Specfiying constraints on access associated with Rights Exercising (e.g. User must log in) or access to provided data (e.g. access via link)
Specifying the format of provided information, for example a CSV dataset
Specifying a RightExerciseRecord has RightExerciseActivity as part of its records
Specifying a RightExerciseActivity is part of a RightExerciseRecord
Specfiying the temporal validity of an activity associated with Right Exercise. For example, limits on duration for providing or accessing provided information
A dataset, data service, or any other resource associated with Right Exercise - such as for providing a copy of data
Indicates a web page or document providing information or functionality associated with a Right Exercise
Harshvardhan J. Pandit
The Data Privacy Vocabulary (DPV) provides terms (classes and properties) to represent information about processing of personal data, for example - purposes, processing operations, personal data, technical and organisational measures.
Data Privacy Vocabulary (DPV)
Harshvardhan J. Pandit, Javier Fernandez, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
accepted
Purposes associated with conducting or assisting with research conducted in an academic context e.g. within universities
Academic Research
(ADMS controlled vocabulary,http://purl.org/adms)
Organisations related to academia or scientific pursuits e.g. Universities, Schools, Research Bodies
Academic or Scientific Organisation
to access data
Access
Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
Methods which restrict access to a place or resource
Access Control Method
Georg P Krog, Harshvardhan J. Pandit, Beatriz Esteves
Account Management refers to purposes associated with account management, such as to create, provide, maintain, and manage accounts
Account Management
(GDPR Art.4-2,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_2/oj)
to come into possession or control of the data
Acquire
Harshvardhan J Pandit, Beatriz Esteves, Georg P Krog, Paul Ryan
The right(s) applicable, provided, or expected that need to be (actively) exercised
Active Right
Active rights require the entity to expressly exercise them. For example, a Data Subject exercising their right to withdraw their consent.
State of an activity that has completed i.e. is fully in the past
Activity Completed
State of an activity that was occuring in the past, and has been halted or paused or stoped
Activity Halted
(ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
Monitoring of activities including assessing whether they have been successfully initiated and completed
Activity Monitoring
State of an activity that could not be completed, but has reached some end state
Acitivity Not Completed
This relates to a 'Stop' state as distinct from a 'Halt' state. It makes no comments on whether the Acitivity can be resumed or continued towards completion.
State of an activity occuring in continuation i.e. currently ongoing
Activity Ongoing
State of an activity being proposed or planned i.e. yet to occur
Activity Proposed
Status associated with activity operations and lifecycles
Activity Status
to modify the data, often rewritten into a new form for a new use
Adapt
A natural person that is not a child i.e. has attained some legally specified age of adulthood
Adult
Purposes associated with conducting advertising i.e. process or artefact used to call attention to a product, service, etc. through announcements, notices, or other forms of communication
Advertising
Advertising is a subset of Marketing. Advertising by itself does not indicate 'personalisation' i.e. personalised ads.
The algorithmic logic applied or used
Algorithmic Logic
Algorithmic Logic is intended as a broad concept for explaining the use of algorithms and automated decisions making within Processing. To describe the actual algorithm, see the Algorithm concept.
to adjust the data to be in relation to another data
Align
to change the data without changing it into something else
Alter
(SPECIAL Project,https://specialprivacy.ercim.eu/vocabs/processing)
to study or examine the data in detail
Analyse
(ISO 29100:2011,https://www.iso.org/standard/45123.html)
modified
Anonymisation is the process by which data is irreversibly altered in such a way that a data subject can no longer be identified directly or indirectly, either by the entity holding the data alone or in collaboration with other entities and information sources
Anonymisation
to irreversibly alter personal data in such a way that an unique data subject can no longer be identified directly or indirectly or in combination with other data
Anonymise
Personal Data that has been (fully and completely) anonymised so that it is no longer considered Personal Data
Anonymised Data
It is advised to carefully consider indicating data is fully or completely anonymised by determining whether the data by itself or in combination with other data can identify a person. Failing this condition, the data should be denoted as PseudonymisedData. To indicate data is anonymised only for a specified entity (e.g. within an organisation), the concept ContextuallyAnonymisedData (as subclass of PseudonymisedData) should be used instead of AnonymisedData.
Purposes associated with activities that detect, prevent, mitigate, or perform other activities for anti-terrorism
Anti-Terrorism Operations
Harshvardhan J. Pandit, Georg P. Krog, Julian Flake, Paul Ryan, Beatriz Esteves
Data subjects that are applicants in some context
Applicant
to assess data for some criteria
Assess
The document, plan, or process for assessment or determination towards a purpose e.g. assessment of legality or impact assessments
Assessment
(ENISA 5G Cybersecurity Standards,https://www.enisa.europa.eu/publications/5g-cybersecurity-standards)
Procedures related to management of assets
Asset Management Procedures
The system assists an operator
Assistive Automation
Human Involvement is implied here, specifically the ability to make decisions regarding operations, but also possibly for intervention, oversight, and verification
Data subjects that are asylum seekers
Asylum Seeker
Use of public-key cryptography or asymmetric cryptography involving a public and private pair of keys
Asymmetric Cryptography
(ENISA Data Pseudonymisation: Advanced Techniques and Use Cases,https://www.enisa.europa.eu/publications/data-pseudonymisation-advanced-techniques-and-use-cases)
Use of asymmetric cryptography to encrypt data
Asymmetric Encryption
State of being approved through the audit
Audit Approved
State of being conditionally approved through the audit
Audit Conditionally Approved
A "conditional approval" is intended to reflect states where the audit has identified further changes which must be implemented before considering the audit has been 'passed', without requiring another audit to validate them. This is distinct from the case where an audit has state 'rejected', which means changes must be made and submitted for review. The requirements of a 'conditional acceptance' are expected to be minor or not significant enough to warrant another audit to review them.
State where an audit is determined as not being required
Audit Not Required
State of not being approved or being rejected through the audit
Audit Rejected
State of an audit being requested whose outcome is not yet known
Audit Requested
State where an audit is determined as being required but has not been conducted
Audit Required
Status associated with Auditing or Investigation
Audit Status
(ENISA Data Protection Engineering,https://www.enisa.europa.eu/publications/data-protection-engineering)
Use of Attribute Based Credentials (ABC) to perform and manage authentication
Authentication using ABC
Use of Privacy-enhancing Attribute Based Credentials (ABC) to perform and manage authentication
Authentication using PABC
Protocols involving validation of identity i.e. authentication of a person or information
Authentication Protocols
Procedures for determining authorisation through permission or authority
Authorisation Procedure
non-technical authorisation procedures: How is it described on an organisational level, who gets access to the data
Protocols involving authorisation of roles or profiles to determine permission, rights, or privileges
Authorisation Protocols
Georg Krog, Paul Ryan, Harshvardhan Pandit
An authority with the power to create or enforce laws, or determine their compliance.
Authority
Processing that involves automated decision making
Automated Decision Making
Automated decision making can be defined as “the ability to make decisions by technological means without human involvement.” (“Guidelines on Automated individual decision-making and Profiling for the purposes of Regulation 2016/679 (wp251rev.01)”, 2018, p. 8)
Indication of degree or level of automation associated with specified context
Automation
(ISO/IEC 22989:2022 Artificial intelligence concepts and terminology,https://www.iso.org/standard/74296.html)
The system is capable of modifying its operation domain or its goals without external intervention, control or oversight
Autonomous
Though Autonomous, such operations can still be associated with dpv:HumanInvolved e.g. for inputs, oversight or verification
Procedure where the background of an entity is assessed to identity vulnerabilities and threats due to their current or intended role
Background Checks
Harshvardhan J. Pandit, Julian Flake, Georg P Krog, Fajar Ekaputra, Beatriz Esteves, Axel Polleres
Impact(s) that acts as or causes benefits
Benefit
Use of biometric data for authentication
Biometric Authentication
Certification mechanisms, seals, and marks for the purpose of demonstrating compliance
Certification
Certifications, seals, and marks indicating compliance to regulations or practices
Certification and Seal
A 'child' is a natural legal person who is below a certain legal age depending on the legal jurisdiction.
Child
The legality of age defining a child varies by jurisdiction. In addition, 'child' is distinct from a 'minor'. For example, the legal age for consumption of alcohol can be 21, which makes a person of age 20 a 'minor' in this context. In other cases, 'minor' and 'child' are used interchangeably to refer to a person below some legally defined age.
