Observe
to obtain data through observation
accepted
has policy
Indicates policy applicable or used
Anonymisation
Anonymisation is the process by which data is irreversibly altered in such a way that a data subject can no longer be identified directly or indirectly, either by the entity holding the data alone or in collaboration with other entities and information sources
(ISO 29100:2011,https://www.iso.org/standard/45123.html)
modified
Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
Contract
Creation, completion, fulfilment, or performance of a contract involving specified processing of data or technologies
has legal basis
Indicates use or applicability of a Legal Basis
Obligation
A rule describing an obligation for performing an activity
Harshvardhan J. Pandit, Georg P Krog, Beatriz Esteves, Paul Ryan
has joint data controllers
Indicates inclusion or applicability of a Joint Data Controller
Paul Ryan, Georg P. Krog, Harshvardhan J. Pandit
Temporal Duration
Duration that has a fixed temporal duration e.g. 6 months
Requested Service Provision
Purposes associated with delivering services as requested by user or consumer
The use of 'request' here includes where an user explicitly asks for the service and also when an established contract requires the provision of the service
Georg P Krog, Harshvardhan J. Pandit, Beatriz Esteves
Activity Status
Status associated with activity operations and lifecycles
has data subject scale
Indicates the scale of data subjects
Fully Randomised Pseudonymisation
Use of randomised pseudonymisation where the same elements are assigned different values each time they occur
(ENISA Data Pseudonymisation: Advanced Techniques and Use Cases,https://www.enisa.europa.eu/publications/data-pseudonymisation-advanced-techniques-and-use-cases)
Code of Conduct
A set of rules or procedures outlining the norms and practices for conducting activities
Regional Authority
An authority tasked with overseeing legal compliance for a region
(ADMS controlled vocabulary,http://purl.org/adms)
has entity
Indicates inclusion or applicability of an entity to some concept
parent property for controller, processor, data subject, authority, etc.?
Organisational Measure
Organisational measures used to safeguard and ensure good practices in connection with data and technologies
is policy for
Indicates the context or application of policy
Importance
An indication of 'importance' within a context
Importance can be used to express importance, desirability, relevance, or significance as a context.
Harshvardhan J. Pandit, Paul Ryan, Georg P Krog, Julian Flake, Beatriz Esteves
Network Proxy Routing
Use of network routing using proxy
(ENISA Data Protection Engineering,https://www.enisa.europa.eu/publications/data-protection-engineering)
Request Initiated
State of a request being initiated
Lawful
State of being lawful or legally compliant
Screen
to remove data for some criteria
Delivery of Goods
Purposes associated with delivering goods and services requested or asked by consumer
Harshvardhan J. Pandit, Javier Fernandez, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
Logging Policies
Policy for logging of information
(ENISA 5G Cybersecurity Standards,https://www.enisa.europa.eu/publications/5g-cybersecurity-standards)
Industry Consortium
A consortium established and comprising on industry organisations
Often Frequency
Frequency where occurences are often or frequent, but not continous
Compliance Monitoring
Monitoring of compliance (e.g. internal policy, regulations)
Organisation Compliance Management
Purposes associated with managing compliance for organisation in relation to internal policies
Note that this concept relates to internal organisational compliance. The concept LegalCompliance should be used for external legal or regulatory compliance.
Paul Ryan, Georg P Krog, David Hickey, Harshvardhan J. Pandit
Authentication using ABC
Use of Attribute Based Credentials (ABC) to perform and manage authentication
Member
Data subjects that are members of a group, organisation, or other collectives
Harshvardhan J. Pandit, Georg P. Krog, Julian Flake, Paul Ryan, Beatriz Esteves
Move
to move data from one location to another including deleting the original copy
(SPECIAL Project,https://specialprivacy.ercim.eu/vocabs/processing)
Supranational Union
A political union of two or more countries with an establishment of common authority
Governmental Organisation
An organisation managed or part of government
Vital Interest of Data Subject
Processing is necessary or required to protect vital interests of a data subject
Georg P Krog, Harshvardhan J. Pandit, Paul Ryan
Human Involvement
The involvement of humans in specified context
Human Involvement here broadly refers to any involvement by a human in the context of carrying out processing. This may include verification of outcomes, providing input data for making decisions, or overseeing activities. To indicate whether humans are involved or not, see relevant concepts of dpv:HumanInvolved and dpv:HumanNotInvolved. The term 'Human in the loop' and its varieties are absent from DPV due to their contradictory and non-compatible use across different sources.
Lawfulness Unknown
State of the lawfulness not being known
Consequence as Side-Effect
The consequence(s) possible or arising as a side-effect of specified context
Benefit
Impact(s) that acts as or causes benefits
Harshvardhan J. Pandit, Julian Flake, Georg P Krog, Fajar Ekaputra, Beatriz Esteves, Axel Polleres
Service Registration
Purposes associated with registering users and collecting information required for providing a service
An example of service registration is to provide a form that collects information such as preferred language or media format for downloading a movie
Verified Data
Data that has been verified in terms of accuracy, consistency, or quality
Legal Entity
A human or non-human 'thing' that constitutes as an entity and which is recognised and defined in law
has compliance status
Indicates the status of compliance of specified concept
Processing Scale
Scale of Processing
The exact definition of what constitutes "scale" depends on use of jurisdictional, domain-specific, or other forms of externally defined criterias. Where possible, this should be reflected by extending the scales provided with the appropriate context.
Structure
to arrange data according to a structure
(GDPR Art.4-2,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_2/oj)
has lawfulness
Indicates the status of being lawful or legally compliant
Customer Care
Customer Care refers to purposes associated with purposes for providing assistance, resolving issues, ensuring satisfaction, etc. in relation to services provided
Large Scale Of Data Subjects
Scale of data subjects considered large within the context
Right Fulfilment Notice
Notice provided regarding fulfilment of a right
This notice is associated with situations where information is provided with the intention of progressing the fulfilment of a right. For example, a notice asking for more information regarding the scope of the right, or providing information on where to access the data provided under a right.
has personal data
Indicates association with Personal Data
Targeted Advertising
Purposes associated with creating and providing pesonalised advertisement where the personalisation is targeted to a specific individual or group of individuals
has human involvement
Indicates Involvement of humans in processing such as within automated decision making process
Human involvement is also relevant to 'human in the loop'
Georg P. Krog, Paul Ryan, Harshvardhan J. Pandit
Make Available
to transform or publish data to be used
Zero Knowledge Authentication
Authentication using Zero-Knowledge proofs
has representative
Specifies representative of the legal entity
Harshvardhan J.Pandit, Georg P Krog, Paul Ryan, Beatriz Esteves
Data Subject
The individual (or category of individuals) whose personal data is being processed
The term 'data subject' is specific to the GDPR, but is functionally equivalent to the term 'individual associated with data' and the ISO/IEC term 'PII Principle'
(GDPR Art.4-1g,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_1/oj)
has data volume
Indicates the volume of data
Password Authentication
Use of passwords to perform authentication
(ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
GuidelinesPrinciple
Guidelines or Principles regarding processing and operational measures
Explicitly Expressed Consent
Consent that is expressed through an explicit action solely conveying a consenting decision
Explicitly expressed consent is a more specific form of Expressed consent where the action taken must 'explicitly' relate to only the consent decision. Expressed consent where the consenting is part of other matters therefore cannot satisfy the requirements of explicitly expressed consent. An example of explicit action expressing the consenting decision is a button on a web form where the form only relates to consent, or it is accompanied with suitable text that reiterates what the consenting decision is about
Georg P Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
Location
A location is a position, site, or area where something is located
Location may be geographic, physical, or virtual.
Identity Management Method
Management of identity and identity-based processes
Employee
Data subjects that are employees
Data Sanitisation Technique
Cleaning or any removal or re-organisation of elements in data based on selective criteria
Required
Indication of 'required' or 'necessary'
Academic Research
Purposes associated with conducting or assisting with research conducted in an academic context e.g. within universities
Marketing
Purposes associated with conducting marketing in relation to organisation or products or services e.g. promoting, selling, and distributing
Was commercial interest, changed to consider Marketing a separate Purpose category by itself
Purpose
Purpose or Goal of processing data or using technology
The purpose or goal here is intended to sufficiently describe the intention or objective of why the data or technology is being used, and should be broader than mere technical descriptions of achieving a capability. For example, "Analyse Data" is an abstract purpose with no indication of what the analyses is for as compared to a purpose such as "Marketing" or "Service Provision" which provide clarity and comprehension of the 'purpose' and can be enhanced with additional descriptions.
