type: Concept
term status: accepted
broader: Governance Procedures
definition: Policy for logging of information
in scheme: dpv#
isSubTypeOf: Governance Procedures

MaintainCreditCheckingDatabase
created: 2022-06-15
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Credit Checking
definition: Maintain Credit Checking Database
in scheme: dpv#
isSubTypeOf: Credit Checking

MaintainCreditRatingDatabase
created: 2022-06-15
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Credit Checking
definition: Maintain Credit Rating Database
in scheme: dpv#
isSubTypeOf: Credit Checking

MaintainFraudDatabase
created: 2022-06-15
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Fraud Prevention and Detection
definition: Maintain Fraud Database
in scheme: dpv#
isSubTypeOf: Fraud Prevention and Detection

Make Available
created: 2019-05-07
source: oj
type: Concept
term status: accepted
broader: Disclose
definition: to transform or publish data to be used
in scheme: dpv#
isSubTypeOf: Disclose

Marketing
created: 2020-11-04
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Purpose
definition: Conduct marketing in relation to organisation or products or services e.g. promoting, selling, and distributing
in scheme: dpv#
narrower: Advertising
narrower: Direct Marketing
narrower: Public Relations
narrower: Social Media
note: Was commercial interest, changed to consider Marketing a separate Purpose category by itself
isSubTypeOf: Purpose

Match
created: 2022-04-20
creator: Harshvardhan J. Pandit
source: https://ec.europa.eu/newsroom/article29/items/611236
type: Concept
term status: accepted
broader: Use
definition: to combine, compare, or match data from different sources
in scheme: dpv#
isSubTypeOf: Use

Material Damage
created: 2022-03-30
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Damage
definition: Impact that acts as or causes material damages
in scheme: dpv#
isSubTypeOf: Damage

MediumDataVolume
created: 2022-06-15
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
term status: accepted
broader: Data Volume
definition: Data volume that is considered medium i.e. neither large nor small within the context
in scheme: dpv#
isInstanceOf: Data Volume

MediumScaleOfDataSubjects
created: 2022-06-15
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
term status: accepted
broader: Data Subject Scale
definition: Scale of data subjects considered medium i.e. neither large nor small within the context
in scheme: dpv#
isInstanceOf: Data Subject Scale

Medium Scale Processing
created: 2022-09-07
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Processing Scale
definition: Processing that takes place at medium scales (as specified by some criteria)
in scheme: dpv#
isInstanceOf: Processing Scale

Member
created: 2022-04-06
creator: Beatriz Esteves
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
term status: accepted
broader: Data Subject
definition: Data subjects that are members of a group, organisation, or other collectives
in scheme: dpv#
isSubTypeOf: Data Subject

Members and Partners Management
created: 2021-09-01
creator: David Hickey
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
source: model-voor-een-register-van-de-verwerkingsactiviteiten
type: Concept
term status: accepted
broader: Organisation Governance
definition: Maintain registry of shareholders, members, or partners for governance, administration, and management functions
in scheme: dpv#
isSubTypeOf: Organisation Governance

Mentally Vulnerable Data Subject
created: 2022-06-15
creator: Georg P Krog
type: Concept
term status: accepted
broader: Vulnerable Data Subject
definition: Data subjects that are considered mentally vulnerable
in scheme: dpv#
isSubTypeOf: Vulnerable Data Subject

Message Authentication Codes (MAC)
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: Cryptographic Authentication
definition: Use of cryptographic methods to authenticate messages
in scheme: dpv#
isSubTypeOf: Cryptographic Authentication

Mobile Platform Security
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: Security Method
definition: Security implemented over a mobile platform
in scheme: dpv#
isSubTypeOf: Security Method

Modify
created: 2022-06-15
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Alter
definition: to modify or change data
in scheme: dpv#
isSubTypeOf: Alter

Monitor
created: 2022-06-15
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Consult
definition: to monitor data for some criteria
in scheme: dpv#
isSubTypeOf: Consult

Monitoring Policies
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: 5g-cybersecurity-standards
type: Concept
term status: accepted
broader: Governance Procedures
definition: Policy for monitoring (e.g. progress, performance)
in scheme: dpv#
isSubTypeOf: Governance Procedures

Monotonic Counter Pseudonymisation
created: 2022-08-17
creator: Harshvardhan J. Pandit
modified: 2022-10-13
source: data-pseudonymisation-advanced-techniques-and-use-cases
type: Concept
term status: modified
broader: Pseudonymisation
definition: A simple pseudonymisation method where identifiers are substituted by a number chosen by a monotonic counter
in scheme: dpv#
isSubTypeOf: Pseudonymisation

Move
created: 2019-05-07
source: processing
type: Concept
term status: accepted
broader: Transfer
definition: to move data from one location to another including deleting the original copy
in scheme: dpv#
related: Move
isSubTypeOf: Transfer

Multi-Factor Authentication (MFA)
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: Authentication Protocols
definition: An authentication system that uses two or more methods to authenticate
in scheme: dpv#
isSubTypeOf: Authentication Protocols

MultiNationalScale
created: 2022-06-15
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Geographic Coverage
definition: Geographic coverage spanning multiple nations
in scheme: dpv#
isInstanceOf: Geographic Coverage

Non-Disclosure Agreement (NDA)
created: 2019-04-05
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Rob Brennan
type: Concept
term status: accepted
broader: Legal Agreement
definition: Non-disclosure Agreements e.g. preserving confidentiality of information
in scheme: dpv#
isSubTypeOf: Legal Agreement

NationalAuthority
created: 2022-02-02
creator: Harshvardhan J. Pandit
source: adms
type: Concept
term status: accepted
broader: Authority
definition: An authority tasked with overseeing legal compliance for a nation
in scheme: dpv#
isSubTypeOf: Authority

NationalScale
created: 2022-06-15
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Geographic Coverage
definition: Geographic coverage spanning a nation
in scheme: dpv#
isInstanceOf: Geographic Coverage

Natural Person
created: 2022-02-09
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Entity
definition: A human
in scheme: dpv#
narrower: Data Subject
isSubTypeOf: Entity

NearlyGlobalScale
created: 2022-06-15
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Geographic Coverage
definition: Geographic coverage nearly spanning the entire globe
in scheme: dpv#
isInstanceOf: Geographic Coverage

Necessity
created: 2022-02-12
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
example: E0028
type: Concept
term status: accepted
broader: Context
definition: An indication of 'necessity' within a context
in scheme: dpv#
narrower: Not Required
narrower: Optional
narrower: Required
note: Necessity can be used to express need, essentiality, requirement, or compulsion.
isSubTypeOf: Context

Network Proxy Routing
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: data-protection-engineering
type: Concept
term status: accepted
broader: Security Method
definition: Use of network routing using proxy
in scheme: dpv#
isSubTypeOf: Security Method

Network Security Protocols
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: Security Method
definition: Security implemented at or over networks protocols
in scheme: dpv#
isSubTypeOf: Security Method

NonCitizen
created: 2022-04-06
creator: Beatriz Esteves
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
term status: accepted
broader: Data Subject
definition: Data subjects that are not citizens (for a jurisdiction)
in scheme: dpv#
isSubTypeOf: Data Subject

Non-Commercial Research
created: 2019-04-05
creator: Axel Polleres
creator: Elmar Kiesling
creator: Fajar Ekaputra
creator: Harshvardhan J. Pandit
creator: Javier Fernandez
creator: Simon Steyskal
type: Concept
term status: accepted
broader: Research and Development
definition: Conduct research in a non-commercial setting e.g. for a non-profit-organisation (NGO)
in scheme: dpv#
isSubTypeOf: Research and Development

Non Compliant
created: 2022-05-18
creator: Harshvardhan J. Pandit
modified: 2022-09-07
type: Concept
term status: changed
broader: Compliance Status
definition: State of non-compliance where objectives have not been met, but have not been violated
in scheme: dpv#
note: Changed from not compliant for consistency in commonly used terms
isInstanceOf: Compliance Status

NonConformant
created: 2022-10-22
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Conformance Status
definition: State of being non-conformant
in scheme: dpv#
isInstanceOf: Conformance Status

NonGovernmentalOrganisation
created: 2022-02-02
creator: Harshvardhan J. Pandit
modified: 2020-10-05
source: adms
type: Concept
term status: modified
broader: Organisation
definition: An organisation not part of or independent from the government
in scheme: dpv#
isSubTypeOf: Organisation

Non-Material Damage
created: 2022-03-30
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Damage
definition: Impact that acts as or causes non-material damages
in scheme: dpv#
isSubTypeOf: Damage

Non-Personal Data
created: 2022-01-19
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Data
definition: Data that is not Personal Data
in scheme: dpv#
narrower: Anonymised Data
note: The term NonPersonalData is provided to distinguish between PersonalData and other data, e.g. for indicating which data is regulated by privacy laws. To specify personal data that has been anonymised, the concept AnonymisedData should be used.
isSubTypeOf: Data

NonProfitOrganisation
created: 2022-02-02
creator: Harshvardhan J. Pandit
modified: 2020-10-05
source: adms
type: Concept
term status: modified
broader: Organisation
definition: An organisation that does not aim to achieve profit as its primary goal
in scheme: dpv#
isSubTypeOf: Organisation

Non-Public Data Source
created: 2022-01-26
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
term status: accepted
broader: Data Source
definition: A source of data that is not publicly accessible or available
in scheme: dpv#
isInstanceOf: Data Source

Not Required
created: 2022-02-15
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
term status: accepted
broader: Necessity
definition: Indication of neither being required nor optional i.e. not relevant or needed
in scheme: dpv#
isInstanceOf: Necessity

Notice
created: 2021-09-08
creator: David Hickey
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
example: E0025
type: Concept
term status: accepted
broader: Organisational Measure
definition: A notice is an artefact for providing information, choices, or controls
in scheme: dpv#
narrower: Privacy Notice
isSubTypeOf: Organisational Measure

Obligation
created: 2022-10-19
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
term status: accepted
broader: Rule
definition: A rule describing an obligation for performing an activity
in scheme: dpv#
isSubTypeOf: Rule

Observe
created: 2022-06-15
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Obtain
definition: to obtain data through observation
in scheme: dpv#
isSubTypeOf: Obtain

Observed Personal Data
created: 2022-08-24
creator: Georg P Krog
type: Concept
term status: accepted
broader: Collected Personal Data
definition: Personal Data that has been collected through observation of the Data Subject(s)
in scheme: dpv#
isSubTypeOf: Collected Personal Data

Obtain
created: 2019-05-07
source: oj
type: Concept
term status: accepted
broader: Processing
definition: to solicit or gather data from someone
in scheme: dpv#
narrower: Acquire
narrower: Collect
narrower: Derive
narrower: Generate
narrower: Observe
narrower: Record
isSubTypeOf: Processing

Official Authority of Controller
created: 2021-05-05
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
term status: accepted
broader: Legal Basis
definition: Processing necessary or authorised through the official authority granted to or vested in the Data Controller
in scheme: dpv#
isSubTypeOf: Legal Basis

Often Frequency
created: 2022-06-15
creator: Harshvardhan J. Pandit
modified: 2020-10-05
type: Concept
term status: modified
broader: Frequency
definition: Frequency where occurences are often or frequent, but not continous
in scheme: dpv#
isSubTypeOf: Frequency

Operating System Security
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: Security Method
definition: Security implemented at or through operating systems
in scheme: dpv#
isSubTypeOf: Security Method

Optimisation for Consumer
created: 2019-04-05
creator: Axel Polleres
creator: Elmar Kiesling
creator: Fajar Ekaputra
creator: Harshvardhan J. Pandit
creator: Javier Fernandez
creator: Simon Steyskal
type: Concept
term status: accepted
broader: Service Optimization
definition: Optimize activities and services for consumer or user
in scheme: dpv#
narrower: Optimise User Interface
related: Custom
isSubTypeOf: Service Optimization

Optimisation for Controller
created: 2019-04-05
creator: Axel Polleres
creator: Elmar Kiesling
creator: Fajar Ekaputra
creator: Harshvardhan J. Pandit
creator: Javier Fernandez
creator: Simon Steyskal
type: Concept
term status: accepted
broader: Service Optimization
definition: Optimize activities and services for provider or controller
in scheme: dpv#
narrower: Improve Existing Products and Services
narrower: Improve Internal CRM Processes
narrower: Increase Service Robustness
narrower: Internal Resource Optimisation
isSubTypeOf: Service Optimization

Optimise User Interface
created: 2019-04-05
creator: Axel Polleres
creator: Elmar Kiesling
creator: Fajar Ekaputra
creator: Harshvardhan J. Pandit
creator: Javier Fernandez
creator: Simon Steyskal
type: Concept
term status: accepted
broader: Optimisation for Consumer
definition: Optimize interfaces presented to the user
in scheme: dpv#
isSubTypeOf: Optimisation for Consumer

Optional
created: 2022-02-14
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
term status: accepted
broader: Necessity
definition: Indication of 'optional' or 'voluntary'
in scheme: dpv#
isInstanceOf: Necessity

Organisation
created: 2022-02-02
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Legal Entity
definition: A general term reflecting a company or a business or a group acting as a unit
in scheme: dpv#
narrower: AcademicScientificOrganisation
narrower: ForProfitOrganisation
narrower: GovernmentalOrganisation
narrower: IndustryConsortium
narrower: International Organisation
narrower: NonGovernmentalOrganisation
narrower: NonProfitOrganisation
isSubTypeOf: Legal Entity

Organisation Compliance Management
created: 2021-09-01
creator: David Hickey
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
term status: accepted
broader: Organisation Governance
definition: Manage compliance for organisation in relation to internal policies
in scheme: dpv#
isSubTypeOf: Organisation Governance