Data subjects that are citizens (for a jurisdiction)
Citizen
A region consisting of urban population and commerce
City
Data subjects that are clients or recipients of services
Client
Location that is in the 'cloud' i.e. a logical location operated over the internet
Cloud Location
A set of rules or procedures outlining the norms and practices for conducting activities
Code of Conduct
(GDPR Art.4-2,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_2/oj), (SPECIAL Project,https://specialprivacy.ercim.eu/vocabs/processing)
to gather data from someone
Collect
Data that has been obtained by collecting it from a source
Collected Data
Personal Data that has been collected from another source such as the Data Subject
Collected Personal Data
To indicate the source of data, use the DataSource concept with the hasDataSource relation
to join or merge data
Combine
Purposes associated with conducting research in a commercial setting or with intention to commercialise e.g. in a company or sponsored by a company
Commercial Research
DGA 6.5(c)
Data protected through Commercial Confidentiality Agreements
CommerciallyConfidentialData
Customer Care Communication refers to purposes associated with communicating with customers for assisting them, resolving issues, ensuring satisfaction, etc. in relation to services provided
Communication for Customer Care
Georg P Krog, Paul Ryan, David Hickey, Harshvardhan J. Pandit
Communication Management refers to purposes associated with providing or managing communication activities e.g. to send an email for notifying some information
Communication Management
This purpose by itself does not sufficiently and clearly indicate what the communication is about. As such, it is recommended to combine it with another purpose to indicate the application. For example, Communication of Payment.
State where the status of compliance has not been fully assessed, evaluated, or determined
Compliance Indeterminate
Monitoring of compliance (e.g. internal policy, regulations)
Compliance Monitoring
Status associated with Compliance with some norms, objectives, or requirements
Compliance Status
State where the status of compliance is unknown
Compliance Unknown
State where compliance cannot be achieved due to requirements being violated
Compliance Violation
Changed from "violation of compliance" for consistency with other terms
State of being fully compliant
Compliant
Sustained and specific performance by a system, with an external agent ready to take over when necessary
Conditional Automation
Human Involvement is implied here, e.g. for intervention, input, decisions
DGA 5.10
Data deemed confidential
ConfidentialData
Status associated with conformance to a standard, guideline, code, or recommendation
Conformance Status
State of being conformant
Conformant
Consent of the Data Subject for specified processing
Consent
Georg P Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
(GConsent,https://w3id.org/GConsent)
The state where the temporal or contextual validity of consent has 'expired'
Consent Expired
An example of this state is when the obtained consent has been assigned a duration - which has lapsed or 'expired', making it invalid to be used further for processing data
The state where consent has been given
Consent Given
An example of this state is when the individual clicks on a button, ticks a checkbox, verbally agrees - or any other form that communicates their decision agreeing to the processing of data
The state where consent has been deemed to be invalid
Consent Invalidated
An example of this state is where an investigating authority or a court finds the collected consent did not meet requirements, and 'invalidates' both prior and future uses of it to carry out processing
A Notice for information provision associated with Consent
Consent Notice
A Record of Consent or Consent related activities
Consent Record
The state where consent has been refused
Consent Refused
An example of this state is when the individual clicks on a 'disagree' or 'reject' or 'refuse' button, or leaves a checkbox unticked
State where a request for consent has been deferred without a decision
Consent Request Deferred
An example of this state is when the individual closes or dismisses a notice without making a decision. This state is intended for making the distinction between a notice being provided (as a consent request) and the individual interacting with the notice without making a decision - where the 'ignoring of a notice' is taken as consent being neither given nor refused
State where a request for consent has been made and is awaiting a decision
Consent Requested
An example of this state is when a notice has been presented to the individual but they have not made a decision
The state where the consent is revoked by an entity other than the data subject and which prevents it from being further used as a valid state
Consent Revoked
An example of this state is when a Data Controller stops utilising previously obtaining consent, such as when that service no longer exists
The state or status of 'consent' that provides information reflecting its operational status and validity for processing data
Consent Status
States are useful as information artefacts to implement them in controlling processing, and to reflect the process and flow of obtaining and maintaining consent. For example, a database table that stores consent states for specific processing and can be queried to obtain them in an efficient manner. States are also useful in investigations to determine the use and validity of consenting practices
States of consent that cannot be used as valid justifications for processing data
Consent Status Invalid for Processing
This identifies the stages associated with consent that should not be used to process data
States of consent that can be used as valid justifications for processing data
Consent Status Valid for Processing
Practically, given consent is the only valid state for processing
State where information about consent is not available or is unknown
Consent Unknown
Consent states can be unknown, for example, when information is not available, or cannot be trusted, or is known to be inaccurate
The state where the consent is withdrawn or revoked specifically by the data subject and which prevents it from being further used as a valid state
Consent Withdrawn
This state can be considered a form of 'revocation' of consent, where the revocation can only be performed by the data subject. Therefore we suggest using ConsentRevoked when it is a non-data-subject entity, and ConsentWithdrawn when it is the data subject
The consequence(s) possible or arising from specified context
Consequence
The consequence(s) possible or arising as a side-effect of specified context
Consequence as Side-Effect
The consequence(s) possible or arising from failure of specified context
Consequence of Failure
The consequence(s) possible or arising from success of specified context
Consequence of Success
to consult or query data
Consult
Georg P Krog, Harshvardhan J. Pandit, Paul Ryan
Consultation is a process of receiving feedback, advice, or opinion from an external agency
Consultation
Consultation with an authority or authoritative entity
Consultation with Authority
Consultation with Data Protection Officer(s)
Consultation with DPO
Consultation with data subject(s) or their representative(s)
Consultation with Data Subject
Consultation with representative of data subject(s)
Consultation with Data Subject Representative
Data subjects that consume goods or services for direct use
Consumer
Contextually relevant information
Context
Context is a catch-all concept for information of relevance not possible to represent through other core concepts. DPV offers specific contextual concepts such as Necessity, Frequency, and Duration. More can be created by extending Context within use-cases.
Frequency where occurences are continous
Continous Frequency
Creation, completion, fulfilment, or performance of a contract involving specified processing of data or technologies
Contract
Fulfilment or performance of a contract involving specified processing
Contract Performance
Contractual terms governing data handling within or with an entity
Contractual Terms
Georg P Krog, Harshvardhan J. Pandit, Beatriz Esteves, Paul Ryan, Julian Flake
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data between a Data Controller and a Data Processor
Controller-Processor Agreement
to produce an exact reproduction of the data
Copy
Purposes associated with detection, prevention, and mitigation of mitigate money laundering
Counter Money Laundering
A political entity indicative of a sovereign or non-sovereign territorial state comprising of distinct geographical areas
Country
The definition of country is not intended for political interpretation. DPVCG welcomes alternate definitions based in existing sources with global scope, such as UN or ISO.
Management of credentials and their use in authorisations
Credential Management
Purposes associated with monitoring, performing, or assessing credit worthiness or solvency
Credit Checking
Use of cryptography for authentication
Cryptographic Authentication
Management of cryptographic keys, including their generation, storage, assessment, and safekeeping
Cryptographic Key Management
Use of cryptographic methods to perform tasks
Cryptographic Methods
Data subjects that purchase goods or services
Customer
note: for B2B relations where customers are organisations, this concept only applies for data subjects
Customer Care refers to purposes associated with purposes for providing assistance, resolving issues, ensuring satisfaction, etc. in relation to services provided
Customer Care
Georg P Krog, Harshvardhan J. Pandit, Beatriz
(Belgian DPA ROPA Template, https://www.privacycommission.be/nl/model-voor-een-register-van-de-verwerkingsactiviteiten)
Customer Claims Management refers to purposes associated with managing claims, including repayment of monies owed
Customer Claims Management
Customer Management refers to purposes associated with managing activities related with past, current, and future customers
Customer Management
Customer Order Management refers to purposes associated with managing customer orders i.e. processing of an order related to customer's purchase of good or services
Customer Order Management
Customer Relationship Management refers to purposes associated with managing and analysing interactions with past, current, and potential customers
Customer Relationship Management
Customer Solvency Monitoring refers to purposes associated with monitor solvency of customers for financial diligence
Customer Solvency Monitoring
Assessment of cybersecurity capabilities in terms of vulnerabilities and effectiveness of controls
Cybersecurity Assessment
Training methods related to cybersecurity
Cybersecurity Training
A DPIA involves determining the potential and actual impact of processing activities on individuals or groups of individuals
Data Protection Impact Assessment (DPIA)
Top class: Impact Assessment, and DPIA is sub-class
Impact that acts as or causes damages
Damage
A broad concept representing 'data' or 'information'
Data
Protocols or plans for backing up of data
Data Backup Protocols
(GDPR Art.4-7g,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_7/oj)
The individual or organisation that decides (or controls) the purpose(s) of processing personal data.
Data Controller
The terms 'Controller', 'Data Controller', and 'PII Controller' refer to the same concept
Creation, completion, fulfilment, or performance of a contract, with Data Controllers as parties being Joint Data Controllers, and involving specified processing
Data Controller Contract
Data Sourced from Data Controller(s), e.g. a Controller inferring data or generating data
Data Controller as Data Source
David Hickey, Georg Krog, Paul Ryan, Harshvardhan Pandit
(EDPB Recommendations 01/2020 on Data Transfers, https://edpb.europa.eu/our-work-tools/our-documents/recommendations/recommendations-012020-measures-supplement-transfer_en)
An entity that 'exports' data where exporting is considered a form of data transfer
Data Exporter
The term 'Data Exporter' is used by the EU-EDPB as the entity that transfer data across borders. While the EDPB refers to the jurisdictional border of EU, the term within DPV can be used to denote any 'export' or transfer or transmission of data and is thus a broader concept than the EDPB's definition.
