Review Impact Assessment
Procedures to review impact assessments in terms of continued validity, adequacy for intended purposes, and conformance of processes with findings
accepted
Staff Training
Practices and policies regarding training of staff members
Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
Representative
A representative of a legal entity
Georg P. Krog, Paul Ryan, Harshvardhan J. Pandit, Beatriz Esteves
Secret Sharing Schemes
Use of secret sharing schemes where the secret can only be reconstructed through combination of sufficient number of individuals
has applicable law
Indicates applicability of a Law
has representative
Specifies representative of the legal entity
Harshvardhan J. Pandit, Georg P. Krog, Paul Ryan, Beatriz Esteves
Data Processor Contract
Creation, completion, fulfilment, or performance of a contract, with the Data Controller and Data Processor as parties, and involving specified processing of data or technologies
Sector
Sector describes the area of application or domain that indicates or restricts scope for interpretation and application of purpose e.g. Agriculture, Banking
There are various sector codes used commonly to indicate the domain of an organisation or business. Examples include NACE (EU), ISIC (UN), SIC and NAICS (USA).
Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
Infer
to infer data from existing data
Infer indicates data that is derived without it being present or obtainable from existing data. For data that is presented, and is 'extracted' or 'obtained' from existing data, see Derive.
Full Automation
Level of automation corresponding to Level 5 in ISO/IEC 22989:2022 where the automation in system is capable of performing all its tasks regardless of the conditions without human involvement
Though Fully Automated such operations can still be associated with dpv:HumanInvolved e.g. for inputs, oversight or verification
Harshvardhan J. Pandit, Delaram Golpayegani
Encryption in Transfer
Encryption of data in transit e.g. when being transferred from one location to another, including sharing
has authority
Indicates applicability of authority for a jurisdiction
Safeguard for Data Transfer
Represents a safeguard used for data transfer. Can include technical or organisational measures.
David Hickey, Paul Ryan, Georg P. Krog, Harshvardhan J. Pandit
Service Personalisation
Purposes associated with providing personalisation within services or product or activities
Service Provider
The entity that provides a service
Misuse, Prevention and Detection
Prevention and Detection of Misuse or Abuse of services
DGA 22.1(a)
Disclose
to make data known
Non-Profit Organisation
An organisation that does not aim to achieve profit as its primary goal
Cannot Challenge Process Input
Involvement where entity cannot challenge input of specified context
Harshvardhan J. Pandit, Delaram Golpayegani, Steve Hickman
Entity Active Involvement
Involvement where entity is 'actively' involved
Process
An action, activity, or method
Non-Personal Data
Data that is not Personal Data
The term NonPersonalData is provided to distinguish between PersonalData and other data, e.g. for indicating which data is regulated by privacy laws. To specify personal data that has been anonymised, the concept AnonymisedData should be used as the anonymisation process has a risk of not being fully effective and such anonymous data may be found to be personal data depending on circumstances.
Access
to access data
Customer
Data subjects that purchase goods or services
note: for B2B relations where customers are organisations, this concept only applies for data subjects
Harshvardhan J. Pandit, Georg P. Krog, Julian Flake, Paul Ryan, Beatriz Esteves
Standards Conformance
Purposes associated with activities undertaken to ensure or achieve conformance with standards
DGA 12.d
Applicability
Concept provided to represent indication of cases where the information or context is not applicable (N/A) or not available or this is not known or determined yet. If the information is applicable and available, this concept should not be used.
These concepts are useful in closed-world interpretations, for example in forms where a field must have a value to explicitly denote it is not applicable or the information is not available yet.
Systematic Monitoring
Processing that involves systematic monitoring of individuals
Notification Not Needed
Status indicating notification(s) are not needed
Active Right
The right(s) applicable, provided, or expected that need to be (actively) exercised
Active rights require the entity to expressly exercise them. For example, a Data Subject exercising their right to withdraw their consent.
Harshvardhan J. Pandit, Beatriz Esteves, Georg P. Krog, Paul Ryan
Not Applicable
Concept indicating the information or context is not applicable
This relates to a 'Stop' state as distinct from a 'Halt' state. It makes no comments on whether the Activity can be resumed or continued towards completion.