(SPECIAL Project,https://specialprivacy.ercim.eu/)
Safeguard
A safeguard is a precautionary measure for the protection against or mitigation of negative effects
This concept is relevant given the requirement to assert safeguards in cross-border data transfers
David Hickey, Paul Ryan, Georg P Krog, Harshvardhan J. Pandit
Sporadic Scale Of Data Subjects
Scale of data subjects considered sporadic or sparse within the context
has data
Indicates associated with Data (may or may not be personal)
Consent Status
The state or status of 'consent' that provides information reflecting its operational status and validity for processing data
States are useful as information artefacts to implement them in controlling processing, and to reflect the process and flow of obtaining and maintaining consent. For example, a database table that stores consent states for specific processing and can be queried to obtain them in an efficient manner. States are also useful in investigations to determine the use and validity of consenting practices
(GConsent,https://w3id.org/GConsent)
User
Data subjects that use service(s)
Copy
to produce an exact reproduction of the data
Third-Party Agreement
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data between a Data Controller or Processor and a Third Party
Material Damage
Impact that acts as or causes material damages
Organisational Unit
Entity within an organisation that does not constitute as a separate legal entity
Retrieve
to retrieve data, often in an automated manner
Records of Activities
Records of activities within some context such as maintainence tasks or governance functions
Trusted Execution Environments
Use of cryptographic methods to restrict access and execution to trusted parties and code within a dedicated execution environment
Human not involved
Humans are not involved in the specified context
This maps to Autonomous and Full Automation models if no humans are involved.
Audit Not Required
State where an audit is determined as not being required
Fixed Occurences Duration
Duration that takes place a fixed number of times e.g. 3 times
Conditional Automation
Sustained and specific performance by a system, with an external agent ready to take over when necessary
Human Involvement is implied here, e.g. for intervention, input, decisions
has personal data handling
Indicates association with Personal Data Handling
Visitor
Data subjects that are temporary visitors
Sector
Sector describes the area of application or domain that indicates or restricts scope for interpretation and application of purpose e.g. Agriculture, Banking
There are various sector codes used commonly to indicate the domain of an organisation or business. Examples include NACE (EU), ISIC (UN), SIC and NAICS (USA).
Symmetric Cryptography
Use of cryptography where the same keys are utilised for encryption and decryption of information
Social Media Marketing
Purposes associated with conducting marketing through social media
Communication for Customer Care
Customer Care Communication refers to purposes associated with communicating with customers for assisting them, resolving issues, ensuring satisfaction, etc. in relation to services provided
Likelihood
The likelihood or probability or chance of something taking place or occuring
Likelihood can be expressed in a subjective manner, such as 'Unlikely', or in a quantitative manner such as "Twice in a Day" (frequency per period). The suggestion is to use quantitative values, or to associate them with subjective terms used so as to enable accurate interpretations and interoperability. See the concepts related to Frequency and Duration for possible uses as a combination to express Likelihood.
Data Controller Contract
Creation, completion, fulfilment, or performance of a contract, with Data Controllers as parties being Joint Data Controllers, and involving specified processing
has scale
Indicates the scale of specified concept
Document Security
Security measures enacted over documents to protect against tampering or restrict access
Store
to keep data for future use
Data Processor
A ‘processor’ means a natural or legal person, public authority, agency or other body which processes data on behalf of the controller.
(GDPR Art.4-8,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_8/oj)
Damage
Impact that acts as or causes damages
Processing Context
Context or conditions within which processing takes place
Human Involvement for Verification
Human involvement for the purposes of verification of specified context to ensure its operations, inputs, or outputs are correct or are acceptable.
Verification by itself does not imply ability to Control, Intervene, or having Oversight.
Privacy Preserving Protocol
Use of protocols designed with the intention of provided additional guarantees regarding privacy
Security Assessment
Assessment of security intended to identity gaps, vulnerabilities, risks, and effectiveness of controls
Personalised Advertising
Purposes associated with creating and providing personalised advertising
Consent Status Valid for Processing
States of consent that can be used as valid justifications for processing data
Practically, given consent is the only valid state for processing
has algorithmic logic
Indicates the logic used in processing such as for automated decision making
Data Processor Contract
Creation, completion, fulfilment, or performance of a contract, with the Data Controller and Data Processor as parties, and involving specified processing
Global Scale
Geographic coverage spanning the entire globe
Symmetric Encryption
Use of symmetric cryptography to encrypt data
is representative for
Indicates the entity is a representative for specified entity
Payment Management
Purposes associated with processing and managing payment in relation to service, including invoicing and records
Notice
A notice is an artefact for providing information, choices, or controls
Paul Ryan, David Hickey, Georg P Krog, Harshvardhan J. Pandit
Request Status Query
State of a request's status being queried
has audit status
Indicates the status of audit associated with specified concept
Privacy Impact Assessment
Carrying out an impact assessment regarding privacy risks
Web Security Protocols
Security implemented at or over web-based protocols
High Automation
The system performs parts of its mission without external intervention
is after
Indicates the specified concepts is 'after' this concept in some context
Georg P. Krog, Harshvardhan J. Pandit, Julian Flake
Specifying a RightExerciseActivity occurs before another RightExerciseActivity
Digital Rights Management
Management of access, use, and other operations associated with digital content
ConfidentialData
Data deemed confidential
DGA 5.10
Authentication Protocols
Protocols involving validation of identity i.e. authentication of a person or information
Third Party
A ‘third party’ means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and people who, under the direct authority of the controller or processor, are authorised to process personal data.
(GDPR Art.4-10,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_10/oj)
has duration
Indicates information about duration
Disaster Recovery Procedures
Procedures related to management of disasters and recovery
WebBrowser Security
Security implemented at or over web browsers
has name
Specifies name of a legal entity
Legal Basis
Legal basis used to justify processing of data or use of technology in accordance with a law
Legal basis (plural: legal bases) are defined by legislations and regulations, whose applicability is usually restricted to specific jurisdictions which can be represented using dpv:hasJurisdiction or dpv:hasLaw. Legal basis can be used without such declarations, e.g. 'Consent', however their interpretation will require association with a law, e.g. 'EU GDPR'.
Vital Interest
Processing is necessary or required to protect vital interests of a data subject or other natural person
Customer Order Management
Customer Order Management refers to purposes associated with managing customer orders i.e. processing of an order related to customer's purchase of good or services
(Belgian DPA ROPA Template, https://www.privacycommission.be/nl/model-voor-een-register-van-de-verwerkingsactiviteiten)
Georg P Krog, Harshvardhan J. Pandit, Beatriz
Message Authentication Codes (MAC)
Use of cryptographic methods to authenticate messages
has location
Indicates information about location
Personal Data Process
An action, activity, or method involving personal data
Customer Solvency Monitoring
Customer Solvency Monitoring refers to purposes associated with monitor solvency of customers for financial diligence
Security Role Procedures
Procedures related to security roles
has frequency
Indicates the frequency with which something takes place
Identity Verification
Purposes associated with verifying or authorising identity as a form of security
Algorithmic Logic
The algorithmic logic applied or used
Algorithmic Logic is intended as a broad concept for explaining the use of algorithms and automated decisions making within Processing. To describe the actual algorithm, see the Algorithm concept.
Permission
A rule describing a permission to perform an activity
Primary Importance
Indication of 'primary' or 'main' or 'core' importance
Usage Control
Management of usage, which is intended to be broader than access control and may cover trust, digital rights, or other relevant controls
has organisational measure
Indicates use or applicability of Organisational measure
Scoring of Individuals
Processing that involves scoring of individuals
Obtain
to solicit or gather data from someone
Request Rejected
State of a request being rejected towards non-fulfilment
Fraud Prevention and Detection
Purposes associated with fraud detection, prevention, and mitigation
Private Location
Location that is not or cannot be accessed by the public and is controlled as a private space
Data
A broad concept representing 'data' or 'information'
Activity Ongoing
State of an activity occuring in continuation i.e. currently ongoing
Remove
to destruct or erase data
Quantum Cryptography
Cryptographic methods that utilise quantum mechanical properties to perform cryptographic tasks
Post-Quantum Cryptography
Use of algorithms that are intended to be secure against cryptanalytic attack by a quantum computer
Hash-based Message Authentication Code (HMAC)
Use of HMAC where message authentication code (MAC) utilise a cryptographic hash function and a secret cryptographic key
has applicable law
Indicates applicability of a Law
Data Privacy Vocabulary (DPV)
The Data Privacy Vocabulary (DPV) provides terms (classes and properties) to represent information about processing of personal data, for example - purposes, processing operations, personal data, technical and organisational measures.
Harshvardhan J. Pandit
Governance Procedures
Procedures related to governance (e.g. organisation, unit, team, process, system)
Service Usage Analytics
Purposes associated with conducting analysis and reporting related to usage of services or products
Was "UsageAnalytics", prefixed with Service to better reflect scope
SensitiveData
Data deemed sensitive
is indicated at time
Specifies the temporal information for when the entity has indicated the specific context
Inferred Data
Data that has been obtained through inferences of other data
Adult
A natural person that is not a child i.e. has attained some legally specified age of adulthood
Maintain Fraud Database
Purposes associated with maintaining a database related to identifying and identified fraud risks and fraud incidents
Consent Status Invalid for Processing
States of consent that cannot be used as valid justifications for processing data
This identifies the stages associated with consent that should not be used to process data
Transform
to change the form or nature of data
For-Profit Organisation
An organisation that aims to achieve profit as its primary goal
Job Applicant
Data subjects that apply for jobs or employments
Organise
to organize data for arranging or classifying
Authority
An authority with the power to create or enforce laws, or determine their compliance.