An entity that 'imports' data where importing is considered a form of data transfer
Data Importer
The term 'Data Importer' is used by the EU-EDPB as the entity that receives transferred data across borders. While the EDPB refers to the jurisdictional border of EU, the term within DPV can be used to denote any 'import' or reception of transfer or transmission of data and is thus a broader concept than the EDPB's definition.
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of data
Data Processing Agreement
For specific role-based data processing agreements, see concepts for Processors and JointDataController agreements.
Record of data processing, whether ex-ante or ex-post
Data Processing Record
(GDPR Art.4-8,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_8/oj)
A ‘processor’ means a natural or legal person, public authority, agency or other body which processes data on behalf of the controller.
Data Processor
Creation, completion, fulfilment, or performance of a contract, with the Data Controller and Data Processor as parties, and involving specified processing
Data Processor Contract
An authority tasked with overseeing legal compliance regarding privacy and data protection laws.
Data Protection Authority
(GDPR Art.37,https://eur-lex.europa.eu/eli/reg/2016/679/art_37/oj)
An entity within or authorised by an organisation to monitor internal compliance, inform and advise on data protection obligations and act as a contact point for data subjects and the supervisory authority.
Data Protection Officer
Training intended to increase knowledge regarding data protection
Data Protection Training
Data is published by the data subject
Data published by Data Subject
This refers to where that data was made publicly available by the data subject. An example of this would be a social media profile that the data subject has made publicly accessible.
Removal of sensitive information from a data or document
Data Redaction
Cleaning or any removal or re-organisation of elements in data based on selective criteria
Data Sanitisation Technique
The source or origin of data
Data Source
Source' is the direct point of data collection; 'origin' would indicate the original/others points of where the data originates from.
A 'sub-processor' is a processor engaged by another processor
Data Sub-Processor
A 'Sub-Processor' is always a 'Processor' with the distinction of not directly being appointed by the 'Controller'
(GDPR Art.4-1g,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_1/oj)
The individual (or category of individuals) whose personal data is being processed
Data Subject
The term 'data subject' is specific to the GDPR, but is functionally equivalent to the term 'individual associated with data' and the ISO/IEC term 'PII Principle'
Creation, completion, fulfilment, or performance of a contract, with the Data Controller and Data Subject as parties, and involving specified processing
Data Subject Contract
Data Sourced from Data Subject(s), e.g. when data is collected via a form or observed from their activities
Data Subject as Data Source
Beatriz Esteves, Georg P Krog, Harshvardhan Pandit
The rights applicable or provided to a Data Subject
Data Subject Right
Based on use of definitions, the notion of 'Data Subject Right' can be equivalent to 'Individual Right' or 'Right of a Person'
Harshvardhan J. Pandit, Georg P Krog, Rana Saniei
Scale of Data Subject(s)
Data Subject Scale
Impact Assessment for conducting data transfers
Data Transfer Impact Assessment
Specific or special categories and instances of legal basis intended for justifying data transfers
Data Transfer Legal Basis
Volume or Scale of Data
Data Volume
Location that is spread across multiple separate areas with no distinction between their importance
Decentralised Locations
Processing that involves decision making
Decision Making
(NISTIR 8053,https://nvlpubs.nist.gov/nistpubs/ir/2015/NIST.IR.8053.pdf)
Removal of identity or information to reduce identifiability
De-Identification
Purposes associated with delivering goods and services requested or asked by consumer
Delivery of Goods
to create new derivative data from the original data
Derive
Derive indicates data is present or obtainable from existing data. For data that is created without such existence, see Infer.
Data that has been obtained through derivations of other data
Derived Data
Elmar Kiesling; Harshvardhan J. Pandit, Fajar Ekaputra
(DPVCG, https://www.w3.org/community/dpvcg/)
Personal Data that is obtained or derived from other data
Derived Personal Data
Derived Data is data that is obtained through processing of existing data, e.g. deriving first name from full name. To indicate data that is derived but which was not present or evident within the source data, InferredPersonalData should be used.
A set of rules or guidelines outlining criterias for design
Design Standard
to process data in a way it no longer exists or cannot be repaired
Destruct
Pseudonymisation achieved through a deterministic function
Deterministic Pseudonymisation
Harshvardhan J. Pandit, Julian Flake, Georg P Krog, Fajar Ekaputra, Beatriz Esteves
Impact that acts as or causes detriments
Detriment
Utilisation of differential privacy where information is shared as patterns or groups to withhold individual elements
Differential Privacy
Management of access, use, and other operations associated with digital content
Digital Rights Management
Expression and authentication of identity through digital information containing cryptographic signatures
Digital Signatures
Purposes associated with conducting direct marketing i.e. marketing communicated directly to the individual
Direct Marketing
Procedures related to management of disasters and recovery
Disaster Recovery Procedures
to make data known
Disclose
to disclose data by means of transmission
Disclose by Transmission
Purposes associated with activities that manage disputes by natural persons, private bodies, or public authorities relevant to organisation
Dispute Management
to spread data throughout
Disseminate
Security implementations provided using or over a distributed system
Distributed System Security
Use of randomised pseudonymisation where the same elements are assigned different values in the same document or database
Document Randomised Pseudonymisation
Security measures enacted over documents to protect against tampering or restrict access
Document Security
The duration or temporal limitation
Duration
A political union of two or more countries based on economic or trade agreements
Economic Union
Training methods that are intended to provide education on topic(s)
Educational Training
Procedures intended to determine effectiveness of other measures
Effectiveness Determination Procedures
Data subjects that are considered elderly (i.e. based on age)
Elderly Data Subject
Data subjects that are employees
Employee
Technical measures consisting of encryption
Encryption
Encryption of data when being stored (persistent encryption)
Encryption at Rest
Encryption of data in transit e.g. when being transferred from one location to another, including sharing
Encryption in Transfer
Encryption of data when it is being used
Encryption in Use
Encrypted communications where data is encrypted by the sender and decrypted by the intended receiver to prevent access to any third party
End-to-End Encryption (E2EE)
Duration that is (known or intended to be) open ended or without an end
Endless Duration
Purposes associated with conducting or enforcing access control as a form of security
Enforce Access Control
Was previously "Access Control". Prefixed to distinguish from Technical Measure.
Purposes associated with ensuring and enforcing security for data, personnel, or other related matters
Enforce Security
Was previous "Security". Prefixed to distinguish from TechOrg measures.
Processing necessary to enter into contract
Enter Into Contract
A human or non-human 'thing' that constitutes as an entity
Entity
to delete data
Erase
Purposes associated with carrying out data processing to establish an agreement, such as for entering into a contract
Establish Contractual Agreement
Processing that involves evaluation of individuals
Evaluation of Individuals
Processing that involves evaluation and scoring of individuals
Evaluation and Scoring
Consent that is expressed through an explicit action solely conveying a consenting decision
Explicitly Expressed Consent
Explicitly expressed consent is a more specific form of Expressed consent where the action taken must 'explicitly' relate to only the consent decision. Expressed consent where the consenting is part of other matters therefore cannot satisfy the requirements of explicitly expressed consent. An example of explicit action expressing the consenting decision is a button on a web form where the form only relates to consent, or it is accompanied with suitable text that reiterates what the consenting decision is about
Consent that is expressed through an action intended to convey a consenting decision
Expressed Consent
Expressed consent requires the individual take a specific and unambigious action that directly indicates their consent. This action may be a part of other processes such as setting preferences, or agreeing to a contract, or other matters not relating to consent. An example of expressed consent is interacting with a checkbox within a dashboard or clicking a button on a web form
Location that is federated across multiple separate areas with designation of a primary or central location
Federated Locations
Security implemented over a file system
File System Security
to filter or keep data for some criteria
Filter
Location that is fixed i.e. known to occur at a specific place
Fixed Location
Location that is fixed with multiple places e.g. multiple cities
Fixed Multiple Locations
Duration that takes place a fixed number of times e.g. 3 times
Fixed Occurences Duration
Location that is fixed at a specific place e.g. a city
Fixed Singular Location
An organisation that aims to achieve profit as its primary goal
For-Profit Organisation
Purposes associated with fraud detection, prevention, and mitigation
Fraud Prevention and Detection
The frequency or information about periods and repetitions in terms of recurrence.