Monitoring Policy
Policy for monitoring (e.g. progress, performance)
has data subject scale
Indicates the scale of data subjects
Consent Request Deferred
State where a request for consent has been deferred without a decision
An example of this state is when the individual closes or dismisses a notice without making a decision. This state is intended for making the distinction between a notice being provided (as a consent request) and the individual interacting with the notice without making a decision - where the 'ignoring of a notice' is taken as consent being neither given nor refused
Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
Assessment
The document, plan, or process for assessment or determination towards a purpose e.g. assessment of legality or impact assessments
Consent Unknown
State where information about consent is not available or is unknown
Consent states can be unknown, for example, when information is not available, or cannot be trusted, or is known to be inaccurate
Asset Management Procedures
Procedures related to management of assets
Data Controller Contract
Creation, completion, fulfilment, or performance of a contract, with Data Controllers as parties being Joint Data Controllers, and involving specified processing of data or technologies
Credential Management
Management of credentials and their use in authorisations
has entity control
Indicates a control or measure provided for an entity to perform the specified action
is implemented using technology
Indicates implementation details such as technologies or processes
The term 'technology' is inclusive of technologies, processes, and methods.
Beatriz Esteves, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
Activity Proposed
State of an activity being proposed without any concrete plans for implementation
Cross-Border Transfer
to move data from one jurisdiction (border) to another
Entity Informed
Status indicating entity has been informed about specified context
Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
Fixed Location
Location that is fixed i.e. known to occur at a specific place
Data Processing Agreement
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of data
For specific role-based data processing agreements, see concepts for Processors and JointDataController agreements.
Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves, Paul Ryan, Julian Flake
Controller-Processor Agreement
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of data between a Data Controller and a Data Processor
Temporal Duration
Duration that has a fixed temporal duration e.g. 6 months
Research and Development
Purposes associated with conducting research and development for new methods, products, or services
has justification
Indicates a justification for specified concept or context
Also used for specifying a justification for non-fulfilment of Right Exercise
Law
A law is a set of rules created by government or authorities
Support Contract Negotiation
Supporting entities, including individuals, with negotiating a contract and its terms and conditions
DGA 2.15
Service Optimisation
Purposes associated with optimisation of services or activities
Subclass of ServiceProvision since optimisation is usually considered part of providing services
has automation level
Indicates the level of automation involved in implementation of the specified context
Account Management
Account Management refers to purposes associated with account management, such as to create, provide, maintain, and manage accounts
Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
Explicitly Expressed Consent
Consent that is expressed through an explicit action solely conveying a consenting decision
Explicitly expressed consent is a more specific form of Expressed consent where the action taken must 'explicitly' relate to only the consent decision. Expressed consent where the consenting is part of other matters therefore cannot satisfy the requirements of explicitly expressed consent. An example of explicit action expressing the consenting decision is a button on a web form where the form only relates to consent, or it is accompanied with suitable text that reiterates what the consenting decision is about
Notification Completed
Status indicating notification(s) are completed
has impact
Indicates impact(s) possible or arising as consequences from specified concept
Harshvardhan J. Pandit, Julian Flake, Georg P. Krog, Fajar Ekaputra, Beatriz Esteves
Code of Conduct
A set of rules or procedures outlining the norms and practices for conducting activities
Legal Compliance Assessment
Assessment regarding legal compliance
Data Volume
Volume or Scale of Data
Harshvardhan J. Pandit, Georg P. Krog, Rana Saniei
Obligation
A rule describing an obligation for performing an activity
Harshvardhan J. Pandit, Georg P. Krog, Beatriz Esteves, Paul Ryan
Data Privacy Vocabulary (DPV) - JSON-LD serialiation
Cryptographic Methods
Use of cryptographic methods to perform tasks
Protection of National Security
Purposes associated with the protection of national security
DGA 1.5
has organisational measure
Indicates use or applicability of Organisational measure
Symmetric Cryptography
Use of cryptography where the same keys are utilised for encryption and decryption of information
Human Involvement for control
Human involvement for the purposes of exercising control over the specified operations in context
Control is a broad term that can be applied to various stages and operations. It maps to None, Assistive, and Partial automation models.