Georg Krog, Paul Ryan, Harshvardhan Pandit
has status
Indicates the status of specified concept
Indicates the status of a Right Exercise Activity
Sell Products to Data Subject
Purposes associated with selling products or services to the user, consumer, or data subjects
Sell Products here refers to processing necessary to provide and complete a sale to customers. It should not be confused with providing services with a cost based on an established agreement.
Impact Assessment
Calculating or determining the likelihood of impact of an existing or proposed process, which can involve risks or detriments.
Informed Consent
Consent that is informed i.e. with the requirement to provide sufficient information to make a consenting decision
The specifics for what information should be provided or made available will depend on the context, use-case, or relevant legal requirements
Sell Data to Third Parties
Purposes associated with selling or sharing data or information to third parties
Sell here means exchange, submit, or provide in return for direct or indirect compensation. Was subclass of commercial interest, changed to reflect selling something
has activity status
Indicates the status of activity of specified concept
Partial Automation
Some sub-functions of the system are fully automated while the system remains under the control of an external agent
Human Involvement is implied here, specifically the ability to Control operations, but also possibly for intervention, oversight, and verification
Human Resource Management
Purposes associated with managing humans and 'human resources' within the organisation for effective and efficient operations.
HR is a broad concept. Its management includes, amongst others - recruiting employees and intermediaries e.g. brokers, independent representatives; payroll administration, remunerations, commissions, and wages; and application of social legislation.
Paul Ryan, David Hickey, Georg P Krog, Harshvardhan J. Pandit, Beatriz Esteves
has authority
Indicates applicability of authority for a jurisdiction
Non-Material Damage
Impact that acts as or causes non-material damages
has personal data process
Indicates association with a Personal Data Process
Risk Management Policy
A policy or statement of the overall intentions and direction of an organisation related to risk management
(ISO 31073:2022,https://www.iso.org/standard/79637.html)
Provide Event Recommendations
Purposes associated with creating and providing personalised recommendations for events
has likelihood
Indicates the likelihood associated with a concept
Harshvardhan J. Pandit, Georg P Krog, Paul Ryan, Julian Flake
Pseudonymisation
Pseudonymisation means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person;
(GDPR Art.4-5,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_5/oj)
Service Provision
Purposes associated with providing service or product or activities
has identifier
Indicates an identifier associated for identification or reference
IntellectualPropertyData
Data protected by Intellectual Property rights and regulations
Privacy by Default
Practices regarding selecting appropriate data protection and privacy measures as the 'default' in an activity or service
has technical measure
Indicates use or applicability of Technical measure
Human involved
Humans are involved in the specified context
This concept only indicates that humans are involved. For specific involvement, see specialised concepts e.g. involved for input, oversight.
Country
A political entity indicative of a sovereign or non-sovereign territorial state comprising of distinct geographical areas
The definition of country is not intended for political interpretation. DPVCG welcomes alternate definitions based in existing sources with global scope, such as UN or ISO.
Guardian(s) of Data Subject
Guardian(s) of data subjects such as children
Non-Public Data Source
A source of data that is not publicly accessible or available
Georg P Krog, Harshvardhan J. Pandit, Beatriz Esteves, Paul Ryan, Julian Flake
is indicated by
Specifies entity who indicates the specific context
Use
to use data
Intrusion Detection System
Use of measures to detect intrusions and other unauthorised attempts to gain access to a system
Partially Compliant
State of partially being compliant i.e. only some objectives have been met, and others have not been in violation
Within Device
Location is local and entirely within a device, such as a smartphone
Commercial Research
Purposes associated with conducting research in a commercial setting or with intention to commercialise e.g. in a company or sponsored by a company
Transfer
to move data from one place to another
has data source
Indicates the source or origin of data being processed
Customer Relationship Management
Customer Relationship Management refers to purposes associated with managing and analysing interactions with past, current, and potential customers
National Scale
Geographic coverage spanning a nation
Record Management
Purposes associated with manage creation, storage, and use of records relevant to operations, events, and processes e.g. to store logs or access requests
This purpose relates specifiaclly for record creation and management. This can be combined or used along with other purposes to express intentions such as records for legal compliance or vendor payments.
Child
A 'child' is a natural legal person who is below a certain legal age depending on the legal jurisdiction.
The legality of age defining a child varies by jurisdiction. In addition, 'child' is distinct from a 'minor'. For example, the legal age for consumption of alcohol can be 21, which makes a person of age 20 a 'minor' in this context. In other cases, 'minor' and 'child' are used interchangeably to refer to a person below some legally defined age.
Necessity
An indication of 'necessity' within a context
Necessity can be used to express need, essentiality, requirement, or compulsion.
Joint Data Controllers Agreement
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data between Controllers within a Joint Controllers relationship
Service Personalisation
Purposes associated with providing personalisation within services or product or activities
Monotonic Counter Pseudonymisation
A simple pseudonymisation method where identifiers are substituted by a number chosen by a monotonic counter
Request Fulfilled
State of a request being fulfilled
Derived Data
Data that has been obtained through derivations of other data
Infer
to infer data from existing data
Infer indicates data that is derived without it being present or obtainable from existing data. For data that is presented, and is 'extracted' or 'obtained' from existing data, see Derive.
Combine
to join or merge data
(GDPR Art.4-2,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_2/oj), (SPECIAL Project,https://specialprivacy.ercim.eu/vocabs/processing)
Align
to adjust the data to be in relation to another data
Enforce Access Control
Purposes associated with conducting or enforcing access control as a form of security
Was previously "Access Control". Prefixed to distinguish from Technical Measure.
Information Security Policy
Policy regarding security of information
Lawfulness
Status associated with expressing lawfullness or legal compliance
has purpose
Indicates association with Purpose
Axel Polleres, Javier Fernández, Harshvardhan J. Pandit, Mark Lizar, Bud Bruegger
National Authority
An authority tasked with overseeing legal compliance for a nation
Seal
A seal or a mark indicating proof of certification to some certification or standard
has residual risk
Indicates the associated risk is the remaining or residual risk from applying mitigation measures or treatments to this risk
Consent Revoked
The state where the consent is revoked by an entity other than the data subject and which prevents it from being further used as a valid state
An example of this state is when a Data Controller stops utilising previously obtaining consent, such as when that service no longer exists
Sell Products
Purposes associated with selling products or services
Sell here means exchange, submit, or provide in return for direct or indirect compensation.
is implemented using technology
Indicates implementation details such as technologies or processes
The term 'technology' is inclusive of technologies, processes, and methods.
Beatriz Esteves, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
has impact
Indicates impact(s) possible or arising as consequences from specified concept
Harshvardhan J. Pandit, Julian Flake, Georg P Krog, Fajar Ekaputra, Beatriz Esteves
Applicant
Data subjects that are applicants in some context
Acitivity Not Completed
State of an activity that could not be completed, but has reached some end state
This relates to a 'Stop' state as distinct from a 'Halt' state. It makes no comments on whether the Acitivity can be resumed or continued towards completion.
has justification
Indicates a justification for specified concept or context
Specifying a justification for non-fulfilment of Right Exercise
Evaluation of Individuals
Processing that involves evaluation of individuals
Request Requires Action
State of a request requiring an action to be performed from another party
Vulnerable Data Subject
Data Subjects which should be considered 'vulnerable' and therefore would require additional measures and safeguards
This concept denotes a Data Subject or a group are vulnerable, but not what vulnerability they possess or its context. This information can be provided additionally as comments, or as separate concepts and relations. Proposals for this are welcome.
Risk Level
The magnitude of a risk expressed as an indication to aid in its management
Risk Levels can be defined as a combination of different characteristics. For example, ISO 31073:2022 defines it as a combination of consequences and their likelihood. Another example would be the Risk Matrix where Risk Level is defined as a combination of Likelihood and Severity associated with the Risk.
Duration
The duration or temporal limitation
Account Management
Account Management refers to purposes associated with account management, such as to create, provide, maintain, and manage accounts
Human Involvement for intervention
Human involvement for the purposes of exercising interventions over the specified operations in context
Intervention indicates the ability to intervene in operations, which can be at various stages. It maps to Conditional and High automation models.
Organisation
A general term reflecting a company or a business or a group acting as a unit
Region
A region is an area or site that is considered a location
is implemented by entity
Indicates implementation details such as entities or agents
The use of 'entity' is inclusive of entities (e.g. Data Processor) as well as 'agent' (e.g. DPO). For indicating technological implementation, the property isImplementedByTechnology should be used.
