Intellectual Property Rights Management
type: Concept
type: Class
type: Organisational Measure
definition: Management of Intellectual Property Rights with a view to identify and safeguard and enforce them
broader: Rights Management
source: DGA 3.1.c
created: 2024-04-14
term status: accepted
contributor: Beatriz Esteves, Harshvardhan J. Pandit, Georg P. Krog
in scheme: organisational-measures-classes

Organisation Risk Management
type: Concept
type: Class
type: Purpose
definition: Purposes associated with managing risk for organisation's activities
broader: Organisation Governance
created: 2021-09-01
term status: accepted
contributor: Paul Ryan, Georg P. Krog, David Hickey, Harshvardhan J. Pandit
in scheme: purposes-classes

Optimisation for Controller
type: Concept
type: Class
type: Purpose
definition: Purposes associated with optimisation of activities and services for provider or controller
broader: Service Optimisation
created: 2019-04-05
term status: accepted
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
in scheme: purposes-classes

Request Status
type: Concept
type: Class
definition: Status associated with requests
subclass of: Status
broader: Status
created: 2022-11-30
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

Physical Device Security
type: Concept
type: Class
type: Physical Measure
definition: Physical protection for devices and equipment
broader: Physical Measure
source: NIST SP 800-19
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: physical-measures-classes

Partially Compliant
type: Concept
type: Class
type: Compliance Status
definition: State of partially being compliant i.e. only some objectives have been met, and others have not been in violation
broader: Compliance Status
created: 2022-05-18
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

Cryptographic Key Management
type: Concept
type: Class
type: Technical Measure
definition: Management of cryptographic keys, including their generation, storage, assessment, and safekeeping
broader: Cryptographic Methods
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Licence
type: Concept
type: Class
type: Legal Measure
definition: A Legal Document providing permission to utilise data or resource and outlining the conditions under which such use is considered valid
broader: Contractual Terms
related: odrl:Offer
source: DGA 2.10
term status: accepted
contributor: Beatriz Esteves, Harshvardhan J. Pandit
in scheme: legal-measures-classes

Seal
type: Concept
type: Class
type: Organisational Measure
definition: A seal or a mark indicating proof of certification to some certification or standard
broader: Certification and Seal
created: 2019-04-05
term status: accepted
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
in scheme: organisational-measures-classes

Cannot Reverse Process Output
type: Concept
type: Class
type: Entity Non-Permissive Involvement
definition: Involvement where entity cannot reverse output of specified context
broader: Entity Non-Permissive Involvement
created: 2024-05-11
term status: accepted
in scheme: processing-context-classes

Data Transfer Notice
type: Concept
type: Class
type: Organisational Measure
definition: Notice for the legal entity for the transfer of its data
broader: Notice
source: DGA 5.9
created: 2024-04-14
term status: accepted
contributor: Georg P. Krog, Paul Ryan, David Hickey, Beatriz Esteves, Harshvardhan J. Pandit
in scheme: organisational-measures-classes

has recipient
type: Property
type: Concept
definition: Indicates Recipient of Data
range includes: Recipient
sub property of: has entity
broader: has entity
source: (SPECIAL Project,https://specialprivacy.ercim.eu/)
created: 2019-04-04
modified: 2020-11-04
term status: accepted
contributor: Axel Polleres, Javier Fernández, Harshvardhan J. Pandit, Mark Lizar, Bud Bruegger
in scheme: entities-legalrole-properties
in scheme: rights-properties
scope note: Indicates the Recipient of a Right Exercise Activity
domain includes: Right Exercise Activity

has non-involved entity
type: Property
type: Concept
definition: indicates the entity is not involved in specified context
range includes: EntityNoInvolvement
created: 2024-05-11
term status: accepted
in scheme: processing-context-properties

Passive Right
type: Concept
type: Class
type: Right
definition: The right(s) applicable, provided, or expected that are always (passively) applicable
broader: Right
scope note: Passive rights do not require the entity to request or exercise them. They are considered to be always applicable. For example, the Right to Privacy (in EU) does not require an exercise for it to be fulfilled.
created: 2022-10-22
term status: accepted
contributor: Harshvardhan J. Pandit, Beatriz Esteves, Georg P. Krog, Paul Ryan
in scheme: rights-classes

Data Literacy
type: Concept
type: Class
type: Organisational Measure
definition: Providing skills, knowledge, and understanding to enable reading, writing, analysing, reasoning, and communicating regarding data
broader: Digital Literacy
created: 2024-05-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Cannot Object to Process
type: Concept
type: Class
type: Entity Non-Permissive Involvement
definition: Involvement where entity cannot object to process of specified context
broader: Entity Non-Permissive Involvement
created: 2024-05-11
term status: accepted
in scheme: processing-context-classes

Certification and Seal
type: Concept
type: Class
type: Organisational Measure
definition: Certifications, seals, and marks indicating compliance to regulations or practices
broader: Organisational Measure
created: 2019-04-05
term status: accepted
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
in scheme: organisational-measures-classes

Compensation
type: Concept
type: Class
type: Impact
definition: Compensation provided (as an impact)
broader: Benefit
created: 2024-04-14
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit
in scheme: risk-classes

has entity control
type: Property
type: Concept
definition: Indicates a control or measure provided for an entity to perform the specified action
range includes: EntityControl
sub property of: has technical and organisational measure
broader: has technical and organisational measure
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: TOM-properties

Enforce Access Control
type: Concept
type: Class
type: Purpose
definition: Purposes associated with conducting or enforcing access control as a form of security
broader: Enforce Security
related: svpu:Login
scope note: Was previously "Access Control". Prefixed to distinguish from Technical Measure.
created: 2019-04-05
term status: accepted
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
in scheme: purposes-classes

Impact
type: Concept
type: Class
definition: The impact(s) possible or arising as a consequence from specified context
subclass of: Consequence
broader: Consequence
scope note: Impact is a stronger notion of consequence in terms of influence, change, or effect on something e.g. for impact assessments
created: 2022-03-23
term status: accepted
contributor: Harshvardhan J. Pandit, Julian Flake, Georg P. Krog, Fajar Ekaputra, Beatriz Esteves
example: E0029
in scheme: risk-classes

Damage
type: Concept
type: Class
type: Impact
definition: Impact that acts as or causes damages
broader: Impact
created: 2022-03-30
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: risk-classes

Organisation
type: Concept
type: Class
definition: A general term reflecting a company or a business or a group acting as a unit
subclass of: Legal Entity
broader: Legal Entity
created: 2022-02-02
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: entities-organisation-classes

has data controller
type: Property
type: Concept
definition: Indicates association with Data Controller
range includes: Data Controller
sub property of: has entity
broader: has entity
created: 2019-04-04
modified: 2020-11-04
term status: accepted
contributor: Axel Polleres, Javier Fernández, Harshvardhan J. Pandit, Mark Lizar, Bud Bruegger
in scheme: entities-legalrole-properties

Assess
type: Concept
type: Class
type: Processing
definition: to assess data for some criteria
broader: Use
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog
in scheme: processing-classes

Establish Contractual Agreement
type: Concept
type: Class
type: Purpose
definition: Purposes associated with carrying out data processing to establish an agreement, such as for entering into a contract
broader: Purpose
created: 2022-11-09
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit
in scheme: purposes-classes

Audit Not Required
type: Concept
type: Class
type: Audit Status
definition: State where an audit is determined as not being required
broader: Audit Status
created: 2022-05-18
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

NonConformant
type: Concept
type: Class
type: Conformance Status
definition: State of being non-conformant
broader: Conformance Status
created: 2022-10-22
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

Intended
type: Concept
type: Class
type: Intention Status
definition: Status indicating the specified context was intended
broader: Intention Status
created: 2024-05-10
term status: accepted
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
in scheme: status-classes

Misuse, Prevention and Detection
type: Concept
type: Class
type: Purpose
definition: Prevention and Detection of Misuse or Abuse of services
broader: Enforce Security
source: DGA 22.1(a)
term status: accepted
in scheme: purposes-classes

is subsidiary of
type: Property
type: Concept
definition: Indicates this entity is the subsidiary of the specified entity
domain includes: Organisation
range includes: Organisation
sub property of: has entity
broader: has entity
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog
in scheme: entities-properties

has authority
type: Property
type: Concept
definition: Indicates applicability of authority for a jurisdiction
range includes: Authority
created: 2022-01-19
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog
in scheme: entities-authority-properties

Request Required Action Performed
type: Concept
type: Class
type: Request Status
definition: State of a request's required action having been performed by the other party
broader: Request Status
created: 2022-11-30
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

Consequence of Success
type: Concept
type: Class
definition: The consequence(s) possible or arising from success of specified context
subclass of: Consequence
broader: Consequence
created: 2022-03-23
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog
in scheme: risk-classes

Reversing Process Output
type: Concept
type: Class
type: Entity Permissive Involvement
definition: Involvement where entity can reverse output of specified context
broader: Entity Permissive Involvement
scope note: Reversing of outputs indicate discarding the output and going back to the previous output. This is different from correction of output which allows modification of the output - implying continuation of the process.
created: 2024-05-11
term status: accepted
in scheme: processing-context-classes

is indicated by
type: Property
type: Concept
definition: Specifies entity who indicates the specific context
range includes: Entity
created: 2022-06-21
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
in scheme: legal-basis-properties

dct:accessRights
type: Property
type: Concept
scope note: Specfiying constraints on access associated with Rights Exercising (e.g. User must log in) or access to provided data (e.g. access via link)
in scheme: rights-properties

Physical Access Control Method
type: Concept
type: Class
type: Physical Measure
definition: Access control applied for physical access e.g. premises or equipment
broader: Access Control Method
source: NIST SP 800-12
created: 2022-06-15
term status: accepted
contributor: Georg P. Krog
in scheme: physical-measures-classes

Payment
type: Concept
type: Class
type: Impact
definition: Payment provided as compensation (as an impact)
broader: Compensation
created: 2024-04-14
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit
in scheme: risk-classes

Restrict
type: Concept
type: Class
type: Processing
definition: to apply a restriction on the processing of specific records
broader: Transform
source: (GDPR Art.4-2,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_2/oj)
created: 2019-05-07
term status: accepted
in scheme: processing-classes

has name
type: Property
type: Concept
definition: Specifies name of a legal entity
domain includes: Entity
created: 2020-11-04
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Paul Ryan, Beatriz Esteves
in scheme: entities-properties

Personalisation
type: Concept
type: Class
type: Purpose
definition: Purposes associated with creating and providing customisation based on attributes and/or needs of person(s) or context(s).
broader: Purpose
scope note: This term is a blanket purpose category for indicating personalisation of some other purpose, e.g. by creating a subclass of the other concept and Personalisation
created: 2021-09-01
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: purposes-classes

Duration
type: Concept
type: Class
definition: The duration or temporal limitation
subclass of: Context
broader: Context
created: 2022-02-09
term status: accepted
contributor: Harshvardhan J. Pandit
example: E0011
example: E0019
in scheme: context-classes

Fulfilment of Contractual Obligation
type: Concept
type: Class
type: Purpose
definition: Purposes associated with carrying out data processing to fulfill a contractual obligation
broader: Fulfilment of Obligation
created: 2022-11-09
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit
in scheme: purposes-classes

Notification
type: Concept
type: Class
type: Organisational Measure
definition: Notification represents the provision of a notice i.e. notifying
broader: Organisational Measure
scope note: Notice refers to the information whereas Notification refers to the provision of that notice. The distinction is important as there are specific obligations associated with notice and notifications. For example, a data breach notice refers to the information about the breach intended to be provided to another entity, whereas notification refers to the act of providing the entity with the notice
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Public Interest
type: Concept
type: Class
type: Legal Basis
definition: Processing is necessary or beneficial for interest of the public or society at large
broader: Legal Basis
created: 2021-04-21
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: legal-basis-classes

has location
type: Property
type: Concept
definition: Indicates information about location
range includes: Location
source: (SPECIAL Project,https://specialprivacy.ercim.eu/)
created: 2019-04-05
term status: accepted
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
in scheme: jurisdiction-properties

Hardware Security Protocols
type: Concept
type: Class
type: Technical Measure
definition: Security protocols implemented at or within hardware
broader: Security Method
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

has risk level
type: Property
type: Concept
definition: Indicates the associated risk level associated with a risk
domain includes: Risk
range includes: Risk Level
created: 2022-07-20
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Paul Ryan, Julian Flake
in scheme: risk-properties

Profiling
type: Concept
type: Class
type: Processing
definition: to create a profile that describes or represents a person
broader: Use
source: (GDPR Art.4-2,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_2/oj)
created: 2019-05-07
term status: accepted
in scheme: processing-classes

Processing Condition
type: Concept
type: Class
definition: Conditions required or followed regarding processing of data or use of technologies
subclass of: Processing Context
broader: Processing Context
created: 2023-12-10
term status: accepted
in scheme: processing-context-classes

Network Proxy Routing
type: Concept
type: Class
type: Technical Measure
definition: Use of network routing using proxy
broader: Security Method
source: (ENISA Data Protection Engineering,https://www.enisa.europa.eu/publications/data-protection-engineering)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Data Subject
type: Concept
type: Class
definition: The individual (or category of individuals) whose personal data is being processed
subclass of: Legal Entity
broader: Legal Entity
scope note: The term 'data subject' is specific to the GDPR, but is functionally equivalent to the term 'individual associated with data' and the ISO/IEC term 'PII Principle'
source: (GDPR Art.4-1g,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_1/oj)
created: 2019-04-05
modified: 2020-11-04
term status: accepted
contributor: Axel Polleres, Javier Fernández
in scheme: entities-datasubject-classes

Query
type: Concept
type: Class
type: Processing
definition: to query or make enquiries over data
broader: Consult
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-classes

has notice
type: Property
type: Concept
definition: Indicates the use or applicability of a Notice for the specified context
range includes: Notice
sub property of: has organisational measure
broader: has organisational measure
created: 2022-06-22
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
in scheme: TOM-properties

Data Governance
type: Concept
type: Class
type: Organisational Measure
definition: Measures associated with topics typically considered to be part of 'Data Governance'
broader: Organisation Governance
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Entity Uninformed
type: Concept
type: Class
definition: Status indicating entity is uninformed i.e. has been not been informed about specified context
subclass of: Entity Informed Status
broader: Entity Informed Status
created: 2024-05-10
term status: accepted
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
in scheme: status-classes

Data Volume
type: Concept
type: Class
definition: Volume or Scale of Data
subclass of: Scale
broader: Scale
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Rana Saniei
in scheme: processing-scale-classes

Sell Products to Data Subject
type: Concept
type: Class
type: Purpose
definition: Purposes associated with selling products or services to the user, consumer, or data subjects
broader: Sell Products
scope note: Sell Products here refers to processing necessary to provide and complete a sale to customers. It should not be confused with providing services with a cost based on an established agreement.
created: 2019-04-05
term status: accepted
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
in scheme: purposes-classes

has service
type: Property
type: Concept
definition: Indicates associated with the specified service
range includes: Service
created: 2024-04-20
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: process-properties

Permission
type: Concept
type: Class
type: Rule
definition: A rule describing a permission to perform an activity
broader: Rule
created: 2022-10-19
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Beatriz Esteves, Paul Ryan
in scheme: rules-classes

Data Jurisdiction Policy
type: Concept
type: Class
type: Organisational Measure
definition: Policy specifying jurisdictional requirements for data processing
broader: Data Processing Policy
scope note: Jurisdictional requirements can refer to data being stored within specific jurisdictions, or that data must be in line with jurisdictional laws and norms
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Physical Measure
type: Concept
type: Class
definition: Physical measures used to safeguard and ensure good practices in connection with data and technologies
subclass of: Technical and Organisational Measure
broader: Technical and Organisational Measure
created: 2023-12-10
modified: 2023-12-10
term status: accepted
in scheme: TOM-classes

Provide Consent
type: Concept
type: Class
definition: Control for providing consent
subclass of: Consent Control
subclass of: OptingIntoProcess
broader: Consent Control
broader: OptingIntoProcess
scope note: Indicates how the data subject can provide consent e.g. used with dpv:isExercisedAt
created: 2024-05-11
term status: accepted
in scheme: consent-controls-classes

Entity Non-Involvement
type: Concept
type: Class
definition: Indicating entity is not involved
created: 2024-05-11
term status: accepted
in scheme: processing-context-classes

Human involved
type: Concept
type: Class
type: Human Involvement
definition: Humans are involved in the specified context
broader: Human Involvement
scope note: This concept only indicates that humans are involved. For specific involvement, see specialised concepts e.g. involved for input, oversight.
created: 2022-09-03
modified: 2023-12-10
term status: accepted
in scheme: processing-context-classes

Anonymise
type: Concept
type: Class
type: Processing
definition: to irreversibly alter personal data in such a way that an unique data subject can no longer be identified directly or indirectly or in combination with other data
broader: Transform
related: svpr:Anonymise
source: (SPECIAL Project,https://specialprivacy.ercim.eu/vocabs/processing)
created: 2019-05-07
term status: accepted
in scheme: processing-classes

Contractual Terms
type: Concept
type: Class
type: Legal Measure
definition: Contractual terms governing data handling within or with an entity
broader: Legal Agreement
created: 2019-04-05
term status: accepted
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
in scheme: legal-measures-classes

Expected
type: Concept
type: Class
type: Expectation Status
definition: Status indicating the specified context was expected
broader: Expectation Status
created: 2024-05-10
term status: accepted
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
in scheme: status-classes

Authentication using PABC
type: Concept
type: Class
type: Technical Measure
definition: Use of Privacy-enhancing Attribute Based Credentials (ABC) to perform and manage authentication
broader: Cryptographic Authentication
source: (ENISA Data Protection Engineering,https://www.enisa.europa.eu/publications/data-protection-engineering)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Re-certification Policy
type: Concept
type: Class
type: Organisational Measure
definition: Policy regarding repetition or renewal of existing certification(s)
broader: Policy
created: 2019-04-05
modified: 2024-04-14
term status: accepted
in scheme: organisational-measures-classes

Non-Profit Organisation
type: Concept
type: Class
definition: An organisation that does not aim to achieve profit as its primary goal
subclass of: Organisation
broader: Organisation
source: (ADMS controlled vocabulary,http://purl.org/adms)
created: 2022-02-02
modified: 2020-10-05
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: entities-organisation-classes

Secret Sharing Schemes
type: Concept
type: Class
type: Technical Measure
definition: Use of secret sharing schemes where the secret can only be reconstructed through combination of sufficient number of individuals
broader: Cryptographic Methods
source: (ENISA Data Pseudonymisation: Advanced Techniques and Use Cases,https://www.enisa.europa.eu/publications/data-pseudonymisation-advanced-techniques-and-use-cases)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Technical Measure
type: Concept
type: Class
definition: Technical measures used to safeguard and ensure good practices in connection with data and technologies
subclass of: Technical and Organisational Measure
broader: Technical and Organisational Measure
created: 2019-04-05
modified: 2023-12-10
term status: accepted
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
in scheme: TOM-classes

has importance
type: Property
type: Concept
definition: Indicates the importance for specified context or criteria
range includes: Importance
created: 2024-04-13
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: context-properties

Staff Training
type: Concept
type: Class
type: Organisational Measure
definition: Practices and policies regarding training of staff members
broader: Organisational Measure
created: 2019-04-05
term status: accepted
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
example: E0017
in scheme: organisational-measures-classes

Collect
type: Concept
type: Class
type: Processing
definition: to gather data from someone
broader: Obtain
related: svpr:Collect
source: (GDPR Art.4-2,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_2/oj), (SPECIAL Project,https://specialprivacy.ercim.eu/vocabs/processing)
created: 2019-05-07
term status: accepted
example: E0018
in scheme: processing-classes

Right Exercise Notice
type: Concept
type: Class
type: Organisational Measure
definition: Information associated with exercising of an active right
broader: Organisational Measure
scope note: This concept is intended for providing information regarding a right exercise. For specific instances of such exercises, see RightExerciseActivity and RightExerciseRecord.
created: 2022-10-22
term status: accepted
contributor: Harshvardhan J. Pandit, Beatriz Esteves, Georg P. Krog, Paul Ryan
in scheme: rights-classes

Legal Compliance Assessment
type: Concept
type: Class
type: Organisational Measure
definition: Assessment regarding legal compliance
broader: Compliance Assessment
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog
in scheme: organisational-measures-classes

Notice
type: Concept
type: Class
type: Organisational Measure
definition: A notice is an artefact for providing information, choices, or controls
broader: Organisational Measure
scope note: Notice refers to the information whereas Notification refers to the provision of that notice. In several cases, they are used interchangeably - for example Privacy Notice as a measure or control refers to both the information as well as the act of making it available. For 'active' contexts where this distinction is important, e.g. data breach notifications, see Notification concept.
created: 2021-09-08
term status: accepted
contributor: Paul Ryan, David Hickey, Georg P. Krog, Harshvardhan J. Pandit
example: E0025
in scheme: organisational-measures-classes

has purpose
type: Property
type: Concept
definition: Indicates association with Purpose
range includes: Purpose
source: (SPECIAL Project,https://specialprivacy.ercim.eu/)
created: 2019-04-04
modified: 2020-11-04
term status: accepted
contributor: Axel Polleres, Javier Fernández, Harshvardhan J. Pandit, Mark Lizar, Bud Bruegger
in scheme: purposes-properties

is applicable for
type: Property
type: Concept
definition: Indicates the concept or information is applicable for specified context
range includes: Scope
created: 2024-04-13
term status: accepted
contributor: Harshvardhan J. Pandit, Beatriz Esteves, Georg P. Krog, Paul Ryan
in scheme: context-properties

Member
type: Concept
type: Class
type: Data Subject
definition: Data subjects that are members of a group, organisation, or other collectives
broader: Data Subject
created: 2022-04-06
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Julian Flake, Paul Ryan, Beatriz Esteves
in scheme: entities-datasubject-classes

Consultation with Data Subject
type: Concept
type: Class
type: Organisational Measure
definition: Consultation with data subject(s) or their representative(s)
broader: Consultation
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog
in scheme: organisational-measures-classes

Match
type: Concept
type: Class
type: Processing
definition: to combine, compare, or match data from different sources
broader: Use
source: (A29WP WP 248 rev.01 Guideliens on DPIA,https://ec.europa.eu/newsroom/article29/items/611236)
created: 2022-04-20
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-classes

Legal Entity
type: Concept
type: Class
definition: A human or non-human 'thing' that constitutes as an entity and which is recognised and defined in law
subclass of: Entity
broader: Entity
created: 2019-04-05
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: entities-classes

Security Role Procedures
type: Concept
type: Class
type: Organisational Measure
definition: Procedures related to security roles
broader: Security Procedure
source: (ENISA 5G Cybersecurity Standards,https://www.enisa.europa.eu/publications/5g-cybersecurity-standards)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Storage Location
type: Concept
type: Class
definition: Location or geospatial scope where the data is stored
subclass of: Storage Condition
subclass of: Location
broader: Storage Condition
broader: Location
created: 2019-04-05
term status: accepted
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
in scheme: processing-context-classes

Physical Interception Protection
type: Concept
type: Class
type: Physical Measure
definition: Physical protection against interception e.g. by posting a guard
broader: Physical Measure
source: NIST SP 800-20
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: physical-measures-classes

Document Randomised Pseudonymisation
type: Concept
type: Class
type: Technical Measure
definition: Use of randomised pseudonymisation where the same elements are assigned different values in the same document or database
broader: Pseudonymisation
source: (ENISA Data Pseudonymisation: Advanced Techniques and Use Cases,https://www.enisa.europa.eu/publications/data-pseudonymisation-advanced-techniques-and-use-cases)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Data Quality Management
type: Concept
type: Class
type: Organisational Measure
definition: Measures associated with management of data quality
broader: Data Governance
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Within Virtual Environment
type: Concept
type: Class
type: Location
definition: Location is local and entirely within a virtual environment, such as a shared network directory
broader: Local Location
created: 2020-10-06
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: jurisdiction-classes

Fulfilment of Obligation
type: Concept
type: Class
type: Purpose
definition: Purposes associated with carrying out data processing to fulfill an obligation
broader: Purpose
created: 2022-11-09
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit
in scheme: purposes-classes

Cannot Opt-in to Process
type: Concept
type: Class
type: Entity Non-Permissive Involvement
definition: Involvement where entity cannot opt-in to specified context
broader: Entity Non-Permissive Involvement
created: 2024-05-11
term status: accepted
in scheme: processing-context-classes

is authority for
type: Property
type: Concept
definition: Indicates area, scope, or applicability of an Authority
domain includes: Authority
created: 2022-01-19
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog
in scheme: entities-authority-properties

Notification Completed
type: Concept
type: Class
type: Notification Status
definition: Status indicating notification(s) are completed
broader: Notification Status
created: 2024-05-19
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

has geographic coverage
type: Property
type: Concept
definition: Indicate the geographic coverage (of specified context)
range includes: Geographic Coverage
sub property of: has scale
broader: has scale
created: 2022-06-22
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-scale-properties

Data Subject Right
type: Concept
type: Class
type: Right
definition: The rights applicable or provided to a Data Subject
broader: Right
scope note: Based on use of definitions, the notion of 'Data Subject Right' can be equivalent to 'Individual Right' or 'Right of a Person'
created: 2020-11-18
term status: accepted
contributor: Beatriz Esteves, Georg P. Krog, Harshvardhan J. Pandit
in scheme: rights-classes

Compliant
type: Concept
type: Class
type: Compliance Status
definition: State of being fully compliant
broader: Compliance Status
created: 2022-05-18
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

Personal Data
type: Concept
type: Class
definition: Data directly or indirectly associated or related to an individual.
subclass of: Data
broader: Data
related: spl:AnyData
scope note: This definition of personal data encompasses the concepts used in GDPR Art.4-1 for 'personal data' and ISO/IEC 2700 for 'personally identifiable information (PII)'.
source: (GDPR Art.4-1g,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_1/oj)
created: 2019-04-05
modified: 2022-01-19
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: personal-data-classes

Local Location
type: Concept
type: Class
type: Location
definition: Location is local
broader: Location Locality
created: 2022-06-15
modified: 2020-10-05
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: jurisdiction-classes

Student
type: Concept
type: Class
type: Data Subject
definition: Data subjects that are students
broader: Data Subject
created: 2022-04-06
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Julian Flake, Paul Ryan, Beatriz Esteves
in scheme: entities-datasubject-classes

Algorithmic Logic
type: Concept
type: Class
definition: The algorithmic logic applied or used
subclass of: Processing Context
broader: Processing Context
scope note: Algorithmic Logic is intended as a broad concept for explaining the use of algorithms and automated decisions making within Processing. To describe the actual algorithm, see the Algorithm concept.
created: 2022-01-26
modified: 2023-12-10
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-context-classes

Risk Assessment
type: Concept
type: Class
type: Organisational Measure
definition: Assessment involving identification, analysis, and evaluation of risk
broader: Assessment
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: risk-classes

Request Acknowledged
type: Concept
type: Class
type: Request Status
definition: State of a request being acknowledged
broader: Request Status
created: 2022-11-30
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

Mobile Platform Security
type: Concept
type: Class
type: Technical Measure
definition: Security implemented over a mobile platform
broader: Security Method
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Access Control Method
type: Concept
type: Class
type: Technical Measure
definition: Methods which restrict access to a place or resource
broader: Technical Measure
created: 2019-04-05
term status: accepted
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
example: E0016
in scheme: technical-measures-classes

Provided Personal Data
type: Concept
type: Class
definition: Personal Data that has been provided by an entity such as the Data Subject
subclass of: Collected Personal Data
subclass of: ProvidedData
broader: Collected Personal Data
broader: ProvidedData
scope note: Provided personal data involves one entity (e.g. data subject) explicitly providing the data, which the other entity (e.g. data controller) then collects
created: 2024-04-20
term status: accepted
contributor: Harshvardhan J. Pandit, Paul Ryan
in scheme: personal-data-classes

has recipient third party
type: Property
type: Concept
definition: Indiciates inclusion or applicability of a Third Party as a Recipient of persona data
range includes: Third Party
sub property of: has recipient
broader: has recipient
created: 2022-02-09
term status: accepted
contributor: Paul Ryan, Georg P. Krog, Harshvardhan J. Pandit
in scheme: entities-legalrole-properties

Infer
type: Concept
type: Class
type: Processing
definition: to infer data from existing data
broader: Derive
scope note: Infer indicates data that is derived without it being present or obtainable from existing data. For data that is presented, and is 'extracted' or 'obtained' from existing data, see Derive.
created: 2022-04-20
modified: 2022-10-14
term status: accepted
contributor: Harshvardhan J. Pandit
example: E0014
in scheme: processing-classes

Fundamental Rights Impact Assessment (FRIA)
type: Concept
type: Class
type: Organisational Measure
definition: Impact assessment which assesses the potential and actual impact on fundamental rights occuring due to processing activities
broader: Rights Impact Assessment
scope note: The fundamental rights and freedoms may be those defined in law or other norms, and may be bound to a jurisdiction - for example see EU Charter of Fundamental Rights
source: AI Act Art.27
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: risk-classes

Filter
type: Concept
type: Class
type: Processing
definition: to filter or keep data for some criteria
broader: Transform
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog
in scheme: processing-classes

Delivery of Goods
type: Concept
type: Class
type: Purpose
definition: Purposes associated with delivering goods and services requested or asked by consumer
broader: Requested Service Provision
related: svpu:Delivery
created: 2019-04-05
term status: accepted
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
in scheme: purposes-classes

Activity Ongoing
type: Concept
type: Class
type: Activity Status
definition: State of an activity occuring in continuation i.e. currently ongoing
broader: Activity Status
created: 2022-05-18
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

has duration
type: Property
type: Concept
definition: Indicates information about duration
range includes: Duration
source: (SPECIAL Project,https://specialprivacy.ercim.eu/)
created: 2019-04-05
term status: accepted
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
in scheme: context-properties

ProvidedData
type: Concept
type: Class
definition: Data that has been provided by an entity
subclass of: Collected Data
broader: Collected Data
scope note: Provided data involves one entity explicitly providing the data, which the other entity then collects
created: 2024-04-20
term status: accepted
contributor: Harshvardhan J. Pandit, Paul Ryan
in scheme: personal-data-classes