Physical Network Security
Physical protection for networks and networking related infrastructure e.g. by isolating networking equipments
NIST SP 800-17
Synthetic Data
Synthetic data refers to artificially created data such that it is intended to resemble real data (personal or non-personal), but does not refer to any specific identified or identifiable individual, or to the real measure of an observable parameter in the case of non-personal data
Safeguard
A safeguard is a precautionary measure for the protection against or mitigation of negative effects
This concept is relevant given the requirement to assert safeguards in cross-border data transfers
Medium Scale Processing
Processing that takes place at medium scales (as specified by some criteria)
Legitimate Interest of Third Party
Legitimate Interests of a Third Party in conducting specified activities
Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan
Security Knowledge Training
Training intended to increase knowledge regarding security
Cannot Challenge Process Output
Involvement where entity cannot challenge the output of specified context
Challenge refers to raising questions about validity, necessity, correctness, or other similar 'trustworthiness' attributes regarding the output of the process or plan or implementation (where output is distinct from the process itself)
Members and Partners Management
Purposes associated with maintaining a registry of shareholders, members, or partners for governance, administration, and management functions
Paul Ryan, Georg P. Krog, David Hickey, Harshvardhan J. Pandit
Cannot Object to Process
Involvement where entity cannot object to process of specified context
Cannot Reverse Process Input
Involvement where entity cannot reverse input of specified context
Reversion can be considered a form of correction in some instances. We welcome inputs to further explore and define this relation between correction and reversion concepts.
Notice
A notice is an artefact for providing information, choices, or controls
Notice refers to the information whereas Notification refers to the provision of that notice. In several cases, they are used interchangeably - for example Privacy Notice as a measure or control refers to both the information as well as the act of making it available. For 'active' contexts where this distinction is important, e.g. data breach notifications, see Notification concept.
Paul Ryan, David Hickey, Georg P. Krog, Harshvardhan J. Pandit
has name
Specifies name of a legal entity
Statistically Confidential Data
Data protected through Statistical Confidentiality regulations and agreements
DGA 2(20)
Generated Personal Data
Personal Data that is generated or brought into existence without relation to existing data i.e. it is not derived or inferred from other data
Generated Data is used to indicate data that is produced and is not derived or inferred from other data
Wireless Security Protocols
Security implemented at or over wireless communication protocols
Withdrawing from Process
Involvement where entity can withdraw a previously given assent from specified context
Consequence of Failure
The consequence(s) possible or arising from failure of specified context
Required
Indication of 'required' or 'necessary'
Harshvardhan J. Pandit, Paul Ryan, Georg P. Krog, Julian Flake, Beatriz Esteves
Customer Management
Customer Management refers to purposes associated with managing activities related with past, current, and future customers
Public Interest
Activities are necessary or beneficial for interest of the public or society at large
Special Category Personal Data
Sensitive Personal Data whose use requires specific additional legal permission or justification
The term 'special category' is based on GDPR Art.9, but should not be considered as exclusive to it. DPV considers all Special Categories to also be Sensitive, but whose use is either prohibited or regulated and therefore requires additional legal basis for justification that is separate from that for general personal data.
Elmar Kiesling; Harshvardhan J. Pandit, Fajar Ekaputra
Sell Insights from Data
Purposes associated with selling or sharing insights obtained from analysis of data
Sell here means exchange, submit, or provide in return for direct or indirect compensation. Was subclass of commercial interest, changed to reflect selling something
Encryption in Use
Encryption of data when it is being used
has residual risk
Indicates the associated risk is the remaining or residual risk from applying mitigation measures or treatments to this risk
Harshvardhan J. Pandit, Georg P. Krog, Paul Ryan, Julian Flake
Data Subject Uninformed
Status indicating DataSubject is uninformed i.e. has not been informed about the specified context
Service Consumer
The entity that consumes or receives the service
Distributed System Security
Security implementations provided using or over a distributed system
Third Party Contract
Creation, completion, fulfilment, or performance of a contract, with the Data Controller and Third Party as parties, and involving specified processing of data or technologies
has processing
Indicates association with Processing
Axel Polleres, Javier Fernández, Harshvardhan J. Pandit, Mark Lizar, Bud Bruegger
Compliance Monitoring
Monitoring of compliance (e.g. internal policy, regulations)
Data Subject Rights Management
Methods to provide, implement, and exercise data subjects' rights
This concept only concerns the organisational management of rights, and does not represent the rights themselves - especially where such 'rights' are legally recognised or defined for the data subject or individual. The concept dpv:DataSubjectRight is provided to represent such legal rights.