Indicates the Entity that implements or performs a Right Exercise Activity
Axel Polleres, Harshvardhan J. Pandit, Beatriz Esteves, Paul Ryan, Julian Flake
Secure Multi-Party Computation
Use of cryptographic methods for entities to jointly compute functions without revealing inputs
Entity
A human or non-human 'thing' that constitutes as an entity
Personnel Payment
Purposes associated with management and execution of payment of personnel
Immigrant
Data subjects that are immigrants (for a jurisdiction)
RNG Pseudonymisation
A pseudonymisation method where identifiers are substituted by a number chosen by a Random Number Generator (RNG)
Human Involvement for Input
Human involvement for the purposes of providing inputs to the specified context
Inputs can be in the form of data or other resources.
has relation with data subject
Indicates the relation between specified Entity and Data Subject
Location Locality
Locality refers to whether the specified location is local within some context, e.g. for the user
Active Right
The right(s) applicable, provided, or expected that need to be (actively) exercised
Active rights require the entity to expressly exercise them. For example, a Data Subject exercising their right to withdraw their consent.
Harshvardhan J Pandit, Beatriz Esteves, Georg P Krog, Paul Ryan
Legitimate Interest Assessment
Indicates an assessment regarding the use of legitimate interest as a lawful basis by the data controller
Fulfilment of Contractual Obligation
Purposes associated with carrying out data processing to fulfill a contractual obligation
Sensitive Personal Data
Personal data that is considered 'sensitive' in terms of privacy and/or impact, and therefore requires additional considerations and/or protection
Sensitivity' is a matter of context, and may be defined within legal frameworks. For GDPR, Special categories of personal data are considered a subset of sensitive data. To illustrate the difference between the two, consider the situation where Location data is collected, and which is considered 'sensitive' but not 'special'. As a probable rule, sensitive data require additional considerations whereas special category data requires additional legal basis / justifications.
Continous Frequency
Frequency where occurences are continous
Activity Completed
State of an activity that has completed i.e. is fully in the past
is authority for
Indicates area, scope, or applicability of an Authority
has impact on
Indicates the thing (e.g. plan, process, or entity) affected by an impact
has rule
Specifying applicability or inclusion of a rule within specified context
Location Fixture
The fixture of location refers to whether the location is fixed
Renewed Consent Given
The state where a previously given consent has been 'renewed' or 'refreshed' or 'reaffirmed' to form a new instance of given consent
An example of this state is when a previously given consent has expired, and the individual is presented a notice regarding continuing associated processing operations - to which they agree. This state can be useful to keep track of 'reconfirmed' or 'refreshed' consent within consent records, assist notices and contextual agents to create better consenting dialogues, and assist with specific legal obligations related to subsequent consenting
Vendor Management
Purposes associated with manage orders, payment, evaluation, and prospecting related to vendors
Non-Governmental Organisation
An organisation not part of or independent from the government
mitigates risk
Indicates risks mitigated by this concept
Encryption in Use
Encryption of data when it is being used
Technical Service Provision
Purposes associated with managing and providing technical processes and functions necessary for delivering services
Destruct
to process data in a way it no longer exists or cannot be repaired
Medium Scale Processing
Processing that takes place at medium scales (as specified by some criteria)
Passive Right
The right(s) applicable, provided, or expected that are always (passively) applicable
Passive rights do not require the entity to request or exercise them. They are considered to be always applicable. For example, the Right to Privacy (in EU) does not require an exercise for it to be fulfilled.
Vendor Records Management
Purposes associated with managing records and orders related to vendors
Personalised Benefits
Purposes associated with creating and providing personalised benefits for a service
has legal measure
Indicates use or applicability of Legal measure
has responsible entity
Specifies the indicated entity is responsible within some context
has data processor
Indiciates inclusion or applicability of a Data Processor
Conformant
State of being conformant
Indeterminate Duration
Duration that is indeterminate or cannot be determined
Indeterminate means (exact or otherwise) information about the duration cannot be determined, which is distinct from 'EndlessDuration' where it is known (or decided) that the duration is open-ended or without an end.
Local Location
Location is local
Service Optimisation
Purposes associated with optimisation of services or activities
Subclass of ServiceProvision since optimisation is usually considered part of providing services
Asymmetric Encryption
Use of asymmetric cryptography to encrypt data
Elderly Data Subject
Data subjects that are considered elderly (i.e. based on age)
Data Protection Officer
An entity within or authorised by an organisation to monitor internal compliance, inform and advise on data protection obligations and act as a contact point for data subjects and the supervisory authority.
(GDPR Art.37,https://eur-lex.europa.eu/eli/reg/2016/679/art_37/oj)
has address
Specifies address of a legal entity such as street address or pin code
Provide Personalised Recommendations
Purposes associated with creating and providing personalised recommendations
Fixed Location
Location that is fixed i.e. known to occur at a specific place
Design Standard
A set of rules or guidelines outlining criterias for design
Generated Data
Data that has been obtained through generation or creation as a source
Generate
to generate or create data
Filter
to filter or keep data for some criteria
Request Status
Status associated with requests
Compliance Violation
State where compliance cannot be achieved due to requirements being violated
Changed from "violation of compliance" for consistency with other terms
Recipient
Entities that receive data
Recipients indicate entities that receives data, for example personal data recipients can be a Third Party, Data Controller, or Data Processor.
(SPECIAL Project,https://specialprivacy.ercim.eu/),(GDPR Art.4-9g,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_9/oj)
Vendor Payment
Purposes associated with managing payment of vendors
Automation
Indication of degree or level of automation associated with specified context
Regional Scale
Geographic coverage spanning a specific region or regions
Risk Mitigation Measure
Measures intended to mitigate, minimise, or prevent risk.
Consequence of Success
The consequence(s) possible or arising from success of specified context
Scope
Indication of the extent or range or boundaries associated with(in) a context
Synthetic Data
Synthetic data reffers to artificially created data such that it is intended to resemble real data (personal or non-personal), but does not refer to any specific identified or identifiable individual, or to the real measure of an observable parameter in the case of non-personal data
Consent Given
The state where consent has been given
An example of this state is when the individual clicks on a button, ticks a checkbox, verbally agrees - or any other form that communicates their decision agreeing to the processing of data
Consent Withdrawn
The state where the consent is withdrawn or revoked specifically by the data subject and which prevents it from being further used as a valid state
This state can be considered a form of 'revocation' of consent, where the revocation can only be performed by the data subject. Therefore we suggest using ConsentRevoked when it is a non-data-subject entity, and ConsentWithdrawn when it is the data subject
Advertising
Purposes associated with conducting advertising i.e. process or artefact used to call attention to a product, service, etc. through announcements, notices, or other forms of communication
Advertising is a subset of Marketing. Advertising by itself does not indicate 'personalisation' i.e. personalised ads.
Authorisation Protocols
Protocols involving authorisation of roles or profiles to determine permission, rights, or privileges
Encryption in Transfer
Encryption of data in transit e.g. when being transferred from one location to another, including sharing
Improve Internal CRM Processes
Purposes associated with improving customer-relationship management (CRM) processes
Random Location
Location that is random or unknown
Data published by Data Subject
Data is published by the data subject
This refers to where that data was made publicly available by the data subject. An example of this would be a social media profile that the data subject has made publicly accessible.
Public Data Source
A source of data that is publicly accessible or available
The term 'Public' is used here in a broad sense. Actual consideration of what is 'Public Data' can vary based on several contextual or jurisdictional factors such as definition of open, methods of access, permissions and licenses.
Third Party Security Procedures
Procedures related to security associated with Third Parties
Data Importer
An entity that 'imports' data where importing is considered a form of data transfer
The term 'Data Importer' is used by the EU-EDPB as the entity that receives transferred data across borders. While the EDPB refers to the jurisdictional border of EU, the term within DPV can be used to denote any 'import' or reception of transfer or transmission of data and is thus a broader concept than the EDPB's definition.
(EDPB Recommendations 01/2020 on Data Transfers, https://edpb.europa.eu/our-work-tools/our-documents/recommendations/recommendations-012020-measures-supplement-transfer_en)
David Hickey, Georg Krog, Paul Ryan, Harshvardhan Pandit
Participant
Data subjects that participate in some context such as volunteers in a function
Consultation
Consultation is a process of receiving feedback, advice, or opinion from an external agency
Personnel Management
Purposes associated with management of personnel associated with the organisation e.g. evaluation and management of employees and intermediaries
Asylum Seeker
Data subjects that are asylum seekers
Deterministic Pseudonymisation
Pseudonymisation achieved through a deterministic function
has processing automation
Indicates the use or extent of automation associated with processing
Optimisation for Consumer
Purposes associated with optimisation of activities and services for consumer or user
The term optmisation here refers to the efficiency of the service in terms of technical provision (or similar means) with benefits for everybody. Personalisation implies making changes that benefit the current user or persona.
Sub-Processor Agreement
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data between a Data Processor and a Data (Sub-)Processor
Trusted Computing
Use of cryptographic methods to restrict access and execution to trusted parties and code
Security Procedure
Procedures associated with assessing, implementing, and evaluating security
Cryptographic Methods
Use of cryptographic methods to perform tasks
Personal Data
Data directly or indirectly associated or related to an individual.