Transmit
type: Concept
type: Class
type: Processing
definition: to send out data
broader: Disclose
source: (GDPR Art.4-2,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_2/oj)
created: 2019-05-07
term status: accepted
in scheme: processing-classes

has sensitivity level
type: Property
type: Concept
definition: Indicates the associated level of sensitivity
range includes: Sensitivity Level
created: 2023-08-24
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: risk-properties

Fully Randomised Pseudonymisation
type: Concept
type: Class
type: Technical Measure
definition: Use of randomised pseudonymisation where the same elements are assigned different values each time they occur
broader: Pseudonymisation
source: (ENISA Data Pseudonymisation: Advanced Techniques and Use Cases,https://www.enisa.europa.eu/publications/data-pseudonymisation-advanced-techniques-and-use-cases)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Consent Withdrawn
type: Concept
type: Class
type: Consent Status
definition: The state where the consent is withdrawn or revoked specifically by the data subject and which prevents it from being further used as a valid state
broader: Consent Status Invalid for Processing
scope note: This state can be considered a form of 'revocation' of consent, where the revocation can only be performed by the data subject. Therefore we suggest using ConsentRevoked when it is a non-data-subject entity, and ConsentWithdrawn when it is the data subject
source: (GConsent,https://w3id.org/GConsent)
created: 2022-06-22
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
in scheme: consent-status-classes

Identity Authentication
type: Concept
type: Class
type: Purpose
definition: Purposes associated with performing authentication based on identity as a form of security
broader: Enforce Security
created: 2024-04-14
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
in scheme: purposes-classes

Monotonic Counter Pseudonymisation
type: Concept
type: Class
type: Technical Measure
definition: A simple pseudonymisation method where identifiers are substituted by a number chosen by a monotonic counter
broader: Pseudonymisation
source: (ENISA Data Pseudonymisation: Advanced Techniques and Use Cases,https://www.enisa.europa.eu/publications/data-pseudonymisation-advanced-techniques-and-use-cases)
created: 2022-08-17
modified: 2022-10-13
term status: modified
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Data Restoration Policy
type: Concept
type: Class
type: Organisational Measure
definition: Policy regarding restoration of data
broader: Data Processing Policy
scope note: Restoration can refer to how data is restored from a backup
created: 2024-04-14
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Personal Data Handling
type: Concept
type: Class
definition: An abstract concept describing 'personal data handling'
subclass of: Process
broader: Process
scope note: This concept will be deprecated in future updates. It is recommended to use dpv:PersonalDataProcess as the equivalent alternative which is better aligned with legal and operational terminology.
created: 2019-04-05
modified: 2023-12-10
term status: sunset
contributor: Axel Polleres, Javier Fernández
example: E0007
example: E0008
example: E0014
example: E0018
example: E0019
example: E0020
example: E0022
example: E0028
in scheme: process-classes

Requested Service Provision
type: Concept
type: Class
type: Purpose
definition: Purposes associated with delivering services as requested by user or consumer
broader: Service Provision
scope note: The use of 'request' here includes where an user explicitly asks for the service and also when an established contract requires the provision of the service
created: 2021-09-08
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
in scheme: purposes-classes

Consent Expired
type: Concept
type: Class
type: Consent Status
definition: The state where the temporal or contextual validity of consent has 'expired'
broader: Consent Status Invalid for Processing
scope note: An example of this state is when the obtained consent has been assigned a duration - which has lapsed or 'expired', making it invalid to be used further for processing data
source: (GConsent,https://w3id.org/GConsent)
created: 2022-06-22
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
in scheme: consent-status-classes

Service Registration
type: Concept
type: Class
type: Purpose
definition: Purposes associated with registering users and collecting information required for providing a service
broader: Service Provision
scope note: An example of service registration is to provide a form that collects information such as preferred language or media format for downloading a movie
created: 2020-11-04
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
in scheme: purposes-classes

Personnel Management
type: Concept
type: Class
type: Purpose
definition: Purposes associated with management of personnel associated with the organisation e.g. evaluation and management of employees and intermediaries
broader: Human Resource Management
source: (Belgian DPA ROPA Template, https://www.privacycommission.be/nl/model-voor-een-register-van-de-verwerkingsactiviteiten)
created: 2022-03-30
term status: accepted
contributor: Paul Ryan, Harshvardhan J. Pandit
in scheme: purposes-classes

Small Scale Of Data Subjects
type: Concept
type: Class
type: Data Subject Scale
definition: Scale of data subjects considered small or limited within the context
broader: Data Subject Scale
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-scale-classes

has outcome
type: Property
type: Concept
definition: Indicates an outcome of specified concept or context
created: 2022-05-18
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: context-properties

Non-Governmental Organisation
type: Concept
type: Class
definition: An organisation not part of or independent from the government
subclass of: Organisation
broader: Organisation
source: (ADMS controlled vocabulary,http://purl.org/adms)
created: 2022-02-02
modified: 2020-10-05
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: entities-organisation-classes

Data Sanitisation Technique
type: Concept
type: Class
type: Technical Measure
definition: Cleaning or any removal or re-organisation of elements in data based on selective criteria
broader: Technical Measure
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Human Involvement for Oversight
type: Concept
type: Class
type: Human Involvement
definition: Human involvement for the purposes of having oversight over the specified context regarding its operations, inputs, or outputs
broader: Human Involvement
scope note: Oversight by itself does not indicate the ability to intervene or control the operations.
created: 2022-09-07
modified: 2023-12-10
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-context-classes

has identifier
type: Property
type: Concept
definition: Indicates an identifier associated for identification or reference
created: 2020-11-25
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Paul Ryan, Beatriz Esteves
in scheme: context-properties

Evaluation and Scoring
type: Concept
type: Class
definition: Processing that involves evaluation and scoring of individuals
subclass of: Processing Context
broader: Processing Context
source: (GDPR Art.4-2,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_2/oj)
created: 2020-11-04
term status: accepted
contributor: Harshvardhan J. Pandit, Piero Bonatti
in scheme: processing-context-classes

Information Security Policy
type: Concept
type: Class
type: Organisational Measure
definition: Policy regarding security of information
broader: Policy
source: (ENISA 5G Cybersecurity Standards,https://www.enisa.europa.eu/publications/5g-cybersecurity-standards)
created: 2022-08-17
modified: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Credit Checking
type: Concept
type: Class
type: Purpose
definition: Purposes associated with monitoring, performing, or assessing credit worthiness or solvency
broader: Customer Solvency Monitoring
created: 2022-04-20
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: purposes-classes

Personalised Advertising
type: Concept
type: Class
type: Purpose
definition: Purposes associated with creating and providing personalised advertising
broader: Advertising
broader: Personalisation
created: 2020-11-04
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
in scheme: purposes-classes

Informed Consent
type: Concept
type: Class
type: Legal Basis
definition: Consent that is informed i.e. with the requirement to provide sufficient information to make a consenting decision
broader: Consent
scope note: The specifics for what information should be provided or made available will depend on the context, use-case, or relevant legal requirements
created: 2022-06-21
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
in scheme: consent-types-classes

Participant
type: Concept
type: Class
type: Data Subject
definition: Data subjects that participate in some context such as volunteers in a function
broader: Data Subject
created: 2022-04-06
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Julian Flake, Paul Ryan, Beatriz Esteves
in scheme: entities-datasubject-classes

Authorisation Procedure
type: Concept
type: Class
type: Organisational Measure
definition: Procedures for determining authorisation through permission or authority
broader: Security Procedure
scope note: non-technical authorisation procedures: How is it described on an organisational level, who gets access to the data
created: 2019-04-05
term status: accepted
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
in scheme: organisational-measures-classes

Pseudonymised Data
type: Concept
type: Class
definition: Personal Data that has undergone a pseudonymisation process or a partial (incomplete) anonymisation process such that it is still considered Personal Data
subclass of: Personal Data
broader: Personal Data
created: 2022-01-19
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: personal-data-classes

Communication for Customer Care
type: Concept
type: Class
type: Purpose
definition: Customer Care Communication refers to purposes associated with communicating with customers for assisting them, resolving issues, ensuring satisfaction, etc. in relation to services provided
broader: Customer Care
broader: Communication Management
created: 2020-11-04
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
in scheme: purposes-classes

Recipient Informed
type: Concept
type: Class
type: Entity Informed Status
definition: Status indicating Recipient has been informed about the specified context
broader: Entity Informed
created: 2024-05-10
term status: accepted
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
in scheme: status-classes

Data Breach Notice
type: Concept
type: Class
type: Organisational Measure
definition: A notice providing information about data breach(es) i.e. unauthorised transfer, access, use, or modification of data
broader: Security Incident Notice
source: DGA 12.k, DGA 21.5 GDPR 33, GDPR 34
created: 2024-04-14
term status: accepted
contributor: Georg P. Krog, Paul Ryan, David Hickey, Beatriz Esteves, Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Compliance Monitoring
type: Concept
type: Class
type: Organisational Measure
definition: Monitoring of compliance (e.g. internal policy, regulations)
broader: Governance Procedures
source: (ENISA 5G Cybersecurity Standards,https://www.enisa.europa.eu/publications/5g-cybersecurity-standards)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Vendor Payment
type: Concept
type: Class
type: Purpose
definition: Purposes associated with managing payment of vendors
broader: Vendor Management
source: (Belgian DPA ROPA Template, https://www.privacycommission.be/nl/model-voor-een-register-van-de-verwerkingsactiviteiten)
created: 2021-09-01
term status: accepted
contributor: Paul Ryan, Georg P. Krog, David Hickey, Harshvardhan J. Pandit
in scheme: purposes-classes

Display
type: Concept
type: Class
type: Processing
definition: to present or show data
broader: Disclose
source: DGA 2.20
created: 2024-04-14
term status: accepted
contributor: Beatriz Esteves
in scheme: processing-classes

Privacy Preserving Protocol
type: Concept
type: Class
type: Technical Measure
definition: Use of protocols designed with the intention of provided additional guarantees regarding privacy
broader: Cryptographic Methods
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Implied Consent
type: Concept
type: Class
type: Legal Basis
definition: Consent that is implied indirectly through an action not associated solely with conveying a consenting decision
broader: Informed Consent
scope note: Implied consent is expected to also be Informed Consent. An example is a CCTV notice outside a monitored area that informs the individuals that by walking in they would be consenting to the use of camera for surveillance.
created: 2022-06-21
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
in scheme: consent-types-classes

Incident Management Procedures
type: Concept
type: Class
type: Organisational Measure
definition: Procedures related to management of incidents
broader: Governance Procedures
source: (ENISA 5G Cybersecurity Standards,https://www.enisa.europa.eu/publications/5g-cybersecurity-standards)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

has impact on
type: Property
type: Concept
definition: Indicates the thing (e.g. plan, process, or entity) affected by an impact
domain includes: Impact
sub property of: has consequence on
broader: has consequence on
created: 2022-05-18
term status: accepted
contributor: Harshvardhan J. Pandit, Julian Flake, Georg P. Krog, Fajar Ekaputra, Beatriz Esteves
in scheme: risk-properties

has rule
type: Property
type: Concept
definition: Specifying applicability or inclusion of a rule within specified context
domain includes: Context
range includes: Rule
created: 2022-10-19
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Beatriz Esteves, Paul Ryan
in scheme: rules-properties

Record
type: Concept
type: Class
type: Processing
definition: to make a record (especially media)
broader: Obtain
source: (GDPR Art.4-2,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_2/oj)
created: 2019-05-07
term status: accepted
in scheme: processing-classes

Fixed Singular Location
type: Concept
type: Class
type: Location Fixture
definition: Location that is fixed at a specific place e.g. a city
broader: Fixed Location
created: 2022-06-15
modified: 2020-10-05
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: jurisdiction-classes

Right Fulfilment Notice
type: Concept
type: Class
type: Organisational Measure
definition: Notice provided regarding fulfilment of a right
broader: Notice
scope note: This notice is associated with situations where information is provided with the intention of progressing the fulfilment of a right. For example, a notice asking for more information regarding the scope of the right, or providing information on where to access the data provided under a right.
created: 2022-11-02
term status: accepted
contributor: Harshvardhan J. Pandit, Beatriz Esteves
in scheme: rights-classes

Organisation Governance
type: Concept
type: Class
type: Purpose
definition: Purposes associated with conducting activities and functions for governance of an organisation
broader: Purpose
source: (Belgian DPA ROPA Template, https://www.privacycommission.be/nl/model-voor-een-register-van-de-verwerkingsactiviteiten)
created: 2021-09-01
term status: accepted
contributor: Paul Ryan, Georg P. Krog, David Hickey, Harshvardhan J. Pandit
in scheme: purposes-classes

Reaffirm Consent
type: Concept
type: Class
definition: Control for affirming consent
subclass of: Consent Control
broader: Consent Control
scope note: Indicates how the controller (with dpv:ObtainConsent) or data subject (with dpv:ProvideConsent) can reaffirm consent e.g. used with dpv:isExercisedAt
created: 2024-05-11
term status: accepted
in scheme: consent-controls-classes

Data Subject Scale
type: Concept
type: Class
definition: Scale of Data Subject(s)
subclass of: Scale
broader: Scale
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Rana Saniei
in scheme: processing-scale-classes

Academic or Scientific Organisation
type: Concept
type: Class
definition: Organisations related to academia or scientific pursuits e.g. Universities, Schools, Research Bodies
subclass of: Organisation
broader: Organisation
source: (ADMS controlled vocabulary,http://purl.org/adms)
created: 2022-02-02
modified: 2020-10-05
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: entities-organisation-classes

Maintain Credit Rating Database
type: Concept
type: Class
type: Purpose
definition: Purposes associated with maintaining a Credit Rating Database
broader: Credit Checking
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog
in scheme: purposes-classes

is mitigated by measure
type: Property
type: Concept
definition: Indicate a risk is mitigated by specified measure
domain includes: Risk
range includes: Risk Mitigation Measure
sub property of: has technical and organisational measure
broader: has technical and organisational measure
created: 2022-02-09
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: risk-properties

Rights Fulfillment
type: Concept
type: Class
type: Purpose
definition: Purposes associated with the fulfillment of rights specified in law
broader: Legal Obligation
scope note: Where Rights Fulfillment includes activities that are not legal obligations, for example conducting Identity Verification, the documentation should indicate this by expressing them as separate purposes within the same activity
created: 2024-02-14
term status: accepted
contributor: Beatriz Esteves, Georg P. Krog, Harshvardhan J. Pandit
in scheme: purposes-classes

Single Sign On
type: Concept
type: Class
type: Technical Measure
definition: Use of credentials or processes that enable using one set of credentials to authenticate multiple contexts.
broader: Authentication Protocols
created: 2020-11-04
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan
in scheme: technical-measures-classes

Legitimate Interest of Data Subject
type: Concept
type: Class
type: Legal Basis
definition: Legitimate Interests of the Data Subject in conducting specified processing
broader: Legitimate Interest
created: 2022-10-22
term status: accepted
contributor: Georg P. Krog
in scheme: legal-basis-classes

Correcting Process Input
type: Concept
type: Class
type: Entity Permissive Involvement
definition: Involvement where entity can correct input of specified context
broader: Entity Permissive Involvement
created: 2024-05-11
term status: accepted
in scheme: processing-context-classes

Medium Scale Processing
type: Concept
type: Class
type: Processing Scale
definition: Processing that takes place at medium scales (as specified by some criteria)
broader: Processing Scale
created: 2022-09-07
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-scale-classes

Data Deletion Policy
type: Concept
type: Class
type: Organisational Measure
definition: Policy regarding deletion of data
broader: Data Processing Policy
scope note: Deletion and Erasure are distinct activities where deletion refers to logical removal of data with the possibility of retrieval whereas erasure refers to destruction of data such that it cannot be retrieved. See dpv:DataErasurePolicy
created: 2024-04-14
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Maintain Credit Checking Database
type: Concept
type: Class
type: Purpose
definition: Purposes associated with maintaining a Credit Checking Database
broader: Credit Checking
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog
in scheme: purposes-classes

has likelihood
type: Property
type: Concept
definition: Indicates the likelihood associated with a concept
range includes: Likelihood
created: 2022-07-20
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Paul Ryan, Julian Flake
in scheme: risk-properties

Policy
type: Concept
type: Class
type: Organisational Measure
definition: A guidance document outlining any of: procedures, plans, principles, decisions, intent, or protocols.
broader: Governance Procedures
created: 2021-09-08
term status: accepted
contributor: Paul Ryan, David Hickey, Georg P. Krog, Harshvardhan J. Pandit
example: E0017
in scheme: organisational-measures-classes

Scope
type: Concept
type: Class
definition: Indication of the extent or range or boundaries associated with(in) a context
subclass of: Context
broader: Context
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: context-classes

Sell Products
type: Concept
type: Class
type: Purpose
definition: Purposes associated with selling products or services
broader: Service Provision
scope note: Sell here means exchange, submit, or provide in return for direct or indirect compensation.
created: 2021-09-08
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
in scheme: purposes-classes

Protection of Intellectual Property Rights
type: Concept
type: Class
type: Purpose
definition: Purposes associated with the protection of intellectual property rights
broader: Fulfilment of Obligation
source: DGA 3.1(c)
term status: accepted
contributor: Beatriz Esteves, Harshvardhan J. Pandit
in scheme: purposes-classes

has subsidiary
type: Property
type: Concept
definition: Indicates this entity has the specified entity as its subsidiary
domain includes: Organisation
range includes: Organisation
sub property of: has entity
broader: has entity
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog
in scheme: entities-properties

Data Interoperability Management
type: Concept
type: Class
type: Organisational Measure
definition: Measures associated with management of data interoperablity
broader: Data Governance
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Customer
type: Concept
type: Class
type: Data Subject
definition: Data subjects that purchase goods or services
broader: Data Subject
scope note: note: for B2B relations where customers are organisations, this concept only applies for data subjects
created: 2022-04-06
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Julian Flake, Paul Ryan, Beatriz Esteves
in scheme: entities-datasubject-classes

Job Applicant
type: Concept
type: Class
type: Data Subject
definition: Data subjects that apply for jobs or employments
broader: Data Subject
created: 2022-04-06
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Julian Flake, Paul Ryan, Beatriz Esteves
in scheme: entities-datasubject-classes

Public Relations
type: Concept
type: Class
type: Purpose
definition: Purposes associated with managing and conducting public relations processes, including creating goodwill for the organisation
broader: Marketing
source: (Belgian DPA ROPA Template, https://www.privacycommission.be/nl/model-voor-een-register-van-de-verwerkingsactiviteiten)
created: 2021-09-01
term status: accepted
contributor: Paul Ryan, Georg P. Krog, David Hickey, Harshvardhan J. Pandit
in scheme: purposes-classes

Until Time Duration
type: Concept
type: Class
definition: Duration that has a fixed end date e.g. 2022-12-31
subclass of: Duration
broader: Duration
created: 2022-06-15
modified: 2020-10-05
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: context-classes

Automation Level
type: Concept
type: Class
definition: Indication of degree or level of automation associated with specified context
subclass of: Processing Context
broader: Processing Context
scope note: This concept was called 'Automation' in previous versions
source: (ISO/IEC 22989:2022 Artificial intelligence concepts and terminology,https://www.iso.org/standard/74296.html)
created: 2023-12-10
modified: 2024-04-20
term status: modified
contributor: Harshvardhan J. Pandit, Delaram Golpayegani
in scheme: processing-context-classes

Service Personalisation
type: Concept
type: Class
type: Purpose
definition: Purposes associated with providing personalisation within services or product or activities
broader: Service Provision
broader: Personalisation
created: 2019-04-05
term status: accepted
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
in scheme: purposes-classes

Entity Permissive Involvement
type: Concept
type: Class
definition: Involvement of an entity in specific context where it is permitted or able to do something
subclass of: Entity Involvement
broader: Entity Involvement
created: 2024-05-11
term status: accepted
in scheme: processing-context-classes

Notification Planned
type: Concept
type: Class
type: Notification Status
definition: Status indicating notification(s) are planned
broader: Notification Status
created: 2024-05-19
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

Compliance Unknown
type: Concept
type: Class
type: Compliance Status
definition: State where the status of compliance is unknown
broader: Compliance Status
created: 2022-09-07
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

High Automation
type: Concept
type: Class
type: Automation Level
definition: Level of automation corresponding to Level 4 in ISO/IEC 22989:2022 where the automation in system is capable of performing all its tasks within specific controlled conditions without human involvement
broader: Automation Level
scope note: Human Involvement is implied here, e.g. for intervention, input, decisions
source: (ISO/IEC 22989:2022 Artificial intelligence concepts and terminology,https://www.iso.org/standard/74296.html)
created: 2023-12-10
modified: 2024-04-20
term status: modified
contributor: Harshvardhan J. Pandit, Delaram Golpayegani
in scheme: processing-context-classes

Cannot Correct Process Input
type: Concept
type: Class
type: Entity Non-Permissive Involvement
definition: Involvement where entity cannot correct input of specified context
broader: Entity Non-Permissive Involvement
created: 2024-05-11
term status: accepted
in scheme: processing-context-classes

Large Data Volume
type: Concept
type: Class
type: Data Volume
definition: Data volume that is considered large within the context
broader: Data Volume
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-scale-classes

Scoring of Individuals
type: Concept
type: Class
type: Evaluation and Scoring
definition: Processing that involves scoring of individuals
broader: Evaluation and Scoring
source: (GDPR Art.4-2,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_2/oj)
created: 2022-10-22
modified: 2022-11-30
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-context-classes

Data published by Data Subject
type: Concept
type: Class
type: Data Subject as Data Source
definition: Data is published by the data subject
broader: Data Subject as Data Source
scope note: This refers to where that data was made publicly available by the data subject. An example of this would be a social media profile that the data subject has made publicly accessible.
created: 2022-08-24
modified: 2023-12-10
term status: accepted
contributor: Julian Flake
in scheme: processing-context-classes

is representative for
type: Property
type: Concept
definition: Indicates the entity is a representative for specified entity
domain includes: Representative
range includes: Entity
sub property of: has entity
broader: has entity
created: 2022-11-09
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: entities-properties

Compliance Indeterminate
type: Concept
type: Class
type: Compliance Status
definition: State where the status of compliance has not been fully assessed, evaluated, or determined
broader: Compliance Status
created: 2022-09-07
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

Intention Status
type: Concept
type: Class
definition: Status indicating whether the specified context was intended or unintended
subclass of: Status
broader: Status
scope note: Intention is associated with the goal or purpose for what is about to happen i.e. an ex-ante indication of whether the specified context is/was planned or intended. Intention and Expectation are closely related terms. We recommend using Intention when the entity has the ability to control the implementation and Expectation for when the entity does not have control or for what happens after or beyond the exercise of control.
created: 2024-05-10
term status: accepted
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
in scheme: status-classes

dct:isPartOf
type: Property
type: Concept
scope note: Specifying a RightExerciseActivity is part of a RightExerciseRecord
domain includes: Right Exercise Activity
range includes: Right Exercise Record
in scheme: rights-properties

Scale
type: Concept
type: Class
definition: A measurement along some dimension
subclass of: Processing Context
broader: Processing Context
scope note: Scales are subjective concepts that need to be defined and interpreted within the context of their application. For example, what would be small within one context could be large within another.
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Rana Saniei
in scheme: processing-scale-classes

Virtualisation Security
type: Concept
type: Class
type: Technical Measure
definition: Security implemented at or through virtualised environments
broader: Security Method
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

User Interface Personalisation
type: Concept
type: Class
type: Purpose
definition: Purposes associated with personalisation of interfaces presented to the user
broader: Service Personalisation
scope note: Examples of user-interface personalisation include changing the language to match the locale
created: 2019-04-05
term status: accepted
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
in scheme: purposes-classes

Status
type: Concept
type: Class
definition: The status or state of something
subclass of: Context
broader: Context
created: 2022-05-18
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

is implemented using technology
type: Property
type: Concept
definition: Indicates implementation details such as technologies or processes
range includes: Technology
scope note: The term 'technology' is inclusive of technologies, processes, and methods.
created: 2022-01-26
modified: 2022-06-15
term status: accepted
contributor: Beatriz Esteves, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
in scheme: processing-context-properties

Dispute Management
type: Concept
type: Class
type: Purpose
definition: Purposes associated with activities that manage disputes by natural persons, private bodies, or public authorities relevant to organisation
broader: Organisation Governance
source: (Belgian DPA ROPA Template, https://www.privacycommission.be/nl/model-voor-een-register-van-de-verwerkingsactiviteiten)
created: 2021-09-08
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
in scheme: purposes-classes

Expectation Status
type: Concept
type: Class
definition: Status indicating whether the specified context was intended or unintended
scope note: Expectation is associated with the outcome of a goal or purpose for what is expected to happen i.e. an ex-post indication of what was expected to happen in the specified context. Intention and Expectation are closely related terms. We recommend using Intention when the entity has the ability to control the implementation and Expectation for when the entity does not have control or for what happens after or beyond the exercise of control.
created: 2024-05-10
term status: accepted
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
in scheme: status-classes

Request Unfulfilled
type: Concept
type: Class
type: Request Status
definition: State of a request being unfulfilled
broader: Request Status
created: 2022-11-30
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

Elderly Data Subject
type: Concept
type: Class
type: Data Subject
definition: Data subjects that are considered elderly (i.e. based on age)
broader: Vulnerable Data Subject
created: 2022-06-15
term status: accepted
contributor: Georg P. Krog
in scheme: entities-datasubject-classes

Renumeration
type: Concept
type: Class
type: Impact
definition: Renumeration provided as compensation (as an impact)
broader: Compensation
created: 2024-04-14
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit
in scheme: risk-classes

Consent Refused
type: Concept
type: Class
type: Consent Status
definition: The state where consent has been refused
broader: Consent Status Invalid for Processing
scope note: An example of this state is when the individual clicks on a 'disagree' or 'reject' or 'refuse' button, or leaves a checkbox unticked
source: (GConsent,https://w3id.org/GConsent)
created: 2022-06-22
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
in scheme: consent-status-classes

Special Category Personal Data
type: Concept
type: Class
definition: Sensitive Personal Data whose use requires specific additional legal permission or justification
subclass of: Sensitive Personal Data
broader: Sensitive Personal Data
scope note: The term 'special category' is based on GDPR Art.9, but should not be considered as exlusive to it. DPV considers all Special Categories to also be Sensitive, but whose use is either prohibited or regulated and therefore requires additional legal basis for justification that is separate from that for general personal data.
source: (GDPR Art.9-1, https://eur-lex.europa.eu/eli/reg/2016/679/art_9/par_1/oj)
created: 2019-05-07
modified: 2022-01-19
term status: accepted
contributor: Elmar Kiesling; Harshvardhan J. Pandit, Fajar Ekaputra
example: E0015
in scheme: personal-data-classes

Non-Citizen
type: Concept
type: Class
type: Data Subject
definition: Data subjects that are not citizens (for a jurisdiction)
broader: Data Subject
created: 2022-04-06
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Julian Flake, Paul Ryan, Beatriz Esteves
in scheme: entities-datasubject-classes

Withdraw Consent
type: Concept
type: Class
definition: Control for withdrawing consent
subclass of: Consent Control
subclass of: Withdrawing from Process
broader: Consent Control
broader: Withdrawing from Process
scope note: Indicates how the data subject can withdraw consent e.g. used with dpv:isExercisedAt
created: 2024-05-11
term status: accepted
in scheme: consent-controls-classes

Rights Impact Assessment
type: Concept
type: Class
type: Organisational Measure
definition: Impact assessment which involves determining the impact on rights and freedoms
broader: Impact Assessment
scope note: The rights and freedoms may be those defined in law or other norms, and may be bound to a jurisdiction
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: risk-classes

Cross-Border Transfer
type: Concept
type: Class
type: Processing
definition: to move data from one jurisdiction (border) to another
broader: Transfer
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-classes

Record Management
type: Concept
type: Class
type: Purpose
definition: Purposes associated with manage creation, storage, and use of records relevant to operations, events, and processes e.g. to store logs or access requests
broader: Purpose
scope note: This purpose relates specifiaclly for record creation and management. This can be combined or used along with other purposes to express intentions such as records for legal compliance or vendor payments.
created: 2021-09-01
term status: accepted
contributor: Paul Ryan, Georg P. Krog, David Hickey, Harshvardhan J. Pandit
in scheme: purposes-classes

Request Requires Action
type: Concept
type: Class
type: Request Status
definition: State of a request requiring an action to be performed from another party
broader: Request Status
created: 2022-11-30
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

Consultation with DPO
type: Concept
type: Class
type: Organisational Measure
definition: Consultation with Data Protection Officer(s)
broader: Consultation
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog
in scheme: organisational-measures-classes

Authority Uninformed
type: Concept
type: Class
type: Entity Informed Status
definition: Status indicating Authority is uninformed i.e. has not been informed about the specified context
broader: Entity Uninformed
created: 2024-05-10
term status: accepted
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
in scheme: status-classes

has service provider
type: Property
type: Concept
definition: Indicates the entity that provides the associated service
domain includes: Service
range includes: Service Provider
sub property of: has entity
broader: has entity
created: 2024-04-20
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: entities-legalrole-properties

Provide Personalised Recommendations
type: Concept
type: Class
type: Purpose
definition: Purposes associated with creating and providing personalised recommendations
broader: Service Personalisation
source: (SPECIAL Project,https://specialprivacy.ercim.eu/)
created: 2019-11-26
modified: 2022-10-14
term status: accepted
contributor: Harshvardhan J. Pandit, Rudy Jacob
in scheme: purposes-classes

Trusted Execution Environment
type: Concept
type: Class
type: Technical Measure
definition: Use of cryptographic methods to restrict access and execution to trusted parties and code within a dedicated execution environment
broader: Cryptographic Methods
source: (ENISA Data Protection Engineering,https://www.enisa.europa.eu/publications/data-protection-engineering)
created: 2022-08-17
modified: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Huge Data Volume
type: Concept
type: Class
type: Data Volume
definition: Data volume that is considered huge or more than large within the context
broader: Data Volume
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-scale-classes

has justification
type: Property
type: Concept
definition: Indicates a justification for specified concept or context
range includes: Justification
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: context-properties
in scheme: rights-properties
scope note: Specifying a justification for non-fulfilment of Right Exercise
domain includes: Right Exercise Activity