Organisation Governance
created: 2021-09-01
creator: David Hickey
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
source: model-voor-een-register-van-de-verwerkingsactiviteiten
type: Concept
term status: accepted
broader: Purpose
definition: Conduct activities and functions for organisation's governance
in scheme: dpv#
narrower: Dispute Management
narrower: Members and Partners Management
narrower: Organisation Compliance Management
narrower: Organisation Risk Management
isSubTypeOf: Purpose

Organisation Risk Management
created: 2021-09-01
creator: David Hickey
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
term status: accepted
broader: Organisation Governance
definition: Manage risk for organisation's activities
in scheme: dpv#
isSubTypeOf: Organisation Governance

Organisational Measure
created: 2019-04-05
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Rob Brennan
example: E0017
type: Concept
term status: accepted
broader: Technical and Organisational Measure
definition: Organisational measures required/followed when processing data of the declared category
in scheme: dpv#
narrower: Assessment
narrower: Authorisation Procedure
narrower: Certification and Seal
narrower: Consultation
narrower: Governance Procedures
narrower: GuidelinesPrinciple
narrower: Legal Agreement
narrower: Notice
narrower: Policy
narrower: Privacy by Design
narrower: Records of Activities
narrower: Regularity of Re-certification
narrower: Review Procedure
narrower: Safeguard
narrower: Security Procedure
narrower: Staff Training
isSubTypeOf: Technical and Organisational Measure

Organisational Unit
created: 2022-03-23
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
term status: accepted
broader: Entity
definition: Entity within an organisation that does not constitute as a separate legal entity
in scheme: dpv#
isSubTypeOf: Entity

Organisational_Measures Concepts
type: Collection
member: Assessment
member: Asset Management Procedures
member: Authorisation Procedure
member: Background Checks
member: Certification
member: Certification and Seal
member: Code of Conduct
member: Compliance Monitoring
member: Consent Notice
member: Consent Record
member: Consultation
member: Consultation with Authority
member: Consultation with DPO
member: Consultation with Data Subject
member: Consultation with Data Subject Representative
member: Contractual Terms
member: Controller-Processor Agreement
member: Credential Management
member: Cybersecurity Assessments
member: Cybersecurity Training
member: Data Protection Impact Assessment (DPIA)
member: Data Processing Agreement
member: Data Processing Records
member: Data Protection Training
member: Data Transfer Impact Assessment
member: Design Standard
member: Disaster Recovery Procedures
member: Educational Training
member: Effectiveness Determination Procedures
member: Governance Procedures
member: GuidelinesPrinciple
member: Identity Management Method
member: Impact Assessment
member: Incident Management Procedures
member: Incident Reporting Communication
member: Information Security Policy
member: Joint Data Controllers Agreement
member: Legal Agreement
member: Legitimate Interest Assessment
member: Logging Policies
member: Monitoring Policies
member: Non-Disclosure Agreement (NDA)
member: Notice
member: Privacy Impact Assessment
member: Policy
member: Privacy by Default
member: Privacy by Design
member: Privacy Notice
member: Professional Training
member: Records of Activities
member: Register of Processing Activities
member: Regularity of Re-certification
member: ReviewImpactAssessment
member: ReviewImpactAssessmentAdequacy
member: ReviewImpactAssessmentConformance
member: Review Procedure
member: Risk Management Plan
member: Risk Management Policy
member: Safeguard
member: Safeguard for Data Transfer
member: Seal
member: Security Assessments
member: Security Knowledge Training
member: Security Procedure
member: Security Role Procedures
member: Staff Training
member: Sub-Processor Agreement
member: Third-Party Agreement
member: Third Party Security Procedures
member: Trusted Third Party Utilisation

Organise
created: 2019-05-07
source: oj
type: Concept
term status: accepted
broader: Processing
definition: to organize data for arranging or classifying
in scheme: dpv#
narrower: Structure
isSubTypeOf: Processing

Privacy Impact Assessment
created: 2020-11-04
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
term status: accepted
broader: Impact Assessment
definition: Carrying out an impact assessment regarding privacy risks
in scheme: dpv#
isSubTypeOf: Impact Assessment

Parent(s) of Data Subject
created: 2022-08-03
creator: Georg P Krog
type: Concept
term status: accepted
broader: Data Subject
definition: Parent(s) of data subjects such as children
in scheme: dpv#
isSubTypeOf: Data Subject

Partially Automated Processing
created: 2022-06-15
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Automation of Processing
definition: Processing that is partially automated or semi-automated
in scheme: dpv#
note: For example, a series of distinct processing operations that are automated individually or have some human involvement
isInstanceOf: Automation of Processing

Partially Compliant
created: 2022-05-18
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Compliance Status
definition: State of partially being compliant i.e. only some objectives have been met, and others have not been in violation
in scheme: dpv#
isInstanceOf: Compliance Status

Participant
created: 2022-04-06
creator: Beatriz Esteves
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
term status: accepted
broader: Data Subject
definition: Data subjects that participate in some context such as volunteers in a function
in scheme: dpv#
isSubTypeOf: Data Subject

Passive Right
created: 2022-10-22
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J Pandit
creator: Paul Ryan
type: Concept
term status: accepted
broader: Right
definition: The right(s) applicable, provided, or expected that are always (passively) applicable
in scheme: dpv#
isSubTypeOf: Right

Password Authentication
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: Authentication Protocols
definition: Use of passwords to perform authentication
in scheme: dpv#
isSubTypeOf: Authentication Protocols

Patient
created: 2022-04-06
creator: Beatriz Esteves
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
term status: accepted
broader: Data Subject
definition: Data subjects that receive medican attention, treatment, care, advice, or other health related services
in scheme: dpv#
isSubTypeOf: Data Subject

Payment
created: 2020-11-04
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Service Provision
definition: Process payment transactions in relation to service
in scheme: dpv#
isSubTypeOf: Service Provision

Penetration Testing Methods
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: Security Method
definition: Use of penetration testing to identity weaknessess and vulnerabilities through simulations
in scheme: dpv#
isSubTypeOf: Security Method

Permission
created: 2022-10-19
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
term status: accepted
broader: Rule
definition: A rule describing a permission to perform an activity
in scheme: dpv#
isSubTypeOf: Rule

Personal Data
created: 2019-04-05
creator: Harshvardhan Pandit
modified: 2022-01-19
source: oj
type: Concept
term status: accepted
broader: Data
definition: Data directly or indirectly associated or related to an individual.
in scheme: dpv#
narrower: Collected Personal Data
narrower: Derived Personal Data
narrower: Generated Personal Data
narrower: Pseudonymised Data
narrower: Sensitive Personal Data
note: This definition of personal data encompasses the concepts used in GDPR Art.4-1 for 'personal data' and ISO/IEC 2700 for 'personally identifiable information (PII)'.
related: AnyData
isSubTypeOf: Data

Personal Data Handling
created: 2019-04-05
creator: Axel Polleres
creator: Javier Fernández
modified: 2020-11-04
example: E0007
example: E0008
example: E0014
example: E0018
example: E0019
example: E0020
example: E0022
example: E0028
type: Concept
term status: accepted
definition: A high-level Class to describe 'data handling'. This can consist of personal data being processed for a purpose, involving entities, using technical and organisational measures, applicable risks, rights, and legal basis.
in scheme: dpv#

Personal_Data Concepts
type: Collection
member: Anonymised Data
member: Collected Personal Data
member: Data
member: Derived Personal Data
member: Generated Personal Data
member: Inferred Personal Data
member: Non-Personal Data
member: Observed Personal Data
member: Personal Data
member: Pseudonymised Data
member: Sensitive Personal Data
member: Special Category Personal Data
member: Synthetic Data
member: has data
member: has personal data

Personalisation
created: 2021-09-01
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Purpose
definition: Create and provide customisation based on attributes and/or needs of person(s) or context(s).
in scheme: dpv#
narrower: Personalised Advertising
narrower: Service Personalization
note: This term is a blanket purpose category for indicating personalisation of some other purpose, e.g. by creating a subclass of the other concept and Personalisation
isSubTypeOf: Purpose

Personalised Advertising
created: 2020-11-04
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Advertising
broader: Personalisation
definition: Create and provide personalised advertising
in scheme: dpv#
narrower: Targeted Advertising
isSubTypeOf: Advertising
isSubTypeOf: Personalisation

Personalised Benefits
created: 2019-04-05
creator: Axel Polleres
creator: Elmar Kiesling
creator: Fajar Ekaputra
creator: Harshvardhan J. Pandit
creator: Javier Fernandez
creator: Simon Steyskal
type: Concept
term status: accepted
broader: Service Personalization
definition: Create and provide personalised benefits for a service
in scheme: dpv#
isSubTypeOf: Service Personalization

Personnel Hiring
created: 2022-04-20
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Personnel Management
definition: Management and execution of hiring processes of personnel
in scheme: dpv#
isSubTypeOf: Personnel Management

Personnel Management
created: 2022-03-30
creator: Harshvardhan J. Pandit
creator: Paul Ryan
source: model-voor-een-register-van-de-verwerkingsactiviteiten
type: Concept
term status: accepted
broader: HumanResources
definition: Management of personnel associated with the organisation e.g. evaluation and management of employees and intermediaries
in scheme: dpv#
narrower: Personnel Hiring
narrower: Personnel Payment
isSubTypeOf: HumanResources

Personnel Payment
created: 2022-04-20
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Personnel Management
definition: Management and execution of payment of personnel
in scheme: dpv#
isSubTypeOf: Personnel Management

Physical Access Control Method
created: 2022-06-15
creator: Georg P Krog
type: Concept
term status: accepted
broader: Access Control Method
definition: Access control applied for physical access e.g. premises or equipement
in scheme: dpv#
isSubTypeOf: Access Control Method

Policy
created: 2021-09-08
creator: David Hickey
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
example: E0017
type: Concept
term status: accepted
broader: Organisational Measure
definition: A guidance document outlining any of: procedures, plans, principles, decisions, intent, or protocols.
in scheme: dpv#
narrower: Information Security Policy
narrower: Risk Management Policy
isSubTypeOf: Organisational Measure

Post-Quantum Cryptography
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: CrytographicMethods
definition: Use of algorithms that are intended to be secure against cryptanalytic attack by a quantum computer
in scheme: dpv#
isSubTypeOf: CrytographicMethods

Primary Importance
created: 2022-02-10
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
term status: accepted
broader: Importance
definition: Indication of 'primary' or 'main' or 'core' importance
in scheme: dpv#
isInstanceOf: Importance

Privacy by Default
created: 2019-04-05
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Rob Brennan
type: Concept
term status: accepted
broader: GuidelinesPrinciple
definition: Practices regarding selecting appropriate data protection and privacy measures as the 'default' in an activity or service
in scheme: dpv#
isSubTypeOf: GuidelinesPrinciple

Privacy by Design
created: 2019-04-05
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Rob Brennan
type: Concept
term status: accepted
broader: Organisational Measure
definition: Practices regarding incorporating data protection and privacy in the design of information and services
in scheme: dpv#
isSubTypeOf: Organisational Measure

Privacy Notice
created: 2021-09-08
creator: David Hickey
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
example: E0018
example: E0025
type: Concept
term status: accepted
broader: Notice
definition: Represents a notice or document outlining information regarding privacy
in scheme: dpv#
narrower: Consent Notice
isSubTypeOf: Notice

Privacy Preserving Protocol
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: CrytographicMethods
definition: Use of protocols designed with the intention of provided additional guarentees regarding privacy
in scheme: dpv#
isSubTypeOf: CrytographicMethods

Private Information Retrieval
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: data-protection-engineering
type: Concept
term status: accepted
broader: CrytographicMethods
definition: Use of cryptographic methods to retrieve a record from a system without revealing which record is retrieved
in scheme: dpv#
isSubTypeOf: CrytographicMethods

Private Location
created: 2022-10-22
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Local Location
definition: Location that is not or cannot be accessed by the public and is controlled as a private space
in scheme: dpv#
isSubTypeOf: Local Location

Processing
created: 2019-04-05
creator: Axel Polleres
creator: Javier Fernández
modified: 2020-11-04
source: specialprivacy.ercim.eu
example: E0005
example: E0011
example: E0014
type: Concept
term status: accepted
definition: The processing performed on personal data
in scheme: dpv#
narrower: Copy
narrower: Disclose
narrower: Obtain
narrower: Organise
narrower: Remove
narrower: Store
narrower: Transfer
narrower: Transform
narrower: Use
related: AnyProcessing

Processing Concepts
type: Collection
member: Access
member: Acquire
member: Adapt
member: Align
member: Alter
member: Analyse
member: Anonymise
member: Assess
member: Collect
member: Combine
member: Consult
member: Copy
member: Derive
member: Destruct
member: Disclose
member: Disclose by Transmission
member: Disseminate
member: Erase
member: Filter
member: Generate
member: Infer
member: Make Available
member: Match
member: Modify
member: Monitor
member: Move
member: Observe
member: Obtain
member: Organise
member: Processing
member: Profiling
member: Pseudonymise
member: Query
member: Record
member: Remove
member: Restrict
member: Retrieve
member: Screen
member: Share
member: Store
member: Structure
member: Transfer
member: Transform
member: Transmit
member: Use
member: has processing

Processing Context
created: 2022-02-09
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Context
definition: Context or conditions within which processing takes place
in scheme: dpv#
narrower: Automation of Processing
narrower: Data Source
narrower: Decision Making
narrower: Evaluation of Individuals
narrower: Evaluation and Scoring
narrower: Innovative Use of New Technologies
narrower: Scale
narrower: Scoring of Individuals
narrower: Storage Condition
narrower: Systematic Monitoring
isSubTypeOf: Context