This definition of personal data encompasses the concepts used in GDPR Art.4-1 for 'personal data' and ISO/IEC 2700 for 'personally identifiable information (PII)'.
User Interface Personalisation
Purposes associated with personalisation of interfaces presented to the user
Examples of user-interface personalisation include changing the language to match the locale
Singular Data Volume
Data volume that is considered singular i.e. a specific instance or single item
Prohibition
A rule describing a prohibition to perform an activity
Assistive Automation
The system assists an operator
Human Involvement is implied here, specifically the ability to make decisions regarding operations, but also possibly for intervention, oversight, and verification
Data Sub-Processor
A 'sub-processor' is a processor engaged by another processor
A 'Sub-Processor' is always a 'Processor' with the distinction of not directly being appointed by the 'Controller'
Access Control Method
Methods which restrict access to a place or resource
Information Flow Control
Use of measures to control information flows
has third country
Indicates applicability or relevance of a 'third country'
Consequence of Failure
The consequence(s) possible or arising from failure of specified context
Audit Approved
State of being approved through the audit
is exercised at
Indicates context or information about exercising a right
has consequence on
Indicates the thing (e.g. plan, process, or entity) affected by a consequence
Compliance Status
Status associated with Compliance with some norms, objectives, or requirements
File System Security
Security implemented over a file system
Personal Data Handling
An abstract concept describing 'personal data handling'
This concept will be deprecated in future updates. It is recommended to use dpv:PersonalDataProcess as the equivalent alternative which is better aligned with legal and operational terminology.
sunset
Risk Management Plan
A scheme within the risk management framework specifying the approach, the management components, and resources to be applied to the management of risk
Innovative Use of Existing Technologies
Involvement of existing technologies used in an innovative manner
Non-Personal Data Process
An action, activity, or method involving non-personal data, and asserting that no personal data is involved
Use of personal data within NonPersonalDataProcess should be considered a violation of the explicit constraint that no personal data is involved.
has contact
Specifies contact details of a legal entity such as phone or email
Disclose
to make data known
Modify
to modify or change data
Non-Profit Organisation
An organisation that does not aim to achieve profit as its primary goal
Cryptographic Authentication
Use of cryptography for authentication
Non-Commercial Research
Purposes associated with conducting research in a non-commercial setting e.g. for a non-profit-organisation (NGO)
Data Controller
The individual or organisation that decides (or controls) the purpose(s) of processing personal data.
The terms 'Controller', 'Data Controller', and 'PII Controller' refer to the same concept
(GDPR Art.4-7g,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_7/oj)
has scope
Indicates the scope of specified concept or context
Consequence
The consequence(s) possible or arising from specified context
Sell Insights from Data
Purposes associated with selling or sharing insights obtained from analysis of data
Disclose by Transmission
to disclose data by means of transmission
Vendor Selection Assessment
Purposes associated with managing selection, assessment, and evaluation related to vendors
Technical Measure
Technical measures used to safeguard and ensure good practices in connection with data and technologies
Third Country
Represents a country outside applicable or compatible jurisdiction as outlined in law
Regularity of Re-certification
Policy regarding repetition or renewal of existing certification(s)
has risk level
Indicates the associated risk level associated with a risk
Establish Contractual Agreement
Purposes associated with carrying out data processing to establish an agreement, such as for entering into a contract
Geographic Coverage
Indicate of scale in terms of geographic coverage
Harshvardhan J. Pandit, Georg P Krog, Paul Ryan
Cryptographic Key Management
Management of cryptographic keys, including their generation, storage, assessment, and safekeeping
Assessment
The document, plan, or process for assessment or determination towards a purpose e.g. assessment of legality or impact assessments
Official Authority of Controller
Processing necessary or authorised through the official authority granted to or vested in the Data Controller
Data Volume
Volume or Scale of Data
Harshvardhan J. Pandit, Georg P Krog, Rana Saniei
Context
Contextually relevant information
Context is a catch-all concept for information of relevance not possible to represent through other core concepts. DPV offers specific contextual concepts such as Necessity, Frequency, and Duration. More can be created by extending Context within use-cases.
Match
to combine, compare, or match data from different sources
(A29WP WP 248 rev.01 Guideliens on DPIA,https://ec.europa.eu/newsroom/article29/items/611236)
Law
A law is a set of rules created by government or authorities
Autonomous
The system is capable of modifying its operation domain or its goals without external intervention, control or oversight
Though Autonomous, such operations can still be associated with dpv:HumanInvolved e.g. for inputs, oversight or verification
(ISO/IEC 22989:2022 Artificial intelligence concepts and terminology,https://www.iso.org/standard/74296.html)
Trusted Third Party Utilisation
Utilisation of a trusted third party to provide or carry out a measure
Virtualisation Security
Security implemented at or through virtualised environments
Audit Requested
State of an audit being requested whose outcome is not yet known
Customer
Data subjects that purchase goods or services
note: for B2B relations where customers are organisations, this concept only applies for data subjects
has prohibition
Specifying applicability or inclusion of a prohibition rule within specified context
Data Redaction
Removal of sensitive information from a data or document
Network Security Protocols
Security implemented at or over networks protocols
Decision Making
Processing that involves decision making
has outcome
Indicates an outcome of specified concept or context
Use of Synthetic Data
Use of synthetic data to preserve privacy, security, or other effects and side-effects
Data Protection Impact Assessment (DPIA)
A DPIA involves determining the potential and actual impact of processing activities on individuals or groups of individuals
Top class: Impact Assessment, and DPIA is sub-class
Risk
A risk or possibility or uncertainty of negative effects, impacts, or consequences
Risks can be associated with one or more different concepts such as purpose, processing, personal data, technical or organisational measure
Vulnerability Testing Methods
Methods that assess or discover vulnerabilities in a system
Privacy Notice
Represents a notice or document outlining information regarding privacy
Georg P Krog, Paul Ryan, David Hickey, Harshvardhan J. Pandit
Hash Functions
Use of hash functions to map information or to retrieve a prior categorisation
Impact
The impact(s) possible or arising as a consequence from specified context
Impact is a stronger notion of consequence in terms of influence, change, or effect on something e.g. for impact assessments
Tourist
Data subjects that are tourists i.e. not citizens and not immigrants
has notice
Indicates the use or applicability of a Notice for the specified context
Locality Scale
Geographic coverage spanning a specific locality
For example, geographic scale of a city or an area within a city
StatisticallyConfidentialData
Data protected through Statistical Confidentiality regulations and agreements
DGA 2(20)
Enter Into Contract
Processing necessary to enter into contract
Security Method
Methods that relate to creating and providing security
Consumer
Data subjects that consume goods or services for direct use
Cybersecurity Assessment
Assessment of cybersecurity capabilities in terms of vulnerabilities and effectiveness of controls
Medium Data Volume
Data volume that is considered medium i.e. neither large nor small within the context
Consent Expired
The state where the temporal or contextual validity of consent has 'expired'
An example of this state is when the obtained consent has been assigned a duration - which has lapsed or 'expired', making it invalid to be used further for processing data
Uninformed Consent
Consent that is uninformed i.e. without requirement to provide sufficient information to make a consenting decision
Members and Partners Management
Purposes associated with maintaining a registry of shareholders, members, or partners for governance, administration, and management functions
Vital Interest of Natural Person
Processing is necessary or required to protect vital interests of a natural person
Right Exercise Activity
An activity representing an exercising of an active right
There may be multiple activities associated with exercising and fulfilling rights. See the RightExerciseRecord concept for record-keeping of such activities in a cohesive manner.
Observed Personal Data
Personal Data that has been collected through observation of the Data Subject(s)
Large Scale Processing
Processing that takes place at large scales (as specified by some criteria)
The exact definition of what constitutes "large scale" depends on use of jurisdictional, domain-specific, or other forms of externally defined criterias. Where possible, this should be reflected by extending this term with the appropriate context.