DGA 12.m
Beatriz Esteves, Harshvardhan J. Pandit, Georg P. Krog
has location
Indicates information about location
Customer Relationship Management
Customer Relationship Management refers to purposes associated with managing and analysing interactions with past, current, and potential customers
has physical measure
Indicates use or applicability of Physical measure
Data Backup Protocols
Protocols or plans for backing up of data
has permission
Specifying applicability or inclusion of a permission rule within specified context
Hash Functions
Use of hash functions to map information or to retrieve a prior categorisation
Status
The status or state of something
Non-Disclosure Agreement (NDA)
Non-disclosure Agreements e.g. preserving confidentiality of information
Sell Products
Purposes associated with selling products or services
Sell here means exchange, submit, or provide in return for direct or indirect compensation.
Public Policy Making
Purposes associated with public policy making, such as the development of new laws
DGA 2.16
Consent Status
The state or status of 'consent' that provides information reflecting its operational status and validity for processing data
States are useful as information artefacts to implement them in controlling processing, and to reflect the process and flow of obtaining and maintaining consent. For example, a database table that stores consent states for specific processing and can be queried to obtain them in an efficient manner. States are also useful in investigations to determine the use and validity of consenting practices
De-Identification
Removal of identity or information to reduce identifiability
Optional
Indication of 'optional' or 'voluntary'
Pseudonymisation
Pseudonymisation means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person;
Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar, Maya Borges, Damien Desfontaines
Collected Personal Data
Personal Data that has been collected from another source such as the Data Subject
To indicate the source of data, use the DataSource concept with the hasDataSource relation
Processing Location
Conditions regarding location or geospatial scope where processing takes places
Commercial Purpose
Purposes associated with processing activities performed in a commercial setting or with intention to commercialise
DGA 4.4
Parent(s) of Data Subject
Parent(s) of data subjects such as children
has data processor
Indiciates inclusion or applicability of a Data Processor
Paul Ryan, Georg P. Krog, Harshvardhan J. Pandit
Technical Service Provision
Purposes associated with managing and providing technical processes and functions necessary for delivering services
has human involvement
Indicates Involvement of humans in processing such as within automated decision making process
Human involvement is also relevant to 'human in the loop'
Georg P. Krog, Paul Ryan, Harshvardhan J. Pandit
Request Action Delayed
State of a request being delayed towards fulfilment
Activity Not Completed
State of an activity that could not be completed, but has reached some end state
supports Compliance With
Indicate the measure is required for meeting specified requirement or satisfying specified condition/constraint
Julian Flake, Georg P. Krog, Harshvardhan J. Pandit
Records of Activities
Records of activities within some context such as maintenance tasks or governance functions
Records can be any information associated with the activity e.g. logs, summaries.
has joint data controllers
Indicates inclusion or applicability of a Joint Data Controller
has non-personal data process
Indicates association with a Non-Personal Data Process
Enforce Security
Purposes associated with ensuring and enforcing security for data, personnel, or other related matters
Was previous "Security". Prefixed to distinguish from TechOrg measures.
Residual Risk
Risk remaining after treatment or mitigation
Authentication Protocols
Protocols involving validation of identity i.e. authentication of a person or information
Licence
A Legal Document providing permission to utilise data or resource and outlining the conditions under which such use is considered valid
DGA 2.10
is policy for
Indicates the context or application of policy
Storage Restoration
Regularity and temporal span of data restoration/backup mechanisms that guarantee that data is preserved
Human not involved
Humans are not involved in the specified context
This maps to Autonomous and Full Automation models if no humans are involved.
Data Sanitisation Technique
Cleaning or any removal or re-organisation of elements in data based on selective criteria
ENISA Data Pseudonymisation: Advanced Techniques and Use Cases
Asymmetric Cryptography
Use of public-key cryptography or asymmetric cryptography involving a public and private pair of keys
Cannot Correct Process Output
Involvement where entity cannot correct the output of specified context
Also used for specifying a RightExerciseRecord has RightExerciseActivity as part of its records
Organisational Measure
Organisational measures used to safeguard and ensure good practices in connection with data and technologies
RNG Pseudonymisation
A pseudonymisation method where identifiers are substituted by a number chosen by a Random Number Generator (RNG)
Region
A region is an area or site that is considered a location
Service Registration
Purposes associated with registering users and collecting information required for providing a service
An example of service registration is to provide a form that collects information such as preferred language or media format for downloading a movie
A dataset, data service, or any other resource associated with Right Exercise - such as for providing a copy of data
Public Relations
Purposes associated with managing and conducting public relations processes, including creating goodwill for the organisation
Reformat
to rearrange or restructure data to change its form
Record
to make a record (especially media)
has responsible entity
Specifies the indicated entity is responsible within some context
Conformant
State of being conformant
has audit status
Indicates the status of audit associated with specified concept
Hardware Security Protocols
Security protocols implemented at or within hardware
Vendor Payment
Purposes associated with managing payment of vendors
Direct Marketing
Purposes associated with conducting direct marketing i.e. marketing communicated directly to the individual
Location
A location is a position, site, or area where something is located
Location may be geographic, physical, or virtual.