Processing Scale
created: 2022-09-07
creator: Harshvardhan J. Pandit
creator: Piero Bonatti
type: Concept
term status: accepted
broader: Scale
definition: Scale of Processing
in scheme: dpv#
narrower: Large Scale Processing
narrower: Medium Scale Processing
narrower: Small Scale Processing
note: The exact definition of what constitutes "scale" depends on use of jurisdictional, domain-specific, or other forms of externally defined criterias. Where possible, this should be reflected by extending the scales provided with the appropriate context.
isSubTypeOf: Scale

Processing_Context Concepts
type: Collection
member: Algorithmic Logic
member: Automated Decision Making
member: Automated Processing with Human Input
member: Automated Processing with Human Oversight
member: Automated Processing with Human Review
member: Automation of Processing
member: Completely Manual Processing
member: Data published by Data Subject
member: Data Source
member: Decision Making
member: Evaluation of Individuals
member: Evaluation and Scoring
member: Fully Automated Processing
member: Human Involvement
member: Human Involvement for Input
member: Human Involvement for Oversight
member: Human Involvement for Verification
member: Innovative Use of New Technologies
member: Non-Public Data Source
member: Partially Automated Processing
member: Processing Context
member: Public Data Source
member: Scoring of Individuals
member: Storage Condition
member: Storage Deletion
member: Storage Duration
member: Storage Location
member: Storage Restoration
member: Systematic Monitoring
member: has algorithmic logic
member: has data source
member: has human involvement
member: has processing automation
member: has storage condition

Processing_Scale Concepts
type: Collection
member: Data Subject Scale
member: Data Volume
member: Geographic Coverage
member: GlobalScale
member: HugeDataVolume
member: HugeScaleOfDataSubjects
member: LargeDataVolume
member: LargeScaleOfDataSubjects
member: Large Scale Processing
member: LocalEnvironmentScale
member: LocalityScale
member: MediumDataVolume
member: MediumScaleOfDataSubjects
member: Medium Scale Processing
member: MultiNationalScale
member: NationalScale
member: NearlyGlobalScale
member: Processing Scale
member: RegionalScale
member: Scale
member: SingularDataVolume
member: SingularScaleOfDataSubjects
member: SmallDataVolume
member: SmallScaleOfDataSubjects
member: Small Scale Processing
member: SporadicDataVolume
member: SporadicScaleOfDataSubjects
member: has data subject scale
member: has data volume
member: has geographic coverage
member: has scale

Professional Training
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: Staff Training
definition: Training methods that are intended to provide professional knowledge and expertise
in scheme: dpv#
isSubTypeOf: Staff Training

Profiling
created: 2019-05-07
source: oj
type: Concept
term status: accepted
broader: Use
definition: to create a profile that describes or represents a person
in scheme: dpv#
isSubTypeOf: Use

Prohibition
created: 2022-10-19
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
term status: accepted
broader: Rule
definition: A rule describing a prohibition to perform an activity
in scheme: dpv#
isSubTypeOf: Rule

Pseudonymisation
created: 2019-04-05
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Rob Brennan
source: oj
type: Concept
term status: accepted
broader: Data Anonymisation Technique
definition: Pseudonymisation means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person;
in scheme: dpv#
narrower: Deterministic Pseudonymisation
narrower: Document Randomised Pseudonymisation
narrower: Fully Randomised Pseudonymisation
narrower: Monotonic Counter Pseudonymisation
narrower: RNG Pseudonymisation
isSubTypeOf: Data Anonymisation Technique

Pseudonymise
created: 2019-05-07
creator: 2022-10-14
source: oj
type: Concept
term status: modified
broader: Transform
definition: to replace personal identifiable information by artificial identifiers
in scheme: dpv#
isSubTypeOf: Transform

Pseudonymised Data
created: 2022-01-19
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Personal Data
definition: Personal Data that has undergone a pseudonymisation process or a partial (incomplete) anonymisation process such that it is still considered Personal Data
in scheme: dpv#
isSubTypeOf: Personal Data

Public Data Source
created: 2022-01-26
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
term status: accepted
broader: Data Source
definition: A source of data that is publicly accessible or available
in scheme: dpv#
note: The term 'Public' is used here in a broad sense. Actual consideration of what is 'Public Data' can vary based on several contextual or jurisdictional factors such as definition of open, methods of access, permissions and licenses.
isInstanceOf: Data Source

Public Interest
created: 2021-04-21
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Legal Basis
definition: Processing is necessary or beneficial for interest of the public or society at large
in scheme: dpv#
isSubTypeOf: Legal Basis

Public Relations
created: 2021-09-01
creator: David Hickey
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
source: model-voor-een-register-van-de-verwerkingsactiviteiten
type: Concept
term status: accepted
broader: Marketing
definition: Manage and conduct public relations processes. This includes creating goodwill for the organization.
in scheme: dpv#
isSubTypeOf: Marketing

Publicly Accessible Location
created: 2022-10-22
creator: Georg P Krog
type: Concept
term status: accepted
broader: Local Location
definition: Location that is or can be accessed by the public
in scheme: dpv#
isSubTypeOf: Local Location

Purpose
created: 2019-04-05
creator: Axel Polleres
creator: Javier Fernández
modified: 2020-11-04
source: specialprivacy.ercim.eu
example: E0006
example: E0009
example: E0010
example: E0014
type: Concept
term status: accepted
definition: The purpose of processing personal data
in scheme: dpv#
narrower: Account Management
narrower: Communication Management
narrower: Customer Management
narrower: Enforce Security
narrower: Human Resources Management
narrower: Legal Compliance
narrower: Marketing
narrower: Organisation Governance
narrower: Personalisation
narrower: Record Management
narrower: Research and Development
narrower: Service Provision
narrower: Vendor Management
related: AnyPurpose

Purposes Concepts
type: Collection
member: Academic Research
member: Account Management
member: Advertising
member: Anti-Terrorism Operations
member: Commercial Research
member: Communication for Customer Care
member: Communication Management
member: Counter Money Laundering
member: Create Event Recommendations
member: Create Personalised Recommendations
member: Create Product Recommendations
member: Credit Checking
member: Customer Care
member: Customer Claims Management
member: Customer Management
member: Customer Order Management
member: Customer Relationship Management
member: Customer Solvency Monitoring
member: Delivery of Goods
member: Direct Marketing
member: Dispute Management
member: Enforce Access Control
member: Enforce Security
member: Fraud Prevention and Detection
member: Human Resources Management
member: Identify and Repair Impairments
member: Identity Verification
member: Improve Existing Products and Services
member: Improve Internal CRM Processes
member: Increase Service Robustness
member: Internal Resource Optimisation
member: Legal Compliance
member: MaintainCreditCheckingDatabase
member: MaintainCreditRatingDatabase
member: MaintainFraudDatabase
member: Marketing
member: Members and Partners Management
member: Non-Commercial Research
member: Optimisation for Consumer
member: Optimisation for Controller
member: Optimise User Interface
member: Organisation Compliance Management
member: Organisation Governance
member: Organisation Risk Management
member: Payment
member: Personalisation
member: Personalised Advertising
member: Personalised Benefits
member: Personnel Hiring
member: Personnel Management
member: Personnel Payment
member: Public Relations
member: Purpose
member: Record Management
member: Registration and Authentication
member: Requested Service Provision
member: Research and Development
member: Sector
member: Sell Data to Third Parties
member: Sell Insights from Data
member: Sell Products
member: Sell Products to Data Subject
member: Service Optimization
member: Service Personalization
member: Service Provision
member: Service Order Management
member: Service Usage Analytics
member: Social Media
member: Targeted Advertising
member: Technical Service Provision
member: User Interface Personalisation
member: Vendor Management
member: Vendor Payment
member: Vendor Records Management
member: Vendor Selection Assessment
member: has purpose
member: has sector

Quantum Cryptography
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: CrytographicMethods
definition: Cryptographic methods that utilise quantum mechanical properties to perform cryptographic tasks
in scheme: dpv#
isSubTypeOf: CrytographicMethods

Query
created: 2022-06-15
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Consult
definition: to query or make enquiries over data
in scheme: dpv#
isSubTypeOf: Consult

RNG Pseudonymisation
created: 2022-08-17
creator: Harshvardhan J. Pandit
modified: 2022-10-13
source: data-pseudonymisation-advanced-techniques-and-use-cases
type: Concept
term status: modified
broader: Pseudonymisation
definition: A pseudonymisation method where identifiers are substituted by a number chosen by a Random Number Generator (RNG)
in scheme: dpv#
isSubTypeOf: Pseudonymisation

Random Location
created: 2022-06-15
creator: Harshvardhan J. Pandit
modified: 2020-10-05
type: Concept
term status: modified
broader: Location Fixture
definition: Location that is random or unknown
in scheme: dpv#
isInstanceOf: Location Fixture

Recipient
created: 2019-04-05
creator: Axel Polleres
creator: Javier Fernández
modified: 2020-11-04
source: oj
source: specialprivacy.ercim.eu
example: E0019
type: Concept
term status: accepted
broader: Legal Entity
definition: Entities that receive personal data
in scheme: dpv#
narrower: Data Importer
narrower: Data Processor
narrower: Third Party
note: A recipient of personal data can be used to indicate any entity that receives personal data. This can be a Third Party, Processor (GDPR), or even a Controller.
related: AnyRecipient
isSubTypeOf: Legal Entity

Record
created: 2019-05-07
source: oj
type: Concept
term status: accepted
broader: Obtain
definition: to make a record (especially media)
in scheme: dpv#
isSubTypeOf: Obtain

Record Management
created: 2021-09-01
creator: David Hickey
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
term status: accepted
broader: Purpose
definition: Manage creation, storage, and use of records relevant to operations, events, and processes e.g. to store logs or access requests
in scheme: dpv#
isSubTypeOf: Purpose

Records of Activities
created: 2021-09-08
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
term status: accepted
broader: Organisational Measure
definition: Records of activities within some context such as maintainence tasks or governance functions
in scheme: dpv#
narrower: Data Processing Records
isSubTypeOf: Organisational Measure

Region
created: 2022-01-19
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Location
definition: A region is an area or site that is considered a location
in scheme: dpv#
isSubTypeOf: Location

RegionalAuthority
created: 2022-02-02
creator: Harshvardhan J. Pandit
source: adms
type: Concept
term status: accepted
broader: Authority
definition: An authority tasked with overseeing legal compliance for a region
in scheme: dpv#
isSubTypeOf: Authority

RegionalScale
created: 2022-06-15
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Geographic Coverage
definition: Geographic coverage spanning a specific region or regions
in scheme: dpv#
isInstanceOf: Geographic Coverage

Register of Processing Activities
created: 2021-09-08
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
term status: accepted
broader: Data Processing Records
definition: A ROPA is a document maintained by Data Controllers detailing processing activities carried out under their responsibility
in scheme: dpv#
note: Tied to compliance processes and documents, decide how to specify those
isSubTypeOf: Data Processing Records

Registration and Authentication
created: 2020-11-04
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Service Provision
definition: Register, authenticate, and identify users or agents in context of a service
in scheme: dpv#
isSubTypeOf: Service Provision

Regularity of Re-certification
created: 2019-04-05
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Rob Brennan
type: Concept
term status: accepted
broader: Organisational Measure
definition: Policy regarding repetition or renewal of existing certification(s)
in scheme: dpv#
isSubTypeOf: Organisational Measure

Relation
sub property of: semanticRelation

Remote Location
created: 2022-06-15
creator: Harshvardhan J. Pandit
modified: 2020-10-05
type: Concept
term status: modified
broader: Location Locality
definition: Location is remote i.e. not local
in scheme: dpv#
narrower: Cloud Location
isSubTypeOf: Location Locality

Remove
created: 2019-05-07
source: oj
type: Concept
term status: accepted
broader: Processing
definition: to destruct or erase data
in scheme: dpv#
narrower: Destruct
narrower: Erase
isSubTypeOf: Processing

Renewed Consent Given
created: 2022-06-22
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
source: GConsent
type: Concept
term status: accepted
broader: Consent Status Valid for Processing
definition: The state where a previously given consent has been 'renewed' or 'refreshed' or 'reaffirmed' to form a new instance of given consent
in scheme: dpv#
note: An example of this state is when a previously given consent has expired, and the individual is presented a notice regarding continuing associated processing operations - to which they agree. This state can be useful to keep track of 'reconfirmed' or 'refreshed' consent within consent records, assist notices and contextual agents to create better consenting dialogues, and assist with specific legal obligations related to subsequent consenting
isInstanceOf: Consent Status Valid for Processing

Representative
created: 2020-11-04
creator: Beatriz Esteves
creator: Georg Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
source: oj
type: Concept
term status: accepted
broader: Legal Entity
definition: A representative of a legal entity
in scheme: dpv#
narrower: Data Protection Officer
isSubTypeOf: Legal Entity

Requested Service Provision
created: 2021-09-08
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Service Provision
definition: Deliver service as requested by user or consumer
in scheme: dpv#
narrower: Delivery of Goods
isSubTypeOf: Service Provision

Required
created: 2022-02-13
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
term status: accepted
broader: Necessity
definition: Indication of 'required' or 'necessary'
in scheme: dpv#
isInstanceOf: Necessity