Frequency
Purposes associated with carrying out data processing to fulfill a contractual obligation
Fulfilment of Contractual Obligation
Purposes associated with carrying out data processing to fulfill an obligation
Fulfilment of Obligation
The system is capable of performing its entire mission without external intervention
Full Automation
Though Fully Automated such operations can still be associated with dpv:HumanInvolved e.g. for inputs, oversight or verification
Use of randomised pseudonymisation where the same elements are assigned different values each time they occur
Fully Randomised Pseudonymisation
to generate or create data
Generate
Data that has been obtained through generation or creation as a source
Generated Data
Personal Data that is generated or brought into existence without relation to existing data i.e. it is not derived or inferred from other data
Generated Personal Data
Generated Data is used to indicate data that is produced and is not derived or inferred from other data
Harshvardhan J. Pandit, Georg P Krog, Paul Ryan
Indicate of scale in terms of geographic coverage
Geographic Coverage
Geographic coverage spanning the entire globe
Global Scale
Procedures related to governance (e.g. organisation, unit, team, process, system)
Governance Procedures
An organisation managed or part of government
Governmental Organisation
Guardian(s) of data subjects such as children
Guardian(s) of Data Subject
Guidelines or Principles regarding processing and operational measures
GuidelinesPrinciple
Security protocols implemented at or within hardware
Hardware Security Protocols
changed
Impact that acts as or causes harms
Harm
Use of hash functions to map information or to retrieve a prior categorisation
Hash Functions
Use of HMAC where message authentication code (MAC) utilise a cryptographic hash function and a secret cryptographic key
Hash-based Message Authentication Code (HMAC)
The system performs parts of its mission without external intervention
High Automation
Use of Homomorphic encryption that permits computations on encrypted data without decrypting it
Homomorphic Encryption
Data volume that is considered huge or more than large within the context
Huge Data Volume
Scale of data subjects considered huge or more than large within the context
Huge Scale Of Data Subjects
Humans are involved in the specified context
Human involved
This concept only indicates that humans are involved. For specific involvement, see specialised concepts e.g. involved for input, oversight.
The involvement of humans in specified context
Human Involvement
Human Involvement here broadly refers to any involvement by a human in the context of carrying out processing. This may include verification of outcomes, providing input data for making decisions, or overseeing activities. To indicate whether humans are involved or not, see relevant concepts of dpv:HumanInvolved and dpv:HumanNotInvolved. The term 'Human in the loop' and its varieties are absent from DPV due to their contradictory and non-compatible use across different sources.
Human involvement for the purposes of exercising control over the specified operations in context
Human Involvement for control
Control is a broad term that can be applied to various stages and operations. It maps to None, Assistive, and Partial automation models.
Human involvement for the purposes of exercising decisions over the specified operations in context
Human Involvement for decision
Decisions are about exercising control over the operation, and are distinct from input (data or parameters).
Human involvement for the purposes of providing inputs to the specified context
Human Involvement for Input
Inputs can be in the form of data or other resources.
Human involvement for the purposes of exercising interventions over the specified operations in context
Human Involvement for intervention
Intervention indicates the ability to intervene in operations, which can be at various stages. It maps to Conditional and High automation models.
Human involvement for the purposes of having oversight over the specified context regarding its operations, inputs, or outputs
Human Involvement for Oversight
Oversight by itself does not indicate the ability to intervene or control the operations.
Human involvement for the purposes of verification of specified context to ensure its operations, inputs, or outputs are correct or are acceptable.
Human Involvement for Verification
Verification by itself does not imply ability to Control, Intervene, or having Oversight.
Humans are not involved in the specified context
Human not involved
This maps to Autonomous and Full Automation models if no humans are involved.
Paul Ryan, David Hickey, Georg P Krog, Harshvardhan J. Pandit, Beatriz Esteves
Purposes associated with managing humans and 'human resources' within the organisation for effective and efficient operations.
Human Resource Management
HR is a broad concept. Its management includes, amongst others - recruiting employees and intermediaries e.g. brokers, independent representatives; payroll administration, remunerations, commissions, and wages; and application of social legislation.
Personal Data that explicitly and by itself is sufficient to identify a person
Identifying Personal Data
DPV does not use PII ('Personally Identifiable Information') as it has varying and conflicting definitions across sources. Instead the concept 'identifying personal data' is intended to provide a clear categorisation of its interpretation. Where multiple data categories can be combined to create an 'identifying' category e.g. fingerprinting, this concept represents the combined category.
Management of identity and identity-based processes
Identity Management Method
Purposes associated with verifying or authorising identity as a form of security
Identity Verification
Data subjects that are immigrants (for a jurisdiction)
Immigrant
The impact(s) possible or arising as a consequence from specified context
Impact
Impact is a stronger notion of consequence in terms of influence, change, or effect on something e.g. for impact assessments
Calculating or determining the likelihood of impact of an existing or proposed process, which can involve risks or detriments.
Impact Assessment
Consent that is implied indirectly through an action not associated solely with conveying a consenting decision
Implied Consent
Implied consent is expected to also be Informed Consent. An example is a CCTV notice outside a monitored area that informs the individuals that by walking in they would be consenting to the use of camera for surveillance.
Harshvardhan J. Pandit, Paul Ryan, Georg P Krog, Julian Flake, Beatriz Esteves
An indication of 'importance' within a context
Importance
Importance can be used to express importance, desirability, relevance, or significance as a context.
Purposes associated with improving existing products and services
Improve Existing Products and Services
Purposes associated with improving customer-relationship management (CRM) processes
Improve Internal CRM Processes
Procedures related to management of incidents
Incident Management Procedures
Procedures related to management of incident reporting
Incident Reporting Communication
Data that is known to be incorrect or inconsistent with some requirements
Incorrect Data
Purposes associated with improving robustness and resilience of services
Increase Service Robustness
Duration that is indeterminate or cannot be determined
Indeterminate Duration
Indeterminate means (exact or otherwise) information about the duration cannot be determined, which is distinct from 'EndlessDuration' where it is known (or decided) that the duration is open-ended or without an end.
A consortium established and comprising on industry organisations
Industry Consortium
to infer data from existing data
Infer
Infer indicates data that is derived without it being present or obtainable from existing data. For data that is presented, and is 'extracted' or 'obtained' from existing data, see Derive.
Data that has been obtained through inferences of other data
Inferred Data
Personal Data that is obtained through inference from other data
Inferred Personal Data
Inferred Data is derived data generated from existing data, but which did not originally exist within it, e.g. inferring demographics from browsing history.
Use of measures to control information flows
Information Flow Control
Policy regarding security of information
Information Security Policy
Consent that is informed i.e. with the requirement to provide sufficient information to make a consenting decision
Informed Consent
The specifics for what information should be provided or made available will depend on the context, use-case, or relevant legal requirements
Involvement of existing technologies used in an innovative manner
Innovative Use of Existing Technologies
Involvement of a new (innovative) technologies
Innovative Use of New Technologies
New technologies are by definition considered innovative
Indicates that technology is being used in an innovative manner
Innovative use of Technology
Innovative here refers to 'state of the art' rather than the implementing entity, and can be for either new technology or new uses of existing technology
Data protected by Intellectual Property rights and regulations
IntellectualPropertyData
Purposes associated with optimisation of internal resource availability and usage for organisation
Internal Resource Optimisation
(GDPR Art.4-26,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_26/oj)
An organisation and its subordinate bodies governed by public international law, or any other body which is set up by, or on the basis of, an agreement between two or more countries
International Organisation
Use of measures to detect intrusions and other unauthorised attempts to gain access to a system
Intrusion Detection System
Data subjects that apply for jobs or employments
Job Applicant
A group of Data Controllers that jointly determine the purposes and means of processing
Joint Data Controllers
While Joint Data Controllers operate together, they are made up of individually distinct legal entities. To indicate the membership of this group, hasDataController should be used to denote each Data Controller. The concept of Joint Data Controllers also allows specifying a single group as the 'Controller' and to specify role and responsibilities within that group for each entity using DPV's concepts (e.g. isImplementedByEntity)
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data between Controllers within a Joint Controllers relationship
Joint Data Controllers Agreement
A form of documentation providing reasons, explanations, or justifications
Justification
Data volume that is considered large within the context
Large Data Volume
Scale of data subjects considered large within the context
Large Scale Of Data Subjects
Processing that takes place at large scales (as specified by some criteria)
Large Scale Processing
The exact definition of what constitutes "large scale" depends on use of jurisdictional, domain-specific, or other forms of externally defined criterias. Where possible, this should be reflected by extending this term with the appropriate context.
A law is a set of rules created by government or authorities
Law
State of being lawful or legally compliant
Lawful
Status associated with expressing lawfullness or legal compliance
Lawfulness
State of the lawfulness not being known
Lawfulness Unknown
A legally binding agreement
Legal Agreement
Legal basis used to justify processing of data or use of technology in accordance with a law
Legal Basis
Legal basis (plural: legal bases) are defined by legislations and regulations, whose applicability is usually restricted to specific jurisdictions which can be represented using dpv:hasJurisdiction or dpv:hasLaw. Legal basis can be used without such declarations, e.g. 'Consent', however their interpretation will require association with a law, e.g. 'EU GDPR'.
Purposes associated with carrying out data processing to fulfill a legal or statutory obligation
Legal Compliance
This purpose only refers to processing that is additionally required in order to fulfill the obligations and requirements associated with a law. For example, the use of consent would have its own separate purposes, with this purpose addressing a legal requirement for maintaining consent record (along with RecordManagement). This purpose will typically be used with Legal Obligation as the legal basis.