Pseudonymise
to replace personal identifiable information by artificial identifiers
Vital Interest
Activities are necessary or required to protect vital interests of a data subject or other natural person
has compliance status
Indicates the status of compliance of specified concept
Non-Public Data Source
A source of data that is not publicly accessible or available
Decision Making
Processing that involves decision making
Requested Service Provision
Purposes associated with delivering services as requested by user or consumer
The use of 'request' here includes where an user explicitly asks for the service and also when an established contract requires the provision of the service
Remote Location
Location is remote i.e. not local
has country
Indicates applicability of specified country
Optimisation for Consumer
Purposes associated with optimisation of activities and services for consumer or user
The term optimisation here refers to the efficiency of the service in terms of technical provision (or similar means) with benefits for everybody. Personalisation implies making changes that benefit the current user or persona.
Visitor
Data subjects that are temporary visitors
Third-Party Agreement
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of data between a Data Controller or Processor and a Third Party
has data exporter
Indicates inclusion or applicability of a LegalEntity in the role of Data Exporter
ENISA Reference Incident Classification Taxonomy 2018
Store
to keep data for future use
Contract Performance
Fulfilment or performance of a contract involving specified processing of data or technologies
Compliance Violation
State where compliance cannot be achieved due to requirements being violated
Changed from "violation of compliance" for consistency with other terms
Cannot Reverse Process Effects
Involvement where entity cannot reverse effects of specified context
Effects refer to consequences and impacts arising from the process or from the outputs of a process
Message Authentication Codes (MAC)
Use of cryptographic methods to authenticate messages
Conformance Status
Status associated with conformance to a standard, guideline, code, or recommendation
has subsidiary
Indicates this entity has the specified entity as its subsidiary
Display
to present or show data
DGA 2.20
Physical Supply Security
Physically securing the supply of resources
NIST SP 800-14
Medium Scale Of Data Subjects
Scale of data subjects considered medium i.e. neither large nor small within the context
Harshvardhan J. Pandit, Georg P. Krog, Paul Ryan
has data protection officer
Specifies an associated data protection officer
Inferred Personal Data
Personal Data that is obtained through inference from other data
Inferred Data is derived data generated from existing data, but which did not originally exist within it, e.g. inferring demographics from browsing history.
Principle
A representation of values or norms that must be taken into consideration when conducting activities
Improve Healthcare
Purposes associated with improving healthcare systems such as for personalised treatments and curing chronic diseases
Fraud Prevention and Detection
Purposes associated with fraud detection, prevention, and mitigation
Confidential Data
Data deemed confidential
DGA 5.10
has assessment
Indicates a relevant assessment associated with the specific context
Destruct
to process data in a way it no longer exists or cannot be repaired
Authority
An authority with the power to create or enforce laws, or determine their compliance.
Single Sign On
Use of credentials or processes that enable using one set of credentials to authenticate multiple contexts.
Entity Non-Involvement
Indicating entity is not involved
Privacy by Design
Practices regarding incorporating data protection and privacy in the design of information and services (synonymous with Data Protection by Design)
Personal Data
Data directly or indirectly associated or related to an individual.
This definition of personal data encompasses the concepts used in GDPR Art.4-1 for 'personal data' and ISO/IEC 2700 for 'personally identifiable information (PII)'.
Continuous Frequency
Frequency where occurrences are continuous
Notification
Notification represents the provision of a notice i.e. notifying
Notice refers to the information whereas Notification refers to the provision of that notice. The distinction is important as there are specific obligations associated with notice and notifications. For example, a data breach notice refers to the information about the breach intended to be provided to another entity, whereas notification refers to the act of providing the entity with the notice
Derive
to create new derivative data from the original data
Derive indicates data is present or obtainable from existing data. For data that is created without such existence, see Infer.
Observed Data
Data that has been obtained through observations of a source
Non-Governmental Organisation
An organisation not part of or independent from the government
Evaluation and Scoring
Processing that involves evaluation and scoring of individuals
Technical Measure
Technical measures used to safeguard and ensure good practices in connection with data and technologies
Fixed Singular Location
Location that is fixed at a specific place e.g. a city
Processing Scale
Scale of Processing
The exact definition of what constitutes "scale" depends on use of jurisdictional, domain-specific, or other forms of externally defined criterias. Where possible, this should be reflected by extending the scales provided with the appropriate context.