Research and Development
created: 2019-04-05
creator: Axel Polleres
creator: Elmar Kiesling
creator: Fajar Ekaputra
creator: Harshvardhan J. Pandit
creator: Javier Fernandez
creator: Simon Steyskal
type: Concept
term status: accepted
broader: Purpose
definition: Conduct research and development for new methods, products, or services
in scheme: dpv#
narrower: Academic Research
narrower: Commercial Research
narrower: Non-Commercial Research
isSubTypeOf: Purpose

Restrict
created: 2019-05-07
source: oj
type: Concept
term status: accepted
broader: Transform
definition: to apply a restriction on the processsing of specific records
in scheme: dpv#
isSubTypeOf: Transform

Retrieve
created: 2019-05-07
source: oj
type: Concept
term status: accepted
broader: Use
definition: to retrieve data, often in an automated manner
in scheme: dpv#
isSubTypeOf: Use

ReviewImpactAssessment
created: 2022-10-22
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
in scheme: dpv#

ReviewImpactAssessmentAdequacy
created: 2022-10-22
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
in scheme: dpv#

ReviewImpactAssessmentConformance
created: 2022-10-22
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
in scheme: dpv#

Review Procedure
created: 2022-10-22
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Organisational Measure
definition: A procedure or process that reviews the correctness and validity of other measures and processes
in scheme: dpv#
isSubTypeOf: Organisational Measure

Right
created: 2020-11-18
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J Pandit
type: Concept
term status: accepted
definition: The right(s) applicable, provided, or expected
definition: The right(s) applicable, provided, or expected.
in scheme: dpv#
narrower: Active Right
narrower: Data Subject Right
narrower: Passive Right
note: A 'right' is a legal, social, or ethical principle of freedom or entitlement which dictate the norms regarding what is allowed or owed.. Rights as a concept encompass a broad area of norms and entities, and are not specific to Individuals or Data Protection / Privacy. For individual specific rights, see dpv:DataSubjectRight

Right Exercise
created: 2022-10-22
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J Pandit
creator: Paul Ryan
type: Concept
term status: accepted
definition: The exercising of an active right
in scheme: dpv#

Rights Concepts
type: Collection
member: Active Right
member: Data Subject Right
member: Passive Right
member: Right
member: Right Exercise
member: has right
member: is exercised at

Risk
created: 2020-11-18
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
definition: A risk or possibility or uncertainty of negative effects, impacts, or consequences.
in scheme: dpv#
note: Risks can be associated with one or more different concepts such as purpose, processing, personal data, technical or organisational measure.

Risk Concepts
type: Collection
member: Benefit
member: Consequence
member: Consequence as Side-Effect
member: Consequence of Failure
member: Consequence of Success
member: Damage
member: Detriment
member: Harm
member: Impact
member: Likelihood
member: Material Damage
member: Non-Material Damage
member: Risk
member: Risk Level
member: Risk Management Process
member: Risk Mitigation Measure
member: Severity
member: has consequence
member: has impact
member: has impact on
member: has likelihood
member: has residual risk
member: has risk
member: has risk level
member: has severity
member: is mitigated by measure
member: is residual risk of
member: mitigates risk

Risk Level
created: 2022-07-20
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
definition: The magnitude of a risk expressed as an indication to aid in its management
in scheme: dpv#
note: Risk Levels can be defined as a combination of different characteristics. For example, ISO 31073:2022 defines it as a combination of consequences and their likelihood. Another example would be the Risk Matrix where Risk Level is defined as a combination of Likelihood and Severity associated with the Risk.

Risk Management Plan
created: 2022-08-18
creator: Harshvardhan J. Pandit
source: 79637.html
type: Concept
term status: accepted
broader: Security Procedure
definition: A scheme within the risk management framework specifying the approach, the management components, and resources to be applied to the management of risk
in scheme: dpv#
isSubTypeOf: Security Procedure

Risk Management Policy
created: 2022-08-18
creator: Harshvardhan J. Pandit
source: 79637.html
type: Concept
term status: accepted
broader: Policy
broader: Security Procedure
definition: A policy or statement of the overall intentions and direction of an organisation related to risk management
in scheme: dpv#
isSubTypeOf: Policy
isSubTypeOf: Security Procedure

Risk Management Process
created: 2022-08-18
creator: Harshvardhan J. Pandit
source: iso-31000-risk-management.html
source: 79637.html
type: Concept
term status: accepted
broader: Security Procedure
definition: The systematic application of management policies, procedures and practices to the activities of communicating, consulting, establishing the context, and identifying, analysing, evaluating, treating, monitoring, and reviewing risk
in scheme: dpv#
isSubTypeOf: Security Procedure

Risk Mitigation Measure
created: 2020-11-04
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
example: E0029
type: Concept
term status: accepted
broader: Technical and Organisational Measure
definition: Measures intended to mitigate, minimise, or prevent risk.
in scheme: dpv#
isSubTypeOf: Technical and Organisational Measure

Rule
created: 2022-10-19
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
term status: accepted
definition: A rule describing a process or control that directs or determines if and how an activity should be conducted
in scheme: dpv#
narrower: Obligation
narrower: Permission
narrower: Prohibition
narrower: has obligation
narrower: has permission
narrower: has prohibition

Rules Concepts
type: Collection
member: Obligation
member: Permission
member: Prohibition
member: Rule
member: has obligation
member: has permission
member: has prohibition
member: has rule

Safeguard
created: 2021-09-22
creator: David Hickey
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
term status: accepted
broader: Organisational Measure
definition: A safeguard is a precautionary measure for the protection against or mitigation of negative effects
in scheme: dpv#
narrower: Safeguard for Data Transfer
note: This concept is relevant given the requirement to assert safeguards in cross-border data transfers
isSubTypeOf: Organisational Measure

Safeguard for Data Transfer
created: 2021-09-22
creator: David Hickey
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
term status: accepted
broader: Safeguard
definition: Represents a safeguard used for data transfer. Can include technical or organisational measures.
in scheme: dpv#
isSubTypeOf: Safeguard

Scale
created: 2022-06-15
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Rana Saniei
type: Concept
term status: accepted
broader: Processing Context
definition: A measurement along some dimension
in scheme: dpv#
narrower: Data Subject Scale
narrower: Data Volume
narrower: Geographic Coverage
narrower: Processing Scale
narrower: has data subject scale
narrower: has data volume
narrower: has geographic coverage
note: Scales are subjective concepts that need to be defined and interpreted within the context of their application. For example, what would be small within one context could be large within another.
isSubTypeOf: Processing Context

Scope
created: 2022-06-15
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Context
definition: Indication of the extent or range or boundaries associated with(in) a context
in scheme: dpv#
isSubTypeOf: Context

Scoring of Individuals
created: 2022-10-22
creator: Harshvardhan J. Pandit
source: oj
type: Concept
term status: accepted
broader: Processing Context
definition: Processing that involves scoring of individuals
in scheme: dpv#
isSubTypeOf: Processing Context

Screen
created: 2022-06-15
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Transform
definition: to remove data for some criteria
in scheme: dpv#
isSubTypeOf: Transform

Seal
created: 2019-04-05
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Rob Brennan
type: Concept
term status: accepted
broader: Certification and Seal
definition: A seal or a mark indicating proof of certification to some certification or standard
in scheme: dpv#
isSubTypeOf: Certification and Seal

Secondary Importance
created: 2022-02-11
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
term status: accepted
broader: Importance
definition: Indication of 'secondary' or 'minor' or 'auxiliary' importance
in scheme: dpv#
isInstanceOf: Importance

Secret Sharing Schemes
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: data-pseudonymisation-advanced-techniques-and-use-cases
type: Concept
term status: accepted
broader: CrytographicMethods
definition: Use of secret sharing schemes where the secret can only be reconstructed through combination of sufficient number of individuals
in scheme: dpv#
isSubTypeOf: CrytographicMethods

Sector
created: 2019-04-05
creator: Axel Polleres
creator: Elmar Kiesling
creator: Fajar Ekaputra
creator: Harshvardhan J. Pandit
creator: Javier Fernandez
creator: Simon Steyskal
example: E0010
type: Concept
term status: accepted
definition: Indicate or restrict scope for interpretation and application of purpose in a domain e.g. Agriculture, Banking
in scheme: dpv#
note: There are various sector codes used commonly to indicate the domain of an organisation or business. Examples include NACE (EU), ISIC (UN), SIC and NAICS (USA).

Secure Multi-Party Computation
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: CrytographicMethods
definition: Use of cryptographic methods for entities to jointly compute functions without revealing inputs
in scheme: dpv#
isSubTypeOf: CrytographicMethods

Security Assessments
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: 5g-cybersecurity-standards
type: Concept
term status: accepted
broader: Assessment
broader: Security Procedure
definition: Assessment of security intended to identity gaps, vulnerabilities, risks, and effectiveness of controls
in scheme: dpv#
isSubTypeOf: Assessment
isSubTypeOf: Security Procedure

Security Knowledge Training
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: 5g-cybersecurity-standards
type: Concept
term status: accepted
broader: Staff Training
definition: Training intended to increase knowledge regarding security
in scheme: dpv#
isSubTypeOf: Staff Training

Security Method
created: 2022-08-24
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Technical Measure
definition: Methods that relate to creating and providing security
in scheme: dpv#
narrower: Distributed System Security
narrower: Document Security
narrower: File System Security
narrower: Hardware Security Protocols
narrower: Intrusion Detection System
narrower: Mobile Platform Security
narrower: Network Proxy Routing
narrower: Network Security Protocols
narrower: Operating System Security
narrower: Penetration Testing Methods
narrower: Use of Synthetic Data
narrower: Virtualisation Security
narrower: Vulnerability Testing Methods
narrower: WebBrowser Security
narrower: Web Security Protocols
narrower: Wireless Security Protocols
isSubTypeOf: Technical Measure

Security Procedure
created: 2022-08-24
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Organisational Measure
definition: Procedures associated with assessing, implementing, and evaluating security
in scheme: dpv#
narrower: Background Checks
narrower: Risk Management Plan
narrower: Risk Management Policy
narrower: Risk Management Process
narrower: Security Assessments
narrower: Security Role Procedures
narrower: Third Party Security Procedures
narrower: Trusted Third Party Utilisation
isSubTypeOf: Organisational Measure

Security Role Procedures
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: 5g-cybersecurity-standards
type: Concept
term status: accepted
broader: Security Procedure
definition: Procedures related to security roles
in scheme: dpv#
isSubTypeOf: Security Procedure

Sell Data to Third Parties
created: 2019-04-05
creator: Axel Polleres
creator: Elmar Kiesling
creator: Fajar Ekaputra
creator: Harshvardhan J. Pandit
creator: Javier Fernandez
creator: Simon Steyskal
type: Concept
term status: accepted
broader: Sell Products
definition: Sell data or information to third parties
in scheme: dpv#
note: Sell here means exchange, submit, or provide in return for direct or indirect compensation. Was subclass of commercial interest, changed to reflect selling something
isSubTypeOf: Sell Products

Sell Insights from Data
created: 2019-04-05
creator: Axel Polleres
creator: Elmar Kiesling
creator: Fajar Ekaputra
creator: Harshvardhan J. Pandit
creator: Javier Fernandez
creator: Simon Steyskal
type: Concept
term status: accepted
broader: Sell Products
definition: Sell data or information relevant to insights obtained from analysis of data
in scheme: dpv#
note: Sell here means exchange, submit, or provide in return for direct or indirect compensation. Was subclass of commercial interest, changed to reflect selling something
isSubTypeOf: Sell Products

Sell Products
created: 2021-09-08
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Service Provision
definition: Sell products or services
in scheme: dpv#
narrower: Sell Data to Third Parties
narrower: Sell Insights from Data
narrower: Sell Products to Data Subject
note: Sell here means exchange, submit, or provide in return for direct or indirect compensation.
isSubTypeOf: Service Provision

Sell Products to Data Subject
created: 2019-04-05
creator: Axel Polleres
creator: Elmar Kiesling
creator: Fajar Ekaputra
creator: Harshvardhan J. Pandit
creator: Javier Fernandez
creator: Simon Steyskal
type: Concept
term status: accepted
broader: Sell Products
definition: Sell products or services to the user, consumer, or data subjects
in scheme: dpv#
note: Was subclass of commercial interest, changed to reflect selling something
isSubTypeOf: Sell Products

Sensitive Personal Data
created: 2022-01-19
creator: Harshvardhan J. Pandit
example: E0015
type: Concept
term status: accepted
broader: Personal Data
definition: Personal data that is considered 'sensitive' in terms of privacy and/or impact, and therefore requires additional considerations and/or protection
in scheme: dpv#
narrower: Special Category Personal Data
note: Sensitivity' is a matter of context, and may be defined within legal frameworks. For GDPR, Special categories of personal data are considered a subset of sensitive data. To illustrate the difference between the two, consider the situation where Location data is collected, and which is considered 'sensitive' but not 'special'. As a probable rule, sensitive data require additional considerations whereas special category data requires additional legal basis / justifications.
isSubTypeOf: Personal Data

Service Optimization
created: 2019-04-05
creator: Axel Polleres
creator: Elmar Kiesling
creator: Fajar Ekaputra
creator: Harshvardhan J. Pandit
creator: Javier Fernandez
creator: Simon Steyskal
type: Concept
term status: accepted
broader: Service Provision
definition: Optimise services or activities
in scheme: dpv#
narrower: Optimisation for Consumer
narrower: Optimisation for Controller
note: Subclass of ServiceProvision since optimisation is usually considered part of providing services
isSubTypeOf: Service Provision