A human or non-human 'thing' that constitutes as an entity and which is recognised and defined in law
Legal Entity
Legal measures used to safeguard and ensure good practices in connection with data and technologies
Legal Measure
Legal Obligation to conduct the specified processing
Legal Obligation
Legitimate Interests of a Party as justification for specified processing
Legitimate Interest
Indicates an assessment regarding the use of legitimate interest as a lawful basis by the data controller
Legitimate Interest Assessment
Legitimate Interests of a Data Controller in conducting specified processing
Legitimate Interest of Controller
Legitimate Interests of the Data Subject in conducting specified processing
Legitimate Interest of Data Subject
Legitimate Interests of a Third Party in conducting specified processing
Legitimate Interest of Third Party
The likelihood or probability or chance of something taking place or occuring
Likelihood
Likelihood can be expressed in a subjective manner, such as 'Unlikely', or in a quantitative manner such as "Twice in a Day" (frequency per period). The suggestion is to use quantitative values, or to associate them with subjective terms used so as to enable accurate interpretations and interoperability. See the concepts related to Frequency and Duration for possible uses as a combination to express Likelihood.
Geographic coverage spanning a specific environment within the locality
Local Environment Scale
For example, geographic scale of an event take place in a specific building or room
Location is local
Local Location
Geographic coverage spanning a specific locality
Locality Scale
For example, geographic scale of a city or an area within a city
A location is a position, site, or area where something is located
Location
Location may be geographic, physical, or virtual.
The fixture of location refers to whether the location is fixed
Location Fixture
Locality refers to whether the specified location is local within some context, e.g. for the user
Location Locality
Policy for logging of information
Logging Policies
Purposes associated with maintaining a Credit Checking Database
Maintain Credit Checking Database
Purposes associated with maintaining a Credit Rating Database
Maintain Credit Rating Database
Purposes associated with maintaining a database related to identifying and identified fraud risks and fraud incidents
Maintain Fraud Database
to transform or publish data to be used
Make Available
Purposes associated with conducting marketing in relation to organisation or products or services e.g. promoting, selling, and distributing
Marketing
Was commercial interest, changed to consider Marketing a separate Purpose category by itself
(A29WP WP 248 rev.01 Guideliens on DPIA,https://ec.europa.eu/newsroom/article29/items/611236)
to combine, compare, or match data from different sources
Match
Impact that acts as or causes material damages
Material Damage
Data volume that is considered medium i.e. neither large nor small within the context
Medium Data Volume
Scale of data subjects considered medium i.e. neither large nor small within the context
Medium Scale Of Data Subjects
Processing that takes place at medium scales (as specified by some criteria)
Medium Scale Processing
Data subjects that are members of a group, organisation, or other collectives
Member
Paul Ryan, Georg P Krog, David Hickey, Harshvardhan J. Pandit
Purposes associated with maintaining a registry of shareholders, members, or partners for governance, administration, and management functions
Members and Partners Management
Data subjects that are considered mentally vulnerable
Mentally Vulnerable Data Subject
Use of cryptographic methods to authenticate messages
Message Authentication Codes (MAC)
Security implemented over a mobile platform
Mobile Platform Security
to modify or change data
Modify
to monitor data for some criteria
Monitor
Policy for monitoring (e.g. progress, performance)
Monitoring Policies
A simple pseudonymisation method where identifiers are substituted by a number chosen by a monotonic counter
Monotonic Counter Pseudonymisation
to move data from one location to another including deleting the original copy
Move
An authentication system that uses two or more methods to authenticate
Multi-Factor Authentication (MFA)
Geographic coverage spanning multiple nations
Multi National Scale
Non-disclosure Agreements e.g. preserving confidentiality of information
Non-Disclosure Agreement (NDA)
An authority tasked with overseeing legal compliance for a nation
National Authority
Geographic coverage spanning a nation
National Scale
A human
Natural Person
Geographic coverage nearly spanning the entire globe
Nearly Global Scale
An indication of 'necessity' within a context
Necessity
Necessity can be used to express need, essentiality, requirement, or compulsion.
Use of network routing using proxy
Network Proxy Routing
Security implemented at or over networks protocols
Network Security Protocols
Data subjects that are not citizens (for a jurisdiction)
Non-Citizen
Purposes associated with conducting research in a non-commercial setting e.g. for a non-profit-organisation (NGO)
Non-Commercial Research
State of non-compliance where objectives have not been met, but have not been violated
Non Compliant
Changed from not compliant for consistency in commonly used terms
State of being non-conformant
NonConformant
An organisation not part of or independent from the government
Non-Governmental Organisation
Impact that acts as or causes non-material damages
Non-Material Damage
Data that is not Personal Data
Non-Personal Data
The term NonPersonalData is provided to distinguish between PersonalData and other data, e.g. for indicating which data is regulated by privacy laws. To specify personal data that has been anonymised, the concept AnonymisedData should be used as the anonymisation process has a risk of not being fully effective and such anonymous data may be found to be personal data depending on circumstances.
An action, activity, or method involving non-personal data, and asserting that no personal data is involved
Non-Personal Data Process
Use of personal data within NonPersonalDataProcess should be considered a violation of the explicit constraint that no personal data is involved.
An organisation that does not aim to achieve profit as its primary goal
Non-Profit Organisation
A source of data that is not publicly accessible or available
Non-Public Data Source
The operator fully controls the system
Not Automated
Human Involvement is necessary here as there is no automation
Indication of neither being required nor optional i.e. not relevant or needed
Not Required
Paul Ryan, David Hickey, Georg P Krog, Harshvardhan J. Pandit
A notice is an artefact for providing information, choices, or controls
Notice
Harshvardhan J. Pandit, Georg P Krog, Beatriz Esteves, Paul Ryan
A rule describing an obligation for performing an activity
Obligation
to obtain data through observation
Observe
Data that has been obtained through observations of a source
Observed Data
Personal Data that has been collected through observation of the Data Subject(s)
Observed Personal Data
to solicit or gather data from someone
Obtain
Processing necessary or authorised through the official authority granted to or vested in the Data Controller
Official Authority of Controller
Frequency where occurences are often or frequent, but not continous
Often Frequency
Security implemented at or through operating systems
Operating System Security
Purposes associated with optimisation of activities and services for consumer or user
Optimisation for Consumer
The term optmisation here refers to the efficiency of the service in terms of technical provision (or similar means) with benefits for everybody. Personalisation implies making changes that benefit the current user or persona.
Purposes associated with optimisation of activities and services for provider or controller
Optimisation for Controller
Purposes associated with optimisation of interfaces presented to the user
Optimise User Interface
Indication of 'optional' or 'voluntary'
Optional
A general term reflecting a company or a business or a group acting as a unit
Organisation
Purposes associated with managing compliance for organisation in relation to internal policies
Organisation Compliance Management
Note that this concept relates to internal organisational compliance. The concept LegalCompliance should be used for external legal or regulatory compliance.
Purposes associated with conducting activities and functions for governance of an organisation
Organisation Governance
Purposes associated with managing risk for organisation's activities
Organisation Risk Management
Organisational measures used to safeguard and ensure good practices in connection with data and technologies
Organisational Measure
Entity within an organisation that does not constitute as a separate legal entity
Organisational Unit
to organize data for arranging or classifying
Organise
Carrying out an impact assessment regarding privacy risks
Privacy Impact Assessment
Parent(s) of data subjects such as children
Parent(s) of Data Subject
Some sub-functions of the system are fully automated while the system remains under the control of an external agent
Partial Automation
Human Involvement is implied here, specifically the ability to Control operations, but also possibly for intervention, oversight, and verification
State of partially being compliant i.e. only some objectives have been met, and others have not been in violation
Partially Compliant
Data subjects that participate in some context such as volunteers in a function
Participant
The right(s) applicable, provided, or expected that are always (passively) applicable
Passive Right
Passive rights do not require the entity to request or exercise them. They are considered to be always applicable. For example, the Right to Privacy (in EU) does not require an exercise for it to be fulfilled.
Use of passwords to perform authentication
Password Authentication
Data subjects that receive medican attention, treatment, care, advice, or other health related services
Patient
Purposes associated with processing and managing payment in relation to service, including invoicing and records
Payment Management
Use of penetration testing to identify weaknesses and vulnerabilities through simulations
Penetration Testing Methods
A rule describing a permission to perform an activity
Permission
Data directly or indirectly associated or related to an individual.
Personal Data
This definition of personal data encompasses the concepts used in GDPR Art.4-1 for 'personal data' and ISO/IEC 2700 for 'personally identifiable information (PII)'.
sunset
An abstract concept describing 'personal data handling'
Personal Data Handling
This concept will be deprecated in future updates. It is recommended to use dpv:PersonalDataProcess as the equivalent alternative which is better aligned with legal and operational terminology.