Physical Network Security
type: Concept
type: Class
type: Physical Measure
definition: Physical protection for networks and networking related infrastructure e.g. by isolating networking equipments
broader: Physical Measure
source: NIST SP 800-17
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: physical-measures-classes

Official Authority of Controller
type: Concept
type: Class
type: Legal Basis
definition: Processing necessary or authorised through the official authority granted to or vested in the Data Controller
broader: Legal Basis
created: 2021-05-05
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan
in scheme: legal-basis-classes

Data Controller as Data Source
type: Concept
type: Class
type: Data Source
definition: Data Sourced from Data Controller(s), e.g. a Controller inferring data or generating data
broader: Data Source
created: 2023-10-12
term status: accepted
in scheme: processing-context-classes

Unlawful
type: Concept
type: Class
type: Lawfulness
definition: State of being unlawful or legally non-compliant
broader: Lawfulness
created: 2022-10-19
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

Data Backup Protocols
type: Concept
type: Class
type: Technical Measure
definition: Protocols or plans for backing up of data
broader: Technical Measure
created: 2022-06-15
term status: accepted
contributor: Georg P. Krog
in scheme: technical-measures-classes

Service Usage Analytics
type: Concept
type: Class
type: Purpose
definition: Purposes associated with conducting analysis and reporting related to usage of services or products
broader: Service Provision
scope note: Was "UsageAnalytics", prefixed with Service to better reflect scope
created: 2020-11-04
modified: 2022-10-05
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
in scheme: purposes-classes

Web Security Protocols
type: Concept
type: Class
type: Technical Measure
definition: Security implemented at or over web-based protocols
broader: Security Method
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Counter Money Laundering
type: Concept
type: Class
type: Purpose
definition: Purposes associated with detection, prevention, and mitigation of mitigate money laundering
broader: Fraud Prevention and Detection
created: 2022-04-20
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: purposes-classes

Applicant
type: Concept
type: Class
type: Data Subject
definition: Data subjects that are applicants in some context
broader: Data Subject
created: 2022-04-06
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Julian Flake, Paul Ryan, Beatriz Esteves
in scheme: entities-datasubject-classes

Processing
type: Concept
type: Class
definition: Operations or 'processing' performed on data
related: spl:AnyProcessing
source: (SPECIAL Project,https://specialprivacy.ercim.eu/)
created: 2019-04-05
modified: 2020-11-04
term status: accepted
contributor: Axel Polleres, Javier Fernández
example: E0005
example: E0011
example: E0014
in scheme: processing-classes

has country
type: Property
type: Concept
definition: Indicates applicability of specified country
range includes: Country
sub property of: has location
broader: has location
created: 2022-01-19
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog
in scheme: jurisdiction-properties

Location
type: Concept
type: Class
definition: A location is a position, site, or area where something is located
subclass of: Class
scope note: Location may be geographic, physical, or virtual.
created: 2022-01-19
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog
example: E0011
in scheme: jurisdiction-classes

Inferred Data
type: Concept
type: Class
definition: Data that has been obtained through inferences of other data
subclass of: Data
broader: Data
created: 2023-12-10
term status: accepted
in scheme: personal-data-classes

has physical measure
type: Property
type: Concept
definition: Indicates use or applicability of Physical measure
range includes: Physical Measure
sub property of: has technical and organisational measure
broader: has technical and organisational measure
created: 2023-12-10
term status: accepted
in scheme: TOM-properties

Document Security
type: Concept
type: Class
type: Technical Measure
definition: Security measures enacted over documents to protect against tampering or restrict access
broader: Security Method
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Permission Management
type: Concept
type: Class
type: Organisational Measure
definition: Methods to obtain, provide, modify, and withdraw permissions alongwith maintaining a record of permissions, retrieving records, and processing changes in permission states
broader: Rights Management
scope note: Permission is a broader concept than '(Informed) Consent' as consent when used as a legal basis has specific requirements to be valid. For management of consent, see the concept dpv:ConsentManagement
source: DGA 12.n
created: 2024-04-14
term status: accepted
contributor: Beatriz Esteves, Harshvardhan J. Pandit, Georg P. Krog
in scheme: organisational-measures-classes

Notification Failed
type: Concept
type: Class
type: Notification Status
definition: Status indicating notification(s) could not be completed due to a failure
broader: Notification Status
created: 2024-05-19
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

has risk assessment
type: Property
type: Concept
definition: Indicates an associated risk assessment
range includes: Risk Assessment
sub property of: has assessment
broader: has assessment
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: risk-properties

Physical Surveillance
type: Concept
type: Class
type: Physical Measure
definition: Physically monitoring areas via surveillance
broader: Physical Measure
source: NIST SP 800-171
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: physical-measures-classes

has status
type: Property
type: Concept
definition: Indicates the status of specified concept
range includes: Status
created: 2022-05-18
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-properties
in scheme: rights-properties
scope note: Indicates the status of a Right Exercise Activity
domain includes: Right Exercise Activity

has activity status
type: Property
type: Concept
definition: Indicates the status of activity of specified concept
range includes: Activity Status
sub property of: has status
broader: has status
created: 2022-05-18
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-properties

Parent(s) of Data Subject
type: Concept
type: Class
type: Data Subject
definition: Parent(s) of data subjects such as children
broader: Data Subject
created: 2022-08-03
term status: accepted
contributor: Georg P. Krog
in scheme: entities-datasubject-classes

Symmetric Cryptography
type: Concept
type: Class
type: Technical Measure
definition: Use of cryptography where the same keys are utilised for encryption and decryption of information
broader: Cryptographic Methods
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Data Transfer Legal Basis
type: Concept
type: Class
type: Legal Basis
definition: Specific or special categories and instances of legal basis intended for justifying data transfers
broader: Legal Basis
created: 2021-09-08
term status: accepted
contributor: David Hickey, Georg P. Krog
in scheme: legal-basis-classes

has non-personal data process
type: Property
type: Concept
definition: Indicates association with a Non-Personal Data Process
range includes: Non-Personal Data Process
created: 2023-12-12
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: process-properties

Withdrawing from Process
type: Concept
type: Class
type: Entity Permissive Involvement
definition: Involvement where entity can withdraw a previously given assent from specified context
broader: Entity Permissive Involvement
created: 2024-05-11
term status: accepted
in scheme: processing-context-classes

Conformant
type: Concept
type: Class
type: Conformance Status
definition: State of being conformant
broader: Conformance Status
created: 2022-10-22
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

Adult
type: Concept
type: Class
type: Data Subject
definition: A natural person that is not a child i.e. has attained some legally specified age of adulthood
broader: Data Subject
created: 2022-03-30
term status: accepted
contributor: Georg P. Krog
in scheme: entities-datasubject-classes

Data Importer
type: Concept
type: Class
definition: An entity that 'imports' data where importing is considered a form of data transfer
subclass of: Recipient
broader: Recipient
scope note: The term 'Data Importer' is used by the EU-EDPB as the entity that receives transferred data across borders. While the EDPB refers to the jurisdictional border of EU, the term within DPV can be used to denote any 'import' or reception of transfer or transmission of data and is thus a broader concept than the EDPB's definition.
source: (EDPB Recommendations 01/2020 on Data Transfers, https://edpb.europa.eu/our-work-tools/our-documents/recommendations/recommendations-012020-measures-supplement-transfer_en)
created: 2021-09-08
term status: accepted
contributor: David Hickey, Georg P. Krog, Paul Ryan, Harshvardhan J. Pandit
in scheme: entities-legalrole-classes

Protection of National Security
type: Concept
type: Class
type: Purpose
definition: Purposes associated with the protection of national security
broader: Public Benefit
source: DGA 1.5
term status: accepted
contributor: Beatriz Esteves, Harshvardhan J. Pandit
in scheme: purposes-classes

Country
type: Concept
type: Class
definition: A political entity indicative of a sovereign or non-sovereign territorial state comprising of distinct geographical areas
subclass of: Location
broader: Location
scope note: The definition of country is not intended for political interpretation. DPVCG welcomes alternate definitions based in existing sources with global scope, such as UN or ISO.
created: 2022-01-19
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog
in scheme: jurisdiction-classes

has organisational measure
type: Property
type: Concept
definition: Indicates use or applicability of Organisational measure
range includes: Organisational Measure
sub property of: has technical and organisational measure
broader: has technical and organisational measure
created: 2022-02-09
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: TOM-properties

Necessity
type: Concept
type: Class
definition: An indication of 'necessity' within a context
subclass of: Context
broader: Context
scope note: Necessity can be used to express need, essentiality, requirement, or compulsion.
created: 2022-02-12
term status: accepted
contributor: Harshvardhan J. Pandit, Paul Ryan, Georg P. Krog, Julian Flake, Beatriz Esteves
example: E0028
in scheme: context-classes

Review Procedure
type: Concept
type: Class
type: Organisational Measure
definition: A procedure or process that reviews the correctness and validity of other procedures and policies e.g. to ensure continued validity, adequacy for intended purposes, and conformance of processes with findings
broader: Governance Procedures
created: 2022-10-22
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog
in scheme: organisational-measures-classes

Disaster Recovery Procedures
type: Concept
type: Class
type: Organisational Measure
definition: Procedures related to management of disasters and recovery
broader: Governance Procedures
source: (ENISA 5G Cybersecurity Standards,https://www.enisa.europa.eu/publications/5g-cybersecurity-standards)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Entity Informed
type: Concept
type: Class
type: Entity Informed Status
definition: Status indicating entity has been informed about specified context
broader: Entity Informed Status
created: 2024-05-10
term status: accepted
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
in scheme: status-classes

Huge Scale Of Data Subjects
type: Concept
type: Class
type: Data Subject Scale
definition: Scale of data subjects considered huge or more than large within the context
broader: Data Subject Scale
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-scale-classes

Asylum Seeker
type: Concept
type: Class
type: Data Subject
definition: Data subjects that are asylum seekers
broader: Vulnerable Data Subject
created: 2022-06-15
term status: accepted
contributor: Georg P. Krog
in scheme: entities-datasubject-classes

Improve Healthcare
type: Concept
type: Class
type: Purpose
definition: Purposes associated with improving healthcare systems such as for personalised treatments and curing chronic diseases
broader: Public Benefit
source: DGA 2.16
term status: accepted
contributor: Beatriz Esteves, Harshvardhan J. Pandit
in scheme: purposes-classes

Activity Proposed
type: Concept
type: Class
type: Activity Status
definition: State of an activity being proposed without any concrete plans for implementation
broader: Activity Status
created: 2022-05-18
modified: 2024-05-19
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

Physical Authorisation
type: Concept
type: Class
type: Physical Measure
definition: Physical implementation of authorisation e.g. by stamping a visitor pass
broader: Physical Measure
source: NIST SP 800-16
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: physical-measures-classes

Collected Data
type: Concept
type: Class
definition: Data that has been obtained by collecting it from a source
subclass of: Data
broader: Data
created: 2023-12-10
term status: accepted
in scheme: personal-data-classes

Cannot Correct Process Output
type: Concept
type: Class
type: Entity Non-Permissive Involvement
definition: Involvement where entity cannot correct the output of specified context
broader: Entity Non-Permissive Involvement
created: 2024-05-11
term status: accepted
in scheme: processing-context-classes

DataSubject Informed
type: Concept
type: Class
type: Entity Informed Status
definition: Status indicating DataSubject has been informed about the specified context
broader: Entity Informed
created: 2024-05-10
term status: accepted
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
in scheme: status-classes

Storage Duration
type: Concept
type: Class
definition: Duration or temporal limitation on storage of data
subclass of: Storage Condition
subclass of: Duration
broader: Storage Condition
broader: Duration
created: 2019-04-05
term status: accepted
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
in scheme: processing-context-classes

has processing
type: Property
type: Concept
definition: Indicates association with Processing
range includes: Processing
source: (SPECIAL Project,https://specialprivacy.ercim.eu/)
created: 2019-04-04
modified: 2020-11-04
term status: accepted
contributor: Axel Polleres, Javier Fernández, Harshvardhan J. Pandit, Mark Lizar, Bud Bruegger
in scheme: processing-properties

has assessment
type: Property
type: Concept
definition: Indicates a relevant assessment associated with the specific context
range includes: Assessment
sub property of: has organisational measure
broader: has organisational measure
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: TOM-properties

Identity Management Method
type: Concept
type: Class
type: Organisational Measure
definition: Management of identity and identity-based processes
broader: Authorisation Procedure
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Aggregate
type: Concept
type: Class
type: Processing
definition: to aggregate data
broader: Alter
related: svpr:Aggregate
source: (SPECIAL Project,https://specialprivacy.ercim.eu/vocabs/processing)
created: 2024-04-14
term status: accepted
contributor: Beatriz Esteves, Harshvardhan J. Pandit
in scheme: processing-classes

Support Entity Decision Making
type: Concept
type: Class
type: Organisational Measure
definition: Supporting entities, including individuals, in making decisions
broader: Organisational Measure
source: DGA 2.15
created: 2024-04-14
term status: accepted
contributor: Beatriz Esteves, Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Human Involvement for control
type: Concept
type: Class
type: Human Involvement
definition: Human involvement for the purposes of exercising control over the specified operations in context
broader: Human Involvement
scope note: Control is a broad term that can be applied to various stages and operations. It maps to None, Assistive, and Partial automation models.
created: 2022-09-04
modified: 2023-12-10
term status: accepted
in scheme: processing-context-classes

has scale
type: Property
type: Concept
definition: Indicates the scale of specified concept
range includes: Scale
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-scale-properties

Inferred Personal Data
type: Concept
type: Class
definition: Personal Data that is obtained through inference from other data
subclass of: Derived Personal Data
subclass of: Generated Personal Data
broader: Derived Personal Data
broader: Generated Personal Data
scope note: Inferred Data is derived data generated from existing data, but which did not originally exist within it, e.g. inferring demographics from browsing history.
created: 2022-01-19
modified: 2023-12-10
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: personal-data-classes

Advertising
type: Concept
type: Class
type: Purpose
definition: Purposes associated with conducting advertising i.e. process or artefact used to call attention to a product, service, etc. through announcements, notices, or other forms of communication
broader: Marketing
scope note: Advertising is a subset of Marketing. Advertising by itself does not indicate 'personalisation' i.e. personalised ads.
created: 2020-11-04
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
in scheme: purposes-classes

Wireless Security Protocols
type: Concept
type: Class
type: Technical Measure
definition: Security implemented at or over wireless communication protocols
broader: Security Method
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Third Party
type: Concept
type: Class
definition: A ‘third party’ means any natural or legal person other than - the entities directly involved or operating under those directly involved in a process
subclass of: Recipient
broader: Recipient
scope note: Third Party in the context of personal data processing are entities other than the data subject, controllers, processors, and authorities
source: (GDPR Art.4-10,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_10/oj)
created: 2019-06-04
modified: 2024-05-21
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: entities-legalrole-classes

Code of Conduct
type: Concept
type: Class
type: Organisational Measure
definition: A set of rules or procedures outlining the norms and practices for conducting activities
broader: GuidelinesPrinciple
created: 2019-04-05
term status: accepted
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
in scheme: organisational-measures-classes

Data Breach Record
type: Concept
type: Class
type: Organisational Measure
definition: Record of a data breach incident
broader: Records of Activities
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

has recipient data controller
type: Property
type: Concept
definition: Indiciates inclusion or applicability of a Data Controller as a Recipient of persona data
range includes: Data Controller
sub property of: has recipient
broader: has recipient
created: 2022-02-09
term status: accepted
contributor: Paul Ryan, Georg P. Krog, Harshvardhan J. Pandit
in scheme: entities-legalrole-properties

Data Privacy Vocabulary (DPV)
type: Ontology
type: Profile
description: The Data Privacy Vocabulary (DPV) provides terms (classes and properties) to represent information about processing of personal data, for example - purposes, processing operations, personal data, technical and organisational measures.
created: 2022-08-18
modified: 2024-01-01
creator: Harshvardhan J. Pandit
version: 2
conforms to: http://www.w3.org/2000/01/rdf-schema
conforms to: http://www.w3.org/2004/02/skos/core
contributor: David Hickey
contributor: Arthit Suriyawongkul
contributor: Rudy Jacob
contributor: Rob Brennan
contributor: Julian Flake
contributor: Bud Bruegger
contributor: Fajar Ekaputra
contributor: Axel Polleres
contributor: Rana Saniei
contributor: Mark Lizar
contributor: Paul Ryan
contributor: Piero Bonatti
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Simon Steyskal
contributor: Beatriz Esteves
contributor: Elmar Kiesling
contributor: Javier Fernández
contributor: Delaram Golpayegani
license: document-license-2023
preferred namespace prefix: dpv
preferred namespace uri: https://w3id.org/dpv#
is profile of: rdf-schema#
is profile of: core#
has resource: Primer for Data Privacy Vocabulary
has resource: Guides for Data Privacy Vocabulary
has resource: Examples for Data Privacy Vocabulary
has resource: Data Privacy Vocabulary (DPV) - HTML serialiation
has resource: Data Privacy Vocabulary (DPV) - RDF/XML serialiation
has resource: Data Privacy Vocabulary (DPV) - Turtle serialiation
has resource: Data Privacy Vocabulary (DPV) - N3 serialiation
has resource: Data Privacy Vocabulary (DPV) - JSON-LD serialiation

Vulnerability Testing Methods
type: Concept
type: Class
type: Technical Measure
definition: Methods that assess or discover vulnerabilities in a system
broader: Security Method
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Physical Authentication
type: Concept
type: Class
type: Physical Measure
definition: Physical implementation of authentication e.g. by matching the person to their ID card
broader: Physical Measure
source: NIST SP 800-15
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: physical-measures-classes

Make Available
type: Concept
type: Class
type: Processing
definition: to transform or publish data to be used
broader: Disclose
source: (GDPR Art.4-2,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_2/oj)
created: 2019-05-07
term status: accepted
in scheme: processing-classes

Information Flow Control
type: Concept
type: Class
type: Technical Measure
definition: Use of measures to control information flows
broader: Technical Measure
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Opting out of Process
type: Concept
type: Class
type: Entity Permissive Involvement
definition: Involvement where entity can opt-out from specified context
broader: Entity Permissive Involvement
created: 2024-05-11
term status: accepted
in scheme: processing-context-classes

Sell Data to Third Parties
type: Concept
type: Class
type: Purpose
definition: Purposes associated with selling or sharing data or information to third parties
broader: Sell Products
scope note: Sell here means exchange, submit, or provide in return for direct or indirect compensation. Was subclass of commercial interest, changed to reflect selling something
created: 2019-04-05
term status: accepted
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
in scheme: purposes-classes

Identity Verification
type: Concept
type: Class
type: Purpose
definition: Purposes associated with verifying or authenticating identity as a form of security
broader: Verification
created: 2019-04-05
term status: accepted
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
in scheme: purposes-classes

Encryption in Transfer
type: Concept
type: Class
type: Technical Measure
definition: Encryption of data in transit e.g. when being transferred from one location to another, including sharing
broader: Encryption
created: 2019-04-05
term status: accepted
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
in scheme: technical-measures-classes

Anonymised Data
type: Concept
type: Class
definition: Personal Data that has been (fully and completely) anonymised so that it is no longer considered Personal Data
subclass of: Non-Personal Data
broader: Non-Personal Data
scope note: It is advised to carefully consider indicating data is fully or completely anonymised by determining whether the data by itself or in combination with other data can identify a person. Failing this condition, the data should be denoted as PseudonymisedData. To indicate data is anonymised only for a specified entity (e.g. within an organisation), the concept ContextuallyAnonymisedData (as subclass of PseudonymisedData) should be used instead of AnonymisedData.
created: 2022-01-19
term status: accepted
contributor: Piero Bonatti
in scheme: personal-data-classes

Symmetric Encryption
type: Concept
type: Class
type: Technical Measure
definition: Use of symmetric cryptography to encrypt data
broader: Encryption
source: (ENISA Data Pseudonymisation: Advanced Techniques and Use Cases,https://www.enisa.europa.eu/publications/data-pseudonymisation-advanced-techniques-and-use-cases)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Audit Required
type: Concept
type: Class
type: Audit Status
definition: State where an audit is determined as being required but has not been conducted
broader: Audit Status
created: 2022-05-18
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

Entity Informed Status
type: Concept
type: Class
definition: Status indicating whether an entity is informed or uninformed about specified context
subclass of: Status
broader: Status
created: 2024-05-10
term status: accepted
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
in scheme: status-classes

Data Interoperability Improvement
type: Concept
type: Class
type: Organisational Measure
definition: Measures associated with improvement of data interoperability
broader: Data Interoperability Management
source: DGA 12.d
created: 2024-04-14
term status: accepted
contributor: Beatriz Esteves, Harshvardhan J. Pandit
in scheme: organisational-measures-classes

De-Identification
type: Concept
type: Class
type: Technical Measure
definition: Removal of identity or information to reduce identifiability
broader: Data Sanitisation Technique
source: (NISTIR 8053,https://nvlpubs.nist.gov/nistpubs/ir/2015/NIST.IR.8053.pdf)
created: 2019-04-05
modified: 2022-11-24
term status: modified
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
in scheme: technical-measures-classes

Support Exchange of Views
type: Concept
type: Class
type: Organisational Measure
definition: Supporting inviduals and entities in exchanging views e.g. regarding data processing purposes for their best interests
broader: Support Entity Decision Making
source: DGA 2.15
created: 2024-04-14
term status: accepted
contributor: Beatriz Esteves, Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Activity Completed
type: Concept
type: Class
type: Activity Status
definition: State of an activity that has completed i.e. is fully in the past
broader: Activity Status
created: 2022-05-18
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

Zero Knowledge Authentication
type: Concept
type: Class
type: Technical Measure
definition: Authentication using Zero-Knowledge proofs
broader: Cryptographic Methods
broader: Authentication Protocols
source: (ENISA Data Protection Engineering,https://www.enisa.europa.eu/publications/data-protection-engineering)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

has scope
type: Property
type: Concept
definition: Indicates the scope of specified concept or context
range includes: Scope
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: context-properties

Analyse
type: Concept
type: Class
type: Processing
definition: to study or examine the data in detail
broader: Use
related: svpr:Analyse
source: (SPECIAL Project,https://specialprivacy.ercim.eu/vocabs/processing)
created: 2019-05-07
term status: accepted
in scheme: processing-classes

Asymmetric Encryption
type: Concept
type: Class
type: Technical Measure
definition: Use of asymmetric cryptography to encrypt data
broader: Encryption
source: (ENISA Data Pseudonymisation: Advanced Techniques and Use Cases,https://www.enisa.europa.eu/publications/data-pseudonymisation-advanced-techniques-and-use-cases)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Improve Existing Products and Services
type: Concept
type: Class
type: Purpose
definition: Purposes associated with improving existing products and services
broader: Optimisation for Controller
created: 2019-04-05
term status: accepted
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
in scheme: purposes-classes

Activity Monitoring
type: Concept
type: Class
type: Technical Measure
definition: Monitoring of activities including assessing whether they have been successfully initiated and completed
broader: Technical Measure
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Obligation
type: Concept
type: Class
type: Rule
definition: A rule describing an obligation for performing an activity
broader: Rule
created: 2022-10-19
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Beatriz Esteves, Paul Ryan
in scheme: rules-classes

Indeterminate Duration
type: Concept
type: Class
type: Duration
definition: Duration that is indeterminate or cannot be determined
broader: Duration
scope note: Indeterminate means (exact or otherwise) information about the duration cannot be determined, which is distinct from 'EndlessDuration' where it is known (or decided) that the duration is open-ended or without an end.
created: 2022-11-30
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: context-classes

Service Optimisation
type: Concept
type: Class
type: Purpose
definition: Purposes associated with optimisation of services or activities
broader: Service Provision
scope note: Subclass of ServiceProvision since optimisation is usually considered part of providing services
created: 2019-04-05
term status: accepted
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
in scheme: purposes-classes

is implemented by entity
type: Property
type: Concept
definition: Indicates implementation details such as entities or agents
range includes: Entity
scope note: The use of 'entity' is inclusive of entities (e.g. Data Processor) as well as 'agent' (e.g. DPO). For indicating technological implementation, the property isImplementedByTechnology should be used.
scope note: Indicates the Entity that implements or performs a Right Exercise Activity
created: 2019-05-07
modified: 2022-01-26
term status: accepted
contributor: Axel Polleres, Harshvardhan J. Pandit, Beatriz Esteves, Paul Ryan, Julian Flake
in scheme: processing-context-properties
in scheme: rights-properties
domain includes: Right Exercise Activity

has risk
type: Property
type: Concept
definition: Indicates applicability of Risk for this concept
range includes: Risk
created: 2020-11-18
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: risk-properties

Vendor Records Management
type: Concept
type: Class
type: Purpose
definition: Purposes associated with managing records and orders related to vendors
broader: Vendor Management
source: (Belgian DPA ROPA Template, https://www.privacycommission.be/nl/model-voor-een-register-van-de-verwerkingsactiviteiten)
created: 2021-09-01
term status: accepted
contributor: Paul Ryan, Georg P. Krog, David Hickey, Harshvardhan J. Pandit
in scheme: purposes-classes

International Organisation
type: Concept
type: Class
definition: An organisation and its subordinate bodies governed by public international law, or any other body which is set up by, or on the basis of, an agreement between two or more countries
subclass of: Organisation
broader: Organisation
source: (GDPR Art.4-26,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_26/oj)
created: 2022-03-23
modified: 2020-10-05
term status: accepted
contributor: Julian Flake, Georg P. Krog
in scheme: entities-organisation-classes

Large Scale Of Data Subjects
type: Concept
type: Class
type: Data Subject Scale
definition: Scale of data subjects considered large within the context
broader: Data Subject Scale
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-scale-classes

Sub-Processor Agreement
type: Concept
type: Class
type: Legal Measure
definition: An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of data between a Data Processor and a Data (Sub-)Processor
broader: Data Processing Agreement
created: 2022-01-26
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves, Paul Ryan, Julian Flake
in scheme: legal-measures-classes

has expectation
type: Property
type: Concept
definition: Indicates whether the specified context was expected or unexpected
range includes: Expectation Status
sub property of: has status
broader: has status
created: 2024-05-10
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-properties

Purpose
type: Concept
type: Class
definition: Purpose or (broader) Goal associated with data or technology
related: spl:AnyPurpose
scope note: The purpose or goal here is intended to sufficiently describe the intention or objective of why the data or technology is being used, and should be broader than mere technical descriptions of achieving a capability. For example, "Analyse Data" is an abstract purpose with no indication of what the analyses is for as compared to a purpose such as "Marketing" or "Service Provision" which provide clarity and comprehension of the 'purpose' and can be enhanced with additional descriptions. Such modelling is in line with regulatory requirements regarding the specificity of purposes, for example in GDPR
source: (SPECIAL Project,https://specialprivacy.ercim.eu/)
created: 2019-04-05
modified: 2024-04-14
term status: accepted
contributor: Axel Polleres, Javier Fernández, Harshvardhan J. Pandit, Delaram Golpayegani
example: E0001
example: E0002
example: E0003
example: E0004
example: E0006
example: E0009
example: E0010
example: E0014
in scheme: purposes-classes

has data exporter
type: Property
type: Concept
definition: Indiciates inclusion or applicability of a LegalEntity in the role of Data Exporter
range includes: Data Exporter
sub property of: has entity
broader: has entity
created: 2022-02-09
term status: accepted
contributor: Paul Ryan, Georg P. Krog, Harshvardhan J. Pandit
in scheme: entities-legalrole-properties

Multi National Scale
type: Concept
type: Class
type: Geographic Coverage
definition: Geographic coverage spanning multiple nations
broader: Geographic Coverage
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-scale-classes

Store
type: Concept
type: Class
type: Processing
definition: to keep data for future use
broader: Processing
source: (GDPR Art.4-2,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_2/oj)
created: 2019-05-07
term status: accepted
in scheme: processing-classes

Personal Data Process
type: Concept
type: Class
definition: An action, activity, or method involving personal data
subclass of: Process
broader: Process
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: process-classes

Cryptographic Methods
type: Concept
type: Class
type: Technical Measure
definition: Use of cryptographic methods to perform tasks
broader: Technical Measure
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Improve Public Services
type: Concept
type: Class
type: Purpose
definition: Purposes associated with improving the provision of public services, such as public safety, education or law enforcement
broader: Public Benefit
source: DGA 2.16
term status: accepted
contributor: Beatriz Esteves, Harshvardhan J. Pandit
in scheme: purposes-classes

Anonymisation
type: Concept
type: Class
type: Technical Measure
definition: Anonymisation is the process by which data is irreversibly altered in such a way that a data subject can no longer be identified directly or indirectly, either by the entity holding the data alone or in collaboration with other entities and information sources
broader: De-Identification
source: (ISO 29100:2011,https://www.iso.org/standard/45123.html)
created: 2019-04-05
modified: 2022-11-24
term status: modified
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
in scheme: technical-measures-classes

Data Reuse Policy
type: Concept
type: Class
type: Organisational Measure
definition: Policy regarding reuse of data i.e. using data for purposes other than its initial purpose
broader: Data Processing Policy
scope note: This policy can be used to describe the procedures associated with undertaking such reuse of data, for example to assess its legality and the compatibility of the initial and subsequent purposes
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Risk Mitigation Measure
type: Concept
type: Class
definition: Measures intended to mitigate, minimise, or prevent risk.
subclass of: Technical and Organisational Measure
broader: Technical and Organisational Measure
created: 2020-11-04
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan
example: E0029
in scheme: risk-classes

Natural Person
type: Concept
type: Class
definition: A human
subclass of: Entity
broader: Entity
created: 2022-02-09
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: entities-classes

Reformat
type: Concept
type: Class
type: Processing
definition: to rearrange or restructure data to change its form
broader: Format
source: DGA 12.d
created: 2024-04-14
term status: accepted
contributor: Beatriz Esteves
in scheme: processing-classes

Location Locality
type: Concept
type: Class
type: Location
definition: Locality refers to whether the specified location is local within some context, e.g. for the user
broader: Location
created: 2022-06-15
modified: 2022-10-04
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: jurisdiction-classes