Unverified Data
Data that has not been verified in terms of accuracy, inconsistency, or quality
Monitor
to monitor data for some criteria
Network Security Protocols
Security implemented at or over networks protocols
Consent Given
The state where consent has been given
An example of this state is when the individual clicks on a button, ticks a checkbox, verbally agrees - or any other form that communicates their decision agreeing to the processing of data
Data Quality Improvement
Measures associated with improvement of data quality
Supranational Union
A political union of two or more countries with an establishment of common authority
has service provider
Indicates the entity that provides the associated service
Subscriber
Data subjects that subscribe to service(s)
note: subscriber can be customer or consumer
NonConformant
State of being non-conformant
Erase
to remove data from existence i.e. without the possibility of retrieval
Activity Status
Status associated with activity operations and lifecycles
Notification Planned
Status indicating notification(s) are planned
Cannot Correct Process Input
Involvement where entity cannot correct input of specified context
Legal Entity
A human or non-human 'thing' that constitutes as an entity and which is recognised and defined in law
Right Exercise Record
Record of a Right being exercised
This concept represents a record of one or more right exercise activities, such as those associated with a single data subject or service or entity
Parent Legal Entity
A legal entity that has one or more subsidiary entities operating under it
Data published by Data Subject
Data is published by the data subject
This refers to where that data was made publicly available by the data subject. An example of this would be a social media profile that the data subject has made publicly accessible.
Singular Scale Of Data Subjects
Scale of data subjects considered singular i.e. a specific data subject
Automated Scoring of Individuals
Processing that involves automated scoring of individuals
Scoring can lead to the action being considered Decision Making if the scoring is itself a decision - see 2023-MAR-16 opinion of Advocate General on Case C 634/21. Therefore, the assessment of whether scoring was automated or not is important given the legal obligations surrounding automated decision making e.g. in GDPR
Organise
to organize data for arranging or classifying
Vulnerability Testing Methods
Methods that assess or discover vulnerabilities in a system
has process
Indicates association with a Process
Digital Rights Management
Management of access, use, and other operations associated with digital content
has legal measure
Indicates use or applicability of Legal measure
Correcting Process
Involvement where entity can correct the process of specified context
Correction of process refers to the ability to change how the process takes place
Tourist
Data subjects that are tourists i.e. not citizens and not immigrants
has request status
Indicates the status associated with a request
Service
A service is a process where one entity provides some benefit or assistance to another entity
Service Provider and Service Consumer reflect the roles associated with a service. 'Service' as a process is a distinct concept from the use of 'service' as a provision method in Tech extension
has organisational unit
Indicates the specified entity is a unit of the organisation
Intellectual Property Data
Data protected by Intellectual Property rights and regulations
Request Requires Action
State of a request requiring an action to be performed from another party
Unlawful
State of being unlawful or legally non-compliant
has intention
Indicates whether the specified context was intended or unintended
Records of Processing Activities
A Record of Processing Activities (ROPA) is a document detailing processing activities
ROPA under GDPR Art.30 has specific requirements regarding the information to be maintained. Additionally, Data Protection Authorities also provide additional information guidelines for information to be maintained in a ROPA. For more information see https://w3id.org/dpcat
Identity Management Method
Management of identity and identity-based processes
Disclose by Transmission
to disclose data by means of transmission
has data controller
Indicates association with Data Controller
Within Physical Environment
Location is local and entirely within a physical environment, such as a room
Combine
to join or merge data
has frequency
Indicates the frequency with which something takes place
Payment Management
Purposes associated with processing and managing payment in relation to service, including invoicing and records
Request Fulfilled
State of a request being fulfilled
Age Verification
Purposes associated with verifying or authenticating age or age related information as a form of security
Age Verification can include verification of the exact age, e.g. being 21 years old, a date, e.g. birth date is 01 January 1969, or a condition, e.g. age is over 21 years and the person is an adult. Specific dedicated resources should be used to further express information and processes associated with Age Verification, for example the Age Verification Vocabulary https://w3id.org/age/
Beatriz Esteves, Arthit Suriyawongkul, Harshvardhan J. Pandit
is indicated by
Specifies entity who indicates the specific context
Large Data Volume
Data volume that is considered large within the context
Right Fulfilment Notice
Notice provided regarding fulfilment of a right
This notice is associated with situations where information is provided with the intention of progressing the fulfilment of a right. For example, a notice asking for more information regarding the scope of the right, or providing information on where to access the data provided under a right.