An action, activity, or method involving personal data
Personal Data Process
Purposes associated with creating and providing customisation based on attributes and/or needs of person(s) or context(s).
Personalisation
This term is a blanket purpose category for indicating personalisation of some other purpose, e.g. by creating a subclass of the other concept and Personalisation
Purposes associated with creating and providing personalised advertising
Personalised Advertising
Purposes associated with creating and providing personalised benefits for a service
Personalised Benefits
Purposes associated with management and execution of hiring processes of personnel
Personnel Hiring
Purposes associated with management of personnel associated with the organisation e.g. evaluation and management of employees and intermediaries
Personnel Management
Purposes associated with management and execution of payment of personnel
Personnel Payment
Access control applied for physical access e.g. premises or equipment
Physical Access Control Method
Physical measures used to safeguard and ensure good practices in connection with data and technologies
Physical Measure
A guidance document outlining any of: procedures, plans, principles, decisions, intent, or protocols.
Policy
Use of algorithms that are intended to be secure against cryptanalytic attack by a quantum computer
Post-Quantum Cryptography
Indication of 'primary' or 'main' or 'core' importance
Primary Importance
Practices regarding selecting appropriate data protection and privacy measures as the 'default' in an activity or service
Privacy by Default
Practices regarding incorporating data protection and privacy in the design of information and services
Privacy by Design
Represents a notice or document outlining information regarding privacy
Privacy Notice
Use of protocols designed with the intention of provided additional guarantees regarding privacy
Privacy Preserving Protocol
Use of cryptographic methods to retrieve a record from a system without revealing which record is retrieved
Private Information Retrieval
Location that is not or cannot be accessed by the public and is controlled as a private space
Private Location
An action, activity, or method
Process
(SPECIAL Project,https://specialprivacy.ercim.eu/)
Operations or 'processing' performed on data
Processing
Conditions required or followed regarding processing of data or use of technologies
Processing Condition
Context or conditions within which processing takes place
Processing Context
Conditions regarding Duration for processing of data or use of technologies
Processing Duration
Conditions regarding Location for processing of data or use of technologies
Processing Location
Scale of Processing
Processing Scale
The exact definition of what constitutes "scale" depends on use of jurisdictional, domain-specific, or other forms of externally defined criterias. Where possible, this should be reflected by extending the scales provided with the appropriate context.
Training methods that are intended to provide professional knowledge and expertise
Professional Training
to create a profile that describes or represents a person
Profiling
A rule describing a prohibition to perform an activity
Prohibition
Purposes associated with creating and providing personalised recommendations for events
Provide Event Recommendations
Purposes associated with creating and providing personalised recommendations
Provide Personalised Recommendations
Purposes associated with creating and providing product recommendations e.g. suggest similar products
Provide Product Recommendations
(GDPR Art.4-5,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_5/oj)
Pseudonymisation means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person;
Pseudonymisation
to replace personal identifiable information by artificial identifiers
Pseudonymise
Personal Data that has undergone a pseudonymisation process or a partial (incomplete) anonymisation process such that it is still considered Personal Data
Pseudonymised Data
A source of data that is publicly accessible or available
Public Data Source
The term 'Public' is used here in a broad sense. Actual consideration of what is 'Public Data' can vary based on several contextual or jurisdictional factors such as definition of open, methods of access, permissions and licenses.
Processing is necessary or beneficial for interest of the public or society at large
Public Interest
Location that is or can be accessed by the public
Public Location
Purposes associated with managing and conducting public relations processes, including creating goodwill for the organisation
Public Relations
Purpose or Goal of processing data or using technology
Purpose
The purpose or goal here is intended to sufficiently describe the intention or objective of why the data or technology is being used, and should be broader than mere technical descriptions of achieving a capability. For example, "Analyse Data" is an abstract purpose with no indication of what the analyses is for as compared to a purpose such as "Marketing" or "Service Provision" which provide clarity and comprehension of the 'purpose' and can be enhanced with additional descriptions.
Cryptographic methods that utilise quantum mechanical properties to perform cryptographic tasks
Quantum Cryptography
to query or make enquiries over data
Query
A pseudonymisation method where identifiers are substituted by a number chosen by a Random Number Generator (RNG)
RNG Pseudonymisation
Location that is random or unknown
Random Location
(SPECIAL Project,https://specialprivacy.ercim.eu/),(GDPR Art.4-9g,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_9/oj)
Entities that receive data
Recipient
Recipients indicate entities that receives data, for example personal data recipients can be a Third Party, Data Controller, or Data Processor.
to make a record (especially media)
Record
Purposes associated with manage creation, storage, and use of records relevant to operations, events, and processes e.g. to store logs or access requests
Record Management
This purpose relates specifiaclly for record creation and management. This can be combined or used along with other purposes to express intentions such as records for legal compliance or vendor payments.
Records of activities within some context such as maintainence tasks or governance functions
Records of Activities
A region is an area or site that is considered a location
Region
An authority tasked with overseeing legal compliance for a region
Regional Authority
Geographic coverage spanning a specific region or regions
Regional Scale
Policy regarding repetition or renewal of existing certification(s)
Regularity of Re-certification
Location is remote i.e. not local
Remote Location
to destruct or erase data
Remove
The state where a previously given consent has been 'renewed' or 'refreshed' or 'reaffirmed' to form a new instance of given consent
Renewed Consent Given
An example of this state is when a previously given consent has expired, and the individual is presented a notice regarding continuing associated processing operations - to which they agree. This state can be useful to keep track of 'reconfirmed' or 'refreshed' consent within consent records, assist notices and contextual agents to create better consenting dialogues, and assist with specific legal obligations related to subsequent consenting
Purposes associated with identifying, rectifying, or otherwise undertaking activities intended to fix or repair impairments to existing functionalities
Repair Impairments
An example of identifying and rectifying impairments is the process of finding and fixing errors in products, commonly referred to as debugging
Georg Krog, Paul Ryan, Harshvardhan J. Pandit, Beatriz Esteves
(GDPR Art.27,https://eur-lex.europa.eu/eli/reg/2016/679/art_27/oj)
A representative of a legal entity
Representative
State of a request being accepted towards fulfilment
Request Accepted
State of a request being acknowledged
Request Acknowledged
State of a request being delayed towards fulfilment
Request Action Delayed
State of a request being fulfilled
Request Fulfilled
State of a request being initiated
Request Initiated
State of a request being rejected towards non-fulfilment
Request Rejected
State of a request's required action having been performed by the other party
Request Required Action Performed
State of a request requiring an action to be performed from another party
Request Requires Action
Status associated with requests
Request Status
State of a request's status being queried
Request Status Query
State of a request being unfulfilled
Request Unfulfilled
Purposes associated with delivering services as requested by user or consumer
Requested Service Provision
The use of 'request' here includes where an user explicitly asks for the service and also when an established contract requires the provision of the service
Indication of 'required' or 'necessary'
Required
Purposes associated with conducting research and development for new methods, products, or services
Research and Development
to apply a restriction on the processing of specific records
Restrict
to retrieve data, often in an automated manner
Retrieve
Procedures to review impact assessments in terms of continued validity, adequacy for intended purposes, and conformance of processes with findings
Review Impact Assessment
A procedure or process that reviews the correctness and validity of other measures and processes
Review Procedure
Harshvardhan J Pandit, Beatriz Esteves, Georg P Krog
The right(s) applicable, provided, or expected
Right
A 'right' is a legal, social, or ethical principle of freedom or entitlement which dictate the norms regarding what is allowed or owed. Rights as a concept encompass a broad area of norms and entities, and are not specific to Individuals or Data Protection / Privacy. For individual specific rights, see dpv:DataSubjectRight
An activity representing an exercising of an active right
Right Exercise Activity
There may be multiple activities associated with exercising and fulfilling rights. See the RightExerciseRecord concept for record-keeping of such activities in a cohesive manner.
Information associated with exercising of an active right
Right Exercise Notice
This concept is intended for providing information regarding a right exercise. For specific instances of such exercises, see RightExerciseActivity and RightExerciseRecord.
Record of a Right being exercised
Right Exercise Record
This concept represents a record of one or more right exercise activities, such as those associated with a single data subject or service or entity
Notice provided regarding fulfilment of a right
Right Fulfilment Notice
This notice is associated with situations where information is provided with the intention of progressing the fulfilment of a right. For example, a notice asking for more information regarding the scope of the right, or providing information on where to access the data provided under a right.
Notice provided regarding non-fulfilment of a right
Right Non-Fulfilment Notice
This notice is associated with situations where information is provided with the intention of communicating non-fulfilment of a right. For example, to provide justifications on why a right could not be fulfilled or providing information about another entity who should be approached for exercising this right.
A risk or possibility or uncertainty of negative effects, impacts, or consequences
Risk
Risks can be associated with one or more different concepts such as purpose, processing, personal data, technical or organisational measure
The magnitude of a risk expressed as an indication to aid in its management
Risk Level
Risk Levels can be defined as a combination of different characteristics. For example, ISO 31073:2022 defines it as a combination of consequences and their likelihood. Another example would be the Risk Matrix where Risk Level is defined as a combination of Likelihood and Severity associated with the Risk.