Service Personalization
created: 2019-04-05
creator: Axel Polleres
creator: Elmar Kiesling
creator: Fajar Ekaputra
creator: Harshvardhan J. Pandit
creator: Javier Fernandez
creator: Simon Steyskal
type: Concept
term status: accepted
broader: Personalisation
broader: Service Provision
definition: Personalise services or product or activities
in scheme: dpv#
narrower: Create Personalised Recommendations
narrower: Personalised Benefits
narrower: User Interface Personalisation
note: Subclass of ServiceProvision since personalisation is usually considered part of providing services
isSubTypeOf: Personalisation
isSubTypeOf: Service Provision

Service Provision
created: 2019-04-05
creator: Axel Polleres
creator: Elmar Kiesling
creator: Fajar Ekaputra
creator: Harshvardhan J. Pandit
creator: Javier Fernandez
creator: Simon Steyskal
example: E0018
type: Concept
term status: accepted
broader: Purpose
definition: Provide service or product or activities
in scheme: dpv#
narrower: Identify and Repair Impairments
narrower: Payment
narrower: Registration and Authentication
narrower: Requested Service Provision
narrower: Sell Products
narrower: Service Optimization
narrower: Service Personalization
narrower: Service Order Management
narrower: Service Usage Analytics
narrower: Technical Service Provision
isSubTypeOf: Purpose

Service Order Management
created: 2021-09-08
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Service Provision
definition: Manage invoicing, orders, and records in relation to services
in scheme: dpv#
isSubTypeOf: Service Provision

Service Usage Analytics
created: 2020-11-04
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
modified: 2022-10-05
type: Concept
term status: modified
broader: Service Provision
definition: Conduct analysis and reporting related to usage of services or products
in scheme: dpv#
note: Was "UsageAnalytics", prefixed with Service to better reflect scope
isSubTypeOf: Service Provision

Severity
created: 2022-07-21
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
definition: The magnitude of being unwanted or having negative effects such as harmful impacts
in scheme: dpv#
note: Severity can be associated with Risk, or its Consequences and Impacts

Share
created: 2019-05-07
source: oj
type: Concept
term status: accepted
broader: Disclose
definition: to give data (or a portion of it) to others
in scheme: dpv#
isSubTypeOf: Disclose

Single Sign On
created: 2020-11-04
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
term status: accepted
broader: Authentication Protocols
definition: Use of credentials or processes that enable using one set of credentials to authenticate multiple contexts.
in scheme: dpv#
isSubTypeOf: Authentication Protocols

SingularDataVolume
created: 2022-06-15
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Data Volume
definition: Data volume that is considered singular i.e. a specific instance or single item
in scheme: dpv#
isInstanceOf: Data Volume

Singular Frequency
created: 2022-06-15
creator: Harshvardhan J. Pandit
modified: 2020-10-05
type: Concept
term status: modified
broader: Frequency
definition: Frequency where occurences are singular i.e. they take place only once
in scheme: dpv#
isSubTypeOf: Frequency

SingularScaleOfDataSubjects
created: 2022-06-15
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Data Subject Scale
definition: Scale of data subjects considered singular i.e. a specific data subject
in scheme: dpv#
isInstanceOf: Data Subject Scale

SmallDataVolume
created: 2022-06-15
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Data Volume
definition: Data volume that is considered small or limited within the context
in scheme: dpv#
isInstanceOf: Data Volume

SmallScaleOfDataSubjects
created: 2022-06-15
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Data Subject Scale
definition: Scale of data subjects considered small or limited within the context
in scheme: dpv#
isInstanceOf: Data Subject Scale

Small Scale Processing
created: 2022-09-07
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Processing Scale
definition: Processing that takes place at small scales (as specified by some criteria)
in scheme: dpv#
isInstanceOf: Processing Scale

Social Media
created: 2020-11-04
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Marketing
definition: Conduct marketing through social media
in scheme: dpv#
isSubTypeOf: Marketing

Special Category Personal Data
created: 2019-05-07
creator: Elmar Kiesling; Harshvardhan J. Pandit
creator: Fajar Ekaputra
modified: 2022-01-19
source: oj
example: E0015
type: Concept
term status: modified
broader: Sensitive Personal Data
definition: Sensitive Personal Data whose use requires specific legal permission or justification
in scheme: dpv#
note: The term 'special category' is based on GDPR Art.9, but should not be considered as exlusive to it. DPV considers all Special Categories to also be Sensitive, but whose use is either prohibited or regulated and therefore requires additional legal basis for justification.
isSubTypeOf: Sensitive Personal Data

SporadicDataVolume
created: 2022-06-15
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Data Volume
definition: Data volume that is considered sporadic or sparse within the context
in scheme: dpv#
isInstanceOf: Data Volume

Sporadic Frequency
created: 2022-06-15
creator: Harshvardhan J. Pandit
modified: 2020-10-05
type: Concept
term status: modified
broader: Frequency
definition: Frequency where occurences are sporadic or infrequent or sparse
in scheme: dpv#
isSubTypeOf: Frequency

SporadicScaleOfDataSubjects
created: 2022-06-15
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Data Subject Scale
definition: Scale of data subjects considered sporadic or sparse within the context
in scheme: dpv#
isInstanceOf: Data Subject Scale

Staff Training
created: 2019-04-05
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Rob Brennan
example: E0017
type: Concept
term status: accepted
broader: Organisational Measure
definition: Practices and policies regarding training of staff members
in scheme: dpv#
narrower: Cybersecurity Training
narrower: Data Protection Training
narrower: Educational Training
narrower: Professional Training
narrower: Security Knowledge Training
isSubTypeOf: Organisational Measure

Status
created: 2022-05-18
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Context
definition: The status or state of something
in scheme: dpv#
narrower: Activity Status
narrower: Audit Status
narrower: Compliance Status
narrower: Conformance Status
narrower: Consent Status
isSubTypeOf: Context

Status Concepts
type: Collection
member: Activity Completed
member: Activity Halted
member: Activity Ongoing
member: Activity Proposed
member: Activity Status
member: Audit Approved
member: Audit Conditionally Approved
member: Audit Not Required
member: Audit Rejected
member: Audit Requested
member: Audit Required
member: Audit Status
member: Compliance Indeterminate
member: Compliance Status
member: Compliance Unknown
member: Compliance Violation
member: Compliant
member: Conformance Status
member: Conformant
member: Lawful
member: Lawfulness (alt title: LegalComplianceStatus)
member: Lawfulness Unknown
member: Non Compliant
member: NonConformant
member: Partially Compliant
member: Status
member: Unlawful
member: has activity status
member: has audit status
member: has compliance status
member: has lawfulness
member: has status

Storage Condition
created: 2019-04-05
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Rob Brennan
example: E0011
type: Concept
term status: accepted
broader: Processing Context
definition: Conditions required or followed regarding storage of data
in scheme: dpv#
narrower: Storage Deletion
narrower: Storage Duration
narrower: Storage Location
narrower: Storage Restoration
isSubTypeOf: Processing Context

Storage Deletion
created: 2019-04-05
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Rob Brennan
type: Concept
term status: accepted
broader: Storage Condition
definition: Deletion or Erasure of data including any deletion guarantees
in scheme: dpv#
isSubTypeOf: Storage Condition

Storage Duration
created: 2019-04-05
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Rob Brennan
type: Concept
term status: accepted
broader: Duration
broader: Storage Condition
definition: Duration or temporal limitation on storage of personal data
in scheme: dpv#
isSubTypeOf: Duration
isSubTypeOf: Storage Condition

Storage Location
created: 2019-04-05
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Rob Brennan
type: Concept
term status: accepted
broader: Location
broader: Storage Condition
definition: Location or geospatial scope where the data is stored
in scheme: dpv#
isSubTypeOf: Location
isSubTypeOf: Storage Condition

Storage Restoration
created: 2019-04-05
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Rob Brennan
type: Concept
term status: accepted
broader: Storage Condition
definition: Regularity and temporal span of data restoration/backup mechanisms that guarantee that data is preserved
in scheme: dpv#
isSubTypeOf: Storage Condition

Store
created: 2019-05-07
source: oj
type: Concept
term status: accepted
broader: Processing
definition: to keep data for future use
in scheme: dpv#
isSubTypeOf: Processing

Structure
created: 2019-05-07
source: oj
type: Concept
term status: accepted
broader: Organise
definition: to arrange data according to a structure
in scheme: dpv#
isSubTypeOf: Organise

Student
created: 2022-04-06
creator: Beatriz Esteves
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
term status: accepted
broader: Data Subject
definition: Data subjects that are students
in scheme: dpv#
isSubTypeOf: Data Subject

Sub-Processor Agreement
created: 2022-01-26
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
term status: accepted
broader: Data Processing Agreement
definition: An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data between a Data Processor and a Data (Sub-)Processor
in scheme: dpv#
isSubTypeOf: Data Processing Agreement

Subscriber
created: 2022-04-06
creator: Beatriz Esteves
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
term status: accepted
broader: Data Subject
definition: Data subjects that subscribe to service(s)
in scheme: dpv#
note: note: subscriber can be customer or consumer
isSubTypeOf: Data Subject

SupraNationalAuthority
created: 2022-02-02
creator: Harshvardhan J. Pandit
source: adms
type: Concept
term status: accepted
broader: Authority
definition: An authority tasked with overseeing legal compliance for a supra-national union e.g. EU
in scheme: dpv#
isSubTypeOf: Authority

SupraNationalUnion
created: 2022-01-19
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Location
definition: A political union of two or more countries with an establishment of common authority
in scheme: dpv#
isSubTypeOf: Location

Symmetric Cryptography
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: CrytographicMethods
definition: Use of crytography where the same keys are utilised for encryption and descryption of information
in scheme: dpv#
isSubTypeOf: CrytographicMethods

Symmetric Encryption
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: data-pseudonymisation-advanced-techniques-and-use-cases
type: Concept
term status: accepted
broader: Encryption
definition: Use of symmetric crytography to encrypt data
in scheme: dpv#
isSubTypeOf: Encryption

Synthetic Data
created: 2022-08-18
creator: Harshvardhan J. Pandit
source: data-protection-engineering
type: Concept
term status: accepted
broader: Data
definition: Synthetic data reffers to artificially created data such that it is intended to resemble real data (personal or non-personal), but does not refer to any specific identified or identifiable individual, or to the real measure of an observable parameter in the case of non-personal data
in scheme: dpv#
isSubTypeOf: Data

Systematic Monitoring
created: 2020-11-04
creator: Harshvardhan J. Pandit
creator: Piero Bonatti
source: oj
type: Concept
term status: accepted
broader: Processing Context
definition: Processing that involves systematic monitoring of individuals
in scheme: dpv#
isSubTypeOf: Processing Context

Targeted Advertising
created: 2022-03-30
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Personalised Advertising
definition: Create and provide pesonalised advertisement where the personalisation is targeted to a specific individual or group of individuals
in scheme: dpv#
isSubTypeOf: Personalised Advertising

Technical Measure
created: 2019-04-05
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Rob Brennan
example: E0016
type: Concept
term status: accepted
broader: Technical and Organisational Measure
definition: Technical measures required/followed when processing data of the declared category
in scheme: dpv#
narrower: Access Control Method
narrower: Activity Monitoring
narrower: Authentication Protocols
narrower: Authorisation Protocols
narrower: Cryptographic Methods
narrower: Data Backup Protocols
narrower: Data Sanitisation Technique
narrower: Digital Rights Management
narrower: Encryption
narrower: Information Flow Control
narrower: Security Method
isSubTypeOf: Technical and Organisational Measure

Technical and Organisational Measure
created: 2019-04-05
creator: Bud Bruegger
modified: 2020-11-04
type: Concept
term status: accepted
definition: The Technical and Organisational measures used.
in scheme: dpv#
narrower: Organisational Measure
narrower: Risk Mitigation Measure
narrower: Technical Measure

Technical Service Provision
created: 2021-09-08
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Service Provision
definition: Manage and provide technical processes and functions necessary for delivering services
in scheme: dpv#
isSubTypeOf: Service Provision

Technical_Measures Concepts
type: Collection
member: Access Control Method
member: Activity Monitoring
member: Anonymisation
member: Asymmetric Cryptography
member: Asymmetric Encryption
member: Authentication using ABC
member: Authentication using PABC
member: Authentication Protocols
member: Authorisation Protocols
member: Biometric Authentication
member: Cryptographic Authentication
member: Cryptographic Key Management
member: Cryptographic Methods
member: Data Anonymisation Technique
member: Data Backup Protocols
member: Data Redaction
member: Data Sanitisation Technique
member: De-Identification
member: Deterministic Pseudonymisation
member: Differential Privacy
member: Digital Rights Management
member: Digital Signatures
member: Distributed System Security
member: Document Randomised Pseudonymisation
member: Document Security
member: Encryption
member: Encryption at Rest
member: Encryption in Transfer
member: Encryption in Use
member: End-to-End Encryption (E2EE)
member: File System Security
member: Fully Randomised Pseudonymisation
member: Hardware Security Protocols
member: Hash Functions
member: Hash-based Message Authentication Code (HMAC)
member: Homomorphic Encryption
member: Information Flow Control
member: Intrusion Detection System
member: Message Authentication Codes (MAC)
member: Mobile Platform Security
member: Monotonic Counter Pseudonymisation
member: Multi-Factor Authentication (MFA)
member: Network Proxy Routing
member: Network Security Protocols
member: Operating System Security
member: Password Authentication
member: Penetration Testing Methods
member: Physical Access Control Method
member: Post-Quantum Cryptography
member: Privacy Preserving Protocol
member: Private Information Retrieval
member: Pseudonymisation
member: Quantum Cryptography
member: RNG Pseudonymisation
member: Secret Sharing Schemes
member: Secure Multi-Party Computation
member: Security Method
member: Single Sign On
member: Symmetric Cryptography
member: Symmetric Encryption
member: Trusted Computing
member: Trusted Execution Environments
member: Usage Control
member: Use of Synthetic Data
member: Virtualisation Security
member: Vulnerability Testing Methods
member: WebBrowser Security
member: Web Security Protocols
member: Wireless Security Protocols
member: Zero Knowledge Authentication