Notification Status
Status indicating whether notification(s) are planned, completed, or failed
Also used for specifying constraints on access associated with Rights Exercising (e.g. User must log in) or access to provided data (e.g. access via link)
Security Role Procedures
Procedures related to security roles
has necessity
Indicates the necessity for specified context or criteria
Human Involvement for Input
Human involvement for the purposes of providing inputs to the specified context
Inputs can be in the form of data or other resources.
Communication for Customer Care
Customer Care Communication refers to purposes associated with communicating with customers for assisting them, resolving issues, ensuring satisfaction, etc. in relation to services provided
Child
A 'child' is a natural legal person who is below a certain legal age depending on the legal jurisdiction.
The legality of age defining a child varies by jurisdiction. In addition, 'child' is distinct from a 'minor'. For example, the legal age for consumption of alcohol can be 21, which makes a person of age 20 a 'minor' in this context. In other cases, 'minor' and 'child' are used interchangeably to refer to a person below some legally defined age.
ISO/IEC 22989:2022 Artificial intelligence concepts and terminology
Customer Solvency Monitoring
Customer Solvency Monitoring refers to purposes associated with monitor solvency of customers for financial diligence
Not Automated
Level of automation corresponding to Level 0 in ISO/IEC 22989:2022 where there is no automation in the system
Human Involvement is necessary here as there is no automation
Provided Data
Data that has been provided by an entity
Provided data involves one entity explicitly providing the data, which the other entity then collects
Request Initiated
State of a request being initiated
is residual risk of
Indicates this risk is the remaining or residual risk from applying mitigation measures or treatments to specified risk
Consequence
The consequence(s) possible or arising from specified context
Export
to provide a copy of data from one system to another
Design Standard
A set of rules or guidelines outlining criterias for design
Right Non-Fulfilment Notice
Notice provided regarding non-fulfilment of a right
This notice is associated with situations where information is provided with the intention of communicating non-fulfilment of a right. For example, to provide justifications on why a right could not be fulfilled or providing information about another entity who should be approached for exercising this right.
Encryption at Rest
Encryption of data when being stored (persistent encryption)
Derived Data
Data that has been obtained through derivations of other data
Advertising
Purposes associated with conducting advertising i.e. process or artefact used to call attention to a product, service, etc. through announcements, notices, or other forms of communication
Advertising is a subset of Marketing. Advertising by itself does not indicate 'personalisation' i.e. personalised ads.
Human Involvement for Oversight
Human involvement for the purposes of having oversight over the specified context regarding its operations, inputs, or outputs
Oversight by itself does not indicate the ability to intervene or control the operations.
Data Security Management
Measures associated with management of data security
Examples of data security management are assessing the appropriate security controls such as encryption, testing the implemented security controls, and ensuring it is protected and safeguarded from unintended actions
Encryption
Technical measures consisting of encryption
Human Involvement
The involvement of humans in specified context
Human Involvement here broadly refers to any involvement by a human in the context of carrying out processing. This may include verification of outcomes, providing input data for making decisions, or overseeing activities. To indicate whether humans are involved or not, see relevant concepts of dpv:HumanInvolved and dpv:HumanNotInvolved. The term 'Human in the loop' and its varieties are absent from DPV due to their contradictory and non-compatible use across different sources.
Privacy Notice
Represents a notice or document outlining information regarding privacy
Georg P. Krog, Paul Ryan, David Hickey, Harshvardhan J. Pandit
Contextually Anonymised Data
Data that can be considered as being fully anonymised within the context but in actuality is not fully anonymised and is still personal data as it can be de-anonymised outside that context
To distinguish between partially anonymised data that can be effectively treated as anonymised data (e.g. in processing) within a context (e.g. an organisation), the concept ContextuallyAnonymisedData should be used instead of AnonymisedData. Transfer of this data outside of the context should consider that it is not fully anonymised and that it is still personal data
Alter
to change the data without changing it into something else
has recipient third party
Indiciates inclusion or applicability of a Third Party as a Recipient of persona data
Applicant
Data subjects that are applicants in some context
Consent Requested
State where a request for consent has been made and is awaiting a decision
An example of this state is when a notice has been presented to the individual but they have not made a decision
has sensitivity level
Indicates the associated level of sensitivity
Policy
A guidance document outlining any of: procedures, plans, principles, decisions, intent, or protocols.