Legal Compliance
type: Concept
type: Class
type: Purpose
definition: Purposes associated with carrying out data processing to fulfill a legal or statutory obligation
broader: Fulfilment of Obligation
scope note: This purpose only refers to processing that is additionally required in order to fulfill the obligations and requirements associated with a law. For example, the use of consent would have its own separate purposes, with this purpose addressing a legal requirement for maintaining consent record (along with RecordManagement). This purpose will typically be used with Legal Obligation as the legal basis.
created: 2020-11-04
modified: 2022-11-09
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
in scheme: purposes-classes

Visitor
type: Concept
type: Class
type: Data Subject
definition: Data subjects that are temporary visitors
broader: Data Subject
created: 2022-04-06
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Julian Flake, Paul Ryan, Beatriz Esteves
in scheme: entities-datasubject-classes

Assessment
type: Concept
type: Class
type: Organisational Measure
definition: The document, plan, or process for assessment or determination towards a purpose e.g. assessment of legality or impact assessments
broader: Organisational Measure
created: 2021-09-08
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Unintended
type: Concept
type: Class
type: Intention Status
definition: Status indicating the specified context was unintended i.e. not intended
broader: Intention Status
created: 2024-05-10
term status: accepted
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
in scheme: status-classes

Download
type: Concept
type: Class
type: Processing
definition: to provide a copy or to receive a copy of data over a network or internet
broader: Disclose
source: DGA 2.13, 2.20
created: 2024-04-14
term status: accepted
contributor: Beatriz Esteves
in scheme: processing-classes

Governance Procedures
type: Concept
type: Class
type: Organisational Measure
definition: Procedures related to governance (e.g. organisation, unit, team, process, system)
broader: Organisational Measure
source: (ENISA 5G Cybersecurity Standards,https://www.enisa.europa.eu/publications/5g-cybersecurity-standards)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Governmental Organisation
type: Concept
type: Class
definition: An organisation managed or part of government
subclass of: Organisation
broader: Organisation
created: 2022-02-02
modified: 2020-10-05
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: entities-organisation-classes

Privacy Notice
type: Concept
type: Class
type: Organisational Measure
definition: Represents a notice or document outlining information regarding privacy
broader: Notice
created: 2021-09-08
term status: accepted
contributor: Georg P. Krog, Paul Ryan, David Hickey, Harshvardhan J. Pandit
example: E0018
example: E0025
in scheme: organisational-measures-classes

Data Controller Contract
type: Concept
type: Class
type: Legal Basis
definition: Creation, completion, fulfilment, or performance of a contract, with Data Controllers as parties being Joint Data Controllers, and involving specified processing
broader: Contract
created: 2023-12-10
term status: accepted
in scheme: legal-basis-classes

GuidelinesPrinciple
type: Concept
type: Class
type: Organisational Measure
definition: Guidelines or Principles regarding processing and operational measures
broader: Organisational Measure
created: 2019-04-05
term status: accepted
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
in scheme: organisational-measures-classes

Commercial Research
type: Concept
type: Class
type: Purpose
definition: Purposes associated with conducting research in a commercial setting or with intention to commercialise e.g. in a company or sponsored by a company
broader: Research and Development
broader: Commercial Purpose
related: svpu:Develop
created: 2019-04-05
modified: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
in scheme: purposes-classes

Erase
type: Concept
type: Class
type: Processing
definition: to remove data from existence i.e. without the possibility of retrieval
broader: Remove
source: (GDPR Art.4-2,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_2/oj)
created: 2019-05-07
term status: accepted
in scheme: processing-classes

Privacy by Default
type: Concept
type: Class
type: Organisational Measure
definition: Practices regarding setting the default configurations of information and services to implement data protection and privacy (synonymous with Data Protection by Default)
broader: GuidelinesPrinciple
created: 2019-04-05
modified: 2024-04-14
term status: accepted
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
in scheme: organisational-measures-classes

Human not involved
type: Concept
type: Class
type: Human Involvement
definition: Humans are not involved in the specified context
broader: Human Involvement
scope note: This maps to Autonomous and Full Automation models if no humans are involved.
created: 2023-12-10
term status: accepted
in scheme: processing-context-classes

Non-Public Data Source
type: Concept
type: Class
type: Data Source
definition: A source of data that is not publicly accessible or available
broader: Data Source
created: 2022-01-26
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves, Paul Ryan, Julian Flake
in scheme: processing-context-classes

Supra-National Authority
type: Concept
type: Class
definition: An authority tasked with overseeing legal compliance for a supra-national union e.g. EU
subclass of: Authority
broader: Authority
source: (ADMS controlled vocabulary,http://purl.org/adms)
created: 2022-02-02
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: entities-authority-classes

Innovative Use of New Technologies
type: Concept
type: Class
type: Innovative use of Technology
definition: Involvement of a new (innovative) technologies
broader: Innovative use of Technology
scope note: New technologies are by definition considered innovative
source: (GDPR Art.4-2,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_2/oj)
created: 2020-11-04
modified: 2023-12-10
term status: accepted
contributor: Harshvardhan J. Pandit, Piero Bonatti
in scheme: processing-context-classes

Consent Status
type: Concept
type: Class
definition: The state or status of 'consent' that provides information reflecting its operational status and validity for processing data
subclass of: Status
broader: Status
scope note: States are useful as information artefacts to implement them in controlling processing, and to reflect the process and flow of obtaining and maintaining consent. For example, a database table that stores consent states for specific processing and can be queried to obtain them in an efficient manner. States are also useful in investigations to determine the use and validity of consenting practices
source: (GConsent,https://w3id.org/GConsent)
created: 2022-06-22
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
example: E0019
example: E0024
example: E0025
example: E0026
in scheme: consent-status-classes

Public Location
type: Concept
type: Class
type: Location
definition: Location that is or can be accessed by the public
broader: Local Location
created: 2022-10-22
term status: accepted
contributor: Georg P. Krog
in scheme: jurisdiction-classes

Customer Solvency Monitoring
type: Concept
type: Class
type: Purpose
definition: Customer Solvency Monitoring refers to purposes associated with monitor solvency of customers for financial diligence
broader: Customer Management
source: (Belgian DPA ROPA Template, https://www.privacycommission.be/nl/model-voor-een-register-van-de-verwerkingsactiviteiten)
created: 2021-09-08
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
in scheme: purposes-classes

has data subject
type: Property
type: Concept
definition: Indicates association with Data Subject
range includes: Data Subject
sub property of: has entity
broader: has entity
created: 2019-04-04
modified: 2020-11-04
term status: accepted
contributor: Axel Polleres, Javier Fernández, Harshvardhan J. Pandit, Mark Lizar, Bud Bruegger
in scheme: entities-datasubject-properties

Reward
type: Concept
type: Class
type: Impact
definition: Reward provided as compensation (as an impact)
broader: Compensation
created: 2024-04-14
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit
in scheme: risk-classes

Alter
type: Concept
type: Class
type: Processing
definition: to change the data without changing it into something else
broader: Transform
source: (GDPR Art.4-2,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_2/oj)
created: 2019-05-07
term status: accepted
in scheme: processing-classes

Asset Management Procedures
type: Concept
type: Class
type: Organisational Measure
definition: Procedures related to management of assets
broader: Governance Procedures
source: (ENISA 5G Cybersecurity Standards,https://www.enisa.europa.eu/publications/5g-cybersecurity-standards)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

is after
type: Property
type: Concept
definition: Indicates the specified concepts is 'after' this concept in some context
created: 2022-03-02
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Julian Flake
in scheme: context-properties
in scheme: rights-properties
scope note: Specifying a RightExerciseActivity occurs before another RightExerciseActivity
domain includes: Right Exercise Activity
range includes: Right Exercise Activity

Increase Service Robustness
type: Concept
type: Class
type: Purpose
definition: Purposes associated with improving robustness and resilience of services
broader: Optimisation for Controller
created: 2019-04-05
term status: accepted
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
in scheme: purposes-classes

dcat:Resource
type: Concept
type: Class
scope note: A dataset, data service, or any other resource associated with Right Exercise - such as for providing a copy of data
created: 2022-11-02
in scheme: rights-classes

Consent Control
type: Concept
type: Class
definition: The control or activity associated with obtaining, providing, withdrawing, or reaffirming consent
subclass of: Entity Involvement
broader: Entity Involvement
created: 2024-05-11
term status: accepted
in scheme: consent-controls-classes

Consent Status Valid for Processing
type: Concept
type: Class
type: Consent Status
definition: States of consent that can be used as valid justifications for processing data
broader: Consent Status
scope note: Practically, given consent is the only valid state for processing
source: (GConsent,https://w3id.org/GConsent)
created: 2022-06-22
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
in scheme: consent-status-classes

has consequence
type: Property
type: Concept
definition: Indicates consenquence(s) possible or arising from specified concept
range includes: Consequence
scope note: Removed plural suffix for consistency
created: 2020-11-04
modified: 2021-09-21
term status: accepted
contributor: Harshvardhan J. Pandit, Julian Flake, Georg P. Krog, Fajar Ekaputra, Beatriz Esteves
in scheme: risk-properties

has entity involvement
type: Property
type: Concept
definition: Indicates involvement of an entity in specified context
range includes: Entity Involvement
created: 2024-05-11
term status: accepted
in scheme: processing-context-properties

Storage Deletion
type: Concept
type: Class
definition: Deletion or Erasure of data including any deletion guarantees
subclass of: Storage Condition
broader: Storage Condition
created: 2019-04-05
term status: accepted
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
in scheme: processing-context-classes

Members and Partners Management
type: Concept
type: Class
type: Purpose
definition: Purposes associated with maintaining a registry of shareholders, members, or partners for governance, administration, and management functions
broader: Organisation Governance
source: (Belgian DPA ROPA Template, https://www.privacycommission.be/nl/model-voor-een-register-van-de-verwerkingsactiviteiten)
created: 2021-09-01
term status: accepted
contributor: Paul Ryan, Georg P. Krog, David Hickey, Harshvardhan J. Pandit
in scheme: purposes-classes

Consultation
type: Concept
type: Class
type: Organisational Measure
definition: Consultation is a process of receiving feedback, advice, or opinion from an external agency
broader: Organisational Measure
created: 2020-11-04
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan
in scheme: organisational-measures-classes

is exercised at
type: Property
type: Concept
definition: Indicates context or information about exercising a right
domain includes: Active Right
range includes: Right Exercise Notice
created: 2022-10-22
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: rights-properties

Cannot Reverse Process Input
type: Concept
type: Class
type: Entity Non-Permissive Involvement
definition: Involvement where entity cannot reverse input of specified context
broader: Entity Non-Permissive Involvement
created: 2024-05-11
term status: accepted
in scheme: processing-context-classes

Fixed Multiple Locations
type: Concept
type: Class
type: Location Fixture
definition: Location that is fixed with multiple places e.g. multiple cities
broader: Fixed Location
created: 2022-06-15
modified: 2020-10-05
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: jurisdiction-classes

Data Transfer Record
type: Concept
type: Class
type: Organisational Measure
definition: Record of data transfer activities
broader: Data Processing Record
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Vital Interest
type: Concept
type: Class
type: Legal Basis
definition: Processing is necessary or required to protect vital interests of a data subject or other natural person
broader: Legal Basis
created: 2021-04-21
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: legal-basis-classes

Innovative use of Technology
type: Concept
type: Class
definition: Indicates that technology is being used in an innovative manner
subclass of: Processing Context
broader: Processing Context
scope note: Innovative here refers to 'state of the art' rather than the implementing entity, and can be for either new technology or new uses of existing technology
created: 2023-12-10
term status: accepted
in scheme: processing-context-classes

has storage condition
type: Property
type: Concept
definition: Indicates information about storage condition
range includes: Storage Condition
source: (SPECIAL Project,https://specialprivacy.ercim.eu/)
created: 2022-08-13
term status: accepted
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
in scheme: processing-context-properties

Data Processing Policy
type: Concept
type: Class
type: Organisational Measure
definition: Policy regarding data processing activities
broader: Policy
scope note: This only refers to the policy or plan or procedure describing how the data processing should be conducted. To represent the granular details, see further concepts e.g. dpv:DataStoragePolicy to describe policy regarding storage, or dpv:DataStorageCondition to represent information within the policy for how information should be stored
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Entity Non-Permissive Involvement
type: Concept
type: Class
definition: Involvement of an entity in specific context where it is not permitted or able to do something
subclass of: Entity Involvement
broader: Entity Involvement
created: 2024-05-11
term status: accepted
in scheme: processing-context-classes

Sector
type: Concept
type: Class
definition: Sector describes the area of application or domain that indicates or restricts scope for interpretation and application of purpose e.g. Agriculture, Banking
scope note: There are various sector codes used commonly to indicate the domain of an organisation or business. Examples include NACE (EU), ISIC (UN), SIC and NAICS (USA).
created: 2019-04-05
term status: accepted
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
example: E0010
in scheme: purposes-classes

Request Initiated
type: Concept
type: Class
type: Request Status
definition: State of a request being initiated
broader: Request Status
created: 2022-11-30
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

Entity Passive Involvement
type: Concept
type: Class
definition: Involvement where entity is 'passively' or 'not actively' involved
subclass of: Entity Involvement
broader: Entity Involvement
created: 2024-05-11
term status: accepted
in scheme: processing-context-classes

Organisational Measure
type: Concept
type: Class
definition: Organisational measures used to safeguard and ensure good practices in connection with data and technologies
subclass of: Technical and Organisational Measure
broader: Technical and Organisational Measure
created: 2019-04-05
modified: 2023-12-10
term status: accepted
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
in scheme: TOM-classes

has data protection officer
type: Property
type: Concept
definition: Specifices an associated data protection officer
range includes: Data Protection Officer
sub property of: has representative
broader: has representative
created: 2022-03-02
term status: accepted
contributor: Paul Ryan, Rob Brennan
in scheme: entities-legalrole-properties

Risk Level
type: Concept
type: Class
definition: The magnitude of a risk expressed as an indication to aid in its management
scope note: Risk Levels can be defined as a combination of different characteristics. For example, ISO 31073:2022 defines it as a combination of consequences and their likelihood. Another example would be the Risk Matrix where Risk Level is defined as a combination of Likelihood and Severity associated with the Risk.
created: 2022-07-20
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: risk-classes

Data Storage Policy
type: Concept
type: Class
type: Organisational Measure
definition: Policy regarding storage of data, including the manner, duration, location, and conditions for storage
broader: Data Processing Policy
created: 2024-04-14
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Involvement Status
type: Concept
type: Class
definition: Status indicating whether the involvement of specified context
subclass of: Status
broader: Status
created: 2024-05-10
term status: accepted
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
in scheme: status-classes

Challenging Process Output
type: Concept
type: Class
type: Entity Permissive Involvement
definition: Involvement where entity can challenge the output of specified context
broader: Entity Permissive Involvement
scope note: Challenge refers to raising questions about validity, necessity, correctness, or other similar 'trustworthiness' attributes regarding the output of the process or plan or implementation (where output is distinct from the process itself)
created: 2024-05-11
term status: accepted
in scheme: processing-context-classes

Remove
type: Concept
type: Class
type: Processing
definition: to destruct or erase data
broader: Processing
source: (GDPR Art.4-2,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_2/oj)
created: 2019-05-07
term status: accepted
in scheme: processing-classes

Consent Revoked
type: Concept
type: Class
type: Consent Status
definition: The state where the consent is revoked by an entity other than the data subject and which prevents it from being further used as a valid state
broader: Consent Status Invalid for Processing
scope note: An example of this state is when a Data Controller stops utilising previously obtaining consent, such as when that service no longer exists
source: (GConsent,https://w3id.org/GConsent)
created: 2022-06-22
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
in scheme: consent-status-classes

has data subject scale
type: Property
type: Concept
definition: Indicates the scale of data subjects
range includes: Data Subject Scale
sub property of: has scale
broader: has scale
created: 2022-06-22
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-scale-properties

Security Incident Record
type: Concept
type: Class
type: Organisational Measure
definition: Record of a security incident
broader: Records of Activities
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Context
type: Concept
type: Class
definition: Contextually relevant information
scope note: Context is a catch-all concept for information of relevance not possible to represent through other core concepts. DPV offers specific contextual concepts such as Necessity, Frequency, and Duration. More can be created by extending Context within use-cases.
created: 2019-04-05
modified: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
example: E0028
in scheme: context-classes

Data Inventory Management
type: Concept
type: Class
type: Organisational Measure
definition: Measures associated with management of data inventory or a data asset list
broader: Data Governance
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Request Status Query
type: Concept
type: Class
type: Request Status
definition: State of a request's status being queried
broader: Request Status
created: 2022-11-30
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

Metadata Management
type: Concept
type: Class
type: Organisational Measure
definition: Measures associated with management of metadata
broader: Data Governance
scope note: Examples of metadata management include assessing which metadata are required or being used by technology, assessing their potential inclusion as personal data, and implementing a metadata based solution to manage data
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Protection of Public Security
type: Concept
type: Class
type: Purpose
definition: Purposes associated with the protection of public security
broader: Public Benefit
source: DGA 3.2(d)
term status: accepted
contributor: Beatriz Esteves, Harshvardhan J. Pandit
in scheme: purposes-classes

is policy for
type: Property
type: Concept
definition: Indicates the context or application of policy
domain includes: Policy
created: 2022-01-26
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: TOM-properties

Cannot Withdraw from Process
type: Concept
type: Class
type: Entity Non-Permissive Involvement
definition: Involvement where entity cannot withdraw a previously given assent from specified context
broader: Entity Non-Permissive Involvement
created: 2024-05-11
term status: accepted
in scheme: processing-context-classes

Data Processing Record
type: Concept
type: Class
type: Organisational Measure
definition: Record of data processing, whether ex-ante or ex-post
broader: Records of Activities
created: 2021-09-08
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Provide Official Statistics
type: Concept
type: Class
type: Purpose
definition: Purposes associated with facilitating the development, production and dissemination of reliable official statistics
broader: Public Benefit
source: DGA 2.16
term status: accepted
contributor: Beatriz Esteves, Harshvardhan J. Pandit
in scheme: purposes-classes

Data Sub-Processor
type: Concept
type: Class
definition: A 'sub-processor' is a processor engaged by another processor
subclass of: Data Processor
broader: Data Processor
scope note: A 'Sub-Processor' is always a 'Processor' with the distinction of not directly being appointed by the 'Controller'
created: 2020-11-25
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: entities-legalrole-classes

Trusted Computing
type: Concept
type: Class
type: Technical Measure
definition: Use of cryptographic methods to restrict access and execution to trusted parties and code
broader: Cryptographic Methods
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Principle
type: Concept
type: Class
type: Organisational Measure
definition: A representation of values or norms that must be taken into consideration when conducting activities
broader: GuidelinesPrinciple
created: 2024-05-12
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Entity
type: Concept
type: Class
definition: A human or non-human 'thing' that constitutes as an entity
created: 2022-02-02
term status: accepted
contributor: Harshvardhan J. Pandit
example: E0027
in scheme: entities-classes

Consent Management
type: Concept
type: Class
type: Organisational Measure
definition: Methods to obtain, provide, modify, and withdraw consent alongwith maintaining a record of consent, retrieving records, and processing changes in consent states
broader: Permission Management
source: DGA 12.n
created: 2024-04-14
term status: accepted
contributor: Beatriz Esteves, Harshvardhan J. Pandit, Georg P. Krog
in scheme: organisational-measures-classes

Service Provision
type: Concept
type: Class
type: Purpose
definition: Purposes associated with providing service or product or activities
broader: Purpose
created: 2019-04-05
term status: accepted
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
example: E0018
in scheme: purposes-classes

Processing Context
type: Concept
type: Class
definition: Context or conditions within which processing takes place
subclass of: Context
broader: Context
created: 2022-02-09
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-context-classes

has joint data controllers
type: Property
type: Concept
definition: Indicates inclusion or applicability of a Joint Data Controller
range includes: Joint Data Controllers
sub property of: has data controller
broader: has data controller
created: 2022-02-09
term status: accepted
contributor: Paul Ryan, Georg P. Krog, Harshvardhan J. Pandit
in scheme: entities-legalrole-properties

Frequency
type: Concept
type: Class
definition: The frequency or information about periods and repetitions in terms of recurrence.
subclass of: Context
broader: Context
created: 2022-02-16
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: context-classes

Generated Data
type: Concept
type: Class
definition: Data that has been obtained through generation or creation as a source
subclass of: Data
broader: Data
created: 2023-12-10
term status: accepted
in scheme: personal-data-classes

Fraud Prevention and Detection
type: Concept
type: Class
type: Purpose
definition: Purposes associated with fraud detection, prevention, and mitigation
broader: Misuse, Prevention and Detection
related: svpu:Government
created: 2019-04-05
term status: accepted
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
in scheme: purposes-classes

Digital Literacy
type: Concept
type: Class
type: Organisational Measure
definition: Providing skills, knowledge, and understanding to enable reading, writing, analysing, reasoning, and communicating regarding digital technologies and their implications
broader: Organisational Measure
created: 2024-05-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Controller Uninformed
type: Concept
type: Class
type: Entity Informed Status
definition: Status indicating Controller is uninformed i.e. has not been informed about the specified context
broader: Entity Uninformed
created: 2024-05-10
term status: accepted
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
in scheme: status-classes

Improve Internal CRM Processes
type: Concept
type: Class
type: Purpose
definition: Purposes associated with improving customer-relationship management (CRM) processes
broader: Optimisation for Controller
broader: Customer Relationship Management
created: 2019-04-05
term status: accepted
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
in scheme: purposes-classes

Observed Data
type: Concept
type: Class
definition: Data that has been obtained through observations of a source
subclass of: Data
broader: Data
created: 2023-12-10
term status: accepted
in scheme: personal-data-classes

has consent control
type: Property
type: Concept
definition: Specific a control associated with consent
range includes: Consent Control
created: 2024-05-11
term status: accepted
in scheme: consent-properties

Privacy Impact Assessment (PIA)
type: Concept
type: Class
type: Organisational Measure
definition: Impact assessment regarding privacy risks
broader: Impact Assessment
created: 2020-11-04
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan
in scheme: risk-classes

Personalised Benefits
type: Concept
type: Class
type: Purpose
definition: Purposes associated with creating and providing personalised benefits for a service
broader: Service Personalisation
created: 2019-04-05
term status: accepted
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
in scheme: purposes-classes

Combine
type: Concept
type: Class
type: Processing
definition: to join or merge data
broader: Transform
related: svpr:Aggregate
source: (GDPR Art.4-2,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_2/oj), (SPECIAL Project,https://specialprivacy.ercim.eu/vocabs/processing)
created: 2019-05-07
term status: accepted
in scheme: processing-classes

Copy
type: Concept
type: Class
type: Processing
definition: to produce an exact reproduction of the data
broader: Processing
related: svpr:Copy
source: (SPECIAL Project,https://specialprivacy.ercim.eu/vocabs/processing)
created: 2019-05-07
term status: accepted
in scheme: processing-classes

Locality Scale
type: Concept
type: Class
type: Geographic Coverage
definition: Geographic coverage spanning a specific locality
broader: Geographic Coverage
scope note: For example, geographic scale of a city or an area within a city
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-scale-classes

Customer Order Management
type: Concept
type: Class
type: Purpose
definition: Customer Order Management refers to purposes associated with managing customer orders i.e. processing of an order related to customer's purchase of good or services
broader: Customer Management
source: (Belgian DPA ROPA Template, https://www.privacycommission.be/nl/model-voor-een-register-van-de-verwerkingsactiviteiten)
created: 2021-09-08
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
in scheme: purposes-classes

Background Checks
type: Concept
type: Class
type: Organisational Measure
definition: Procedure where the background of an entity is assessed to identity vulnerabilities and threats due to their current or intended role
broader: Security Procedure
source: (ENISA 5G Cybersecurity Standards,https://www.enisa.europa.eu/publications/5g-cybersecurity-standards)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Data Controller
type: Concept
type: Class
definition: The individual or organisation that decides (or controls) the purpose(s) of processing personal data.
subclass of: Legal Entity
broader: Legal Entity
scope note: The terms 'Controller', 'Data Controller', and 'PII Controller' refer to the same concept
source: (GDPR Art.4-7g,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_7/oj)
created: 2019-04-05
modified: 2020-11-04
term status: accepted
contributor: Axel Polleres, Javier Fernández
example: E0019
example: E0020
in scheme: entities-legalrole-classes

Active Right
type: Concept
type: Class
type: Right
definition: The right(s) applicable, provided, or expected that need to be (actively) exercised
broader: Right
scope note: Active rights require the entity to expressly exercise them. For example, a Data Subject exercising their right to withdraw their consent.
created: 2022-10-22
term status: accepted
contributor: Harshvardhan J. Pandit, Beatriz Esteves, Georg P. Krog, Paul Ryan
in scheme: rights-classes

Derived Personal Data
type: Concept
type: Class
definition: Personal Data that is obtained or derived from other data
subclass of: Personal Data
subclass of: Derived Data
broader: Personal Data
broader: Derived Data
related: svd:Derived
scope note: Derived Data is data that is obtained through processing of existing data, e.g. deriving first name from full name. To indicate data that is derived but which was not present or evident within the source data, InferredPersonalData should be used.
source: (DPVCG, https://www.w3.org/community/dpvcg/)
created: 2019-05-07
modified: 2023-12-10
term status: accepted
contributor: Elmar Kiesling; Harshvardhan J. Pandit, Fajar Ekaputra
in scheme: personal-data-classes

Disclose
type: Concept
type: Class
type: Processing
definition: to make data known
broader: Processing
source: (GDPR Art.4-2,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_2/oj)
created: 2019-05-07
term status: accepted
in scheme: processing-classes

Vital Interest of Natural Person
type: Concept
type: Class
type: Legal Basis
definition: Processing is necessary or required to protect vital interests of a natural person
broader: Vital Interest
created: 2021-04-21
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan
in scheme: legal-basis-classes

Legal Obligation
type: Concept
type: Class
type: Legal Basis
definition: Legal Obligation to conduct the specified processing
broader: Legal Basis
created: 2021-04-07
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: legal-basis-classes

Internal Resource Optimisation
type: Concept
type: Class
type: Purpose
definition: Purposes associated with optimisation of internal resource availability and usage for organisation
broader: Optimisation for Controller
created: 2019-04-05
term status: accepted
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
in scheme: purposes-classes

Small Scale Processing
type: Concept
type: Class
type: Processing Scale
definition: Processing that takes place at small scales (as specified by some criteria)
broader: Processing Scale
created: 2022-09-07
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-scale-classes

Screen
type: Concept
type: Class
type: Processing
definition: to remove data for some criteria
broader: Transform
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog
in scheme: processing-classes

User
type: Concept
type: Class
type: Data Subject
definition: Data subjects that use service(s)
broader: Data Subject
created: 2022-04-06
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Julian Flake, Paul Ryan, Beatriz Esteves
in scheme: entities-datasubject-classes

Improve Transport and Mobility
type: Concept
type: Class
type: Purpose
definition: Purposes associated with improving traffic, public transport systems or costs for drivers
broader: Public Benefit
source: DGA 2.16
term status: accepted
contributor: Beatriz Esteves, Harshvardhan J. Pandit
in scheme: purposes-classes

has audit status
type: Property
type: Concept
definition: Indicates the status of audit associated with specified concept
range includes: Audit Status
sub property of: has status
broader: has status
created: 2022-06-22
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-properties

Consent Request Deferred
type: Concept
type: Class
type: Consent Status
definition: State where a request for consent has been deferred without a decision
broader: Consent Status Invalid for Processing
scope note: An example of this state is when the individual closes or dismisses a notice without making a decision. This state is intended for making the distinction between a notice being provided (as a consent request) and the individual interacting with the notice without making a decision - where the 'ignoring of a notice' is taken as consent being neither given nor refused
source: (GConsent,https://w3id.org/GConsent)
created: 2022-06-22
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
in scheme: consent-status-classes

Consent Notice
type: Concept
type: Class
type: Organisational Measure
definition: A Notice for information provision associated with Consent
broader: Privacy Notice
created: 2022-06-21
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
in scheme: organisational-measures-classes

Guardian(s) of Data Subject
type: Concept
type: Class
type: Data Subject
definition: Guardian(s) of data subjects such as children
broader: Data Subject
created: 2022-08-03
term status: accepted
contributor: Georg P. Krog
in scheme: entities-datasubject-classes

Legitimate Interest
type: Concept
type: Class
type: Legal Basis
definition: Legitimate Interests of a Party as justification for specified processing
broader: Legal Basis
created: 2021-05-19
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: legal-basis-classes

National Authority
type: Concept
type: Class
definition: An authority tasked with overseeing legal compliance for a nation
subclass of: Authority
broader: Authority
source: (ADMS controlled vocabulary,http://purl.org/adms)
created: 2022-02-02
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: entities-authority-classes

Parent Legal Entity
type: Concept
type: Class
definition: A legal entity that has one or more subsidiary entities operating under it
subclass of: Organisation
broader: Organisation
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog
in scheme: entities-classes

Customer Claims Management
type: Concept
type: Class
type: Purpose
definition: Customer Claims Management refers to purposes associated with managing claims, including repayment of monies owed
broader: Customer Management
source: (Belgian DPA ROPA Template, https://www.privacycommission.be/nl/model-voor-een-register-van-de-verwerkingsactiviteiten)
created: 2021-09-08
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
in scheme: purposes-classes

Pseudonymise
type: Concept
type: Class
type: Processing
definition: to replace personal identifiable information by artificial identifiers
broader: Transform
source: (GDPR Art.4-2,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_2/oj)
created: 2019-05-07
modified: 2022-10-14
term status: accepted
in scheme: processing-classes

Encryption
type: Concept
type: Class
type: Technical Measure
definition: Technical measures consisting of encryption
broader: Technical Measure
created: 2019-04-05
term status: accepted
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
example: E0016
in scheme: technical-measures-classes

has data processor
type: Property
type: Concept
definition: Indiciates inclusion or applicability of a Data Processor
range includes: Data Processor
sub property of: has recipient
broader: has recipient
created: 2022-02-09
term status: accepted
contributor: Paul Ryan, Georg P. Krog, Harshvardhan J. Pandit
in scheme: entities-legalrole-properties