Technical_Organisational_Measures Concepts
type: Collection
member: Organisational Measure
member: Technical Measure
member: Technical and Organisational Measure
member: has notice
member: has organisational measure
member: has policy
member: has technical measure
member: has technical and organisational measure
member: is policy for

Technology
created: 2022-01-26
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
definition: The technology, technological implementation, or any techniques, skills, methods, and processes used or applied
in scheme: dpv#
note: Examples (non-exhaustive) include: Algorithm, Process, Method, Skill, Database, Cookies, Server, Device

Temporal Duration
created: 2022-06-15
creator: Harshvardhan J. Pandit
modified: 2020-10-05
type: Concept
term status: modified
broader: Duration
definition: Duration that has a fixed temporal duration e.g. 6 months
in scheme: dpv#
isSubTypeOf: Duration

Third Country
created: 2022-02-09
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Country
definition: Represents a country outside applicable or compatible jurisdiction as outlined in law
in scheme: dpv#
isSubTypeOf: Country

Third Party
created: 2019-06-04
creator: Harshvardhan J. Pandit
source: oj
type: Concept
term status: accepted
broader: Recipient
definition: A ‘third party’ means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and people who, under the direct authority of the controller or processor, are authorised to process personal data.
in scheme: dpv#
isSubTypeOf: Recipient

Third-Party Agreement
created: 2022-02-09
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Data Processing Agreement
definition: An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data between a Data Controller or Processor and a Third Party
in scheme: dpv#
isSubTypeOf: Data Processing Agreement

Third Party Security Procedures
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: 5g-cybersecurity-standards
type: Concept
term status: accepted
broader: Security Procedure
definition: Procedures related to security associated with Third Parties
in scheme: dpv#
isSubTypeOf: Security Procedure

Tourist
created: 2022-04-06
creator: Beatriz Esteves
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
term status: accepted
broader: Data Subject
definition: Data subjects that are tourists i.e. not citizens and not immigrants
in scheme: dpv#
isSubTypeOf: Data Subject

Transfer
created: 2019-05-07
source: processing
example: E0020
type: Concept
term status: accepted
broader: Processing
definition: to move data from one place to another
in scheme: dpv#
narrower: Move
related: Transfer
isSubTypeOf: Processing

Transform
created: 2019-05-07
source: oj
type: Concept
term status: accepted
broader: Processing
definition: to change the form or nature of data
in scheme: dpv#
narrower: Adapt
narrower: Align
narrower: Alter
narrower: Anonymise
narrower: Combine
narrower: Filter
narrower: Pseudonymise
narrower: Restrict
narrower: Screen
isSubTypeOf: Processing

Transmit
created: 2019-05-07
source: oj
type: Concept
term status: accepted
broader: Disclose
definition: to send out data
in scheme: dpv#
isSubTypeOf: Disclose

Trusted Computing
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: CrytographicMethods
definition: Use of cryptographic methods to restrict access and execution to trusted parties and code
in scheme: dpv#
isSubTypeOf: CrytographicMethods

Trusted Execution Environments
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: data-protection-engineering
type: Concept
term status: accepted
broader: CrytographicMethods
definition: Use of cryptographic methods to restrict access and execution to trusted parties and code within a dedicated execution environment
in scheme: dpv#
isSubTypeOf: CrytographicMethods

Trusted Third Party Utilisation
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: data-pseudonymisation-advanced-techniques-and-use-cases
type: Concept
term status: accepted
broader: Security Procedure
definition: Utilisation of a trusted third party to provide or carry out a measure
in scheme: dpv#
isSubTypeOf: Security Procedure

Uninformed Consent
created: 2022-06-21
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
term status: accepted
broader: Consent
definition: Consent that is uninformed i.e. without requirement to provide sufficient information to make a consenting decision
in scheme: dpv#
isSubTypeOf: Consent

Unlawful
type: Concept
term status: accepted
broader: Lawfulness (alt title: LegalComplianceStatus)
definition: State of being unlawful or legally non-compliant
in scheme: dpv#
isInstanceOf: Lawfulness (alt title: LegalComplianceStatus)

Until Event Duration
created: 2022-06-15
creator: Harshvardhan J. Pandit
modified: 2020-10-05
type: Concept
term status: modified
broader: Duration
definition: Duration that takes place until a specific event occurs e.g. Account Closure
in scheme: dpv#
isSubTypeOf: Duration

Until Time Duration
created: 2022-06-15
creator: Harshvardhan J. Pandit
modified: 2020-10-05
type: Concept
term status: modified
broader: Duration
definition: Duration that has a fixed end date e.g. 2022-12-31
in scheme: dpv#
isSubTypeOf: Duration

Usage Control
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: Access Control Method
definition: Management of usage, which is intended to be broader than access control and may cover trust, digital rights, or other relevant controls
in scheme: dpv#
isSubTypeOf: Access Control Method

Use
created: 2019-05-07
source: oj
type: Concept
term status: accepted
broader: Processing
definition: to use data
in scheme: dpv#
narrower: Access
narrower: Analyse
narrower: Assess
narrower: Consult
narrower: Match
narrower: Profiling
narrower: Retrieve
isSubTypeOf: Processing

Use of Synthetic Data
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: data-protection-engineering
type: Concept
term status: accepted
broader: Security Method
definition: Use of synthetic data to preserve privacy, security, or other effects and side-effects
in scheme: dpv#
isSubTypeOf: Security Method

User
created: 2022-04-06
creator: Beatriz Esteves
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
term status: accepted
broader: Data Subject
definition: Data subjects that use service(s)
in scheme: dpv#
isSubTypeOf: Data Subject

User Interface Personalisation
created: 2019-04-05
creator: Axel Polleres
creator: Elmar Kiesling
creator: Fajar Ekaputra
creator: Harshvardhan J. Pandit
creator: Javier Fernandez
creator: Simon Steyskal
type: Concept
term status: accepted
broader: Service Personalization
definition: Personalise interfaces presented to the user
in scheme: dpv#
isSubTypeOf: Service Personalization

Variable Location
created: 2022-06-15
creator: Harshvardhan J. Pandit
modified: 2020-10-05
type: Concept
term status: modified
broader: Location Fixture
definition: Location that is known but is variable e.g. somewhere within a given area
in scheme: dpv#
isSubTypeOf: Location Fixture

Vendor Management
created: 2021-09-01
creator: David Hickey
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
source: model-voor-een-register-van-de-verwerkingsactiviteiten
type: Concept
term status: accepted
broader: Purpose
definition: Manage orders, payment, evaluation, and prospecting related to vendors
in scheme: dpv#
narrower: Vendor Payment
narrower: Vendor Records Management
narrower: Vendor Selection Assessment
isSubTypeOf: Purpose

Vendor Payment
created: 2021-09-01
creator: David Hickey
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
source: model-voor-een-register-van-de-verwerkingsactiviteiten
type: Concept
term status: accepted
broader: Vendor Management
definition: Manage payment of vendors
in scheme: dpv#
isSubTypeOf: Vendor Management

Vendor Records Management
created: 2021-09-01
creator: David Hickey
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
source: model-voor-een-register-van-de-verwerkingsactiviteiten
type: Concept
term status: accepted
broader: Vendor Management
definition: Manage orders related to vendors
in scheme: dpv#
isSubTypeOf: Vendor Management

Vendor Selection Assessment
created: 2021-09-01
creator: David Hickey
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
source: model-voor-een-register-van-de-verwerkingsactiviteiten
type: Concept
term status: accepted
broader: Vendor Management
definition: Manage selection, assessment, and evaluation related to vendors
in scheme: dpv#
isSubTypeOf: Vendor Management

Virtualisation Security
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: Security Method
definition: Security implemented at or through virtualised environments
in scheme: dpv#
isSubTypeOf: Security Method

Visitor
created: 2022-04-06
creator: Beatriz Esteves
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
term status: accepted
broader: Data Subject
definition: Data subjects that are temporary visitors
in scheme: dpv#
isSubTypeOf: Data Subject

Vital Interest
created: 2021-04-21
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Legal Basis
definition: Processing is necessary or required to protect vital interests of a data subject or other natural person
in scheme: dpv#
narrower: Vital Interest of Natural Person
isSubTypeOf: Legal Basis

Vital Interest of Data Subject
created: 2021-04-21
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
term status: accepted
broader: Vital Interest of Natural Person
definition: Processing is necessary or required to protect vital interests of a data subject
in scheme: dpv#
isSubTypeOf: Vital Interest of Natural Person

Vital Interest of Natural Person
created: 2021-04-21
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
term status: accepted
broader: Vital Interest
definition: Processing is necessary or required to protect vital interests of a natural person
in scheme: dpv#
narrower: Vital Interest of Data Subject
isSubTypeOf: Vital Interest

Vulnerability Testing Methods
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: Security Method
definition: Methods that assess or discover vulnerabilities in a system
in scheme: dpv#
isSubTypeOf: Security Method

Vulnerable Data Subject
created: 2020-11-04
creator: Georg Krog
creator: Harshvardhan Pandit
creator: Paul Ryan
type: Concept
term status: accepted
broader: Data Subject
definition: Data Subjects which should be considered 'vulnerable' and therefore would require additional measures and safeguards
in scheme: dpv#
narrower: Asylum Seeker
narrower: Elderly Data Subject
narrower: Mentally Vulnerable Data Subject
note: This concept denotes a Data Subject or a group are vulnerable, but not what vulnerability they possess or its context. This information can be provided additionally as comments, or as separate concepts and relations. Proposals for this are welcome.
isSubTypeOf: Data Subject

WebBrowser Security
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: Security Method
definition: Security implemented at or over web browsers
in scheme: dpv#
isSubTypeOf: Security Method

Web Security Protocols
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: Security Method
definition: Security implemented at or over web-based protocols
in scheme: dpv#
isSubTypeOf: Security Method

Wireless Security Protocols
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: reference-incident-classification-taxonomy
type: Concept
term status: accepted
broader: Security Method
definition: Security implemented at or over wireless communication protocols
in scheme: dpv#
isSubTypeOf: Security Method

Within Device
created: 2022-06-15
creator: Harshvardhan J. Pandit
modified: 2020-10-05
type: Concept
term status: modified
broader: Local Location
definition: Location is local and entirely within a device, such as a smartphone
in scheme: dpv#
isSubTypeOf: Local Location

Within Physical Environment
created: 2020-10-06
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Local Location
definition: Location is local and entirely within a physical environment, such as a room
in scheme: dpv#
isSubTypeOf: Local Location

Within Virtual Environment
created: 2020-10-06
creator: Harshvardhan J. Pandit
type: Concept
term status: accepted
broader: Local Location
definition: Location is local and entirely within a virtual environment, such as a shared network directory
in scheme: dpv#
isSubTypeOf: Local Location

Zero Knowledge Authentication
created: 2022-08-17
creator: Harshvardhan J. Pandit
source: data-protection-engineering
type: Concept
term status: accepted
broader: Authentication Protocols
broader: Cryptographic Methods
definition: Authentication using Zero-Knowledge proofs
in scheme: dpv#
isSubTypeOf: Authentication Protocols
isSubTypeOf: Cryptographic Methods

has activity status
created: 2022-05-18
creator: Harshvardhan J. Pandit
type: Concept
type: Relation
term status: accepted
broader: has status
definition: Indicates the status of activity of specified concept
in scheme: dpv#
has domain: Concept
has range: Activity Status
isSubTypeOf: has status

has address
created: 2020-11-04
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J.Pandit
creator: Paul Ryan
type: Concept
type: Relation
term status: accepted
definition: Specifies address of a legal entity such as street address or pin code
in scheme: dpv#
has domain: Entity
has range: Concept

has algorithmic logic
created: 2020-11-04
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
modified: 2022-06-15
type: Concept
type: Relation
term status: changed
definition: Indicates the logic used in processing such as for automated decision making
in scheme: dpv#
has domain: Concept
has range: Algorithmic Logic

has applicable law
created: 2022-01-19
creator: Harshvardhan J. Pandit
type: Concept
type: Relation
term status: accepted
definition: Indicates applicability of a Law
in scheme: dpv#
has domain: Concept
has range: Law

has audit status
created: 2022-06-22
creator: Harshvardhan J. Pandit
type: Concept
type: Relation
term status: accepted
broader: has status
definition: Indicates the status of audit associated with specified concept
in scheme: dpv#
has domain: Concept
has range: Audit Status
isSubTypeOf: has status

has authority
created: 2022-01-19
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
type: Relation
term status: accepted
definition: Indicates applicability of authority for a jurisdiction
in scheme: dpv#
has domain: Concept
has range: Authority

has compliance status
created: 2022-05-18
creator: Harshvardhan J. Pandit
type: Concept
type: Relation
term status: accepted
broader: has status
definition: Indicates the status of compliance of specified concept
in scheme: dpv#
narrower: has lawfulness
has domain: Concept
has range: Compliance Status
isSubTypeOf: has status

has consent notice
created: 2019-04-05
creator: Bud Bruegger
creator: Harshvardhan J. Pandit
creator: Mark Lizar
modified: 2022-06-22
type: Concept
type: Relation
term status: sunset
definition: Specifies the notice provided in context of consent
editorial note: WARNING: This concept will be deprecated in future releases
in scheme: dpv#
note: The actual notice that the Data Subject received to consent to, either a text or link to a document, which should be usable to decide whether the form or consent was compliant to legislation, e.g. documenting how the user has been informed about rights and implications (such as, right to data portability,right to recitffy, right to erasure, right to restrict processing, right to object, rights regarding automated decision making or profiling, processors, third parties, sub-processors, outside-EEA transfers, automated decision-making, or other necessary details of the privacy-policy). Can be TextOrDocumentOrURI.