(ISO 31073:2022,https://www.iso.org/standard/79637.html)
A scheme within the risk management framework specifying the approach, the management components, and resources to be applied to the management of risk
Risk Management Plan
A policy or statement of the overall intentions and direction of an organisation related to risk management
Risk Management Policy
Measures intended to mitigate, minimise, or prevent risk.
Risk Mitigation Measure
A rule describing a process or control that directs or determines if and how an activity should be conducted
Rule
David Hickey, Paul Ryan, Georg P Krog, Harshvardhan J. Pandit
A safeguard is a precautionary measure for the protection against or mitigation of negative effects
Safeguard
This concept is relevant given the requirement to assert safeguards in cross-border data transfers
Represents a safeguard used for data transfer. Can include technical or organisational measures.
Safeguard for Data Transfer
A measurement along some dimension
Scale
Scales are subjective concepts that need to be defined and interpreted within the context of their application. For example, what would be small within one context could be large within another.
Indication of the extent or range or boundaries associated with(in) a context
Scope
Processing that involves scoring of individuals
Scoring of Individuals
to remove data for some criteria
Screen
A seal or a mark indicating proof of certification to some certification or standard
Seal
Purposes associated with providing searching, querying, or other forms of information retrieval related functionalities
Search Functionalities
Indication of 'secondary' or 'minor' or 'auxiliary' importance
Secondary Importance
Use of secret sharing schemes where the secret can only be reconstructed through combination of sufficient number of individuals
Secret Sharing Schemes
Sector describes the area of application or domain that indicates or restricts scope for interpretation and application of purpose e.g. Agriculture, Banking
Sector
There are various sector codes used commonly to indicate the domain of an organisation or business. Examples include NACE (EU), ISIC (UN), SIC and NAICS (USA).
Use of cryptographic methods for entities to jointly compute functions without revealing inputs
Secure Multi-Party Computation
Assessment of security intended to identity gaps, vulnerabilities, risks, and effectiveness of controls
Security Assessment
Training intended to increase knowledge regarding security
Security Knowledge Training
Methods that relate to creating and providing security
Security Method
Procedures associated with assessing, implementing, and evaluating security
Security Procedure
Procedures related to security roles
Security Role Procedures
Purposes associated with selling or sharing data or information to third parties
Sell Data to Third Parties
Sell here means exchange, submit, or provide in return for direct or indirect compensation. Was subclass of commercial interest, changed to reflect selling something
Purposes associated with selling or sharing insights obtained from analysis of data
Sell Insights from Data
Purposes associated with selling products or services
Sell Products
Sell here means exchange, submit, or provide in return for direct or indirect compensation.
Purposes associated with selling products or services to the user, consumer, or data subjects
Sell Products to Data Subject
Sell Products here refers to processing necessary to provide and complete a sale to customers. It should not be confused with providing services with a cost based on an established agreement.
Data deemed sensitive
SensitiveData
DGA 30(a)
Non-personal data deemed sensitive
SensitiveNonPersonalData
Personal data that is considered 'sensitive' in terms of privacy and/or impact, and therefore requires additional considerations and/or protection
Sensitive Personal Data
Sensitivity' is a matter of context, and may be defined within legal frameworks. For GDPR, Special categories of personal data are considered a subset of sensitive data. To illustrate the difference between the two, consider the situation where Location data is collected, and which is considered 'sensitive' but not 'special'. As a probable rule, sensitive data require additional considerations whereas special category data requires additional legal basis / justifications.
Purposes associated with optimisation of services or activities
Service Optimisation
Subclass of ServiceProvision since optimisation is usually considered part of providing services
Purposes associated with providing personalisation within services or product or activities
Service Personalisation
Purposes associated with providing service or product or activities
Service Provision
Purposes associated with registering users and collecting information required for providing a service
Service Registration
An example of service registration is to provide a form that collects information such as preferred language or media format for downloading a movie
Purposes associated with conducting analysis and reporting related to usage of services or products
Service Usage Analytics
Was "UsageAnalytics", prefixed with Service to better reflect scope
The magnitude of being unwanted or having negative effects such as harmful impacts
Severity
Severity can be associated with Risk, or its Consequences and Impacts
to give data (or a portion of it) to others
Share
Use of credentials or processes that enable using one set of credentials to authenticate multiple contexts.
Single Sign On
Data volume that is considered singular i.e. a specific instance or single item
Singular Data Volume
Frequency where occurences are singular i.e. they take place only once
Singular Frequency
Scale of data subjects considered singular i.e. a specific data subject
Singular Scale Of Data Subjects
Data volume that is considered small or limited within the context
Small Data Volume
Scale of data subjects considered small or limited within the context
Small Scale Of Data Subjects
Processing that takes place at small scales (as specified by some criteria)
Small Scale Processing
Purposes associated with conducting marketing through social media
Social Media Marketing
(GDPR Art.9-1, https://eur-lex.europa.eu/eli/reg/2016/679/art_9/par_1/oj)
Sensitive Personal Data whose use requires specific additional legal permission or justification
Special Category Personal Data
The term 'special category' is based on GDPR Art.9, but should not be considered as exlusive to it. DPV considers all Special Categories to also be Sensitive, but whose use is either prohibited or regulated and therefore requires additional legal basis for justification that is separate from that for general personal data.
Data volume that is considered sporadic or sparse within the context
Sporadic Data Volume
Frequency where occurences are sporadic or infrequent or sparse
Sporadic Frequency
Scale of data subjects considered sporadic or sparse within the context
Sporadic Scale Of Data Subjects
Practices and policies regarding training of staff members
Staff Training
DGA 2(20)
Data protected through Statistical Confidentiality regulations and agreements
StatisticallyConfidentialData
The status or state of something
Status
Conditions required or followed regarding storage of data
Storage Condition
Deletion or Erasure of data including any deletion guarantees
Storage Deletion
Duration or temporal limitation on storage of data
Storage Duration
Location or geospatial scope where the data is stored
Storage Location
Regularity and temporal span of data restoration/backup mechanisms that guarantee that data is preserved
Storage Restoration
to keep data for future use
Store
to arrange data according to a structure
Structure
Data subjects that are students
Student
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data between a Data Processor and a Data (Sub-)Processor
Sub-Processor Agreement
Data subjects that subscribe to service(s)
Subscriber
note: subscriber can be customer or consumer
An authority tasked with overseeing legal compliance for a supra-national union e.g. EU
Supra-National Authority
A political union of two or more countries with an establishment of common authority
Supranational Union
Use of cryptography where the same keys are utilised for encryption and decryption of information
Symmetric Cryptography
Use of symmetric cryptography to encrypt data
Symmetric Encryption
Synthetic data reffers to artificially created data such that it is intended to resemble real data (personal or non-personal), but does not refer to any specific identified or identifiable individual, or to the real measure of an observable parameter in the case of non-personal data
Synthetic Data
Processing that involves systematic monitoring of individuals
Systematic Monitoring
Purposes associated with creating and providing pesonalised advertisement where the personalisation is targeted to a specific individual or group of individuals
Targeted Advertising
Technical measures used to safeguard and ensure good practices in connection with data and technologies
Technical Measure
Technical and Organisational measures used to safeguard and ensure good practices in connection with data and technologies
Technical and Organisational Measure
Purposes associated with managing and providing technical processes and functions necessary for delivering services
Technical Service Provision
The technology, technological implementation, or any techniques, skills, methods, and processes used or applied
Technology
Examples (non-exhaustive) include: Algorithm, Process, Method, Skill, Database, Cookies, Server, Device
Duration that has a fixed temporal duration e.g. 6 months
Temporal Duration
Represents a country outside applicable or compatible jurisdiction as outlined in law
Third Country
(GDPR Art.4-10,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_10/oj)
A ‘third party’ means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and people who, under the direct authority of the controller or processor, are authorised to process personal data.