Explicitly Expressed Consent
type: Concept
type: Class
type: Legal Basis
definition: Consent that is expressed through an explicit action solely conveying a consenting decision
broader: Expressed Consent
scope note: Explicitly expressed consent is a more specific form of Expressed consent where the action taken must 'explicitly' relate to only the consent decision. Expressed consent where the consenting is part of other matters therefore cannot satisfy the requirements of explicitly expressed consent. An example of explicit action expressing the consenting decision is a button on a web form where the form only relates to consent, or it is accompanied with suitable text that reiterates what the consenting decision is about
created: 2022-06-21
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
in scheme: consent-types-classes

Environmental Protection
type: Concept
type: Class
type: Physical Measure
definition: Physical protection against environmental threats such as fire, floods, storms, etc.
broader: Physical Measure
source: NIST SP 800-13
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: physical-measures-classes

Data Interoperability Assessment
type: Concept
type: Class
type: Organisational Measure
definition: Measures associated with assessment of data interoperability
broader: Data Interoperability Management
broader: Assessment
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Immigrant
type: Concept
type: Class
type: Data Subject
definition: Data subjects that are immigrants (for a jurisdiction)
broader: Data Subject
created: 2022-04-06
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Julian Flake, Paul Ryan, Beatriz Esteves
in scheme: entities-datasubject-classes

Data Subject Rights Management
type: Concept
type: Class
type: Organisational Measure
definition: Methods to provide, implement, and exercise data subjects' rights
broader: Rights Management
scope note: This concept only concerns the organisational management of rights, and does not represent the rights themselves - especially where such 'rights' are legally recognised or defined for the data subject or individual. The concept dpv:DataSubjectRight is provided to represent such legal rights.
source: DGA 12.m
created: 2024-04-14
term status: accepted
contributor: Beatriz Esteves, Harshvardhan J. Pandit, Georg P. Krog
in scheme: organisational-measures-classes

Observed Personal Data
type: Concept
type: Class
definition: Personal Data that has been collected through observation of the Data Subject(s)
subclass of: Personal Data
subclass of: Observed Data
broader: Personal Data
broader: Observed Data
created: 2022-08-24
modified: 2023-12-10
term status: accepted
contributor: Georg P. Krog
in scheme: personal-data-classes

Cybersecurity Assessment
type: Concept
type: Class
type: Organisational Measure
definition: Assessment of cybersecurity capabilities in terms of vulnerabilities and effectiveness of controls
broader: Security Assessment
source: (ENISA 5G Cybersecurity Standards,https://www.enisa.europa.eu/publications/5g-cybersecurity-standards)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: risk-classes

Direct Marketing
type: Concept
type: Class
type: Purpose
definition: Purposes associated with conducting direct marketing i.e. marketing communicated directly to the individual
broader: Marketing
created: 2020-11-04
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
in scheme: purposes-classes

Endless Duration
type: Concept
type: Class
type: Duration
definition: Duration that is (known or intended to be) open ended or without an end
broader: Duration
created: 2022-06-15
modified: 2020-10-05
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: context-classes

Social Media Marketing
type: Concept
type: Class
type: Purpose
definition: Purposes associated with conducting marketing through social media
broader: Marketing
created: 2020-11-04
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
in scheme: purposes-classes

has obligation
type: Property
type: Concept
definition: Specifying applicability or inclusion of an obligation rule within specified context
domain includes: Context
range includes: Obligation
sub property of: has rule
broader: has rule
created: 2022-10-19
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Beatriz Esteves, Paul Ryan
in scheme: rules-properties

has compliance status
type: Property
type: Concept
definition: Indicates the status of compliance of specified concept
range includes: Compliance Status
sub property of: has status
broader: has status
created: 2022-05-18
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-properties

Technology
type: Concept
type: Class
definition: The technology, technological implementation, or any techniques, skills, methods, and processes used or applied
scope note: Examples (non-exhaustive) include: Algorithm, Process, Method, Skill, Database, Cookies, Server, Device
created: 2022-01-26
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-context-classes

has record of activity
type: Property
type: Concept
definition: Indicates a relevant record of activity
range includes: Records of Activities
sub property of: has organisational measure
broader: has organisational measure
created: 2024-05-05
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: TOM-properties

Activity Status
type: Concept
type: Class
definition: Status associated with activity operations and lifecycles
subclass of: Status
broader: Status
created: 2022-05-18
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

has frequency
type: Property
type: Concept
definition: Indicates the frequency with which something takes place
range includes: Frequency
created: 2022-02-16
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: context-properties

has address
type: Property
type: Concept
definition: Specifies address of a legal entity such as street address or pin code
domain includes: Entity
created: 2020-11-04
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Paul Ryan, Beatriz Esteves
in scheme: entities-properties

has applicable law
type: Property
type: Concept
definition: Indicates applicability of a Law
range includes: Law
created: 2022-01-19
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: jurisdiction-properties

Activity Halted
type: Concept
type: Class
type: Activity Status
definition: State of an activity that was occuring in the past, and has been halted or paused or stoped
broader: Activity Status
created: 2022-05-18
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

Data Privacy Vocabulary (DPV) - Turtle serialiation
type: ResourceDescriptor
has role: vocabulary
has artifact: dpv.ttl
dct:format: turtle
conforms to: turtle

is determined by entity
type: Property
type: Concept
definition: Indicates the context is determined by the specified entity
range includes: Entity
sub property of: has entity
broader: has entity
created: 2024-05-10
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-context-properties

has policy
type: Property
type: Concept
definition: Indicates policy applicable or used
range includes: Policy
sub property of: has technical and organisational measure
broader: has technical and organisational measure
created: 2022-01-26
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: TOM-properties

Organisation Compliance Management
type: Concept
type: Class
type: Purpose
definition: Purposes associated with managing compliance for organisation in relation to internal policies
broader: Organisation Governance
scope note: Note that this concept relates to internal organisational compliance. The concept LegalCompliance should be used for external legal or regulatory compliance.
created: 2021-09-01
term status: accepted
contributor: Paul Ryan, Georg P. Krog, David Hickey, Harshvardhan J. Pandit
in scheme: purposes-classes

Privacy by Design
type: Concept
type: Class
type: Organisational Measure
definition: Practices regarding incorporating data protection and privacy in the design of information and services (synonymous with Data Protection by Design)
broader: GuidelinesPrinciple
created: 2019-04-05
term status: accepted
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
in scheme: organisational-measures-classes

Remote Location
type: Concept
type: Class
type: Location
definition: Location is remote i.e. not local
broader: Location Locality
created: 2022-06-15
modified: 2020-10-05
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: jurisdiction-classes

Not Applicable
type: Concept
type: Class
type: Applicability
definition: Concept indicating the information or context is not applicable
broader: Applicability
scope note: This concept is useful when describing situations where information must be provided to indicate the context does not apply and leaving a blank field or having no value or triple is not an option. For example, if in a form a field asks about whether a process X was completed and the response to that would be "not applicable (N/A)" - then this is represented using the concept NotApplicable. If instead the value was left blank the open-world interpretation creates an ambiguity as to whether the information was not available or was it not provided as it is not applicable.
created: 2023-08-24
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: context-classes

Data Privacy Vocabulary (DPV) - N3 serialiation
type: ResourceDescriptor
has role: vocabulary
has artifact: dpv.n3
dct:format: https://www.iana.org/assignments/media-types/text/n3
conforms to: https://www.w3.org/TeamSubmission/n3/

Partial Automation
type: Concept
type: Class
type: Automation Level
definition: Level of automation corresponding to Level 2 in ISO/IEC 22989:2022 where the automation is present in multiple parts of the system or in a manner that does not require the human to contro/use these parts while still retaining control over the system
broader: Automation Level
scope note: Human Involvement is implied here, specifically the ability to Control operations, but also possibly for intervention, oversight, and verification
source: (ISO/IEC 22989:2022 Artificial intelligence concepts and terminology,https://www.iso.org/standard/74296.html)
created: 2023-12-10
modified: 2024-04-20
term status: modified
contributor: Harshvardhan J. Pandit, Delaram Golpayegani
in scheme: processing-context-classes

Representative
type: Concept
type: Class
definition: A representative of a legal entity
subclass of: Legal Entity
broader: Legal Entity
source: (GDPR Art.27,https://eur-lex.europa.eu/eli/reg/2016/679/art_27/oj)
created: 2020-11-04
term status: accepted
contributor: Georg P. Krog, Paul Ryan, Harshvardhan J. Pandit, Beatriz Esteves
in scheme: entities-classes

Automated Scoring of Individuals
type: Concept
type: Class
type: Scoring of Individuals
definition: Processing that involves automated scoring of individuals
broader: Scoring of Individuals
scope note: Scoring can lead to the action being considered Decision Making if the scoring is itself a decision - see 2023-MAR-16 opinion of Advocate General on Case C 634/21. Therefore, the assessment of whether scoring was automated or not is important given the legal obligations surrounding automated decision making e.g. in GDPR
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-context-classes

Joint Data Controllers Agreement
type: Concept
type: Class
type: Legal Measure
definition: An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of data between Controllers within a Joint Controllers relationship
broader: Data Processing Agreement
created: 2022-01-26
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves, Paul Ryan, Julian Flake
in scheme: legal-measures-classes

Unverified Data
type: Concept
type: Class
definition: Data that has not been verified in terms of accuracy, inconsistency, or quality
subclass of: Data
broader: Data
created: 2022-11-02
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: personal-data-classes

Security Assessment
type: Concept
type: Class
type: Organisational Measure
definition: Assessment of security intended to identity gaps, vulnerabilities, risks, and effectiveness of controls
broader: Risk Assessment
source: (ENISA 5G Cybersecurity Standards,https://www.enisa.europa.eu/publications/5g-cybersecurity-standards)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: risk-classes

Within Physical Environment
type: Concept
type: Class
type: Location
definition: Location is local and entirely within a physical environment, such as a room
broader: Local Location
created: 2020-10-06
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: jurisdiction-classes

Cannot Challenge Process Input
type: Concept
type: Class
type: Entity Non-Permissive Involvement
definition: Involvement where entity cannot challenge input of specified context
broader: Entity Non-Permissive Involvement
created: 2024-05-11
term status: accepted
in scheme: processing-context-classes

Human Involvement for decision
type: Concept
type: Class
type: Human Involvement
definition: Human involvement for the purposes of exercising decisions over the specified operations in context
broader: Human Involvement
scope note: Decisions are about exercising control over the operation, and are distinct from input (data or parameters).
created: 2022-09-06
modified: 2023-12-10
term status: accepted
in scheme: processing-context-classes

Vital Interest of Data Subject
type: Concept
type: Class
type: Legal Basis
definition: Processing is necessary or required to protect vital interests of a data subject
broader: Vital Interest of Natural Person
created: 2021-04-21
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan
in scheme: legal-basis-classes

Private Information Retrieval
type: Concept
type: Class
type: Technical Measure
definition: Use of cryptographic methods to retrieve a record from a system without revealing which record is retrieved
broader: Cryptographic Methods
source: (ENISA Data Protection Engineering,https://www.enisa.europa.eu/publications/data-protection-engineering)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Justification
type: Concept
type: Class
definition: A form of documentation providing reaosns, explanations, or justifications
subclass of: Context
broader: Context
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: context-classes

has technical measure
type: Property
type: Concept
definition: Indicates use or applicability of Technical measure
range includes: Technical Measure
sub property of: has technical and organisational measure
broader: has technical and organisational measure
created: 2022-02-09
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: TOM-properties

Material Damage
type: Concept
type: Class
type: Impact
definition: Impact that acts as or causes material damages
broader: Damage
created: 2022-03-30
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: risk-classes

has technical and organisational measure
type: Property
type: Concept
definition: Indicates use or applicability of Technical or Organisational measure
range includes: Technical and Organisational Measure
created: 2019-04-04
modified: 2020-11-04
term status: accepted
contributor: Axel Polleres, Javier Fernández, Harshvardhan J. Pandit, Mark Lizar, Bud Bruegger
in scheme: TOM-properties

Authority Informed
type: Concept
type: Class
type: Entity Informed Status
definition: Status indicating Authority has been informed about the specified context
broader: Entity Informed
created: 2024-05-10
term status: accepted
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
in scheme: status-classes

Renewed Consent Given
type: Concept
type: Class
type: Consent Status
definition: The state where a previously given consent has been 'renewed' or 'refreshed' or 'reaffirmed' to form a new instance of given consent
broader: Consent Status Valid for Processing
scope note: An example of this state is when a previously given consent has expired, and the individual is presented a notice regarding continuing associated processing operations - to which they agree. This state can be useful to keep track of 'reconfirmed' or 'refreshed' consent within consent records, assist notices and contextual agents to create better consenting dialogues, and assist with specific legal obligations related to subsequent consenting
source: (GConsent,https://w3id.org/GConsent)
created: 2022-06-22
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
in scheme: consent-status-classes

Communication Management
type: Concept
type: Class
type: Purpose
definition: Communication Management refers to purposes associated with providing or managing communication activities e.g. to send an email for notifying some information
broader: Purpose
scope note: This purpose by itself does not sufficiently and clearly indicate what the communication is about. As such, it is recommended to combine it with another purpose to indicate the application. For example, Communication of Payment.
created: 2021-09-01
term status: accepted
contributor: Georg P. Krog, Paul Ryan, David Hickey, Harshvardhan J. Pandit
in scheme: purposes-classes

Singular Frequency
type: Concept
type: Class
type: Frequency
definition: Frequency where occurences are singular i.e. they take place only once
broader: Frequency
created: 2022-06-15
modified: 2020-10-05
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: context-classes

Academic Research
type: Concept
type: Class
type: Purpose
definition: Purposes associated with conducting or assisting with research conducted in an academic context e.g. within universities
broader: Research and Development
related: svpu:Education
created: 2019-04-05
term status: accepted
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
in scheme: purposes-classes

Processing Location
type: Concept
type: Class
definition: Location or geospatial scope where processing takes places
subclass of: Processing Condition
subclass of: Location
broader: Processing Condition
broader: Location
created: 2023-12-10
modified: 2024-05-11
term status: accepted
in scheme: processing-context-classes

Citizen
type: Concept
type: Class
type: Data Subject
definition: Data subjects that are citizens (for a jurisdiction)
broader: Data Subject
created: 2022-04-06
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Julian Flake, Paul Ryan, Beatriz Esteves
in scheme: entities-datasubject-classes

Cannot Reverse Process Effects
type: Concept
type: Class
type: Entity Non-Permissive Involvement
definition: Involvement where entity cannot reverse effects of specified context
broader: Entity Non-Permissive Involvement
scope note: Effects refer to consequences and impacts arising from the process or from the outputs of a process
created: 2024-05-11
term status: accepted
in scheme: processing-context-classes

Payment Management
type: Concept
type: Class
type: Purpose
definition: Purposes associated with processing and managing payment in relation to service, including invoicing and records
broader: Service Provision
created: 2020-11-04
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
in scheme: purposes-classes

Notification Status
type: Concept
type: Class
definition: Status indicating whether notification(s) are planned, completed, or failed
subclass of: Status
broader: Status
created: 2024-05-19
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

File System Security
type: Concept
type: Class
type: Technical Measure
definition: Security implemented over a file system
broader: Security Method
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Multi-Factor Authentication (MFA)
type: Concept
type: Class
type: Technical Measure
definition: An authentication system that uses two or more methods to authenticate
broader: Authentication Protocols
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Cannot Challenge Process Output
type: Concept
type: Class
type: Entity Non-Permissive Involvement
definition: Involvement where entity cannot challenge the output of specified context
broader: Entity Non-Permissive Involvement
scope note: Challenge refers to raising questions about validity, necessity, correctness, or other similar 'trustworthiness' attributes regarding the output of the process or plan or implementation (where output is distinct from the process itself)
created: 2024-05-11
term status: accepted
in scheme: processing-context-classes

has passive entity
type: Property
type: Concept
definition: indicates the entity is passively involved in specified context
range includes: Entity Passive Involvement
created: 2024-05-11
term status: accepted
in scheme: processing-context-properties

Consent Unknown
type: Concept
type: Class
type: Consent Status
definition: State where information about consent is not available or is unknown
broader: Consent Status Invalid for Processing
scope note: Consent states can be unknown, for example, when information is not available, or cannot be trusted, or is known to be inaccurate
source: (GConsent,https://w3id.org/GConsent)
created: 2022-06-22
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
in scheme: consent-status-classes

Challenging Process
type: Concept
type: Class
type: Entity Permissive Involvement
definition: Involvement where entity can challenge the process of specified context
broader: Entity Permissive Involvement
scope note: Challenge refers to raising questions about validity, necessity, correctness, or other similar 'trustworthiness' attributes regarding the process or plan or implementation
created: 2024-05-11
term status: accepted
in scheme: processing-context-classes

Encryption at Rest
type: Concept
type: Class
type: Technical Measure
definition: Encryption of data when being stored (persistent encryption)
broader: Encryption
created: 2019-04-05
term status: accepted
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
in scheme: technical-measures-classes

Provide Event Recommendations
type: Concept
type: Class
type: Purpose
definition: Purposes associated with creating and providing personalised recommendations for events
broader: Provide Personalised Recommendations
source: (SPECIAL Project,https://specialprivacy.ercim.eu/)
created: 2019-11-26
modified: 2022-10-14
term status: accepted
contributor: Harshvardhan J. Pandit, Rudy Jacob
in scheme: purposes-classes

Obtain
type: Concept
type: Class
type: Processing
definition: to solicit or gather data from someone
broader: Processing
source: (GDPR Art.4-2,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_2/oj)
created: 2019-05-07
term status: accepted
in scheme: processing-classes

has relation with data subject
type: Property
type: Concept
definition: Indicates the relation between specified Entity and Data Subject
domain includes: Entity
sub property of: has entity
broader: has entity
created: 2022-06-21
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
in scheme: entities-datasubject-properties

Data Redaction
type: Concept
type: Class
type: Technical Measure
definition: Removal of sensitive information from a data or document
broader: Data Sanitisation Technique
created: 2020-10-01
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Processing Duration
type: Concept
type: Class
definition: Duration or temporal limitation for processing
subclass of: Processing Condition
subclass of: Duration
broader: Processing Condition
broader: Duration
created: 2023-12-10
modified: 2024-05-11
term status: accepted
in scheme: processing-context-classes

Audit Approved
type: Concept
type: Class
type: Audit Status
definition: State of being approved through the audit
broader: Audit Status
created: 2022-05-18
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

Physical Supply Security
type: Concept
type: Class
type: Physical Measure
definition: Physically securing the supply of resources
broader: Physical Measure
source: NIST SP 800-14
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: physical-measures-classes

has personal data
type: Property
type: Concept
definition: Indicates association with Personal Data
range includes: Personal Data
sub property of: has data
broader: has data
created: 2022-01-19
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: personal-data-properties

Fixed Occurences Duration
type: Concept
type: Class
definition: Duration that takes place a fixed number of times e.g. 3 times
subclass of: Duration
broader: Duration
created: 2022-06-15
modified: 2020-10-05
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: context-classes

Share
type: Concept
type: Class
type: Processing
definition: to give data (or a portion of it) to others
broader: Disclose
source: (GDPR Art.4-2,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_2/oj)
created: 2019-05-07
term status: accepted
in scheme: processing-classes

Data Breach Notification
type: Concept
type: Class
type: Organisational Measure
definition: Notification of information about data breach(es) i.e. unauthorised transfer, access, use, or modification of data
broader: Security Incident Notification
source: DGA 12.k, DGA 21.5 GDPR 33, GDPR 34
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

has jurisdiction
type: Property
type: Concept
definition: Indicates applicability of specified jurisdiction
range includes: Location
created: 2022-01-19
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: jurisdiction-properties

Non Compliant
type: Concept
type: Class
type: Compliance Status
definition: State of non-compliance where objectives have not been met, but have not been violated
broader: Compliance Status
scope note: Changed from not compliant for consistency in commonly used terms
created: 2022-05-18
modified: 2022-09-07
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

Move
type: Concept
type: Class
type: Processing
definition: to move data from one location to another including deleting the original copy
broader: Transfer
related: svpr:Move
source: (SPECIAL Project,https://specialprivacy.ercim.eu/vocabs/processing)
created: 2019-05-07
term status: accepted
in scheme: processing-classes

Adapt
type: Concept
type: Class
type: Processing
definition: to modify the data, often rewritten into a new form for a new use
broader: Transform
source: (GDPR Art.4-2,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_2/oj)
created: 2019-05-07
term status: accepted
in scheme: processing-classes

Hash Functions
type: Concept
type: Class
type: Technical Measure
definition: Use of hash functions to map information or to retrieve a prior categorisation
broader: Cryptographic Methods
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Right Non-Fulfilment Notice
type: Concept
type: Class
type: Organisational Measure
definition: Notice provided regarding non-fulfilment of a right
broader: Notice
scope note: This notice is associated with situations where information is provided with the intention of communicating non-fulfilment of a right. For example, to provide justifications on why a right could not be fulfilled or providing information about another entity who should be approached for exercising this right.
created: 2022-11-02
term status: accepted
contributor: Harshvardhan J. Pandit, Beatriz Esteves
in scheme: rights-classes

Prohibition
type: Concept
type: Class
type: Rule
definition: A rule describing a prohibition to perform an activity
broader: Rule
created: 2022-10-19
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Beatriz Esteves, Paul Ryan
in scheme: rules-classes

Medium Scale Of Data Subjects
type: Concept
type: Class
type: Data Subject Scale
definition: Scale of data subjects considered medium i.e. neither large nor small within the context
broader: Data Subject Scale
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Paul Ryan
in scheme: processing-scale-classes

Local Environment Scale
type: Concept
type: Class
type: Geographic Coverage
definition: Geographic coverage spanning a specific environment within the locality
broader: Geographic Coverage
scope note: For example, geographic scale of an event take place in a specific building or room
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-scale-classes

Human Involvement
type: Concept
type: Class
definition: The involvement of humans in specified context
subclass of: Entity Involvement
broader: Entity Involvement
scope note: Human Involvement here broadly refers to any involvement by a human in the context of carrying out processing. This may include verification of outcomes, providing input data for making decisions, or overseeing activities. To indicate whether humans are involved or not, see relevant concepts of dpv:HumanInvolved and dpv:HumanNotInvolved. The term 'Human in the loop' and its varieties are absent from DPV due to their contradictory and non-compatible use across different sources.
created: 2022-01-26
modified: 2024-04-20
term status: modified
contributor: Harshvardhan J. Pandit
in scheme: processing-context-classes

Severity
type: Concept
type: Class
definition: The magnitude of being unwanted or having negative effects such as harmful impacts
scope note: Severity can be associated with Risk, or its Consequences and Impacts
created: 2022-07-21
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: risk-classes

Disseminate
type: Concept
type: Class
type: Processing
definition: to spread data throughout
broader: Disclose
source: (GDPR Art.4-2,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_2/oj)
created: 2019-05-07
term status: accepted
in scheme: processing-classes

Challenging Process Input
type: Concept
type: Class
type: Entity Permissive Involvement
definition: Involvement where entity can challenge input of specified context
broader: Entity Permissive Involvement
created: 2024-05-11
term status: accepted
in scheme: processing-context-classes

Data Protection Officer
type: Concept
type: Class
definition: An entity within or authorised by an organisation to monitor internal compliance, inform and advise on data protection obligations and act as a contact point for data subjects and the supervisory authority.
subclass of: Representative
broader: Representative
source: (GDPR Art.37,https://eur-lex.europa.eu/eli/reg/2016/679/art_37/oj)
created: 2020-11-04
modified: 2021-12-08
term status: accepted
contributor: Georg P. Krog, Paul Ryan
in scheme: entities-legalrole-classes

Usage Control
type: Concept
type: Class
type: Technical Measure
definition: Management of usage, which is intended to be broader than access control and may cover trust, digital rights, or other relevant controls
broader: Access Control Method
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

has data importer
type: Property
type: Concept
definition: Indiciates inclusion or applicability of a LegalEntity in the role of Data Importer
range includes: Data Importer
sub property of: has recipient
broader: has recipient
created: 2022-02-09
term status: accepted
contributor: Paul Ryan, Georg P. Krog, Harshvardhan J. Pandit
in scheme: entities-legalrole-properties

Entity Involvement
type: Concept
type: Class
definition: Involvement of an entity in specific context
subclass of: Processing Context
broader: Processing Context
created: 2024-05-11
term status: accepted
in scheme: processing-context-classes

Correcting Process Output
type: Concept
type: Class
type: Entity Permissive Involvement
definition: Involvement where entity can correct the output of specified context
broader: Entity Permissive Involvement
scope note: Correction of outputs allows modification of the output - implying continuation of the process. This is distinct from reversing of outputs which revert the output back to its previous value and possibly imply not continuing with the process
created: 2024-05-11
term status: accepted
in scheme: processing-context-classes

has process
type: Property
type: Concept
definition: Indicates association with a Process
range includes: Process
created: 2023-12-10
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: process-properties

Regulatory Sandbox
type: Concept
type: Class
type: Organisational Measure
definition: Mechanism used by regulators and businesses for gauging the compatibility of regulations and innovative products, particularly in the context of digitalisation, in a controlled real-world environment with appropriate safeguards in place
broader: Safeguard
source: (EU Council Regulatory sandboxes and experimentation clauses as tools for better regulation,https://www.consilium.europa.eu/en/press/press-releases/2020/11/16/regulatory-sandboxes-and-experimentation-clauses-as-tools-for-better-regulation-council-adopts-conclusions/)
created: 2024-05-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Data Quality Improvement
type: Concept
type: Class
type: Organisational Measure
definition: Measures associated with improvement of data quality
broader: Data Quality Management
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Cybersecurity Training
type: Concept
type: Class
type: Organisational Measure
definition: Training methods related to cybersecurity
broader: Staff Training
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Vendor Management
type: Concept
type: Class
type: Purpose
definition: Purposes associated with manage orders, payment, evaluation, and prospecting related to vendors
broader: Purpose
source: (Belgian DPA ROPA Template, https://www.privacycommission.be/nl/model-voor-een-register-van-de-verwerkingsactiviteiten)
created: 2021-09-01
term status: accepted
contributor: Paul Ryan, Georg P. Krog, David Hickey, Harshvardhan J. Pandit
in scheme: purposes-classes

Digital Signatures
type: Concept
type: Class
type: Technical Measure
definition: Expression and authentication of identity through digital information containing cryptographic signatures
broader: Cryptographic Methods
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Non-Personal Data
type: Concept
type: Class
definition: Data that is not Personal Data
subclass of: Data
broader: Data
scope note: The term NonPersonalData is provided to distinguish between PersonalData and other data, e.g. for indicating which data is regulated by privacy laws. To specify personal data that has been anonymised, the concept AnonymisedData should be used as the anonymisation process has a risk of not being fully effective and such anonymous data may be found to be personal data depending on circumstances.
created: 2022-01-19
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: personal-data-classes

Contract
type: Concept
type: Class
type: Legal Basis
definition: Creation, completion, fulfilment, or performance of a contract involving specified processing of data or technologies
broader: Legal Agreement
created: 2021-04-07
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: legal-basis-classes

Third Party Contract
type: Concept
type: Class
type: Legal Basis
definition: Creation, completion, fulfilment, or performance of a contract, with the Data Controller and Third Party as parties, and involving specified processing
broader: Contract
created: 2023-12-10
term status: accepted
in scheme: legal-basis-classes

Security Method
type: Concept
type: Class
type: Technical Measure
definition: Methods that relate to creating and providing security
broader: Technical Measure
created: 2022-08-24
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

has impact
type: Property
type: Concept
definition: Indicates impact(s) possible or arising as consequences from specified concept
range includes: Impact
sub property of: has consequence
broader: has consequence
created: 2022-05-18
term status: accepted
contributor: Harshvardhan J. Pandit, Julian Flake, Georg P. Krog, Fajar Ekaputra, Beatriz Esteves
in scheme: risk-properties

Singular Scale Of Data Subjects
type: Concept
type: Class
type: Data Subject Scale
definition: Scale of data subjects considered singular i.e. a specific data subject
broader: Data Subject Scale
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-scale-classes

Retrieve
type: Concept
type: Class
type: Processing
definition: to retrieve data, often in an automated manner
broader: Use
source: (GDPR Art.4-2,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_2/oj)
created: 2019-05-07
term status: accepted
in scheme: processing-classes

has lawfulness
type: Property
type: Concept
definition: Indicates the status of being lawful or legally compliant
range includes: Lawfulness
sub property of: has compliance status
broader: has compliance status
created: 2022-10-22
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-properties

Support Informed Consent Decision
type: Concept
type: Class
type: Organisational Measure
definition: Supporting individuals with making a decision regarding their informed consent
broader: Support Entity Decision Making
source: DGA 2.15
created: 2024-04-14
term status: accepted
contributor: Beatriz Esteves, Harshvardhan J. Pandit
in scheme: organisational-measures-classes

supports Compliance With
type: Property
type: Concept
definition: Indicate the measure is required for meeting specified requirement or satisfying specified condition/constraint
domain includes: Technical and Organisational Measure
created: 2024-04-14
term status: accepted
contributor: Julian Flake, Georg P. Krog, Harshvardhan J. Pandit
in scheme: TOM-properties

Distributed System Security
type: Concept
type: Class
type: Technical Measure
definition: Security implementations provided using or over a distributed system
broader: Security Method
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Commercial Purpose
type: Concept
type: Class
type: Purpose
definition: Purposes associated with processing activities performed in a commercial setting or with intention to commercialise
broader: Purpose
source: DGA 4.4
term status: accepted
contributor: Beatriz Esteves, Harshvardhan J. Pandit
in scheme: purposes-classes

Audit Conditionally Approved
type: Concept
type: Class
type: Audit Status
definition: State of being conditionally approved through the audit
broader: Audit Status
scope note: A "conditional approval" is intended to reflect states where the audit has identified further changes which must be implemented before considering the audit has been 'passed', without requiring another audit to validate them. This is distinct from the case where an audit has state 'rejected', which means changes must be made and submitted for review. The requirements of a 'conditional acceptance' are expected to be minor or not significant enough to warrant another audit to review them.
created: 2022-06-29
term status: accepted
contributor: Paul Ryan
in scheme: status-classes