has consent status
created: 2022-06-21
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
type: Relation
term status: accepted
definition: Specifies the state or status of consent
in scheme: dpv#
has domain: Concept
has range: Consent Status

has consequence
created: 2020-11-04
creator: Beatriz Esteves
creator: Fajar Ekaputra
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
modified: 2021-09-21
type: Concept
type: Relation
term status: accepted
definition: Indicates consenquence(s) possible or arising from specified concept
in scheme: dpv#
narrower: has impact
note: Removed plural suffix for consistency
has domain: Concept
has range: Consequence

has contact
created: 2020-11-04
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J.Pandit
creator: Paul Ryan
type: Concept
type: Relation
term status: accepted
definition: Specifies contact details of a legal entity such as phone or email
in scheme: dpv#
has domain: Entity
has range: Concept

has context
created: 2019-04-05
type: Concept
type: Relation
term status: accepted
definition: Indicates a purpose is restricted to the specified context(s)
in scheme: dpv#
has domain: Concept
has range: Context

has country
created: 2022-01-19
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
type: Relation
term status: accepted
broader: has location
definition: Indicates applicability of specified country
in scheme: dpv#
narrower: has third country
has domain: Concept
has range: Country
isSubTypeOf: has location

has data
created: 2022-08-18
creator: Harshvardhan J. Pandit
type: Concept
type: Relation
term status: accepted
definition: Indicates associated with Data (may or may not be personal)
in scheme: dpv#
narrower: has personal data
has domain: Concept
has range: Data

has data controller
created: 2019-04-04
creator: Axel Polleres
creator: Bud Bruegger
creator: Harshvardhan J. Pandit
creator: Javier Fernández
creator: Mark Lizar
modified: 2020-11-04
type: Concept
type: Relation
term status: accepted
broader: has entity
definition: Indicates association with Data Controller
in scheme: dpv#
narrower: has joint data controllers
has domain: Concept
has range: Data Controller
has range: Legal Entity
isSubTypeOf: has entity

has data exporter
created: 2022-02-09
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
type: Relation
term status: accepted
broader: has entity
definition: Indiciates inclusion or applicability of a LegalEntity in the role of Data Exporter
in scheme: dpv#
has domain: Concept
has range: Data Exporter
isSubTypeOf: has entity

has data importer
created: 2022-02-09
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
type: Relation
term status: accepted
broader: has recipient
definition: Indiciates inclusion or applicability of a LegalEntity in the role of Data Importer
in scheme: dpv#
has domain: Concept
has range: Data Importer
isSubTypeOf: has recipient

has data processor
created: 2022-02-09
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
type: Relation
term status: accepted
broader: has recipient
definition: Indiciates inclusion or applicability of a Data Processor
in scheme: dpv#
has domain: Concept
has range: Data Processor
isSubTypeOf: has recipient

has data protection officer
created: 2022-03-02
creator: Paul Ryan
creator: Rob Brennan
type: Concept
type: Relation
term status: accepted
broader: has representative
definition: Specifices an associated data protection officer
in scheme: dpv#
has domain: Concept
has range: Data Protection Officer
isSubTypeOf: has representative

has data source
created: 2020-11-04
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
type: Relation
term status: accepted
definition: Indicates the source or origin of data being processed
in scheme: dpv#
has domain: Concept
has range: Data Source

has data subject
created: 2019-04-04
creator: Axel Polleres
creator: Bud Bruegger
creator: Harshvardhan J. Pandit
creator: Javier Fernández
creator: Mark Lizar
modified: 2020-11-04
type: Concept
type: Relation
term status: accepted
broader: has entity
definition: Indicates association with Data Subject
in scheme: dpv#
has domain: Concept
has range: Data Subject
isSubTypeOf: has entity

has data subject scale
created: 2022-06-22
creator: Harshvardhan J. Pandit
type: Concept
type: Relation
term status: accepted
broader: Scale
definition: Indicates the scale of data subjects
in scheme: dpv#
has domain: Concept
has range: Data Subject Scale
isSubTypeOf: Scale

has data volume
created: 2022-06-22
creator: Harshvardhan J. Pandit
type: Concept
type: Relation
term status: accepted
broader: Scale
definition: Indicates the volume of data
in scheme: dpv#
has domain: Concept
has range: Data Volume
isSubTypeOf: Scale

has domain
sub property of: semanticRelation

has duration
created: 2019-04-05
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Rob Brennan
source: specialprivacy.ercim.eu
type: Concept
type: Relation
term status: accepted
definition: Indicates information about duration
in scheme: dpv#
has domain: Concept
has range: Duration

has entity
created: 2022-02-09
creator: Harshvardhan J. Pandit
type: Concept
type: Relation
term status: accepted
definition: Indicates inclusion or applicability of an entity to some concept
in scheme: dpv#
narrower: has data controller
narrower: has data exporter
narrower: has data subject
narrower: has recipient
narrower: has relation with data subject
narrower: has representative
narrower: has responsible entity
note: parent property for controller, processor, data subject, authority, etc.?
has domain: Concept
has range: Entity

has expiry
created: 2019-04-05
creator: Bud Bruegger
creator: Harshvardhan J. Pandit
creator: Mark Lizar
modified: 2022-06-22
type: Concept
type: Relation
term status: sunset
definition: Generic property specifying when or under which condition(s) the consent will expire
editorial note: WARNING: This concept will be deprecated in future releases
in scheme: dpv#

has expiry condition
created: 2019-04-05
creator: Bud Bruegger
creator: Harshvardhan J. Pandit
creator: Mark Lizar
modified: 2022-06-22
type: Concept
type: Relation
term status: sunset
broader: expiry
definition: Specifies the condition or event that determines the expiry of consent
editorial note: WARNING: This concept will be deprecated in future releases
in scheme: dpv#
note: Can be TextOrDocumentOrURI
isSubTypeOf: expiry

has expiry time
created: 2019-04-05
creator: Bud Bruegger
creator: Harshvardhan J. Pandit
creator: Mark Lizar
modified: 2022-06-22
type: Concept
type: Relation
term status: sunset
broader: expiry
definition: Specifies the expiry time or duration for consent
editorial note: WARNING: This concept will be deprecated in future releases
in scheme: dpv#
isSubTypeOf: expiry

has frequency
created: 2022-02-16
creator: Harshvardhan J. Pandit
type: Concept
type: Relation
term status: accepted
definition: Indicates the frequency with which something takes place
in scheme: dpv#
has domain: Concept
has range: Frequency

has geographic coverage
created: 2022-06-22
creator: Harshvardhan J. Pandit
type: Concept
type: Relation
term status: accepted
broader: Scale
definition: Indicate the geographic coverage (of specified context)
in scheme: dpv#
has domain: Concept
has range: Geographic Coverage
isSubTypeOf: Scale

has human involvement
created: 2020-11-04
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
type: Relation
term status: accepted
definition: Indicates Involvement of humans in processing such as within automated decision making process
in scheme: dpv#
note: Human involvement is also relevant to 'human in the loop'
has domain: Concept
has range: Human Involvement

has identifier
created: 2020-11-25
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J.Pandit
creator: Paul Ryan
type: Concept
type: Relation
term status: accepted
definition: Indicates an identifier associated for identification or reference
in scheme: dpv#
has domain: Concept
has range: Concept

has impact
created: 2022-05-18
creator: Beatriz Esteves
creator: Fajar Ekaputra
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
type: Concept
type: Relation
term status: accepted
broader: has consequence
definition: Indicates impact(s) possible or arising as consequences from specified concept
in scheme: dpv#
has domain: Concept
has range: Impact
isSubTypeOf: has consequence

has impact on
created: 2022-05-18
creator: Beatriz Esteves
creator: Fajar Ekaputra
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
type: Concept
type: Relation
term status: accepted
broader: hasConsequenceOn
definition: Indicates the thing (e.g. plan, process, or entity) affected by an impact
in scheme: dpv#
has domain: Impact
has range: Concept
isSubTypeOf: hasConsequenceOn

has indication method
created: 2022-06-21
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
type: Relation
term status: accepted
definition: Specifies the method by which an entity has indicated the specific context
in scheme: dpv#
has domain: Concept

has joint data controllers
created: 2022-02-09
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
type: Relation
term status: accepted
broader: has data controller
definition: Indicates inclusion or applicability of a Joint Data Controller
in scheme: dpv#
has domain: Concept
has range: Joint Data Controllers
isSubTypeOf: has data controller

has jurisdiction
created: 2022-01-19
creator: Harshvardhan J. Pandit
type: Concept
type: Relation
term status: accepted
definition: Indicates applicability of specified jurisdiction
in scheme: dpv#
has domain: Concept
has range: Location

has justification
created: 2022-06-15
creator: Harshvardhan J. Pandit
type: Concept
type: Relation
term status: accepted
definition: Indicates a justification for specified concept or context
in scheme: dpv#
has domain: Concept
has range: Justification

has lawfulness
created: 2022-10-22
creator: Harshvardhan J. Pandit
type: Concept
type: Relation
term status: accepted
broader: has compliance status
definition: Indicates the status of being lawful or legally compliant
in scheme: dpv#
has domain: Concept
has range: Lawfulness (alt title: LegalComplianceStatus)
isSubTypeOf: has compliance status

has legal basis
created: 2019-04-04
creator: Axel Polleres
creator: Javier Fernández
modified: 2020-11-04
type: Concept
type: Relation
term status: accepted
definition: Indicates use or applicability of a Legal Basis
in scheme: dpv#
has domain: Concept
has range: Legal Basis

has likelihood
created: 2022-07-20
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
type: Relation
term status: accepted
definition: Indicates the likelihood associated with a concept
in scheme: dpv#
has domain: Concept
has range: Likelihood

has location
created: 2019-04-05
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Rob Brennan
source: specialprivacy.ercim.eu
type: Concept
type: Relation
term status: accepted
definition: Indicates information about location
in scheme: dpv#
narrower: has country
has domain: Concept
has range: Location

has name
created: 2020-11-04
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J.Pandit
creator: Paul Ryan
type: Concept
type: Relation
term status: accepted
definition: Specifies name of a legal entity
in scheme: dpv#
has domain: Entity
has range: Concept

has notice
created: 2022-06-22
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
type: Relation
term status: accepted
broader: has organisational measure
definition: Indicates the use or applicability of a Notice for the specified context
in scheme: dpv#
has domain: Concept
has range: Notice
isSubTypeOf: has organisational measure

has obligation
created: 2022-10-19
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
type: Relation
term status: accepted
broader: Rule
definition: Specifying applicability or inclusion of an obligation rule within specified context
in scheme: dpv#
has domain: Context
has range: Obligation
isSubTypeOf: Rule

has organisational measure
created: 2022-02-09
creator: Harshvardhan J. Pandit
type: Concept
type: Relation
term status: accepted
broader: has technical and organisational measure
definition: Indicates use or applicability of Organisational measure
in scheme: dpv#
narrower: has notice
has domain: Concept
has range: Organisational Measure
isSubTypeOf: has technical and organisational measure

has outcome
created: 2022-05-18
creator: Harshvardhan J. Pandit
type: Concept
type: Relation
term status: accepted
definition: Indicates an outcome of specified concept or context
in scheme: dpv#
has domain: Concept
has range: Concept

has permission
created: 2022-10-19
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
type: Relation
term status: accepted
broader: Rule
definition: Specifying applicability or inclusion of a permission rule within specified context
in scheme: dpv#
has domain: Context
has range: Permission
isSubTypeOf: Rule

has personal data
created: 2022-01-19
creator: Harshvardhan J. Pandit
type: Concept
type: Relation
term status: accepted
broader: has data
definition: Indicates association with Personal Data
in scheme: dpv#
has domain: Concept
has range: Personal Data
isSubTypeOf: has data

has personal data handling
created: 2022-01-19
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
type: Relation
term status: accepted
definition: Indicates association with Personal Data Handling
in scheme: dpv#
has domain: Concept
has range: Personal Data Handling

has policy
created: 2022-01-26
creator: Harshvardhan J. Pandit
type: Concept
type: Relation
term status: accepted
broader: has technical and organisational measure
definition: Indicates policy applicable or used
in scheme: dpv#
has domain: Concept
has range: Policy
isSubTypeOf: has technical and organisational measure

has processing
created: 2019-04-04
creator: Axel Polleres
creator: Bud Bruegger
creator: Harshvardhan J. Pandit
creator: Javier Fernández
creator: Mark Lizar
modified: 2020-11-04
source: specialprivacy.ercim.eu
type: Concept
type: Relation
term status: accepted
definition: Indicates association with Processing
in scheme: dpv#
has domain: Concept
has range: Processing

has processing automation
created: 2022-08-13
creator: Harshvardhan J. Pandit
type: Concept
type: Relation
term status: accepted
definition: Indicates the use or extent of automation associated with processing
in scheme: dpv#
has domain: Concept
has range: Automation of Processing

has prohibition
created: 2022-10-19
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
type: Relation
term status: accepted
broader: Rule
definition: Specifying applicability or inclusion of a prohibition rule within specified context
in scheme: dpv#
has domain: Context
has range: Prohibition
isSubTypeOf: Rule

has provision by
created: 2019-04-05
creator: Bud Bruegger
creator: Harshvardhan J. Pandit
creator: Mark Lizar
modified: 2022-06-22
type: Concept
type: Relation
term status: sunset
definition: Specifies the entity that provisioned or provided consent
editorial note: WARNING: This concept will be deprecated in future releases
in scheme: dpv#
note: Normally this would be the dataSubject, but in some exceptional cases, the consent might be given on behalf by someone else, e.g. parents of minors.
has range: Legal Entity

has provision by justification
created: 2019-04-05
creator: Bud Bruegger
creator: Harshvardhan J. Pandit
creator: Mark Lizar
modified: 2022-06-22
type: Concept
type: Relation
term status: sunset
definition: Specifies the justification for entity providing consent
editorial note: WARNING: This concept will be deprecated in future releases
in scheme: dpv#
note: This field can be used to proivde a justification why the provision was provided by another DataSubject or legal entity, e.g. declariing the relationship (parent, guardian), in combination with the field provisionBy

has provision method
created: 2019-04-05
creator: Bud Bruegger
creator: Harshvardhan J. Pandit
creator: Mark Lizar
modified: 2022-06-22
type: Concept
type: Relation
term status: sunset
definition: Specifies the method by which consent was provisioned or provided
editorial note: WARNING: This concept will be deprecated in future releases
in scheme: dpv#
note: Can be used to record information of how consent was provided e.g. by a click to a form, in writing, etc., by logging into a system and confirm per email, or with some additional authentication, etc.