Third Party
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of personal data between a Data Controller or Processor and a Third Party
Third-Party Agreement
Creation, completion, fulfilment, or performance of a contract, with the Data Controller and Third Party as parties, and involving specified processing
Third Party Contract
Data Sourced from a Third Party, e.g. when data is collected from an entity that is neither the Controller nor the Data Subject
ThirdParty as Data Source
Procedures related to security associated with Third Parties
Third Party Security Procedures
Data subjects that are tourists i.e. not citizens and not immigrants
Tourist
to move data from one place to another
Transfer
to change the form or nature of data
Transform
to send out data
Transmit
Use of cryptographic methods to restrict access and execution to trusted parties and code
Trusted Computing
Use of cryptographic methods to restrict access and execution to trusted parties and code within a dedicated execution environment
Trusted Execution Environments
Utilisation of a trusted third party to provide or carry out a measure
Trusted Third Party Utilisation
Consent that is uninformed i.e. without requirement to provide sufficient information to make a consenting decision
Uninformed Consent
State of being unlawful or legally non-compliant
Unlawful
Duration that takes place until a specific event occurs e.g. Account Closure
Until Event Duration
Duration that has a fixed end date e.g. 2022-12-31
Until Time Duration
Data that has not been verified in terms of accuracy, inconsistency, or quality
Unverified Data
Management of usage, which is intended to be broader than access control and may cover trust, digital rights, or other relevant controls
Usage Control
to use data
Use
Use of synthetic data to preserve privacy, security, or other effects and side-effects
Use of Synthetic Data
Data subjects that use service(s)
User
Purposes associated with personalisation of interfaces presented to the user
User Interface Personalisation
Examples of user-interface personalisation include changing the language to match the locale
Location that is known but is variable e.g. somewhere within a given area
Variable Location
Purposes associated with manage orders, payment, evaluation, and prospecting related to vendors
Vendor Management
Purposes associated with managing payment of vendors
Vendor Payment
Purposes associated with managing records and orders related to vendors
Vendor Records Management
Purposes associated with managing selection, assessment, and evaluation related to vendors
Vendor Selection Assessment
Data that has been verified in terms of accuracy, consistency, or quality
Verified Data
Security implemented at or through virtualised environments
Virtualisation Security
Data subjects that are temporary visitors
Visitor
Processing is necessary or required to protect vital interests of a data subject or other natural person
Vital Interest
Processing is necessary or required to protect vital interests of a data subject
Vital Interest of Data Subject
Processing is necessary or required to protect vital interests of a natural person
Vital Interest of Natural Person
Methods that assess or discover vulnerabilities in a system
Vulnerability Testing Methods
Data Subjects which should be considered 'vulnerable' and therefore would require additional measures and safeguards
Vulnerable Data Subject
This concept denotes a Data Subject or a group are vulnerable, but not what vulnerability they possess or its context. This information can be provided additionally as comments, or as separate concepts and relations. Proposals for this are welcome.
Security implemented at or over web browsers
WebBrowser Security
Security implemented at or over web-based protocols
Web Security Protocols
Security implemented at or over wireless communication protocols
Wireless Security Protocols
Location is local and entirely within a device, such as a smartphone
Within Device
Location is local and entirely within a physical environment, such as a room
Within Physical Environment
Location is local and entirely within a virtual environment, such as a shared network directory
Within Virtual Environment
Authentication using Zero-Knowledge proofs
Zero Knowledge Authentication
Indicates the status of activity of specified concept
has activity status
Harshvardhan J.Pandit, Georg P Krog, Paul Ryan, Beatriz Esteves
Specifies address of a legal entity such as street address or pin code
has address
Georg P. Krog, Paul Ryan, Harshvardhan J. Pandit
Indicates the logic used in processing such as for automated decision making
has algorithmic logic
Indicates applicability of a Law
has applicable law
Indicates the status of audit associated with specified concept
has audit status
Indicates applicability of authority for a jurisdiction
has authority
Indicates the status of compliance of specified concept
has compliance status
Specifies the state or status of consent
has consent status
Indicates consenquence(s) possible or arising from specified concept
has consequence
Removed plural suffix for consistency
Indicates the thing (e.g. plan, process, or entity) affected by a consequence
has consequence on
Specifies contact details of a legal entity such as phone or email
has contact
Indicates a purpose is restricted to the specified context(s)
has context
Indicates applicability of specified country
has country
Indicates associated with Data (may or may not be personal)
has data
Axel Polleres, Javier Fernández, Harshvardhan J. Pandit, Mark Lizar, Bud Bruegger
Indicates association with Data Controller
has data controller
Paul Ryan, Georg P. Krog, Harshvardhan J. Pandit
Indiciates inclusion or applicability of a LegalEntity in the role of Data Exporter
has data exporter
Indiciates inclusion or applicability of a LegalEntity in the role of Data Importer
has data importer
Indiciates inclusion or applicability of a Data Processor
has data processor
Specifices an associated data protection officer
has data protection officer
Indicates the source or origin of data being processed
has data source
Indicates association with Data Subject
has data subject
Indicates the scale of data subjects
has data subject scale
Indicates the volume of data
has data volume
Indicates information about duration
has duration
Indicates inclusion or applicability of an entity to some concept
has entity
parent property for controller, processor, data subject, authority, etc.?
Indicates the frequency with which something takes place
has frequency
Indicate the geographic coverage (of specified context)
has geographic coverage
Indicates Involvement of humans in processing such as within automated decision making process
has human involvement
Human involvement is also relevant to 'human in the loop'
Indicates an identifier associated for identification or reference
has identifier
Indicates impact(s) possible or arising as consequences from specified concept
has impact
Indicates the thing (e.g. plan, process, or entity) affected by an impact
has impact on
Specifies the method by which an entity has indicated the specific context
has indication method
Indicates inclusion or applicability of a Joint Data Controller
has joint data controllers
Indicates applicability of specified jurisdiction
has jurisdiction
Indicates a justification for specified concept or context
has justification
Specifying a justification for non-fulfilment of Right Exercise
Indicates the status of being lawful or legally compliant
has lawfulness
Indicates use or applicability of a Legal Basis
has legal basis
Indicates use or applicability of Legal measure
has legal measure
Harshvardhan J. Pandit, Georg P Krog, Paul Ryan, Julian Flake
Indicates the likelihood associated with a concept
has likelihood
Indicates information about location
has location
Specifies name of a legal entity
has name
Indicates association with a Non-Personal Data Process
has non-personal data process
Indicates the use or applicability of a Notice for the specified context
has notice
Specifying applicability or inclusion of an obligation rule within specified context
has obligation
Indicates use or applicability of Organisational measure
has organisational measure
Indicates an outcome of specified concept or context
has outcome
Specifying applicability or inclusion of a permission rule within specified context
has permission
Indicates association with Personal Data
has personal data
Indicates association with Personal Data Handling
has personal data handling
Indicates association with a Personal Data Process
has personal data process
Indicates use or applicability of Physical measure
has physical measure
Indicates policy applicable or used
has policy
Indicates association with a Process
has process
Indicates association with Processing
has processing
Indicates the use or extent of automation associated with processing
has processing automation
Specifying applicability or inclusion of a prohibition rule within specified context
has prohibition
Indicates association with Purpose
has purpose
Indicates Recipient of Data
has recipient
Indicates the Recipient of a Right Exercise Activity
Indiciates inclusion or applicability of a Data Controller as a Recipient of persona data
has recipient data controller
Indiciates inclusion or applicability of a Third Party as a Recipient of persona data
has recipient third party
Indicates the relation between specified Entity and Data Subject
has relation with data subject
Specifies representative of the legal entity
has representative
Indicates the associated risk is the remaining or residual risk from applying mitigation measures or treatments to this risk
has residual risk
Specifies the indicated entity is responsible within some context
has responsible entity
Indicates use or applicability of Right
has right
Indicates applicability of Risk for this concept
has risk
Indicates the associated risk level associated with a risk
has risk level
Specifying applicability or inclusion of a rule within specified context
has rule
Indicates the scale of specified concept
has scale
Indicates the scope of specified concept or context
has scope
Indicates the purpose is associated with activities in the indicated (Economic) Sector(s)
has sector
Indicates the severity associated with a concept
has severity
Indicates the status of specified concept
has status
Indicates the status of a Right Exercise Activity
Indicates information about storage condition
has storage condition
Indicates use or applicability of Technical measure
has technical measure
Indicates use or applicability of Technical or Organisational measure
has technical and organisational measure
Indicates applicability or relevance of a 'third country'
has third country
Georg P. Krog, Harshvardhan J. Pandit, Julian Flake
Indicates the specified concepts is 'after' this concept in some context
is after
Specifying a RightExerciseActivity occurs before another RightExerciseActivity
Indicates area, scope, or applicability of an Authority
is authority for
Indicates the specified concepts is 'before' this concept in some context
is before
Indicates context or information about exercising a right
is exercised at
Axel Polleres, Harshvardhan J. Pandit, Beatriz Esteves, Paul Ryan, Julian Flake
Indicates implementation details such as entities or agents
is implemented by entity
Indicates the Entity that implements or performs a Right Exercise Activity
The use of 'entity' is inclusive of entities (e.g. Data Processor) as well as 'agent' (e.g. DPO). For indicating technological implementation, the property isImplementedByTechnology should be used.
Beatriz Esteves, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
Indicates implementation details such as technologies or processes
is implemented using technology
The term 'technology' is inclusive of technologies, processes, and methods.
Specifies the temporal information for when the entity has indicated the specific context
is indicated at time
Specifies entity who indicates the specific context
is indicated by
Indicate a risk is mitigated by specified measure
is mitigated by measure
Indicates the context or application of policy
is policy for
Indicates the entity is a representative for specified entity
is representative for
Indicates this risk is the remaining or residual risk from applying mitigation measures or treatments to specified risk
is residual risk of
Indicates risks mitigated by this concept
mitigates risk