Transmit
to send out data
has jurisdiction
Indicates applicability of specified jurisdiction
Automated Decision Making
Processing that involves automated decision making
Automated decision making can be defined as “the ability to make decisions by technological means without human involvement.” (“Guidelines on Automated individual decision-making and Profiling for the purposes of Regulation 2016/679 (wp251rev.01)”, 2018, p. 8)
Request Accepted
State of a request being accepted towards fulfilment
Document Randomised Pseudonymisation
Use of randomised pseudonymisation where the same elements are assigned different values in the same document or database
Audit Required
State where an audit is determined as being required but has not been conducted
Representative
A representative of a legal entity
(GDPR Art.27,https://eur-lex.europa.eu/eli/reg/2016/679/art_27/oj)
Georg Krog, Paul Ryan, Harshvardhan J. Pandit, Beatriz Esteves
Collect
to gather data from someone
Generated Personal Data
Personal Data that is generated or brought into existence without relation to existing data i.e. it is not derived or inferred from other data
Generated Data is used to indicate data that is produced and is not derived or inferred from other data
Status
The status or state of something
Natural Person
A human
Full Automation
The system is capable of performing its entire mission without external intervention
Though Fully Automated such operations can still be associated with dpv:HumanInvolved e.g. for inputs, oversight or verification
Medium Scale Of Data Subjects
Scale of data subjects considered medium i.e. neither large nor small within the context
Consultation with Data Subject Representative
Consultation with representative of data subject(s)
has indication method
Specifies the method by which an entity has indicated the specific context
Local Environment Scale
Geographic coverage spanning a specific environment within the locality
For example, geographic scale of an event take place in a specific building or room
Process
An action, activity, or method
Subscriber
Data subjects that subscribe to service(s)
note: subscriber can be customer or consumer
Staff Training
Practices and policies regarding training of staff members
De-Identification
Removal of identity or information to reduce identifiability
(NISTIR 8053,https://nvlpubs.nist.gov/nistpubs/ir/2015/NIST.IR.8053.pdf)
has data controller
Indicates association with Data Controller
Citizen
Data subjects that are citizens (for a jurisdiction)
Processing
Operations or 'processing' performed on data
Data Transfer Impact Assessment
Impact Assessment for conducting data transfers
Innovative Use of New Technologies
Involvement of a new (innovative) technologies
New technologies are by definition considered innovative
Privacy by Design
Practices regarding incorporating data protection and privacy in the design of information and services
has data importer
Indiciates inclusion or applicability of a LegalEntity in the role of Data Importer
Singular Frequency
Frequency where occurences are singular i.e. they take place only once
Search Functionalities
Purposes associated with providing searching, querying, or other forms of information retrieval related functionalities
has permission
Specifying applicability or inclusion of a permission rule within specified context
Organisation Governance
Purposes associated with conducting activities and functions for governance of an organisation
has recipient third party
Indiciates inclusion or applicability of a Third Party as a Recipient of persona data
Data Protection Authority
An authority tasked with overseeing legal compliance regarding privacy and data protection laws.
Small Scale Of Data Subjects
Scale of data subjects considered small or limited within the context
Processing Condition
Conditions required or followed regarding processing of data or use of technologies
has technical and organisational measure
Indicates use or applicability of Technical or Organisational measure
A dataset, data service, or any other resource associated with Right Exercise - such as for providing a copy of data
Acquire
to come into possession or control of the data
has recipient data controller
Indiciates inclusion or applicability of a Data Controller as a Recipient of persona data
Within Physical Environment
Location is local and entirely within a physical environment, such as a room
Anonymised Data
Personal Data that has been (fully and completely) anonymised so that it is no longer considered Personal Data
It is advised to carefully consider indicating data is fully or completely anonymised by determining whether the data by itself or in combination with other data can identify a person. Failing this condition, the data should be denoted as PseudonymisedData. To indicate data is anonymised only for a specified entity (e.g. within an organisation), the concept ContextuallyAnonymisedData (as subclass of PseudonymisedData) should be used instead of AnonymisedData.
Specifying the format of provided information, for example a CSV dataset
Mobile Platform Security
Security implemented over a mobile platform
Personnel Hiring
Purposes associated with management and execution of hiring processes of personnel
is residual risk of
Indicates this risk is the remaining or residual risk from applying mitigation measures or treatments to specified risk
has recipient
Indicates Recipient of Data
Indicates the Recipient of a Right Exercise Activity
Fixed Multiple Locations
Location that is fixed with multiple places e.g. multiple cities
Legitimate Interest of Third Party
Legitimate Interests of a Third Party in conducting specified processing
Cybersecurity Training
Training methods related to cybersecurity
Operating System Security
Security implemented at or through operating systems
Legal Agreement
A legally binding agreement
Differential Privacy
Utilisation of differential privacy where information is shared as patterns or groups to withhold individual elements
Remote Location
Location is remote i.e. not local
Encryption at Rest
Encryption of data when being stored (persistent encryption)
Legal Compliance
Purposes associated with carrying out data processing to fulfill a legal or statutory obligation
This purpose only refers to processing that is additionally required in order to fulfill the obligations and requirements associated with a law. For example, the use of consent would have its own separate purposes, with this purpose addressing a legal requirement for maintaining consent record (along with RecordManagement). This purpose will typically be used with Legal Obligation as the legal basis.
Consent
Consent of the Data Subject for specified processing
has context
Indicates a purpose is restricted to the specified context(s)
Pseudonymised Data
Personal Data that has undergone a pseudonymisation process or a partial (incomplete) anonymisation process such that it is still considered Personal Data
has consequence
Indicates consenquence(s) possible or arising from specified concept
Removed plural suffix for consistency
Certification and Seal
Certifications, seals, and marks indicating compliance to regulations or practices
Penetration Testing Methods
Use of penetration testing to identify weaknesses and vulnerabilities through simulations
Evaluation and Scoring
Processing that involves evaluation and scoring of individuals
Data Backup Protocols
Protocols or plans for backing up of data
has storage condition
Indicates information about storage condition
Provide Product Recommendations
Purposes associated with creating and providing product recommendations e.g. suggest similar products
Legal Measure
Legal measures used to safeguard and ensure good practices in connection with data and technologies
Asymmetric Cryptography
Use of public-key cryptography or asymmetric cryptography involving a public and private pair of keys
has risk
Indicates applicability of Risk for this concept
Review Procedure
A procedure or process that reviews the correctness and validity of other measures and processes
Data Processing Record
Record of data processing, whether ex-ante or ex-post
Technical and Organisational Measure
Technical and Organisational measures used to safeguard and ensure good practices in connection with data and technologies
Secondary Importance
Indication of 'secondary' or 'minor' or 'auxiliary' importance
Scale
A measurement along some dimension
Scales are subjective concepts that need to be defined and interpreted within the context of their application. For example, what would be small within one context could be large within another.
Fixed Singular Location
Location that is fixed at a specific place e.g. a city
NonConformant
State of being non-conformant
Optimise User Interface
Purposes associated with optimisation of interfaces presented to the user
Assess
to assess data for some criteria
Large Data Volume
Data volume that is considered large within the context
Consent Requested
State where a request for consent has been made and is awaiting a decision
An example of this state is when a notice has been presented to the individual but they have not made a decision
Educational Training
Training methods that are intended to provide education on topic(s)
Small Data Volume
Data volume that is considered small or limited within the context
Federated Locations
Location that is federated across multiple separate areas with designation of a primary or central location
Audit Status
Status associated with Auditing or Investigation
Specfiying the temporal validity of an activity associated with Right Exercise. For example, limits on duration for providing or accessing provided information
Consent Request Deferred
State where a request for consent has been deferred without a decision
An example of this state is when the individual closes or dismisses a notice without making a decision. This state is intended for making the distinction between a notice being provided (as a consent request) and the individual interacting with the notice without making a decision - where the 'ignoring of a notice' is taken as consent being neither given nor refused
Supra-National Authority
An authority tasked with overseeing legal compliance for a supra-national union e.g. EU
Singular Scale Of Data Subjects
Scale of data subjects considered singular i.e. a specific data subject
Professional Training
Training methods that are intended to provide professional knowledge and expertise
Contractual Terms
Contractual terms governing data handling within or with an entity
Cloud Location
Location that is in the 'cloud' i.e. a logical location operated over the internet
Security Knowledge Training
Training intended to increase knowledge regarding security
Consent Record
A Record of Consent or Consent related activities
Contract Performance
Fulfilment or performance of a contract involving specified processing
Storage Location
Location or geospatial scope where the data is stored
Distributed System Security
Security implementations provided using or over a distributed system
Derived Personal Data
Personal Data that is obtained or derived from other data
Derived Data is data that is obtained through processing of existing data, e.g. deriving first name from full name. To indicate data that is derived but which was not present or evident within the source data, InferredPersonalData should be used.
(DPVCG, https://www.w3.org/community/dpvcg/)
Elmar Kiesling; Harshvardhan J. Pandit, Fajar Ekaputra
Audit Conditionally Approved
State of being conditionally approved through the audit
A "conditional approval" is intended to reflect states where the audit has identified further changes which must be implemented before considering the audit has been 'passed', without requiring another audit to validate them. This is distinct from the case where an audit has state 'rejected', which means changes must be made and submitted for review. The requirements of a 'conditional acceptance' are expected to be minor or not significant enough to warrant another audit to review them.
Right Non-Fulfilment Notice
Notice provided regarding non-fulfilment of a right
This notice is associated with situations where information is provided with the intention of communicating non-fulfilment of a right. For example, to provide justifications on why a right could not be fulfilled or providing information about another entity who should be approached for exercising this right.