has provision time
created: 2019-04-05
creator: Bud Bruegger
creator: Harshvardhan J. Pandit
creator: Mark Lizar
modified: 2022-06-22
type: Concept
type: Relation
term status: sunset
definition: Specifies the instant in time when consent was given
editorial note: WARNING: This concept will be deprecated in future releases
in scheme: dpv#

has purpose
created: 2019-04-04
creator: Axel Polleres
creator: Bud Bruegger
creator: Harshvardhan J. Pandit
creator: Javier Fernández
creator: Mark Lizar
modified: 2020-11-04
source: specialprivacy.ercim.eu
type: Concept
type: Relation
term status: accepted
definition: Indicates association with Purpose
in scheme: dpv#
has domain: Concept
has range: Purpose

has range
sub property of: semanticRelation

has recipient
created: 2019-04-04
creator: Axel Polleres
creator: Bud Bruegger
creator: Harshvardhan J. Pandit
creator: Javier Fernández
creator: Mark Lizar
modified: 2020-11-04
source: specialprivacy.ercim.eu
type: Concept
type: Relation
term status: accepted
broader: has entity
definition: Indicates Recipient of Personal Data
in scheme: dpv#
narrower: has data importer
narrower: has data processor
narrower: has recipient data controller
narrower: has recipient third party
has domain: Concept
has range: Recipient
isSubTypeOf: has entity

has recipient data controller
created: 2022-02-09
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
type: Relation
term status: accepted
broader: has recipient
definition: Indiciates inclusion or applicability of a Data Controller as a Recipient of persona data
in scheme: dpv#
has domain: Concept
has range: Data Controller
isSubTypeOf: has recipient

has recipient third party
created: 2022-02-09
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
type: Relation
term status: accepted
broader: has recipient
definition: Indiciates inclusion or applicability of a Third Party as a Recipient of persona data
in scheme: dpv#
has domain: Concept
has range: Third Party
isSubTypeOf: has recipient

has relation with data subject
created: 2022-06-21
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
type: Relation
term status: accepted
broader: has entity
definition: Indicates the relation between specified Entity and Data Subject
in scheme: dpv#
has domain: Entity
has range: Concept
isSubTypeOf: has entity

has representative
created: 2020-11-04
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J.Pandit
creator: Paul Ryan
type: Concept
type: Relation
term status: accepted
broader: has entity
definition: Specifies representative of the legal entity
in scheme: dpv#
narrower: has data protection officer
has domain: Entity
has range: Representative
isSubTypeOf: has entity

has residual risk
created: 2022-07-20
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
type: Relation
term status: accepted
definition: Indicates the associated risk is the remaining or residual risk from applying mitigation measures or treatments to this risk
in scheme: dpv#
has domain: Risk
has range: Risk

has responsible entity
created: 2022-03-02
creator: Harshvardhan J. Pandit
type: Concept
type: Relation
term status: accepted
broader: has entity
definition: Specifies the indicated entity is responsible within some context
in scheme: dpv#
has domain: Concept
has range: Entity
isSubTypeOf: has entity

has right
created: 2020-11-18
creator: Harshvardhan J. Pandit
type: Concept
type: Relation
term status: accepted
definition: Indicates use or applicability of Right
in scheme: dpv#
has domain: Concept
has range: Right

has risk
created: 2020-11-18
creator: Harshvardhan J. Pandit
type: Concept
type: Relation
term status: accepted
definition: Indicates applicability of Risk
definition: Indicates applicability of Risk for this concept
in scheme: dpv#
has domain: Concept
has range: Risk

has risk level
created: 2022-07-20
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
type: Relation
term status: accepted
definition: Indicates the associated risk level associated with a risk
in scheme: dpv#
has domain: Risk
has range: Risk Level

has rule
created: 2022-10-19
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Paul Ryan
type: Concept
type: Relation
term status: accepted
definition: Specifying applicability or inclusion of a rule within specified context
in scheme: dpv#
has domain: Context
has range: Rule

has scale
created: 2022-06-15
creator: Harshvardhan J. Pandit
type: Concept
type: Relation
term status: accepted
definition: Indicates the scale of specified concept
in scheme: dpv#
has domain: Concept
has range: Scale

has scope
created: 2022-06-15
creator: Harshvardhan J. Pandit
type: Concept
type: Relation
term status: accepted
definition: Indicates the scope of specified concept or context
in scheme: dpv#
has domain: Concept
has range: Scope

has sector
created: 2019-04-05
type: Concept
type: Relation
term status: accepted
definition: Indicates the purpose is associated with activities in the indicated (Economic) Sector(s)
in scheme: dpv#
has domain: Concept
has range: Sector

has severity
created: 2022-07-20
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
type: Relation
term status: accepted
definition: Indicates the severity associated with a concept
in scheme: dpv#
has domain: Concept
has range: Severity

has status
created: 2022-05-18
creator: Harshvardhan J. Pandit
type: Concept
type: Relation
term status: accepted
definition: Indicates the status of specified concept
in scheme: dpv#
narrower: has activity status
narrower: has audit status
narrower: has compliance status
has domain: Concept
has range: Status

has storage condition
created: 2022-08-13
creator: Axel Polleres
creator: Harshvardhan J. Pandit
creator: Mark Lizar
creator: Rob Brennan
source: specialprivacy.ercim.eu
type: Concept
type: Relation
term status: changed
definition: Indicates information about storage condition
in scheme: dpv#
has domain: Concept
has range: Storage Condition

has technical measure
created: 2022-02-09
creator: Harshvardhan J. Pandit
type: Concept
type: Relation
term status: accepted
broader: has technical and organisational measure
definition: Indicates use or applicability of Technical measure
in scheme: dpv#
has domain: Concept
has range: Technical Measure
isSubTypeOf: has technical and organisational measure

has technical and organisational measure
created: 2019-04-04
creator: Axel Polleres
creator: Bud Bruegger
creator: Harshvardhan J. Pandit
creator: Javier Fernández
creator: Mark Lizar
modified: 2020-11-04
type: Concept
type: Relation
term status: accepted
definition: Indicates use or applicability of Technical or Organisational measure
in scheme: dpv#
narrower: has organisational measure
narrower: has policy
narrower: has technical measure
narrower: is mitigated by measure
has domain: Concept
has range: Technical and Organisational Measure

has third country
created: 2022-02-09
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
type: Relation
term status: accepted
broader: has country
definition: Indicates applicability or relevance of a 'third country'
in scheme: dpv#
has domain: Concept
has range: Third Country
isSubTypeOf: has country

has withdrawal by
created: 2019-04-05
creator: Bud Bruegger
creator: Harshvardhan J. Pandit
creator: Mark Lizar
modified: 2022-06-22
type: Concept
type: Relation
term status: sunset
definition: Specifies the entity that withdrew consent
editorial note: WARNING: This concept will be deprecated in future releases
in scheme: dpv#
note: Normally this would be the dataSubject, but in some exceptional cases, the consent might be withdraawn on behalf by someone else, e.g. parents of minors.
has range: Legal Entity

has withdrawal by justification
created: 2019-04-05
creator: Bud Bruegger
creator: Harshvardhan J. Pandit
creator: Mark Lizar
modified: 2022-06-22
type: Concept
type: Relation
term status: sunset
definition: Specifies the justification for entity withdrawing consent
editorial note: WARNING: This concept will be deprecated in future releases
in scheme: dpv#
note: This field can be used to proivde a justification why the weithdrawal was done by another DataSubject or legal entity, e.g. declariing the relationship (parent, guardian), in combination with the field withdrawalBy

has withdrawal method
created: 2019-04-05
creator: Bud Bruegger
creator: Harshvardhan J. Pandit
creator: Mark Lizar
modified: 2022-06-22
type: Concept
type: Relation
term status: sunset
definition: Specifries the method by which consent can be/has been withdrawn
editorial note: WARNING: This concept will be deprecated in future releases
in scheme: dpv#
note: Can be used to record information of how to withdraw consent, e.g. by a click to a form, in writing, etc., by logging into a system and confirm per email, or with some additional authentication, etc.

has withdrawal time
created: 2019-04-05
creator: Bud Bruegger
creator: Harshvardhan J. Pandit
creator: Mark Lizar
modified: 2022-06-22
type: Concept
type: Relation
term status: sunset
definition: Specifies the instant in time when consent was withdrawn
editorial note: WARNING: This concept will be deprecated in future releases
in scheme: dpv#

is after
created: 2022-03-02
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
type: Concept
type: Relation
term status: accepted
definition: Indicates the specified concepts is 'after' this concept in some context
in scheme: dpv#
has domain: Concept
has range: Concept

is authority for
created: 2022-01-19
creator: Georg P Krog
creator: Harshvardhan J. Pandit
type: Concept
type: Relation
term status: accepted
definition: Indicates area, scope, or applicability of an Authority
in scheme: dpv#
has domain: Authority
has range: Concept

is before
created: 2022-03-02
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
type: Concept
type: Relation
term status: accepted
definition: Indicates the specified concepts is 'before' this concept in some context
in scheme: dpv#
has domain: Concept
has range: Concept

is exercised at
created: 2022-10-22
creator: Beatriz Esteves
creator: Georg P Krog
creator: Harshvardhan J Pandit
creator: Paul Ryan
type: Concept
type: Relation
term status: accepted
definition: Indicates context or information about exercising a right
in scheme: dpv#
has domain: Active Right
has range: RightExerciseService

is explicit
created: 2019-04-05
creator: Bud Bruegger
creator: Harshvardhan J. Pandit
creator: Mark Lizar
modified: 2022-06-22
type: Concept
type: Relation
term status: sunset
definition: Specifies consent is 'explicit'
editorial note: WARNING: This concept will be deprecated in future releases
in scheme: dpv#
note: The conditions for what is considered 'explicit consent' differ by norms and laws.
has range: boolean

is implemented by entity
created: 2019-05-07
creator: Axel Polleres
creator: Beatriz Esteves
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
modified: 2022-01-26
type: Concept
type: Relation
term status: modified
definition: Indicates implementation details such as entities or agents
in scheme: dpv#
note: The use of 'entity' is inclusive of entities (e.g. Data Processor) as well as 'agent' (e.g. DPO). For indicating technological implementation, the property isImplementedByTechnology should be used.
has domain: Concept
has range: Entity

is implemented using technology
created: 2022-01-26
creator: Beatriz Esteves
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
modified: 2022-06-15
type: Concept
type: Relation
term status: changed
definition: Indicates implementation details such as technologies or processes
in scheme: dpv#
note: The term 'technology' is inclusive of technologies, processes, and methods.
has domain: Concept
has range: Technology

is indicated at time
created: 2022-06-21
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
type: Relation
term status: accepted
definition: Specifies the temporal information for when the entity has indicated the specific context
in scheme: dpv#
has domain: Concept

is indicated by
created: 2022-06-21
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
type: Relation
term status: accepted
definition: Specifies entity who indicates the specific context
in scheme: dpv#
has domain: Concept
has range: Entity

isInstanceOf
sub property of: semanticRelation

is mitigated by measure
created: 2022-02-09
creator: Harshvardhan J. Pandit
type: Concept
type: Relation
term status: accepted
broader: has technical and organisational measure
definition: Indicate a risk is mitigated by specified measure
in scheme: dpv#
has domain: Risk
has range: Risk Mitigation Measure
isSubTypeOf: has technical and organisational measure

is policy for
created: 2022-01-26
creator: Harshvardhan J. Pandit
type: Concept
type: Relation
term status: accepted
definition: Indicates the context or application of policy
in scheme: dpv#
has domain: Policy
has range: Concept

is residual risk of
created: 2022-07-20
creator: Georg P Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
type: Concept
type: Relation
term status: accepted
definition: Indicates this risk is the remaining or residual risk from applying mitigation measures or treatments to specified risk
in scheme: dpv#
has domain: Risk
has range: Risk

isSubTypeOf
sub property of: broader

mitigates risk
created: 2020-11-04
creator: Harshvardhan J. Pandit
type: Concept
type: Relation
term status: accepted
definition: Indicates risks mitigated by this concept
in scheme: dpv#
has domain: Risk Mitigation Measure
has range: Risk