Innovative Use of Existing Technologies
type: Concept
type: Class
type: Innovative use of Technology
definition: Involvement of existing technologies used in an innovative manner
broader: Innovative use of Technology
created: 2023-12-10
term status: accepted
in scheme: processing-context-classes

Temporal Duration
type: Concept
type: Class
definition: Duration that has a fixed temporal duration e.g. 6 months
subclass of: Duration
broader: Duration
created: 2022-06-15
modified: 2020-10-05
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: context-classes

Intrusion Detection System
type: Concept
type: Class
type: Technical Measure
definition: Use of measures to detect intrusions and other unauthorised attempts to gain access to a system
broader: Security Method
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Third Country
type: Concept
type: Class
definition: Represents a country outside applicable or compatible jurisdiction as outlined in law
subclass of: Country
broader: Country
created: 2022-02-09
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: jurisdiction-classes

Secure Processing Environment
type: Concept
type: Class
type: Organisational Measure
definition: A physical or virtual environment supported by organisational means that integrates security and compliance requirements and allows supervising data processing actions
broader: Security Procedure
source: DGA 2.20
created: 2024-04-14
term status: accepted
contributor: Beatriz Esteves, Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Not Available
type: Concept
type: Class
type: Applicability
definition: Concept indicating the information or context is applicable but information is not yet available
broader: Applicability
scope note: This concept is useful when describing situations where information is required but is not available (yet). For example, if in a form a field asks about whether a process X was completed, and it is correct to interpret that process X is applicable and must be completed, but the information is not yet available as to whether this was done - then NotAvailable is useful to represent this.
created: 2023-08-24
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: context-classes

has representative
type: Property
type: Concept
definition: Specifies representative of the legal entity
domain includes: Entity
range includes: Representative
sub property of: has entity
broader: has entity
created: 2020-11-04
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Paul Ryan, Beatriz Esteves
in scheme: entities-properties

Sensitive Personal Data
type: Concept
type: Class
definition: Personal data that is considered 'sensitive' in terms of privacy and/or impact, and therefore requires additional considerations and/or protection
subclass of: Personal Data
broader: Personal Data
scope note: Sensitivity' is a matter of context, and may be defined within legal frameworks. For GDPR, Special categories of personal data are considered a subset of sensitive data. To illustrate the difference between the two, consider the situation where Location data is collected, and which is considered 'sensitive' but not 'special'. As a probable rule, sensitive data require additional considerations whereas special category data requires additional legal basis / justifications.
created: 2022-01-19
term status: accepted
contributor: Harshvardhan J. Pandit
example: E0015
in scheme: personal-data-classes

Human Involvement for intervention
type: Concept
type: Class
type: Human Involvement
definition: Human involvement for the purposes of exercising interventions over the specified operations in context
broader: Human Involvement
scope note: Intervention indicates the ability to intervene in operations, which can be at various stages. It maps to Conditional and High automation models.
created: 2022-09-05
modified: 2023-12-10
term status: accepted
in scheme: processing-context-classes

Third-Party Agreement
type: Concept
type: Class
type: Legal Measure
definition: An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of data between a Data Controller or Processor and a Third Party
broader: Data Processing Agreement
created: 2022-02-09
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: legal-measures-classes

mitigates risk
type: Property
type: Concept
definition: Indicates risks mitigated by this concept
domain includes: Risk Mitigation Measure
range includes: Risk
created: 2020-11-04
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: risk-properties

has contact
type: Property
type: Concept
definition: Specifies contact details of a legal entity such as phone or email
domain includes: Entity
created: 2020-11-04
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Paul Ryan, Beatriz Esteves
in scheme: entities-properties

has automation level
type: Property
type: Concept
definition: Indicates the level of automation involved in implementation of the specified context
range includes: Automation Level
created: 2022-08-13
modified: 2024-04-20
term status: modified
contributor: Harshvardhan J. Pandit
in scheme: processing-context-properties

has legal measure
type: Property
type: Concept
definition: Indicates use or applicability of Legal measure
range includes: Legal Measure
sub property of: has organisational measure
broader: has organisational measure
created: 2023-12-10
term status: accepted
in scheme: TOM-properties

Opting in to Process
type: Concept
type: Class
type: Entity Permissive Involvement
definition: Involvement where entity can opt-in to specified context
broader: Entity Permissive Involvement
created: 2024-05-11
term status: accepted
in scheme: processing-context-classes

Child
type: Concept
type: Class
type: Data Subject
definition: A 'child' is a natural legal person who is below a certain legal age depending on the legal jurisdiction.
broader: Data Subject
scope note: The legality of age defining a child varies by jurisdiction. In addition, 'child' is distinct from a 'minor'. For example, the legal age for consumption of alcohol can be 21, which makes a person of age 20 a 'minor' in this context. In other cases, 'minor' and 'child' are used interchangeably to refer to a person below some legally defined age.
created: 2020-11-25
modified: 2022-06-22
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: entities-datasubject-classes

Confidentiality Agreement
type: Concept
type: Class
type: Legal Measure
definition: Agreements that enforce confidentiality for e.g. to protect business, professional, or company secrets
broader: Legal Agreement
source: DGA 3.1.a
term status: accepted
in scheme: legal-measures-classes

Monitoring Policy
type: Concept
type: Class
type: Organisational Measure
definition: Policy for monitoring (e.g. progress, performance)
broader: Policy
source: (ENISA 5G Cybersecurity Standards,https://www.enisa.europa.eu/publications/5g-cybersecurity-standards)
created: 2022-08-17
modified: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

has involvement status
type: Property
type: Concept
definition: Indicates the involvement status for the specified context
range includes: Involvement Status
sub property of: has status
broader: has status
created: 2024-05-10
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-properties

Guides for Data Privacy Vocabulary
type: ResourceDescriptor
has role: guidance
dct:format: https://www.iana.org/assignments/media-types/text/html
conforms to: https://www.w3.org/TR/html/

Credential Management
type: Concept
type: Class
type: Organisational Measure
definition: Management of credentials and their use in authorisations
broader: Authorisation Procedure
created: 2022-06-15
term status: accepted
contributor: Georg P. Krog
in scheme: organisational-measures-classes

Lawfulness
type: Concept
type: Class
definition: Status associated with expressing lawfullness or legal compliance
subclass of: Compliance Status
broader: Compliance Status
created: 2022-10-19
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

Professional Training
type: Concept
type: Class
type: Organisational Measure
definition: Training methods that are intended to provide professional knowledge and expertise
broader: Staff Training
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Generate
type: Concept
type: Class
type: Processing
definition: to generate or create data
broader: Obtain
created: 2022-04-20
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-classes

Request Action Delayed
type: Concept
type: Class
type: Request Status
definition: State of a request being delayed towards fulfilment
broader: Request Status
created: 2022-11-30
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

dct:format
type: Property
type: Concept
scope note: Specifying the format of provided information, for example a CSV dataset
in scheme: rights-properties

Penetration Testing Methods
type: Concept
type: Class
type: Technical Measure
definition: Use of penetration testing to identify weaknesses and vulnerabilities through simulations
broader: Security Method
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Use of Synthetic Data
type: Concept
type: Class
type: Technical Measure
definition: Use of synthetic data to preserve privacy, security, or other effects and side-effects
broader: Security Method
source: (ENISA Data Protection Engineering,https://www.enisa.europa.eu/publications/data-protection-engineering)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Primary Importance
type: Concept
type: Class
type: Importance
definition: Indication of 'primary' or 'main' or 'core' importance
broader: Importance
created: 2022-02-10
term status: accepted
contributor: Harshvardhan J. Pandit, Paul Ryan, Georg P. Krog, Julian Flake, Beatriz Esteves
in scheme: context-classes

RNG Pseudonymisation
type: Concept
type: Class
type: Technical Measure
definition: A pseudonymisation method where identifiers are substituted by a number chosen by a Random Number Generator (RNG)
broader: Pseudonymisation
source: (ENISA Data Pseudonymisation: Advanced Techniques and Use Cases,https://www.enisa.europa.eu/publications/data-pseudonymisation-advanced-techniques-and-use-cases)
created: 2022-08-17
modified: 2022-10-13
term status: modified
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Legal Agreement
type: Concept
type: Class
type: Legal Measure
definition: A legally binding agreement
broader: Legal Measure
created: 2019-04-05
term status: accepted
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
in scheme: legal-measures-classes

Data Transfer Impact Assessment
type: Concept
type: Class
type: Organisational Measure
definition: Impact Assessment for conducting data transfers
broader: Impact Assessment
created: 2021-09-08
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan
in scheme: risk-classes

Expressed Consent
type: Concept
type: Class
type: Legal Basis
definition: Consent that is expressed through an action intended to convey a consenting decision
broader: Informed Consent
scope note: Expressed consent requires the individual take a specific and unambigious action that directly indicates their consent. This action may be a part of other processes such as setting preferences, or agreeing to a contract, or other matters not relating to consent. An example of expressed consent is interacting with a checkbox within a dashboard or clicking a button on a web form
created: 2022-06-21
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
in scheme: consent-types-classes

Identifying Personal Data
type: Concept
type: Class
definition: Personal Data that explicitly and by itself is sufficient to identify a person
subclass of: Personal Data
broader: Personal Data
scope note: DPV does not use PII ('Personally Identifiable Information') as it has varying and conflicting definitions across sources. Instead the concept 'identifying personal data' is intended to provide a clear categorisation of its interpretation. Where multiple data categories can be combined to create an 'identifying' category e.g. fingerprinting, this concept represents the combined category.
term status: accepted
in scheme: personal-data-classes

Legitimate Interest of Third Party
type: Concept
type: Class
type: Legal Basis
definition: Legitimate Interests of a Third Party in conducting specified processing
broader: Legitimate Interest
created: 2021-05-19
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan
in scheme: legal-basis-classes

Regional Scale
type: Concept
type: Class
type: Geographic Coverage
definition: Geographic coverage spanning a specific region or regions
broader: Geographic Coverage
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-scale-classes

has prohibition
type: Property
type: Concept
definition: Specifying applicability or inclusion of a prohibition rule within specified context
domain includes: Context
range includes: Prohibition
sub property of: has rule
broader: has rule
created: 2022-10-19
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Beatriz Esteves, Paul Ryan
in scheme: rules-properties

Actively Involved
type: Concept
type: Class
type: Involvement Status
definition: Status indicating the specified context is 'actively' involved
broader: Involvement Status
scope note: An example of active involvement is a person directly using a system to enter information
created: 2024-05-10
term status: accepted
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
in scheme: status-classes

has data
type: Property
type: Concept
definition: Indicates associated with Data (may or may not be personal)
range includes: Data
created: 2022-08-18
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: personal-data-properties

Employee
type: Concept
type: Class
type: Data Subject
definition: Data subjects that are employees
broader: Data Subject
created: 2022-04-06
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Julian Flake, Paul Ryan, Beatriz Esteves
in scheme: entities-datasubject-classes

Human Resource Management
type: Concept
type: Class
type: Purpose
definition: Purposes associated with managing humans and 'human resources' within the organisation for effective and efficient operations.
broader: Purpose
scope note: HR is a broad concept. Its management includes, amongst others - recruiting employees and intermediaries e.g. brokers, independent representatives; payroll administration, remunerations, commissions, and wages; and application of social legislation.
source: (Belgian DPA ROPA Template, https://www.privacycommission.be/nl/model-voor-een-register-van-de-verwerkingsactiviteiten)
created: 2021-09-01
term status: accepted
contributor: Paul Ryan, David Hickey, Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
in scheme: purposes-classes

Consent Invalidated
type: Concept
type: Class
type: Consent Status
definition: The state where consent has been deemed to be invalid
broader: Consent Status Invalid for Processing
scope note: An example of this state is where an investigating authority or a court finds the collected consent did not meet requirements, and 'invalidates' both prior and future uses of it to carry out processing
source: (GConsent,https://w3id.org/GConsent)
created: 2022-06-22
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
in scheme: consent-status-classes

Authority
type: Concept
type: Class
definition: An authority with the power to create or enforce laws, or determine their compliance.
subclass of: Governmental Organisation
broader: Governmental Organisation
created: 2020-11-04
term status: accepted
contributor: Georg P. Krog, Paul Ryan, Harshvardhan J. Pandit
in scheme: entities-authority-classes

Systematic Monitoring
type: Concept
type: Class
type: Processing Context
definition: Processing that involves systematic monitoring of individuals
broader: Processing Context
source: (GDPR Art.4-2,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_2/oj)
created: 2020-11-04
term status: accepted
contributor: Harshvardhan J. Pandit, Piero Bonatti
in scheme: processing-context-classes

Data
type: Concept
type: Class
definition: A broad concept representing 'data' or 'information'
created: 2022-01-19
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: personal-data-classes

has severity
type: Property
type: Concept
definition: Indicates the severity associated with a concept
range includes: Severity
created: 2022-07-20
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Paul Ryan, Julian Flake
in scheme: risk-properties

Data Privacy Vocabulary (DPV) - HTML serialiation
type: ResourceDescriptor
has role: specification
has artifact: dpv.html
dct:format: https://www.iana.org/assignments/media-types/text/html
conforms to: https://www.w3.org/TR/html/

Pseudonymisation
type: Concept
type: Class
type: Technical Measure
definition: Pseudonymisation means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person;
broader: De-Identification
source: (GDPR Art.4-5,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_5/oj)
created: 2019-04-05
modified: 2022-11-24
term status: modified
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
in scheme: technical-measures-classes

Data Subject Contract
type: Concept
type: Class
type: Legal Basis
definition: Creation, completion, fulfilment, or performance of a contract, with the Data Controller and Data Subject as parties, and involving specified processing
broader: Contract
created: 2023-12-10
term status: accepted
in scheme: legal-basis-classes

Decision Making
type: Concept
type: Class
definition: Processing that involves decision making
subclass of: Processing Context
broader: Processing Context
created: 2022-09-07
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-context-classes

Non-Material Damage
type: Concept
type: Class
type: Impact
definition: Impact that acts as or causes non-material damages
broader: Damage
created: 2022-03-30
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: risk-classes

Rights Management
type: Concept
type: Class
type: Organisational Measure
definition: Methods associated with rights management where 'rights' refer to controlling who can do what with a resource
broader: Organisational Measure
created: 2024-04-14
term status: accepted
contributor: Beatriz Esteves, Harshvardhan J. Pandit, Georg P. Krog
in scheme: organisational-measures-classes

IntellectualPropertyData
type: Concept
type: Class
definition: Data protected by Intellectual Property rights and regulations
subclass of: Data
broader: Data
source: DGA 5.10
term status: accepted
in scheme: personal-data-classes

Network Security Protocols
type: Concept
type: Class
type: Technical Measure
definition: Security implemented at or over networks protocols
broader: Security Method
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Security Incident Notice
type: Concept
type: Class
type: Organisational Measure
definition: A notice providing information about security incident(s)
broader: Notice
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

has human involvement
type: Property
type: Concept
definition: Indicates Involvement of humans in processing such as within automated decision making process
range includes: Human Involvement
scope note: Human involvement is also relevant to 'human in the loop'
created: 2020-11-04
term status: accepted
contributor: Georg P. Krog, Paul Ryan, Harshvardhan J. Pandit
in scheme: processing-context-properties

Customer Management
type: Concept
type: Class
type: Purpose
definition: Customer Management refers to purposes associated with managing activities related with past, current, and future customers
broader: Purpose
created: 2021-09-08
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
in scheme: purposes-classes

Service
type: Concept
type: Class
definition: A service is a process where one entity provides some benefit or assistance to another entity
subclass of: Process
broader: Process
scope note: Service Provider and Service Consumer reflect the roles associated with a service. 'Service' as a process is a distinct concept from the use of 'service' as a provision method in Tech extension
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: process-classes

Support Contract Negotiation
type: Concept
type: Class
type: Organisational Measure
definition: Supporting entities, including individuals, with negotiating a contract and its terms and conditions
broader: Support Entity Decision Making
source: DGA 2.15
created: 2024-04-14
term status: accepted
contributor: Beatriz Esteves, Harshvardhan J. Pandit
in scheme: organisational-measures-classes

is not applicable for
type: Property
type: Concept
definition: Indicates the concept or information is not applicable for specified context
range includes: Scope
created: 2024-04-13
term status: accepted
contributor: Harshvardhan J. Pandit, Beatriz Esteves, Georg P. Krog, Paul Ryan
in scheme: context-properties

has algorithmic logic
type: Property
type: Concept
definition: Indicates the logic used in processing such as for automated decision making
range includes: Algorithmic Logic
created: 2020-11-04
modified: 2022-06-15
term status: accepted
contributor: Georg P. Krog, Paul Ryan, Harshvardhan J. Pandit
in scheme: processing-context-properties

Non-Personal Data Process
type: Concept
type: Class
definition: An action, activity, or method involving non-personal data, and asserting that no personal data is involved
subclass of: Process
broader: Process
scope note: Use of personal data within NonPersonalDataProcess should be considered a violation of the explicit constraint that no personal data is involved.
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: process-classes

Targeted Advertising
type: Concept
type: Class
type: Purpose
definition: Purposes associated with creating and providing pesonalised advertisement where the personalisation is targeted to a specific individual or group of individuals
broader: Personalised Advertising
created: 2022-03-30
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: purposes-classes

Records of Processing Activities
type: Concept
type: Class
type: Organisational Measure
definition: A Register of Processing Activities (ROPA) is a document detailing processing activities
broader: Data Processing Record
scope note: ROPA under GDPR Art.30 has specific requirements regarding the information to be maintained. Additionally, Data Protection Authorities also provide additional information guidelines for information to be maintained in a ROPA. For more information see https://w3id.org/dpcat
created: 2021-09-08
modified: 2024-04-14
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan
in scheme: organisational-measures-classes

Optimisation for Consumer
type: Concept
type: Class
type: Purpose
definition: Purposes associated with optimisation of activities and services for consumer or user
broader: Service Optimisation
related: svpu:Custom
scope note: The term optmisation here refers to the efficiency of the service in terms of technical provision (or similar means) with benefits for everybody. Personalisation implies making changes that benefit the current user or persona.
created: 2019-04-05
term status: accepted
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
in scheme: purposes-classes

Variable Location
type: Concept
type: Class
type: Location Fixture
definition: Location that is known but is variable e.g. somewhere within a given area
broader: Location Fixture
created: 2022-06-15
modified: 2020-10-05
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: jurisdiction-classes

Unexpected
type: Concept
type: Class
type: Expectation Status
definition: Status indicating the specified context was unexpected i.e. not expected
broader: Expectation Status
created: 2024-05-10
term status: accepted
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
in scheme: status-classes

Provide Product Recommendations
type: Concept
type: Class
type: Purpose
definition: Purposes associated with creating and providing product recommendations e.g. suggest similar products
broader: Provide Personalised Recommendations
related: svpu:Marketing
created: 2019-04-05
modified: 2022-10-14
term status: accepted
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
in scheme: purposes-classes

Cannot Opt-out from Process
type: Concept
type: Class
type: Entity Non-Permissive Involvement
definition: Involvement where entity cannot opt-out from specified context
broader: Entity Non-Permissive Involvement
created: 2024-05-11
term status: accepted
in scheme: processing-context-classes

Supranational Union
type: Concept
type: Class
definition: A political union of two or more countries with an establishment of common authority
subclass of: Location
broader: Location
created: 2022-01-19
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: jurisdiction-classes

Recipient
type: Concept
type: Class
definition: Entities that receive data or technologies
subclass of: Legal Entity
broader: Legal Entity
related: spl:AnyRecipient
scope note: Recipients that receive personal data can be a Third Party, Data Controller, or Data Processor.
source: (SPECIAL Project,https://specialprivacy.ercim.eu/),(GDPR Art.4-9g,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_9/oj)
created: 2019-04-05
modified: 2024-05-21
term status: accepted
contributor: Axel Polleres, Javier Fernández
example: E0019
in scheme: entities-legalrole-classes

Data Exporter
type: Concept
type: Class
definition: An entity that 'exports' data where exporting is considered a form of data transfer
subclass of: Legal Entity
broader: Legal Entity
scope note: The term 'Data Exporter' is used by the EU-EDPB as the entity that transfer data across borders. While the EDPB refers to the jurisdictional border of EU, the term within DPV can be used to denote any 'export' or transfer or transmission of data and is thus a broader concept than the EDPB's definition.
source: (EDPB Recommendations 01/2020 on Data Transfers, https://edpb.europa.eu/our-work-tools/our-documents/recommendations/recommendations-012020-measures-supplement-transfer_en)
created: 2021-09-08
term status: accepted
contributor: David Hickey, Georg P. Krog, Paul Ryan, Harshvardhan J. Pandit
in scheme: entities-legalrole-classes

Technical Service Provision
type: Concept
type: Class
type: Purpose
definition: Purposes associated with managing and providing technical processes and functions necessary for delivering services
broader: Service Provision
created: 2021-09-08
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: purposes-classes

Scientific Research
type: Concept
type: Class
type: Purpose
definition: Purposes associated with scientific research
broader: Research and Development
source: DGA 2.16
term status: accepted
contributor: Beatriz Esteves, Harshvardhan J. Pandit
in scheme: purposes-classes

is before
type: Property
type: Concept
definition: Indicates the specified concepts is 'before' this concept in some context
created: 2022-03-02
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Julian Flake
in scheme: context-properties
in scheme: rights-properties
scope note: Specifying a RightExerciseActivity occurs before another RightExerciseActivity
domain includes: Right Exercise Activity
range includes: Right Exercise Activity

Processing Scale
type: Concept
type: Class
definition: Scale of Processing
subclass of: Scale
broader: Scale
scope note: The exact definition of what constitutes "scale" depends on use of jurisdictional, domain-specific, or other forms of externally defined criterias. Where possible, this should be reflected by extending the scales provided with the appropriate context.
created: 2022-09-07
term status: accepted
contributor: Harshvardhan J. Pandit, Piero Bonatti
in scheme: processing-scale-classes

has personal data process
type: Property
type: Concept
definition: Indicates association with a Personal Data Process
range includes: Personal Data Process
created: 2023-12-11
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: process-properties

Private Location
type: Concept
type: Class
type: Location
definition: Location that is not or cannot be accessed by the public and is controlled as a private space
broader: Local Location
created: 2022-10-22
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: jurisdiction-classes

has intention
type: Property
type: Concept
definition: Indicates whether the specified context was intended or unintended
range includes: Intention Status
sub property of: has status
broader: has status
created: 2024-05-10
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-properties

Non-commercial Purpose
type: Concept
type: Class
type: Purpose
definition: Purposes associated with processing activities performed in a non-commercial setting or without intention to commercialise
broader: Purpose
source: DGA 4.4
term status: accepted
contributor: Beatriz Esteves, Harshvardhan J. Pandit
in scheme: purposes-classes

Guideline
type: Concept
type: Class
type: Organisational Measure
definition: Practices that specify how activities must be conducted
broader: GuidelinesPrinciple
created: 2024-05-12
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Post-Quantum Cryptography
type: Concept
type: Class
type: Technical Measure
definition: Use of algorithms that are intended to be secure against cryptanalytic attack by a quantum computer
broader: Cryptographic Methods
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Until Event Duration
type: Concept
type: Class
definition: Duration that takes place until a specific event occurs e.g. Account Closure
subclass of: Duration
broader: Duration
created: 2022-06-15
modified: 2020-10-05
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: context-classes

Objecting to Process
type: Concept
type: Class
type: Entity Permissive Involvement
definition: Involvement where entity can object to process of specified context
broader: Entity Permissive Involvement
created: 2024-05-11
term status: accepted
in scheme: processing-context-classes

Acitivity Not Completed
type: Concept
type: Class
type: Activity Status
definition: State of an activity that could not be completed, but has reached some end state
broader: Activity Status
scope note: This relates to a 'Stop' state as distinct from a 'Halt' state. It makes no comments on whether the Acitivity can be resumed or continued towards completion.
created: 2022-11-30
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

Data Erasure Policy
type: Concept
type: Class
type: Organisational Measure
definition: Policy regarding erasure of data
broader: Data Processing Policy
scope note: Erasure or data destruction or secure removal of data refers to irreversible erasure of data. See dpv:DataDeletion for reversible or logical deletion of data
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Risk
type: Concept
type: Class
definition: A risk or possibility or uncertainty of negative effects, impacts, or consequences
scope note: Risks can be associated with one or more different concepts such as purpose, processing, personal data, technical or organisational measure
created: 2020-11-18
term status: accepted
contributor: Harshvardhan J. Pandit
example: E0029
in scheme: risk-classes

Consent Given
type: Concept
type: Class
type: Consent Status
definition: The state where consent has been given
broader: Consent Status Valid for Processing
scope note: An example of this state is when the individual clicks on a button, ticks a checkbox, verbally agrees - or any other form that communicates their decision agreeing to the processing of data
source: (GConsent,https://w3id.org/GConsent)
created: 2022-06-22
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
in scheme: consent-status-classes

Notification Ongoing
type: Concept
type: Class
type: Notification Status
definition: Status indicating notification(s) are ongoing
broader: Notification Status
created: 2024-05-19
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

Assistive Automation
type: Concept
type: Class
type: Automation Level
definition: Level of automation corresponding to Level 1 in ISO/IEC 22989:2022 where automation is limited to parts of the system or a specific part of the system in a manner that does not change the control of the human in using/driving the system
broader: Automation Level
scope note: Human Involvement is implied here, specifically the ability to make decisions regarding operations, but also possibly for intervention, oversight, and verification
source: (ISO/IEC 22989:2022 Artificial intelligence concepts and terminology,https://www.iso.org/standard/74296.html)
created: 2023-12-10
modified: 2024-04-20
term status: modified
contributor: Harshvardhan J. Pandit, Delaram Golpayegani
in scheme: processing-context-classes

National Scale
type: Concept
type: Class
type: Geographic Coverage
definition: Geographic coverage spanning a nation
broader: Geographic Coverage
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-scale-classes

Detriment
type: Concept
type: Class
type: Impact
definition: Impact that acts as or causes detriments
broader: Impact
created: 2022-03-23
term status: accepted
contributor: Harshvardhan J. Pandit, Julian Flake, Georg P. Krog, Fajar Ekaputra, Beatriz Esteves
in scheme: risk-classes

Economic Union
type: Concept
type: Class
definition: A political union of two or more countries based on economic or trade agreements
subclass of: Location
broader: Location
created: 2022-01-19
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: jurisdiction-classes

Cannot Challenge Process
type: Concept
type: Class
type: Entity Non-Permissive Involvement
definition: Involvement where entity cannot challenge the process of specified context
broader: Entity Non-Permissive Involvement
scope note: Challenge refers to raising questions about validity, necessity, correctness, or other similar 'trustworthiness' attributes regarding the process or plan or implementation
created: 2024-05-11
term status: accepted
in scheme: processing-context-classes

Destruct
type: Concept
type: Class
type: Processing
definition: to process data in a way it no longer exists or cannot be repaired
broader: Remove
source: (GDPR Art.4-2,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_2/oj)
created: 2019-05-07
term status: accepted
in scheme: processing-classes

Consult
type: Concept
type: Class
type: Processing
definition: to consult or query data
broader: Use
related: svpr:Query
source: (GDPR Art.4-2,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_2/oj), (SPECIAL Project,https://specialprivacy.ercim.eu/vocabs/processing)
created: 2019-05-07
term status: accepted
in scheme: processing-classes

Search Functionalities
type: Concept
type: Class
type: Purpose
definition: Purposes associated with providing searching, querying, or other forms of information retrieval related functionalities
broader: Service Provision
created: 2022-11-09
term status: accepted
contributor: Georg P. Krog
in scheme: purposes-classes

AI Literacy
type: Concept
type: Class
type: Organisational Measure
definition: Providing skills, knowledge, and understanding to enable reading, writing, analysing, reasoning, and communicating regarding AI
broader: Digital Literacy
created: 2024-05-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Transform
type: Concept
type: Class
type: Processing
definition: to change the form or nature of data
broader: Processing
source: (GDPR Art.4-2,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_2/oj)
created: 2019-05-07
term status: accepted
in scheme: processing-classes

Not Automated
type: Concept
type: Class
type: Automation Level
definition: Level of automation corresponding to Level 0 in ISO/IEC 22989:2022 where there is no automation in the system
broader: Automation Level
scope note: Human Involvement is necessary here as there is no automation
source: (ISO/IEC 22989:2022 Artificial intelligence concepts and terminology,https://www.iso.org/standard/74296.html)
created: 2023-12-10
modified: 2024-04-20
term status: modified
contributor: Harshvardhan J. Pandit, Delaram Golpayegani
in scheme: processing-context-classes

Incident Reporting Communication
type: Concept
type: Class
type: Organisational Measure
definition: Procedures related to management of incident reporting
broader: Governance Procedures
source: (ENISA 5G Cybersecurity Standards,https://www.enisa.europa.eu/publications/5g-cybersecurity-standards)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Secondary Importance
type: Concept
type: Class
type: Importance
definition: Indication of 'secondary' or 'minor' or 'auxiliary' importance
broader: Importance
created: 2022-02-11
term status: accepted
contributor: Harshvardhan J. Pandit, Paul Ryan, Georg P. Krog, Julian Flake, Beatriz Esteves
in scheme: context-classes

has third country
type: Property
type: Concept
definition: Indicates applicability or relevance of a 'third country'
range includes: Third Country
sub property of: has country
broader: has country
created: 2022-02-09
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog
in scheme: jurisdiction-properties

Within Device
type: Concept
type: Class
type: Location
definition: Location is local and entirely within a device, such as a smartphone
broader: Local Location
created: 2022-06-15
modified: 2020-10-05
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: jurisdiction-classes

Not Involved
type: Concept
type: Class
type: Involvement Status
definition: Status indicating the specified context is 'not' involved
broader: Involvement Status
created: 2024-05-10
term status: accepted
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
in scheme: status-classes

Verification
type: Concept
type: Class
type: Purpose
definition: Purposes association with verification e.g. information, identity, integrity
broader: Enforce Security
created: 2024-02-14
term status: accepted
contributor: Beatriz Esteves, Harshvardhan J. Pandit
in scheme: purposes-classes