Counter Money Laundering
Purposes associated with detection, prevention, and mitigation of mitigate money laundering
Activity Halted
State of an activity that was occuring in the past, and has been halted or paused or stoped
Dispute Management
Purposes associated with activities that manage disputes by natural persons, private bodies, or public authorities relevant to organisation
Analyse
to study or examine the data in detail
Legitimate Interest of Controller
Legitimate Interests of a Data Controller in conducting specified processing
Alter
to change the data without changing it into something else
has non-personal data process
Indicates association with a Non-Personal Data Process
has consent status
Specifies the state or status of consent
Observed Data
Data that has been obtained through observations of a source
Data Subject Contract
Creation, completion, fulfilment, or performance of a contract, with the Data Controller and Data Subject as parties, and involving specified processing
Erase
to delete data
has country
Indicates applicability of specified country
Single Sign On
Use of credentials or processes that enable using one set of credentials to authenticate multiple contexts.
Consent Invalidated
The state where consent has been deemed to be invalid
An example of this state is where an investigating authority or a court finds the collected consent did not meet requirements, and 'invalidates' both prior and future uses of it to carry out processing
Safeguard for Data Transfer
Represents a safeguard used for data transfer. Can include technical or organisational measures.
Multi-Factor Authentication (MFA)
An authentication system that uses two or more methods to authenticate
is before
Indicates the specified concepts is 'before' this concept in some context
has data exporter
Indiciates inclusion or applicability of a LegalEntity in the role of Data Exporter
Increase Service Robustness
Purposes associated with improving robustness and resilience of services
has data protection officer
Specifices an associated data protection officer
Huge Scale Of Data Subjects
Scale of data subjects considered huge or more than large within the context
Storage Condition
Conditions required or followed regarding storage of data
Controller-Processor Agreement
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data between a Data Controller and a Data Processor
Legitimate Interest
Legitimate Interests of a Party as justification for specified processing
Review Impact Assessment
Procedures to review impact assessments in terms of continued validity, adequacy for intended purposes, and conformance of processes with findings
Physical Measure
Physical measures used to safeguard and ensure good practices in connection with data and technologies
Consultation with Data Subject
Consultation with data subject(s) or their representative(s)
Improve Existing Products and Services
Purposes associated with improving existing products and services
Severity
The magnitude of being unwanted or having negative effects such as harmful impacts
Severity can be associated with Risk, or its Consequences and Impacts
has obligation
Specifying applicability or inclusion of an obligation rule within specified context
Authentication using PABC
Use of Privacy-enhancing Attribute Based Credentials (ABC) to perform and manage authentication
Biometric Authentication
Use of biometric data for authentication
has data subject
Indicates association with Data Subject
has processing
Indicates association with Processing
SensitiveNonPersonalData
Non-personal data deemed sensitive
DGA 30(a)
Activity Monitoring
Monitoring of activities including assessing whether they have been successfully initiated and completed
Non-Personal Data
Data that is not Personal Data
The term NonPersonalData is provided to distinguish between PersonalData and other data, e.g. for indicating which data is regulated by privacy laws. To specify personal data that has been anonymised, the concept AnonymisedData should be used as the anonymisation process has a risk of not being fully effective and such anonymous data may be found to be personal data depending on circumstances.
Fulfilment of Obligation
Purposes associated with carrying out data processing to fulfill an obligation
Until Event Duration
Duration that takes place until a specific event occurs e.g. Account Closure
Data Controller as Data Source
Data Sourced from Data Controller(s), e.g. a Controller inferring data or generating data
Query
to query or make enquiries over data
Human Involvement for Oversight
Human involvement for the purposes of having oversight over the specified context regarding its operations, inputs, or outputs
Oversight by itself does not indicate the ability to intervene or control the operations.
Consent Notice
A Notice for information provision associated with Consent
Public Relations
Purposes associated with managing and conducting public relations processes, including creating goodwill for the organisation
Justification
A form of documentation providing reaosns, explanations, or justifications
Credit Checking
Purposes associated with monitoring, performing, or assessing credit worthiness or solvency
Data Subject as Data Source
Data Sourced from Data Subject(s), e.g. when data is collected via a form or observed from their activities
Right Exercise Notice
Information associated with exercising of an active right
This concept is intended for providing information regarding a right exercise. For specific instances of such exercises, see RightExerciseActivity and RightExerciseRecord.
Internal Resource Optimisation
Purposes associated with optimisation of internal resource availability and usage for organisation
Authorisation Procedure
Procedures for determining authorisation through permission or authority
non-technical authorisation procedures: How is it described on an organisational level, who gets access to the data
Data Transfer Legal Basis
Specific or special categories and instances of legal basis intended for justifying data transfers
Collected Data
Data that has been obtained by collecting it from a source
CommerciallyConfidentialData
Data protected through Commercial Confidentiality Agreements
DGA 6.5(c)
Request Acknowledged
State of a request being acknowledged
Incident Reporting Communication
Procedures related to management of incident reporting
Public Location
Location that is or can be accessed by the public
Student
Data subjects that are students
Communication Management
Communication Management refers to purposes associated with providing or managing communication activities e.g. to send an email for notifying some information
This purpose by itself does not sufficiently and clearly indicate what the communication is about. As such, it is recommended to combine it with another purpose to indicate the application. For example, Communication of Payment.
Repair Impairments
Purposes associated with identifying, rectifying, or otherwise undertaking activities intended to fix or repair impairments to existing functionalities
An example of identifying and rectifying impairments is the process of finding and fixing errors in products, commonly referred to as debugging
Not Automated
The operator fully controls the system
Human Involvement is necessary here as there is no automation
Credential Management
Management of credentials and their use in authorisations
Enforce Security
Purposes associated with ensuring and enforcing security for data, personnel, or other related matters
Was previous "Security". Prefixed to distinguish from TechOrg measures.
Data Processing Agreement
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of data
For specific role-based data processing agreements, see concepts for Processors and JointDataController agreements.
Implied Consent
Consent that is implied indirectly through an action not associated solely with conveying a consenting decision
Implied consent is expected to also be Informed Consent. An example is a CCTV notice outside a monitored area that informs the individuals that by walking in they would be consenting to the use of camera for surveillance.
Optimisation for Controller
Purposes associated with optimisation of activities and services for provider or controller
Policy
A guidance document outlining any of: procedures, plans, principles, decisions, intent, or protocols.
Consultation with DPO
Consultation with Data Protection Officer(s)
Restrict
to apply a restriction on the processing of specific records
Access
to access data
Small Scale Processing
Processing that takes place at small scales (as specified by some criteria)
Customer Claims Management
Customer Claims Management refers to purposes associated with managing claims, including repayment of monies owed
Asset Management Procedures
Procedures related to management of assets
Request Action Delayed
State of a request being delayed towards fulfilment
has right
Indicates use or applicability of Right
Client
Data subjects that are clients or recipients of services
Huge Data Volume
Data volume that is considered huge or more than large within the context
Secret Sharing Schemes
Use of secret sharing schemes where the secret can only be reconstructed through combination of sufficient number of individuals
Rule
A rule describing a process or control that directs or determines if and how an activity should be conducted
Incident Management Procedures
Procedures related to management of incidents
Joint Data Controllers
A group of Data Controllers that jointly determine the purposes and means of processing
While Joint Data Controllers operate together, they are made up of individually distinct legal entities. To indicate the membership of this group, hasDataController should be used to denote each Data Controller. The concept of Joint Data Controllers also allows specifying a single group as the 'Controller' and to specify role and responsibilities within that group for each entity using DPV's concepts (e.g. isImplementedByEntity)
Monitoring Policies
Policy for monitoring (e.g. progress, performance)
Right
The right(s) applicable, provided, or expected
A 'right' is a legal, social, or ethical principle of freedom or entitlement which dictate the norms regarding what is allowed or owed. Rights as a concept encompass a broad area of norms and entities, and are not specific to Individuals or Data Protection / Privacy. For individual specific rights, see dpv:DataSubjectRight
Harshvardhan J Pandit, Beatriz Esteves, Georg P Krog
Conformance Status
Status associated with conformance to a standard, guideline, code, or recommendation
Special Category Personal Data
Sensitive Personal Data whose use requires specific additional legal permission or justification
The term 'special category' is based on GDPR Art.9, but should not be considered as exlusive to it. DPV considers all Special Categories to also be Sensitive, but whose use is either prohibited or regulated and therefore requires additional legal basis for justification that is separate from that for general personal data.
(GDPR Art.9-1, https://eur-lex.europa.eu/eli/reg/2016/679/art_9/par_1/oj)
Third Party Contract
Creation, completion, fulfilment, or performance of a contract, with the Data Controller and Third Party as parties, and involving specified processing
Direct Marketing
Purposes associated with conducting direct marketing i.e. marketing communicated directly to the individual
Compliance Unknown
State where the status of compliance is unknown
Private Information Retrieval
Use of cryptographic methods to retrieve a record from a system without revealing which record is retrieved
Harm
Impact that acts as or causes harms
changed
Academic or Scientific Organisation
Organisations related to academia or scientific pursuits e.g. Universities, Schools, Research Bodies
Sporadic Frequency
Frequency where occurences are sporadic or infrequent or sparse
Patient
Data subjects that receive medican attention, treatment, care, advice, or other health related services
Customer Management
Customer Management refers to purposes associated with managing activities related with past, current, and future customers
Certification
Certification mechanisms, seals, and marks for the purpose of demonstrating compliance
Maintain Credit Rating Database
Purposes associated with maintaining a Credit Rating Database
Digital Signatures
Expression and authentication of identity through digital information containing cryptographic signatures
Legitimate Interest of Data Subject
Legitimate Interests of the Data Subject in conducting specified processing
Record
to make a record (especially media)
Human Involvement for decision
Human involvement for the purposes of exercising decisions over the specified operations in context
Decisions are about exercising control over the operation, and are distinct from input (data or parameters).
Data Subject Scale
Scale of Data Subject(s)
Anonymise
to irreversibly alter personal data in such a way that an unique data subject can no longer be identified directly or indirectly or in combination with other data
has geographic coverage
Indicate the geographic coverage (of specified context)
Collected Personal Data
Personal Data that has been collected from another source such as the Data Subject
To indicate the source of data, use the DataSource concept with the hasDataSource relation
Specfiying constraints on access associated with Rights Exercising (e.g. User must log in) or access to provided data (e.g. access via link)
Specifying a RightExerciseActivity is part of a RightExerciseRecord
Non Compliant
State of non-compliance where objectives have not been met, but have not been violated
Changed from not compliant for consistency in commonly used terms
Adapt
to modify the data, often rewritten into a new form for a new use
Systematic Monitoring
Processing that involves systematic monitoring of individuals
Human Involvement for control
Human involvement for the purposes of exercising control over the specified operations in context
Control is a broad term that can be applied to various stages and operations. It maps to None, Assistive, and Partial automation models.
Multi National Scale
Geographic coverage spanning multiple nations
Specifying a RightExerciseRecord has RightExerciseActivity as part of its records
Activity Proposed
State of an activity being proposed or planned i.e. yet to occur
Physical Access Control Method
Access control applied for physical access e.g. premises or equipment
Encryption
Technical measures consisting of encryption
Data Source
The source or origin of data
Source' is the direct point of data collection; 'origin' would indicate the original/others points of where the data originates from.
Legal Obligation
Legal Obligation to conduct the specified processing
Processing Duration
Conditions regarding Duration for processing of data or use of technologies
Non-Citizen
Data subjects that are not citizens (for a jurisdiction)
Indicates a web page or document providing information or functionality associated with a Right Exercise
Identifying Personal Data
Personal Data that explicitly and by itself is sufficient to identify a person
DPV does not use PII ('Personally Identifiable Information') as it has varying and conflicting definitions across sources. Instead the concept 'identifying personal data' is intended to provide a clear categorisation of its interpretation. Where multiple data categories can be combined to create an 'identifying' category e.g. fingerprinting, this concept represents the combined category.
is mitigated by measure
Indicate a risk is mitigated by specified measure
Storage Restoration
Regularity and temporal span of data restoration/backup mechanisms that guarantee that data is preserved
Compliant
State of being fully compliant
Not Required
Indication of neither being required nor optional i.e. not relevant or needed
Pseudonymise
to replace personal identifiable information by artificial identifiers
Background Checks
Procedure where the background of an entity is assessed to identity vulnerabilities and threats due to their current or intended role
Request Required Action Performed
State of a request's required action having been performed by the other party
Maintain Credit Checking Database
Purposes associated with maintaining a Credit Checking Database
Detriment
Impact that acts as or causes detriments
International Organisation
An organisation and its subordinate bodies governed by public international law, or any other body which is set up by, or on the basis of, an agreement between two or more countries
(GDPR Art.4-26,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_26/oj)
Wireless Security Protocols
Security implemented at or over wireless communication protocols
Non-Disclosure Agreement (NDA)
Non-disclosure Agreements e.g. preserving confidentiality of information
Data Protection Training
Training intended to increase knowledge regarding data protection
Personalisation
Purposes associated with creating and providing customisation based on attributes and/or needs of person(s) or context(s).
This term is a blanket purpose category for indicating personalisation of some other purpose, e.g. by creating a subclass of the other concept and Personalisation
Expressed Consent
Consent that is expressed through an action intended to convey a consenting decision
Expressed consent requires the individual take a specific and unambigious action that directly indicates their consent. This action may be a part of other processes such as setting preferences, or agreeing to a contract, or other matters not relating to consent. An example of expressed consent is interacting with a checkbox within a dashboard or clicking a button on a web form
Mentally Vulnerable Data Subject
Data subjects that are considered mentally vulnerable
Derive
to create new derivative data from the original data
Derive indicates data is present or obtainable from existing data. For data that is created without such existence, see Infer.
Storage Duration
Duration or temporal limitation on storage of data
Consult
to consult or query data
Variable Location
Location that is known but is variable e.g. somewhere within a given area
Homomorphic Encryption
Use of Homomorphic encryption that permits computations on encrypted data without decrypting it
Inferred Personal Data
Personal Data that is obtained through inference from other data
Inferred Data is derived data generated from existing data, but which did not originally exist within it, e.g. inferring demographics from browsing history.
Request Unfulfilled
State of a request being unfulfilled
Unlawful
State of being unlawful or legally non-compliant
Public Interest
Processing is necessary or beneficial for interest of the public or society at large
Economic Union
A political union of two or more countries based on economic or trade agreements
has sector
Indicates the purpose is associated with activities in the indicated (Economic) Sector(s)
Decentralised Locations
Location that is spread across multiple separate areas with no distinction between their importance
Effectiveness Determination Procedures
Procedures intended to determine effectiveness of other measures
Anti-Terrorism Operations
Purposes associated with activities that detect, prevent, mitigate, or perform other activities for anti-terrorism
Hardware Security Protocols
Security protocols implemented at or within hardware
has physical measure
Indicates use or applicability of Physical measure
Compliance Indeterminate
State where the status of compliance has not been fully assessed, evaluated, or determined
Until Time Duration
Duration that has a fixed end date e.g. 2022-12-31
End-to-End Encryption (E2EE)
Encrypted communications where data is encrypted by the sender and decrypted by the intended receiver to prevent access to any third party
Innovative use of Technology
Indicates that technology is being used in an innovative manner
Innovative here refers to 'state of the art' rather than the implementing entity, and can be for either new technology or new uses of existing technology
Unverified Data
Data that has not been verified in terms of accuracy, inconsistency, or quality
Parent(s) of Data Subject
Parent(s) of data subjects such as children
Endless Duration
Duration that is (known or intended to be) open ended or without an end
ThirdParty as Data Source
Data Sourced from a Third Party, e.g. when data is collected from an entity that is neither the Controller nor the Data Subject
Audit Rejected
State of not being approved or being rejected through the audit
Technology
The technology, technological implementation, or any techniques, skills, methods, and processes used or applied
Examples (non-exhaustive) include: Algorithm, Process, Method, Skill, Database, Cookies, Server, Device
Consent Refused
The state where consent has been refused
An example of this state is when the individual clicks on a 'disagree' or 'reject' or 'refuse' button, or leaves a checkbox unticked
Organisation Risk Management
Purposes associated with managing risk for organisation's activities
Frequency
The frequency or information about periods and repetitions in terms of recurrence.
Research and Development
Purposes associated with conducting research and development for new methods, products, or services
Consultation with Authority
Consultation with an authority or authoritative entity
Data Exporter
An entity that 'exports' data where exporting is considered a form of data transfer
The term 'Data Exporter' is used by the EU-EDPB as the entity that transfer data across borders. While the EDPB refers to the jurisdictional border of EU, the term within DPV can be used to denote any 'export' or transfer or transmission of data and is thus a broader concept than the EDPB's definition.
Data Subject Right
The rights applicable or provided to a Data Subject
Based on use of definitions, the notion of 'Data Subject Right' can be equivalent to 'Individual Right' or 'Right of a Person'
Beatriz Esteves, Georg P Krog, Harshvardhan Pandit
has severity
Indicates the severity associated with a concept
City
A region consisting of urban population and commerce
Processing Location
Conditions regarding Location for processing of data or use of technologies
Right Exercise Record
Record of a Right being exercised
This concept represents a record of one or more right exercise activities, such as those associated with a single data subject or service or entity
Monitor
to monitor data for some criteria
Profiling
to create a profile that describes or represents a person
Storage Deletion
Deletion or Erasure of data including any deletion guarantees
Nearly Global Scale
Geographic coverage nearly spanning the entire globe
Disseminate
to spread data throughout
Share
to give data (or a portion of it) to others
Optional
Indication of 'optional' or 'voluntary'
Incorrect Data
Data that is known to be incorrect or inconsistent with some requirements
Consent Unknown
State where information about consent is not available or is unknown
Consent states can be unknown, for example, when information is not available, or cannot be trusted, or is known to be inaccurate
Within Virtual Environment
Location is local and entirely within a virtual environment, such as a shared network directory
Sporadic Data Volume
Data volume that is considered sporadic or sparse within the context
has process
Indicates association with a Process