Message Authentication Codes (MAC)
type: Concept
type: Class
type: Technical Measure
definition: Use of cryptographic methods to authenticate messages
broader: Cryptographic Authentication
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Marketing
type: Concept
type: Class
type: Purpose
definition: Purposes associated with conducting marketing in relation to organisation or products or services e.g. promoting, selling, and distributing
broader: Purpose
scope note: Was commercial interest, changed to consider Marketing a separate Purpose category by itself
created: 2020-11-04
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
in scheme: purposes-classes

Legal Measure
type: Concept
type: Class
definition: Legal measures used to safeguard and ensure good practices in connection with data and technologies
subclass of: Technical and Organisational Measure
broader: Technical and Organisational Measure
source: DGA 12.j
created: 2023-12-10
modified: 2023-12-10
term status: accepted
in scheme: TOM-classes

Harm
type: Concept
type: Class
type: Impact
definition: Impact that acts as or causes harms
broader: Damage
created: 2022-08-13
term status: accepted
contributor: Harshvardhan J. Pandit
example: E0029
in scheme: risk-classes

Consent Status Invalid for Processing
type: Concept
type: Class
type: Consent Status
definition: States of consent that cannot be used as valid justifications for processing data
broader: Consent Status
scope note: This identifies the stages associated with consent that should not be used to process data
source: (GConsent,https://w3id.org/GConsent)
created: 2022-06-22
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
in scheme: consent-status-classes

has context
type: Property
type: Concept
definition: Indicates a purpose is restricted to the specified context(s)
range includes: Context
created: 2019-04-05
term status: accepted
in scheme: context-properties

Evaluation of Individuals
type: Concept
type: Class
type: Evaluation and Scoring
definition: Processing that involves evaluation of individuals
broader: Evaluation and Scoring
source: (GDPR Art.4-2,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_2/oj)
created: 2022-10-22
modified: 2022-11-30
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-context-classes

Region
type: Concept
type: Class
definition: A region is an area or site that is considered a location
subclass of: Country
broader: Country
created: 2022-01-19
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: jurisdiction-classes

Industry Consortium
type: Concept
type: Class
definition: A consortium established and comprising on industry organisations
subclass of: Organisation
broader: Organisation
source: (ADMS controlled vocabulary,http://purl.org/adms)
created: 2022-02-02
modified: 2020-10-05
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: entities-organisation-classes

Service Consumer
type: Concept
type: Class
definition: The entity that consumes or receives the service
subclass of: Legal Entity
broader: Legal Entity
created: 2024-04-20
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: entities-legalrole-classes

Technical and Organisational Measure
type: Concept
type: Class
definition: Technical and Organisational measures used to safeguard and ensure good practices in connection with data and technologies
created: 2019-04-05
modified: 2023-12-10
term status: accepted
contributor: Bud Bruegger
in scheme: TOM-classes

Autonomous
type: Concept
type: Class
type: Automation Level
definition: Level of automation corresponding to Level 6 in ISO/IEC 22989:2022 where the automation in system is capable of modifying its operation domain or its goals without external intervention, control or oversight
broader: Automation Level
scope note: Though Autonomous, such operations can still be associated with dpv:HumanInvolved e.g. for inputs, oversight or verification
source: (ISO/IEC 22989:2022 Artificial intelligence concepts and terminology,https://www.iso.org/standard/74296.html)
created: 2023-12-10
modified: 2024-04-20
term status: modified
contributor: Harshvardhan J. Pandit, Delaram Golpayegani
in scheme: processing-context-classes

Service Provider
type: Concept
type: Class
definition: The entity that provides a service
subclass of: Legal Entity
broader: Legal Entity
created: 2024-04-20
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: entities-legalrole-classes

Unknown Applicability
type: Concept
type: Class
type: Applicability
definition: Concept indicating information or context availability is unknown i.e. it is not known if the information exists or is applicable and therefore statements about its availability cannot be made (yet)
broader: Applicability
scope note: This concept is useful when describing situations where it cannot be stated whether the context applies or whether the information is not available yet. For example, if a form field asks about whether a process X was completed and it is not yet known whether X applies or not and therefore it is also unclear whether X was completed or not. Using UnknownApplicability is a signal that the applicability of X should be assessed, and if applicable, then information about X should be identified and used here.
created: 2023-08-24
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: context-classes

Data Subject as Data Source
type: Concept
type: Class
type: Data Source
definition: Data Sourced from Data Subject(s), e.g. when data is collected via a form or observed from their activities
broader: Data Source
created: 2023-10-12
term status: accepted
in scheme: processing-context-classes

Quantum Cryptography
type: Concept
type: Class
type: Technical Measure
definition: Cryptographic methods that utilise quantum mechanical properties to perform cryptographic tasks
broader: Cryptographic Methods
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Cannot Correct Process
type: Concept
type: Class
type: Entity Non-Permissive Involvement
definition: Involvement where entity cannot correct the process of specified context
broader: Entity Non-Permissive Involvement
created: 2024-05-11
term status: accepted
in scheme: processing-context-classes

Verified Data
type: Concept
type: Class
definition: Data that has been verified in terms of accuracy, consistency, or quality
subclass of: Data
broader: Data
created: 2022-11-02
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: personal-data-classes

Authentication using ABC
type: Concept
type: Class
type: Technical Measure
definition: Use of Attribute Based Credentials (ABC) to perform and manage authentication
broader: Cryptographic Authentication
source: (ENISA Data Protection Engineering,https://www.enisa.europa.eu/publications/data-protection-engineering)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Request Accepted
type: Concept
type: Class
type: Request Status
definition: State of a request being accepted towards fulfilment
broader: Request Status
created: 2022-11-30
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

Entity Active Involvement
type: Concept
type: Class
definition: Involvement where entity is 'actively' involved
subclass of: Entity Involvement
broader: Entity Involvement
created: 2024-05-11
term status: accepted
in scheme: processing-context-classes

Authentication Protocols
type: Concept
type: Class
type: Technical Measure
definition: Protocols involving validation of identity i.e. authentication of a person or information
broader: Technical Measure
created: 2019-04-05
term status: accepted
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
in scheme: technical-measures-classes

Data Security Management
type: Concept
type: Class
type: Organisational Measure
definition: Measures associated with management of data security
broader: Data Governance
broader: Security Procedure
scope note: Examples of data security management are assessing the appropriate security controls such as encryption, testing the implemented security controls, and ensuring it is protected and safeguarded from unintended actions
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Secure Multi-Party Computation
type: Concept
type: Class
type: Technical Measure
definition: Use of cryptographic methods for entities to jointly compute functions without revealing inputs
broader: Cryptographic Methods
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Reversing Process Effects
type: Concept
type: Class
type: Entity Permissive Involvement
definition: Involvement where entity can reverse effects of specified context
broader: Entity Permissive Involvement
scope note: Effects refer to consequences and impacts arising from the process or from the outputs of a process
created: 2024-05-11
term status: accepted
in scheme: processing-context-classes

Research and Development
type: Concept
type: Class
type: Purpose
definition: Purposes associated with conducting research and development for new methods, products, or services
broader: Purpose
created: 2019-04-05
term status: accepted
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
in scheme: purposes-classes

Not Required
type: Concept
type: Class
type: Necessity
definition: Indication of neither being required nor optional i.e. not relevant or needed
broader: Necessity
created: 2022-02-15
term status: accepted
contributor: Harshvardhan J. Pandit, Paul Ryan, Georg P. Krog, Julian Flake, Beatriz Esteves
in scheme: context-classes

Observe
type: Concept
type: Class
type: Processing
definition: to obtain data through observation
broader: Obtain
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog
in scheme: processing-classes

Public Benefit
type: Concept
type: Class
type: Purpose
definition: Purposes undertaken and intended to provide benefit to public or society
broader: Purpose
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: purposes-classes

Security Knowledge Training
type: Concept
type: Class
type: Organisational Measure
definition: Training intended to increase knowledge regarding security
broader: Staff Training
source: (ENISA 5G Cybersecurity Standards,https://www.enisa.europa.eu/publications/5g-cybersecurity-standards)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

StatisticallyConfidentialData
type: Concept
type: Class
definition: Data protected through Statistical Confidentiality regulations and agreements
subclass of: Data
broader: Data
source: DGA 2(20)
term status: accepted
in scheme: personal-data-classes

Recipient Uninformed
type: Concept
type: Class
type: Entity Informed Status
definition: Status indicating Recipient is uninformed i.e. has not been informed about the specified context
broader: Entity Uninformed
created: 2024-05-10
term status: accepted
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
in scheme: status-classes

Data Processing Agreement
type: Concept
type: Class
type: Legal Measure
definition: An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of data
broader: Legal Agreement
scope note: For specific role-based data processing agreements, see concepts for Processors and JointDataController agreements.
created: 2022-01-26
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves, Paul Ryan, Julian Flake
in scheme: legal-measures-classes

Records of Activities
type: Concept
type: Class
type: Organisational Measure
definition: Records of activities within some context such as maintainence tasks or governance functions
broader: Organisational Measure
scope note: Records can be any information associated with the activity e.g. logs, summaries.
created: 2021-09-08
modified: 2024-05-05
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan
in scheme: organisational-measures-classes

Fee
type: Concept
type: Class
type: Impact
definition: Fee provided as compensation (as an impact)
broader: Compensation
source: DGA 2.10
created: 2024-04-14
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit
in scheme: risk-classes

Often Frequency
type: Concept
type: Class
type: Frequency
definition: Frequency where occurences are often or frequent, but not continous
broader: Frequency
created: 2022-06-15
modified: 2020-10-05
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: context-classes

Consent Requested
type: Concept
type: Class
type: Consent Status
definition: State where a request for consent has been made and is awaiting a decision
broader: Consent Status Invalid for Processing
scope note: An example of this state is when a notice has been presented to the individual but they have not made a decision
source: (GConsent,https://w3id.org/GConsent)
created: 2022-06-22
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
in scheme: consent-status-classes

Cryptographic Authentication
type: Concept
type: Class
type: Technical Measure
definition: Use of cryptography for authentication
broader: Cryptographic Methods
broader: Authentication Protocols
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Benefit
type: Concept
type: Class
type: Impact
definition: Impact(s) that acts as or causes benefits
broader: Impact
created: 2022-03-23
term status: accepted
contributor: Harshvardhan J. Pandit, Julian Flake, Georg P. Krog, Fajar Ekaputra, Beatriz Esteves, Axel Polleres
in scheme: risk-classes

Human Involvement for Verification
type: Concept
type: Class
type: Human Involvement
definition: Human involvement for the purposes of verification of specified context to ensure its operations, inputs, or outputs are correct or are acceptable.
broader: Human Involvement
scope note: Verification by itself does not imply ability to Control, Intervene, or having Oversight.
created: 2022-09-07
modified: 2023-12-10
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-context-classes

Optimise User Interface
type: Concept
type: Class
type: Purpose
definition: Purposes associated with optimisation of interfaces presented to the user
broader: Optimisation for Consumer
created: 2019-04-05
term status: accepted
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
in scheme: purposes-classes

Request Fulfilled
type: Concept
type: Class
type: Request Status
definition: State of a request being fulfilled
broader: Request Status
created: 2022-11-30
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

Likelihood
type: Concept
type: Class
definition: The likelihood or probability or chance of something taking place or occuring
scope note: Likelihood can be expressed in a subjective manner, such as 'Unlikely', or in a quantitative manner such as "Twice in a Day" (frequency per period). The suggestion is to use quantitative values, or to associate them with subjective terms used so as to enable accurate interpretations and interoperability. See the concepts related to Frequency and Duration for possible uses as a combination to express Likelihood.
created: 2022-07-22
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: risk-classes

Continous Frequency
type: Concept
type: Class
type: Frequency
definition: Frequency where occurences are continous
broader: Frequency
created: 2022-06-15
modified: 2020-10-05
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: context-classes

Encryption in Use
type: Concept
type: Class
type: Technical Measure
definition: Encryption of data when it is being used
broader: Encryption
created: 2022-10-22
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Medium Data Volume
type: Concept
type: Class
type: Data Volume
definition: Data volume that is considered medium i.e. neither large nor small within the context
broader: Data Volume
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Paul Ryan
in scheme: processing-scale-classes

Structure
type: Concept
type: Class
type: Processing
definition: to arrange data according to a structure
broader: Organise
source: (GDPR Art.4-2,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_2/oj)
created: 2019-05-07
term status: accepted
in scheme: processing-classes

End-to-End Encryption (E2EE)
type: Concept
type: Class
type: Technical Measure
definition: Encrypted communications where data is encrypted by the sender and decrypted by the intended receiver to prevent access to any third party
broader: Encryption
source: (ENISA Data Protection Engineering,https://www.enisa.europa.eu/publications/data-protection-engineering)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Align
type: Concept
type: Class
type: Processing
definition: to adjust the data to be in relation to another data
broader: Transform
source: (GDPR Art.4-2,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_2/oj)
created: 2019-05-07
term status: accepted
in scheme: processing-classes

has permission
type: Property
type: Concept
definition: Specifying applicability or inclusion of a permission rule within specified context
domain includes: Context
range includes: Permission
sub property of: has rule
broader: has rule
created: 2022-10-19
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Beatriz Esteves, Paul Ryan
in scheme: rules-properties

has service consumer
type: Property
type: Concept
definition: Indicates the entity that consumes or receives the associated service
domain includes: Service
range includes: Service Consumer
sub property of: has entity
broader: has entity
created: 2024-04-20
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: entities-legalrole-properties

CommerciallyConfidentialData
type: Concept
type: Class
definition: Data protected through Commercial Confidentiality Agreements
subclass of: Data
broader: Data
source: DGA 6.5(c)
term status: accepted
in scheme: personal-data-classes

Deterministic Pseudonymisation
type: Concept
type: Class
type: Technical Measure
definition: Pseudonymisation achieved through a deterministic function
broader: Pseudonymisation
source: (ENISA Data Pseudonymisation: Advanced Techniques and Use Cases,https://www.enisa.europa.eu/publications/data-pseudonymisation-advanced-techniques-and-use-cases)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Controller-Processor Agreement
type: Concept
type: Class
type: Legal Measure
definition: An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of data between a Data Controller and a Data Processor
broader: Data Processing Agreement
created: 2022-01-26
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves, Paul Ryan, Julian Flake
example: E0020
example: E0021
in scheme: legal-measures-classes

Statistical Confidentiality Agreement
type: Concept
type: Class
type: Legal Measure
definition: An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for classification and management of 'confidential data' based on a statistical framework
broader: Legal Agreement
term status: accepted
in scheme: legal-measures-classes

has sector
type: Property
type: Concept
definition: Indicates the purpose is associated with activities in the indicated (Economic) Sector(s)
range includes: Sector
created: 2019-04-05
term status: accepted
in scheme: purposes-properties

Compliance Violation
type: Concept
type: Class
type: Compliance Status
definition: State where compliance cannot be achieved due to requirements being violated
broader: Compliance Status
scope note: Changed from "violation of compliance" for consistency with other terms
created: 2022-05-18
modified: 2022-09-07
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

Personnel Payment
type: Concept
type: Class
type: Purpose
definition: Purposes associated with management and execution of payment of personnel
broader: Personnel Management
created: 2022-04-20
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: purposes-classes

is indicated at time
type: Property
type: Concept
definition: Specifies the temporal information for when the entity has indicated the specific context
created: 2022-06-21
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
in scheme: legal-basis-properties

has data source
type: Property
type: Concept
definition: Indicates the source or origin of data being processed
range includes: Data Source
created: 2020-11-04
term status: accepted
contributor: Georg P. Krog, Paul Ryan, Harshvardhan J. Pandit
in scheme: processing-context-properties

Automated Decision Making
type: Concept
type: Class
definition: Processing that involves automated decision making
subclass of: Decision Making
broader: Decision Making
scope note: Automated decision making can be defined as “the ability to make decisions by technological means without human involvement.” (“Guidelines on Automated individual decision-making and Profiling for the purposes of Regulation 2016/679 (wp251rev.01)”, 2018, p. 8)
source: (GDPR Art.4-2,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_2/oj)
created: 2020-11-04
modified: 2022-09-07
term status: accepted
contributor: Harshvardhan J. Pandit, Piero Bonatti
in scheme: processing-context-classes

dct:hasPart
type: Property
type: Concept
scope note: Specifying a RightExerciseRecord has RightExerciseActivity as part of its records
domain includes: Right Exercise Record
range includes: Right Exercise Activity
in scheme: rights-properties

Subsidiary Legal Entity
type: Concept
type: Class
definition: A legal entity that operates as a subsidiary of another legal entity
subclass of: Organisation
broader: Organisation
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog
in scheme: entities-classes

Personnel Hiring
type: Concept
type: Class
type: Purpose
definition: Purposes associated with management and execution of hiring processes of personnel
broader: Personnel Management
created: 2022-04-20
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: purposes-classes

Contract Performance
type: Concept
type: Class
type: Legal Basis
definition: Fulfilment or performance of a contract involving specified processing
broader: Contract
created: 2021-04-07
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan
in scheme: legal-basis-classes

Reversing Process Input
type: Concept
type: Class
type: Entity Permissive Involvement
definition: Involvement where entity can reverse input of specified context
broader: Entity Permissive Involvement
created: 2024-05-11
term status: accepted
in scheme: processing-context-classes

has entity
type: Property
type: Concept
definition: Indicates inclusion or applicability of an entity to some concept
range includes: Entity
scope note: parent property for controller, processor, data subject, authority, etc.?
created: 2022-02-09
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: entities-properties

Law
type: Concept
type: Class
definition: A law is a set of rules created by government or authorities
subclass of: Class
created: 2022-01-19
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: jurisdiction-classes

Consequence of Failure
type: Concept
type: Class
definition: The consequence(s) possible or arising from failure of specified context
subclass of: Consequence
broader: Consequence
created: 2022-03-23
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog
in scheme: risk-classes

has data volume
type: Property
type: Concept
definition: Indicates the volume of data
range includes: Data Volume
sub property of: has scale
broader: has scale
created: 2022-06-22
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-scale-properties

Incorrect Data
type: Concept
type: Class
definition: Data that is known to be incorrect or inconsistent with some requirements
subclass of: Data
broader: Data
created: 2022-11-02
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: personal-data-classes

Small Data Volume
type: Concept
type: Class
type: Data Volume
definition: Data volume that is considered small or limited within the context
broader: Data Volume
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-scale-classes

Non-Commercial Research
type: Concept
type: Class
type: Purpose
definition: Purposes associated with conducting research in a non-commercial setting e.g. for a non-profit-organisation (NGO)
broader: Research and Development
broader: Non-commercial Purpose
created: 2019-04-05
modified: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
in scheme: purposes-classes

Vendor Selection Assessment
type: Concept
type: Class
type: Purpose
definition: Purposes associated with managing selection, assessment, and evaluation related to vendors
broader: Vendor Management
source: (Belgian DPA ROPA Template, https://www.privacycommission.be/nl/model-voor-een-register-van-de-verwerkingsactiviteiten)
created: 2021-09-01
term status: accepted
contributor: Paul Ryan, Georg P. Krog, David Hickey, Harshvardhan J. Pandit
in scheme: purposes-classes

Decentralised Locations
type: Concept
type: Class
type: Location Fixture
definition: Location that is spread across multiple separate areas with no distinction between their importance
broader: Location Fixture
created: 2022-06-15
modified: 2020-10-05
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: jurisdiction-classes

Obtain Consent
type: Concept
type: Class
definition: Control for obtaining consent
subclass of: Consent Control
broader: Consent Control
scope note: Indicates how the controller or entity can obtain consent e.g. used with dpv:isExercisedAt
created: 2024-05-11
term status: accepted
in scheme: consent-controls-classes

Activity Planned
type: Concept
type: Class
type: Activity Status
definition: State of an activity being planned with concrete plans for implementation
broader: Activity Status
created: 2024-05-19
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

Data Protection Impact Assessment (DPIA)
type: Concept
type: Class
type: Organisational Measure
definition: Impact assessment determining the potential and actual impact of processing activities on individuals or groups of individuals and taking into account the impacts of activities on their rights and freedoms
broader: Rights Impact Assessment
scope note: Specific requirements and procedures for DPIA are defined in GDPR Art.35
source: GDPR Art. 35
created: 2020-11-04
modified: 2024-04-14
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan
in scheme: risk-classes

Physical Interruption Protection
type: Concept
type: Class
type: Physical Measure
definition: Physical protection against interruptions e.g. electrical supply interruption
broader: Physical Measure
source: NIST SP 800-18
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: physical-measures-classes

Account Management
type: Concept
type: Class
type: Purpose
definition: Account Management refers to purposes associated with account management, such as to create, provide, maintain, and manage accounts
broader: Purpose
created: 2021-09-08
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
in scheme: purposes-classes

Correcting Process
type: Concept
type: Class
type: Entity Permissive Involvement
definition: Involvement where entity can correct the process of specified context
broader: Entity Permissive Involvement
scope note: Correction of process refers to the ability to change how the process takes place
created: 2024-05-11
term status: accepted
in scheme: processing-context-classes

Data Protection Authority
type: Concept
type: Class
definition: An authority tasked with overseeing legal compliance regarding privacy and data protection laws.
subclass of: Authority
broader: Authority
created: 2020-11-04
term status: accepted
contributor: Georg P. Krog, Paul Ryan, Harshvardhan J. Pandit
in scheme: entities-authority-classes

Enforce Security
type: Concept
type: Class
type: Purpose
definition: Purposes associated with ensuring and enforcing security for data, personnel, or other related matters
broader: Purpose
scope note: Was previous "Security". Prefixed to distinguish from TechOrg measures.
created: 2019-04-05
term status: accepted
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
in scheme: purposes-classes

Consultation with Data Subject Representative
type: Concept
type: Class
type: Organisational Measure
definition: Consultation with representative of data subject(s)
broader: Consultation with Data Subject
created: 2022-10-22
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog
in scheme: organisational-measures-classes

Random Location
type: Concept
type: Class
type: Location Fixture
definition: Location that is random or unknown
broader: Location Fixture
created: 2022-06-15
modified: 2020-10-05
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: jurisdiction-classes

Data Source
type: Concept
type: Class
definition: The source or origin of data
subclass of: Processing Context
broader: Processing Context
scope note: Source' is the direct point of data collection; 'origin' would indicate the original/others points of where the data originates from.
created: 2020-11-04
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
example: E0012
example: E0020
in scheme: processing-context-classes

Generated Personal Data
type: Concept
type: Class
definition: Personal Data that is generated or brought into existence without relation to existing data i.e. it is not derived or inferred from other data
subclass of: Personal Data
subclass of: Inferred Data
broader: Personal Data
broader: Inferred Data
scope note: Generated Data is used to indicate data that is produced and is not derived or inferred from other data
created: 2022-03-30
modified: 2023-12-10
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: personal-data-classes

Lawful
type: Concept
type: Class
type: Lawfulness
definition: State of being lawful or legally compliant
broader: Lawfulness
created: 2022-10-19
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

Location Fixture
type: Concept
type: Class
definition: The fixture of location refers to whether the location is fixed
subclass of: Class
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: jurisdiction-classes

Federated Locations
type: Concept
type: Class
type: Location Fixture
definition: Location that is federated across multiple separate areas with designation of a primary or central location
broader: Location Fixture
created: 2022-06-15
modified: 2020-10-05
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: jurisdiction-classes

Use
type: Concept
type: Class
type: Processing
definition: to use data
broader: Processing
source: (GDPR Art.4-2,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_2/oj)
created: 2019-05-07
term status: accepted
in scheme: processing-classes

For-Profit Organisation
type: Concept
type: Class
definition: An organisation that aims to achieve profit as its primary goal
subclass of: Organisation
broader: Organisation
created: 2022-02-02
modified: 2020-10-05
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: entities-organisation-classes

Standards Conformance
type: Concept
type: Class
type: Organisational Measure
definition: Purposes associated with activities undertaken to ensure or achieve conformance with standards
broader: Governance Procedures
source: DGA 12.d
created: 2024-04-14
term status: accepted
contributor: Beatriz Esteves, Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Geographic Coverage
type: Concept
type: Class
definition: Indicate of scale in terms of geographic coverage
subclass of: Scale
broader: Scale
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Paul Ryan
in scheme: processing-scale-classes

Monitor
type: Concept
type: Class
type: Processing
definition: to monitor data for some criteria
broader: Consult
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog
in scheme: processing-classes

Client
type: Concept
type: Class
type: Data Subject
definition: Data subjects that are clients or recipients of services
broader: Customer
created: 2022-04-06
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Julian Flake, Paul Ryan, Beatriz Esteves
in scheme: entities-datasubject-classes

Educational Training
type: Concept
type: Class
type: Organisational Measure
definition: Training methods that are intended to provide education on topic(s)
broader: Staff Training
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Passively Involved
type: Concept
type: Class
type: Involvement Status
definition: Status indicating the specified context is 'passively' involved
broader: Involvement Status
scope note: An example of passive involvement is a person being monitored by a CCTV
created: 2024-05-10
term status: accepted
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
in scheme: status-classes

Synthetic Data
type: Concept
type: Class
definition: Synthetic data reffers to artificially created data such that it is intended to resemble real data (personal or non-personal), but does not refer to any specific identified or identifiable individual, or to the real measure of an observable parameter in the case of non-personal data
subclass of: Generated Data
broader: Generated Data
source: (ENISA Data Protection Engineering,https://www.enisa.europa.eu/publications/data-protection-engineering)
created: 2022-08-18
modified: 2023-12-10
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: personal-data-classes

Password Authentication
type: Concept
type: Class
type: Technical Measure
definition: Use of passwords to perform authentication
broader: Authentication Protocols
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Legitimate Interest of Controller
type: Concept
type: Class
type: Legal Basis
definition: Legitimate Interests of a Data Controller in conducting specified processing
broader: Legitimate Interest
created: 2021-05-19
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan
in scheme: legal-basis-classes

is residual risk of
type: Property
type: Concept
definition: Indicates this risk is the remaining or residual risk from applying mitigation measures or treatments to specified risk
domain includes: Risk
range includes: Risk
created: 2022-07-20
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Paul Ryan, Julian Flake
in scheme: risk-properties

Applicability
type: Concept
type: Class
definition: Concept provided to represent indication of cases where the information or context is not applicable (N/A) or not available or this is not known or determined yet. If the information is applicable and available, this concept should not be used.
subclass of: Context
broader: Context
scope note: These concepts are useful in closed-world interpretations, for example in forms where a field must have a value to explicitly denote it is not applicable or the information is not available yet.
created: 2023-08-24
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: context-classes

Effectiveness Determination Procedures
type: Concept
type: Class
type: Organisational Measure
definition: Procedures intended to determine effectiveness of other measures
broader: Assessment
source: (ENISA 5G Cybersecurity Standards,https://www.enisa.europa.eu/publications/5g-cybersecurity-standards)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Customer Care
type: Concept
type: Class
type: Purpose
definition: Customer Care refers to purposes associated with purposes for providing assistance, resolving issues, ensuring satisfaction, etc. in relation to services provided
broader: Customer Management
related: svpu:Feedback
created: 2019-04-05
term status: accepted
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
in scheme: purposes-classes

Audit Rejected
type: Concept
type: Class
type: Audit Status
definition: State of not being approved or being rejected through the audit
broader: Audit Status
created: 2022-05-18
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

Review Impact Assessment
type: Concept
type: Class
type: Organisational Measure
definition: Procedures to review impact assessments in terms of continued validity, adequacy for intended purposes, and conformance of processes with findings
broader: Review Procedure
broader: Impact Assessment
created: 2022-10-22
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog
in scheme: organisational-measures-classes

Data Processor
type: Concept
type: Class
definition: A ‘processor’ means a natural or legal person, public authority, agency or other body which processes data on behalf of the controller.
subclass of: Recipient
broader: Recipient
source: (GDPR Art.4-8,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_8/oj)
created: 2019-06-04
term status: accepted
contributor: Harshvardhan J. Pandit
example: E0011
in scheme: entities-legalrole-classes

Combat Climate Change
type: Concept
type: Class
type: Purpose
definition: Purposes associated with combating the causes and consequences of climate change, including reducing gas emissions and fighting emergencies such as floods or wildfires
broader: Public Benefit
source: DGA 2.16
term status: accepted
contributor: Beatriz Esteves, Harshvardhan J. Pandit
in scheme: purposes-classes

Sensitivity Level
type: Concept
type: Class
definition: Sensitivity' reflects the risk of impact if not secured or utilised with appropriate measures and controls e.g. for sensitive data
subclass of: Severity
broader: Severity
scope note: ISO/IEC TS 38505-3:2021 defines 'data sensitivity' as the potential harm of unauthorised disclosure. DPV's use of the concept goes beyond disclosure as it refers to the level of safeguards or controls the data requires as a reflection of its 'sensitive' nature. To indicate quantified levels of sensitivity, e.g. "high sensitivity", instances of severity can be directly used or specialised
created: 2023-08-24
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: risk-classes

DataSubject Uninformed
type: Concept
type: Class
type: Entity Informed Status
definition: Status indicating DataSubject is uninformed i.e. has not been informed about the specified context
broader: Entity Uninformed
created: 2024-05-10
term status: accepted
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
in scheme: status-classes

Data Breach Impact Assessment (DBIA)
type: Concept
type: Class
type: Organisational Measure
definition: Impact Assessment concerning the consequences and impacts of a data breach
broader: Rights Impact Assessment
scope note: Data Breach assessments can require additional non-security related assessments such as GDPR Art.34 Rights Impact Assessment
created: 2024-04-15
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: risk-classes

SensitiveNonPersonalData
type: Concept
type: Class
definition: Non-personal data deemed sensitive
subclass of: SensitiveData
broader: SensitiveData
source: DGA 30(a)
term status: accepted
in scheme: personal-data-classes

WebBrowser Security
type: Concept
type: Class
type: Technical Measure
definition: Security implemented at or over web browsers
broader: Security Method
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Mentally Vulnerable Data Subject
type: Concept
type: Class
type: Data Subject
definition: Data subjects that are considered mentally vulnerable
broader: Vulnerable Data Subject
created: 2022-06-15
term status: accepted
contributor: Georg P. Krog
in scheme: entities-datasubject-classes

Export
type: Concept
type: Class
type: Processing
definition: to provide a copy of data from one system to another
broader: Disclose
source: DGA 2.20
created: 2024-04-14
term status: accepted
contributor: Beatriz Esteves
in scheme: processing-classes

Security Incident Notification
type: Concept
type: Class
type: Organisational Measure
definition: Notification of information about security incident(s)
broader: Notification
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Transfer
type: Concept
type: Class
type: Processing
definition: to move data from one place to another
broader: Processing
related: svpr:Transfer
source: (SPECIAL Project,https://specialprivacy.ercim.eu/vocabs/processing)
created: 2019-05-07
term status: accepted
example: E0020
in scheme: processing-classes

Enter Into Contract
type: Concept
type: Class
type: Legal Basis
definition: Processing necessary to enter into contract
broader: Contract
created: 2021-04-07
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan
in scheme: legal-basis-classes

Singular Data Volume
type: Concept
type: Class
type: Data Volume
definition: Data volume that is considered singular i.e. a specific instance or single item
broader: Data Volume
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-scale-classes

has consequence on
type: Property
type: Concept
definition: Indicates the thing (e.g. plan, process, or entity) affected by a consequence
domain includes: Consequence
created: 2022-11-24
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog
in scheme: risk-properties

Customer Relationship Management
type: Concept
type: Class
type: Purpose
definition: Customer Relationship Management refers to purposes associated with managing and analysing interactions with past, current, and potential customers
broader: Customer Management
created: 2021-09-08
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
in scheme: purposes-classes

Certification
type: Concept
type: Class
type: Organisational Measure
definition: Certification mechanisms, seals, and marks for the purpose of demonstrating compliance
broader: Certification and Seal
created: 2019-04-05
term status: accepted
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
in scheme: organisational-measures-classes

Notification Not Needed
type: Concept
type: Class
type: Notification Status
definition: Status indicating notification(s) are not needed
broader: Notification Status
created: 2024-05-19
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

Safeguard for Data Transfer
type: Concept
type: Class
type: Organisational Measure
definition: Represents a safeguard used for data transfer. Can include technical or organisational measures.
broader: Safeguard
created: 2021-09-22
term status: accepted
contributor: David Hickey, Paul Ryan, Georg P. Krog, Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Operating System Security
type: Concept
type: Class
type: Technical Measure
definition: Security implemented at or through operating systems
broader: Security Method
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Security Procedure
type: Concept
type: Class
type: Organisational Measure
definition: Procedures associated with assessing, implementing, and evaluating security
broader: Organisational Measure
created: 2022-08-24
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Data Protection Training
type: Concept
type: Class
type: Organisational Measure
definition: Training intended to increase knowledge regarding data protection
broader: Staff Training
source: (ENISA 5G Cybersecurity Standards,https://www.enisa.europa.eu/publications/5g-cybersecurity-standards)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

has impact assessment
type: Property
type: Concept
definition: Indicates an impact assessment associated with the specific context
range includes: Impact Assessment
sub property of: has assessment
broader: has assessment
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: risk-properties

Age Verification
type: Concept
type: Class
type: Purpose
definition: Purposes associated with verifying or authenticating age or age related information as a form of security
broader: Verification
scope note: Age Verification can include verification of the exact age, e.g. being 21 years old, a date, e.g. birth date is 01 January 1969, or a condition, e.g. age is over 21 years and the person is an adult. Specific dedicated resources should be used to further express information and processes associated with Age Verification, for example the Age Verification Vocabulary https://w3id.org/age/
created: 2024-02-14
term status: accepted
contributor: Beatriz Esteves, Arthit Suriyawongkul, Harshvardhan J. Pandit
in scheme: purposes-classes

Organise
type: Concept
type: Class
type: Processing
definition: to organize data for arranging or classifying
broader: Processing
source: (GDPR Art.4-2,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_2/oj)
created: 2019-05-07
term status: accepted
in scheme: processing-classes

Patient
type: Concept
type: Class
type: Data Subject
definition: Data subjects that receive medican attention, treatment, care, advice, or other health related services
broader: Data Subject
created: 2022-04-06
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Julian Flake, Paul Ryan, Beatriz Esteves
in scheme: entities-datasubject-classes

Right Exercise Record
type: Concept
type: Class
type: Organisational Measure
definition: Record of a Right being exercised
broader: Record
scope note: This concept represents a record of one or more right exercise activities, such as those associated with a single data subject or service or entity
created: 2022-11-02
term status: accepted
contributor: Harshvardhan J. Pandit, Beatriz Esteves, Georg P. Krog, Paul Ryan
in scheme: rights-classes

Third Party Security Procedures
type: Concept
type: Class
type: Organisational Measure
definition: Procedures related to security associated with Third Parties
broader: Security Procedure
source: (ENISA 5G Cybersecurity Standards,https://www.enisa.europa.eu/publications/5g-cybersecurity-standards)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Public Data Source
type: Concept
type: Class
type: Data Source
definition: A source of data that is publicly accessible or available
broader: Data Source
scope note: The term 'Public' is used here in a broad sense. Actual consideration of what is 'Public Data' can vary based on several contextual or jurisdictional factors such as definition of open, methods of access, permissions and licenses.
created: 2022-01-26
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves, Paul Ryan, Julian Flake
in scheme: processing-context-classes

Request Rejected
type: Concept
type: Class
type: Request Status
definition: State of a request being rejected towards non-fulfilment
broader: Request Status
created: 2022-11-30
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

Derive
type: Concept
type: Class
type: Processing
definition: to create new derivative data from the original data
broader: Obtain
related: svpr:Derive
scope note: Derive indicates data is present or obtainable from existing data. For data that is created without such existence, see Infer.
source: (SPECIAL Project,https://specialprivacy.ercim.eu/vocabs/processing)
created: 2019-05-07
term status: accepted
example: E0014
in scheme: processing-classes

Public Policy Making
type: Concept
type: Class
type: Purpose
definition: Purposes associated with public policy making, such as the development of new laws
broader: Public Benefit
source: DGA 2.16
term status: accepted
contributor: Beatriz Esteves, Harshvardhan J. Pandit
in scheme: purposes-classes

Disclose by Transmission
type: Concept
type: Class
type: Processing
definition: to disclose data by means of transmission
broader: Disclose
source: (GDPR Art.4-2,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_2/oj)
created: 2019-05-07
term status: accepted
in scheme: processing-classes

Right
type: Concept
type: Class
definition: The right(s) applicable, provided, or expected
scope note: A 'right' is a legal, social, or ethical principle of freedom or entitlement which dictate the norms regarding what is allowed or owed. Rights as a concept encompass a broad area of norms and entities, and are not specific to Individuals or Data Protection / Privacy. For individual specific rights, see dpv:DataSubjectRight
created: 2020-11-18
term status: accepted
contributor: Harshvardhan J. Pandit, Beatriz Esteves, Georg P. Krog
in scheme: rights-classes

Cloud Location
type: Concept
type: Class
type: Location
definition: Location that is in the 'cloud' i.e. a logical location operated over the internet
broader: Remote Location
created: 2022-06-15
modified: 2020-10-05
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: jurisdiction-classes

Design Standard
type: Concept
type: Class
type: Organisational Measure
definition: A set of rules or guidelines outlining criterias for design
broader: GuidelinesPrinciple
created: 2019-04-05
term status: accepted
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
in scheme: organisational-measures-classes

Consent
type: Concept
type: Class
type: Legal Basis
definition: Consent of the Data Subject for specified processing
broader: Legal Basis
created: 2021-04-07
term status: accepted
contributor: Harshvardhan J. Pandit
example: E0019
example: E0022
example: E0023
example: E0024
example: E0025
example: E0026
in scheme: legal-basis-classes

Uninformed Consent
type: Concept
type: Class
type: Legal Basis
definition: Consent that is uninformed i.e. without requirement to provide sufficient information to make a consenting decision
broader: Consent
created: 2022-06-21
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
in scheme: consent-types-classes

Primer for Data Privacy Vocabulary
has role: guidance
type: ResourceDescriptor
dct:format: https://www.iana.org/assignments/media-types/text/html
conforms to: https://www.w3.org/TR/html/

has informed status
type: Property
type: Concept
definition: Indicates whether an entity was informed or uninformed
range includes: Entity Informed Status
sub property of: has status
broader: has status
created: 2024-05-10
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-properties

Large Scale Processing
type: Concept
type: Class
type: Processing Scale
definition: Processing that takes place at large scales (as specified by some criteria)
broader: Processing Scale
scope note: The exact definition of what constitutes "large scale" depends on use of jurisdictional, domain-specific, or other forms of externally defined criterias. Where possible, this should be reflected by extending this term with the appropriate context.
source: (GDPR Art.4-2,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_2/oj)
created: 2020-11-04
modified: 2022-09-07
term status: accepted
contributor: Harshvardhan J. Pandit, Piero Bonatti
in scheme: processing-scale-classes

Tourist
type: Concept
type: Class
type: Data Subject
definition: Data subjects that are tourists i.e. not citizens and not immigrants
broader: Data Subject
created: 2022-04-06
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Julian Flake, Paul Ryan, Beatriz Esteves
in scheme: entities-datasubject-classes

Consequence
type: Concept
type: Class
definition: The consequence(s) possible or arising from specified context
created: 2022-01-26
term status: accepted
contributor: Harshvardhan J. Pandit
example: E0029
in scheme: risk-classes

Collected Personal Data
type: Concept
type: Class
definition: Personal Data that has been collected from another source such as the Data Subject
subclass of: Personal Data
subclass of: Collected Data
broader: Personal Data
broader: Collected Data
scope note: To indicate the source of data, use the DataSource concept with the hasDataSource relation
created: 2022-03-30
modified: 2023-12-10
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: personal-data-classes

Organisational Unit
type: Concept
type: Class
definition: Entity within an organisation that does not constitute as a separate legal entity
subclass of: Entity
broader: Entity
created: 2022-03-23
term status: accepted
contributor: Harshvardhan J. Pandit, Paul Ryan
in scheme: entities-organisation-classes

Regional Authority
type: Concept
type: Class
definition: An authority tasked with overseeing legal compliance for a region
subclass of: Authority
broader: Authority
source: (ADMS controlled vocabulary,http://purl.org/adms)
created: 2022-02-02
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: entities-authority-classes

Consequence as Side-Effect
type: Concept
type: Class
definition: The consequence(s) possible or arising as a side-effect of specified context
subclass of: Consequence
broader: Consequence
created: 2022-03-30
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: risk-classes

Sell Insights from Data
type: Concept
type: Class
type: Purpose
definition: Purposes associated with selling or sharing insights obtained from analysis of data
broader: Sell Products
scope note: Sell here means exchange, submit, or provide in return for direct or indirect compensation. Was subclass of commercial interest, changed to reflect selling something
created: 2019-04-05
term status: accepted
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
in scheme: purposes-classes

Optional
type: Concept
type: Class
type: Necessity
definition: Indication of 'optional' or 'voluntary'
broader: Necessity
created: 2022-02-14
term status: accepted
contributor: Harshvardhan J. Pandit, Paul Ryan, Georg P. Krog, Julian Flake, Beatriz Esteves
in scheme: context-classes

Consultation with Authority
type: Concept
type: Class
type: Organisational Measure
definition: Consultation with an authority or authoritative entity
broader: Consultation
created: 2020-11-04
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan
in scheme: organisational-measures-classes

Repair Impairments
type: Concept
type: Class
type: Purpose
definition: Purposes associated with identifying, rectifying, or otherwise undertaking activities intended to fix or repair impairments to existing functionalities
broader: Service Provision
scope note: An example of identifying and rectifying impairments is the process of finding and fixing errors in products, commonly referred to as debugging
created: 2022-08-24
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: purposes-classes

Storage Condition
type: Concept
type: Class
definition: Conditions required or followed regarding storage of data
subclass of: Processing Condition
broader: Processing Condition
created: 2019-04-05
term status: accepted
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
example: E0011
in scheme: processing-context-classes

Rule
type: Concept
type: Class
definition: A rule describing a process or control that directs or determines if and how an activity should be conducted
created: 2022-10-19
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Beatriz Esteves, Paul Ryan
in scheme: rules-classes

Vulnerable Data Subject
type: Concept
type: Class
type: Data Subject
definition: Data Subjects which should be considered 'vulnerable' and therefore would require additional measures and safeguards
broader: Data Subject
scope note: This concept denotes a Data Subject or a group are vulnerable, but not what vulnerability they possess or its context. This information can be provided additionally as comments, or as separate concepts and relations. Proposals for this are welcome.
created: 2020-11-04
term status: accepted
contributor: Georg P. Krog, Paul Ryan, Harshvardhan J. Pandit
in scheme: entities-datasubject-classes

Differential Privacy
type: Concept
type: Class
type: Technical Measure
definition: Utilisation of differential privacy where information is shared as patterns or groups to withhold individual elements
broader: Cryptographic Methods
source: (ENISA Data Protection Engineering,https://www.enisa.europa.eu/publications/data-protection-engineering)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

has indication method
type: Property
type: Concept
definition: Specifies the method by which an entity has indicated the specific context
created: 2022-06-21
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
in scheme: legal-basis-properties

Legal Basis
type: Concept
type: Class
definition: Legal basis used to justify processing of data or use of technology in accordance with a law
scope note: Legal basis (plural: legal bases) are defined by legislations and regulations, whose applicability is usually restricted to specific jurisdictions which can be represented using dpv:hasJurisdiction or dpv:hasLaw. Legal basis can be used without such declarations, e.g. 'Consent', however their interpretation will require association with a law, e.g. 'EU GDPR'.
created: 2019-04-05
modified: 2020-11-04
term status: accepted
example: E0022
example: E0023
in scheme: legal-basis-classes

Logging Policy
type: Concept
type: Class
type: Organisational Measure
definition: Policy for logging of information
broader: Policy
source: (ENISA 5G Cybersecurity Standards,https://www.enisa.europa.eu/publications/5g-cybersecurity-standards)
created: 2022-08-17
modified: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Joint Data Controllers
type: Concept
type: Class
definition: A group of Data Controllers that jointly determine the purposes and means of processing
subclass of: Data Controller
broader: Data Controller
scope note: While Joint Data Controllers operate together, they are made up of individually distinct legal entities. To indicate the membership of this group, hasDataController should be used to denote each Data Controller. The concept of Joint Data Controllers also allows specifying a single group as the 'Controller' and to specify role and responsibilities within that group for each entity using DPV's concepts (e.g. isImplementedByEntity)
created: 2022-02-02
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit
in scheme: entities-legalrole-classes

Human Involvement for Input
type: Concept
type: Class
type: Human Involvement
definition: Human involvement for the purposes of providing inputs to the specified context
broader: Human Involvement
scope note: Inputs can be in the form of data or other resources.
created: 2022-09-07
modified: 2023-12-10
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-context-classes

Data Quality Assessment
type: Concept
type: Class
type: Organisational Measure
definition: Measures associated with assessment of data quality
broader: Data Quality Management
broader: Assessment
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Data Altruism
type: Concept
type: Class
type: Purpose
definition: Purposes associated with the voluntary sharing of data for the general interest of the public, such as healthcare or combating climate change
broader: Public Benefit
scope note: Data Altruism as a purpose should be combined with other purposes to indicate their altruistic interpretation or application. E.g. improving healthcare and data altruism in combination.
source: DGA 2.16
term status: accepted
contributor: Beatriz Esteves, Harshvardhan J. Pandit
in scheme: purposes-classes

Subscriber
type: Concept
type: Class
type: Data Subject
definition: Data subjects that subscribe to service(s)
broader: Data Subject
scope note: note: subscriber can be customer or consumer
created: 2022-04-06
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Julian Flake, Paul Ryan, Beatriz Esteves
in scheme: entities-datasubject-classes

Authorisation Protocols
type: Concept
type: Class
type: Technical Measure
definition: Protocols involving authorisation of roles or profiles to determine permission, rights, or privileges
broader: Technical Measure
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Conditional Automation
type: Concept
type: Class
type: Automation Level
definition: Level of automation corresponding to Level 3 in ISO/IEC 22989:2022 where the automation is sufficient to perform most tasks of the system with the human present to take over where necessary
broader: Automation Level
scope note: Human Involvement is implied here, e.g. for intervention, input, decisions
source: (ISO/IEC 22989:2022 Artificial intelligence concepts and terminology,https://www.iso.org/standard/74296.html)
created: 2023-12-10
modified: 2024-04-20
term status: modified
contributor: Harshvardhan J. Pandit, Delaram Golpayegani
in scheme: processing-context-classes

Nearly Global Scale
type: Concept
type: Class
type: Geographic Coverage
definition: Geographic coverage nearly spanning the entire globe
broader: Geographic Coverage
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-scale-classes

Counterterrorism
type: Concept
type: Class
type: Purpose
definition: Purposes associated with activities that detect, prevent, mitigate, or otherwise perform activities to combat or eliminate terrorism (also referred to as anti-terrorism)
broader: Public Benefit
created: 2022-04-20
modified: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: purposes-classes

Importance
type: Concept
type: Class
definition: An indication of 'importance' within a context
subclass of: Context
broader: Context
scope note: Importance can be used to express importance, desirability, relevance, or significance as a context.
created: 2022-02-09
term status: accepted
contributor: Harshvardhan J. Pandit, Paul Ryan, Georg P. Krog, Julian Flake, Beatriz Esteves
in scheme: context-classes

Safeguard
type: Concept
type: Class
type: Organisational Measure
definition: A safeguard is a precautionary measure for the protection against or mitigation of negative effects
broader: Organisational Measure
scope note: This concept is relevant given the requirement to assert safeguards in cross-border data transfers
created: 2021-09-22
term status: accepted
contributor: David Hickey, Paul Ryan, Georg P. Krog, Harshvardhan J. Pandit
in scheme: organisational-measures-classes

Sporadic Scale Of Data Subjects
type: Concept
type: Class
type: Data Subject Scale
definition: Scale of data subjects considered sporadic or sparse within the context
broader: Data Subject Scale
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-scale-classes

Required
type: Concept
type: Class
type: Necessity
definition: Indication of 'required' or 'necessary'
broader: Necessity
created: 2022-02-13
term status: accepted
contributor: Harshvardhan J. Pandit, Paul Ryan, Georg P. Krog, Julian Flake, Beatriz Esteves
in scheme: context-classes

Delete
type: Concept
type: Class
type: Processing
definition: to remove data in a logical fashion i.e. with the possibility of retrieval
broader: Remove
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-classes

has responsible entity
type: Property
type: Concept
definition: Specifies the indicated entity is responsible within some context
range includes: Entity
sub property of: has entity
broader: has entity
created: 2022-03-02
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: entities-properties

has legal basis
type: Property
type: Concept
definition: Indicates use or applicability of a Legal Basis
range includes: Legal Basis
created: 2019-04-04
modified: 2020-11-04
term status: accepted
contributor: Axel Polleres, Javier Fernández
in scheme: legal-basis-properties

Legitimate Interest Assessment
type: Concept
type: Class
type: Organisational Measure
definition: Indicates an assessment regarding the use of legitimate interest as a lawful basis by the data controller
broader: Assessment
created: 2021-09-08
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan
in scheme: organisational-measures-classes

Modify
type: Concept
type: Class
type: Processing
definition: to modify or change data
broader: Alter
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog
in scheme: processing-classes

has right
type: Property
type: Concept
definition: Indicates use or applicability of Right
range includes: Right
created: 2020-11-18
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: rights-properties

Acquire
type: Concept
type: Class
type: Processing
definition: to come into possession or control of the data
broader: Obtain
source: (GDPR Art.4-2,https://eur-lex.europa.eu/eli/reg/2016/679/art_4/par_2/oj)
created: 2019-05-07
term status: accepted
in scheme: processing-classes

Asymmetric Cryptography
type: Concept
type: Class
type: Technical Measure
definition: Use of public-key cryptography or asymmetric cryptography involving a public and private pair of keys
broader: Cryptographic Methods
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

has applicability
type: Property
type: Concept
definition: Indicates situations where the context is not applicable, information is not available, or this is unknown. An appropriate instance of dpv:Applicability should be used with this relation to express the situation
range includes: Applicability
created: 2023-08-24
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: context-properties

SensitiveData
type: Concept
type: Class
definition: Data deemed sensitive
subclass of: Data
broader: Data
term status: accepted
in scheme: personal-data-classes

Conformance Status
type: Concept
type: Class
definition: Status associated with conformance to a standard, guideline, code, or recommendation
subclass of: Status
broader: Status
created: 2022-10-22
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

Audit Status
type: Concept
type: Class
definition: Status associated with Auditing or Investigation
subclass of: Status
broader: Status
created: 2022-05-18
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

Hash-based Message Authentication Code (HMAC)
type: Concept
type: Class
type: Technical Measure
definition: Use of HMAC where message authentication code (MAC) utilise a cryptographic hash function and a secret cryptographic key
broader: Cryptographic Authentication
source: (ENISA 5G Cybersecurity Standards,https://www.enisa.europa.eu/publications/5g-cybersecurity-standards)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

has active entity
type: Property
type: Concept
definition: indicates the entity is actively involved in specified context
range includes: Entity Active Involvement
created: 2024-05-11
term status: accepted
in scheme: processing-context-properties

Controller Informed
type: Concept
type: Class
type: Entity Informed Status
definition: Status indicating Controller has been informed about the specified context
broader: Entity Informed
created: 2024-05-10
term status: accepted
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
in scheme: status-classes

Compliance Status
type: Concept
type: Class
definition: Status associated with Compliance with some norms, objectives, or requirements
subclass of: Status
broader: Status
created: 2022-05-18
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

Consumer
type: Concept
type: Class
type: Data Subject
definition: Data subjects that consume goods or services for direct use
broader: Data Subject
created: 2022-04-06
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Julian Flake, Paul Ryan, Beatriz Esteves
in scheme: entities-datasubject-classes

Audit Requested
type: Concept
type: Class
type: Audit Status
definition: State of an audit being requested whose outcome is not yet known
broader: Audit Status
created: 2022-05-18
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

Derived Data
type: Concept
type: Class
definition: Data that has been obtained through derivations of other data
subclass of: Data
broader: Data
created: 2023-12-10
term status: accepted
in scheme: personal-data-classes

Data Processor Contract
type: Concept
type: Class
type: Legal Basis
definition: Creation, completion, fulfilment, or performance of a contract, with the Data Controller and Data Processor as parties, and involving specified processing
broader: Contract
created: 2023-12-10
term status: accepted
in scheme: legal-basis-classes

Examples for Data Privacy Vocabulary
type: ResourceDescriptor
has role: guidance
dct:format: https://www.iana.org/assignments/media-types/text/html
conforms to: https://www.w3.org/TR/html/

has residual risk
type: Property
type: Concept
definition: Indicates the associated risk is the remaining or residual risk from applying mitigation measures or treatments to this risk
domain includes: Risk
range includes: Risk
created: 2022-07-20
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog, Paul Ryan, Julian Flake
in scheme: risk-properties

ThirdParty as Data Source
type: Concept
type: Class
type: Data Source
definition: Data Sourced from a Third Party, e.g. when data is collected from an entity that is neither the Controller nor the Data Subject
broader: Data Source
created: 2023-10-12
term status: accepted
in scheme: processing-context-classes

Fixed Location
type: Concept
type: Class
type: Location Fixture
definition: Location that is fixed i.e. known to occur at a specific place
broader: Location Fixture
created: 2022-06-15
modified: 2020-10-05
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: jurisdiction-classes

Process
type: Concept
type: Class
definition: An action, activity, or method
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: process-classes

Right Exercise Activity
type: Concept
type: Class
type: Organisational Measure
definition: An activity representing an exercising of an active right
broader: Organisational Measure
scope note: There may be multiple activities associated with exercising and fulfilling rights. See the RightExerciseRecord concept for record-keeping of such activities in a cohesive manner.
created: 2022-11-02
term status: accepted
contributor: Harshvardhan J. Pandit, Beatriz Esteves, Georg P. Krog, Paul Ryan
in scheme: rights-classes

Compliance Assessment
type: Concept
type: Class
type: Organisational Measure
definition: Assessment regarding compliance (e.g. internal policy, regulations)
broader: Assessment
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog
in scheme: organisational-measures-classes

City
type: Concept
type: Class
definition: A region consisting of urban population and commerce
subclass of: Region
broader: Region
created: 2022-10-22
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: jurisdiction-classes

ConfidentialData
type: Concept
type: Class
definition: Data deemed confidential
subclass of: Data
broader: Data
source: DGA 5.10
term status: accepted
in scheme: personal-data-classes

dct:valid
type: Property
type: Concept
scope note: Specfiying the temporal validity of an activity associated with Right Exercise. For example, limits on duration for providing or accessing provided information
in scheme: rights-properties

Full Automation
type: Concept
type: Class
type: Automation Level
definition: Level of automation corresponding to Level 5 in ISO/IEC 22989:2022 where the automation in system is capable of performing all its tasks regardless of the conditions without human involvement
broader: Automation Level
scope note: Though Fully Automated such operations can still be associated with dpv:HumanInvolved e.g. for inputs, oversight or verification
source: (ISO/IEC 22989:2022 Artificial intelligence concepts and terminology,https://www.iso.org/standard/74296.html)
created: 2023-12-10
modified: 2024-04-20
term status: modified
contributor: Harshvardhan J. Pandit, Delaram Golpayegani
in scheme: processing-context-classes

Storage Restoration
type: Concept
type: Class
definition: Regularity and temporal span of data restoration/backup mechanisms that guarantee that data is preserved
subclass of: Storage Condition
broader: Storage Condition
created: 2019-04-05
term status: accepted
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
in scheme: processing-context-classes

Sporadic Frequency
type: Concept
type: Class
type: Frequency
definition: Frequency where occurences are sporadic or infrequent or sparse
broader: Frequency
created: 2022-06-15
modified: 2020-10-05
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: context-classes

Maintain Fraud Database
type: Concept
type: Class
type: Purpose
definition: Purposes associated with maintaining a database related to identifying and identified fraud risks and fraud incidents
broader: Fraud Prevention and Detection
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog
in scheme: purposes-classes

Digital Rights Management
type: Concept
type: Class
type: Technical Measure
definition: Management of access, use, and other operations associated with digital content
broader: Technical Measure
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Homomorphic Encryption
type: Concept
type: Class
type: Technical Measure
definition: Use of Homomorphic encryption that permits computations on encrypted data without decrypting it
broader: Cryptographic Methods
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Impact Assessment
type: Concept
type: Class
type: Organisational Measure
definition: Calculating or determining the likelihood of impact of an existing or proposed process, which can involve risks or detriments.
broader: Risk Assessment
created: 2020-11-04
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan
in scheme: risk-classes

Access
type: Concept
type: Class
type: Processing
definition: to access data
broader: Use
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog
in scheme: processing-classes

Format
type: Concept
type: Class
type: Processing
definition: to arrange or structure data in a specific form
broader: Structure
source: DGA 12.d
created: 2024-04-14
term status: accepted
contributor: Beatriz Esteves
in scheme: processing-classes

has consent status
type: Property
type: Concept
definition: Specifies the state or status of consent
range includes: Consent Status
created: 2022-06-21
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
in scheme: consent-properties

Global Scale
type: Concept
type: Class
type: Geographic Coverage
definition: Geographic coverage spanning the entire globe
broader: Geographic Coverage
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-scale-classes

Consent Record
type: Concept
type: Class
type: Organisational Measure
definition: A Record of Consent or Consent related activities
broader: Data Processing Record
created: 2022-06-22
term status: accepted
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
example: E0019
in scheme: organisational-measures-classes

Physical Secure Storage
type: Concept
type: Class
type: Physical Measure
definition: Physical protection for storage of information or equipment e.g. secure storage for files
broader: Physical Measure
source: NIST SP 800-171
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: physical-measures-classes

foaf:page
type: Property
type: Concept
scope note: Indicates a web page or document providing information or functionality associated with a Right Exercise
domain includes: Right Exercise Activity
in scheme: rights-properties

Conformance Assessment
type: Concept
type: Class
type: Organisational Measure
definition: Assessment regarding conformance with standards or norms or guidelines or similar instruments
broader: Assessment
created: 2024-04-14
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog
in scheme: organisational-measures-classes

Lawfulness Unknown
type: Concept
type: Class
type: Lawfulness
definition: State of the lawfulness not being known
broader: Lawfulness
created: 2022-10-19
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: status-classes

has necessity
type: Property
type: Concept
definition: Indicates the necessity for specified context or criteria
range includes: Necessity
created: 2024-04-13
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: context-properties

Sporadic Data Volume
type: Concept
type: Class
type: Data Volume
definition: Data volume that is considered sporadic or sparse within the context
broader: Data Volume
created: 2022-06-15
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: processing-scale-classes

Non-Disclosure Agreement (NDA)
type: Concept
type: Class
type: Legal Measure
definition: Non-disclosure Agreements e.g. preserving confidentiality of information
broader: Legal Agreement
created: 2019-04-05
term status: accepted
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
in scheme: legal-measures-classes

has personal data handling
type: Property
type: Concept
definition: Indicates association with Personal Data Handling
range includes: Personal Data Handling
created: 2022-01-19
term status: accepted
contributor: Harshvardhan J. Pandit, Georg P. Krog
in scheme: process-properties

Data Privacy Vocabulary (DPV) - JSON-LD serialiation
type: ResourceDescriptor
has role: vocabulary
has artifact: dpv.jsonld
dct:format: ld+json
conforms to: json-ld11

Biometric Authentication
type: Concept
type: Class
type: Technical Measure
definition: Use of biometric data for authentication
broader: Authentication Protocols
source: (ENISA Reference Incident Classification Taxonomy 2018,https://www.enisa.europa.eu/publications/reference-incident-classification-taxonomy/)
created: 2022-08-17
term status: accepted
contributor: Harshvardhan J. Pandit
in scheme: technical-measures-classes

Data Privacy Vocabulary (DPV) - RDF/XML serialiation
type: ResourceDescriptor
has role: vocabulary
has artifact: dpv.rdf
dct:format: rdf+xml
conforms to: 22-rdf-syntax-ns#