Correcting Process Output
Involvement where entity can correct the output of specified context
Correction of outputs allows modification of the output - implying continuation of the process. This is distinct from reversing of outputs which revert the output back to its previous value and possibly imply not continuing with the process
Personalised Advertising
Purposes associated with creating and providing personalised advertising
Penetration Testing Methods
Use of penetration testing to identify weaknesses and vulnerabilities through simulations
Anonymisation
Anonymisation is the process by which data is irreversibly altered in such a way that a data subject can no longer be identified directly or indirectly, either by the entity holding the data alone or in collaboration with other entities and information sources
Entity Permissive Involvement
Involvement of an entity in specific context where it is permitted or able to do something
Challenging Process Output
Involvement where entity can challenge the output of specified context
Legal Agreement
A legally binding agreement
Elderly Data Subject
Data subjects that are considered elderly (i.e. based on age)
Request Unfulfilled
State of a request being unfulfilled
Sell Products to Data Subject
Purposes associated with selling products or services to the user, consumer, or data subjects
Sell Products here refers to processing necessary to provide and complete a sale to customers. It should not be confused with providing services with a cost based on an established agreement.
is exercised at
Indicates context or information about exercising a right
Processing
Operations or 'processing' performed on data
has scale
Indicates the scale of specified concept
has entity
Indicates inclusion or applicability of an entity to some concept
parent property for controller, processor, data subject, authority, etc.?
Data Interoperability Management
Measures associated with management of data interoperability
Secure Processing Environment
A physical or virtual environment supported by organisational means that integrates security and compliance requirements and allows supervising data processing actions
Medium Data Volume
Data volume that is considered medium i.e. neither large nor small within the context
Trusted Computing
Use of cryptographic methods to restrict access and execution to trusted parties and code
has duration
Indicates information about duration
Citizen
Data subjects that are citizens (for a jurisdiction)
Personal Data Handling
An abstract concept describing 'personal data handling'
This concept will be deprecated in future updates. It is recommended to use dpv:Process as the equivalent alternative which is better aligned with legal and operational terminology.
sunset
Scale
A measurement along some dimension
Scales are subjective concepts that need to be defined and interpreted within the context of their application. For example, what would be small within one context could be large within another.
has activity status
Indicates the status of activity of specified concept
Privacy by Default
Practices regarding setting the default configurations of information and services to implement data protection and privacy (synonymous with Data Protection by Default)
Human Resource Management
Purposes associated with managing humans and 'human resources' within the organisation for effective and efficient operations.
HR is a broad concept. Its management includes, amongst others - recruiting employees and intermediaries e.g. brokers, independent representatives; payroll administration, remunerations, commissions, and wages; and application of social legislation.
Paul Ryan, David Hickey, Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
National Scale
Geographic coverage spanning a nation
Scientific Research
Purposes associated with scientific research
Data Transfer Legal Basis
Specific or special categories and instances of legal basis intended for justifying data transfers
Participant
Data subjects that participate in some context such as volunteers in a function
Fully Randomised Pseudonymisation
Use of randomised pseudonymisation where the same elements are assigned different values each time they occur
Severity
The magnitude of being unwanted or having negative effects such as harmful impacts
Severity can be associated with Risk, or its Consequences and Impacts
is authority for
Indicates area, scope, or applicability of an Authority
Academic or Scientific Organisation
Organisations related to academia or scientific pursuits e.g. Universities, Schools, Research Bodies
Restrict
to apply a restriction on the processing of specific records
Vulnerable Data Subject
Data Subjects which should be considered 'vulnerable' and therefore would require additional measures and safeguards
This concept denotes a Data Subject or a group are vulnerable, but not what vulnerability they possess or its context. This information can be provided additionally as comments, or as separate concepts and relations. Proposals for this are welcome.
Risk Assessment
Assessment involving identification, analysis, and evaluation of risk
Guideline
Practices that specify how activities must be conducted
Mentally Vulnerable Data Subject
Data subjects that are considered mentally vulnerable
Security Procedure
Procedures associated with assessing, implementing, and evaluating security
Expressed Consent
Consent that is expressed through an action intended to convey a consenting decision
Expressed consent requires the individual take a specific and unambiguous action that directly indicates their consent. This action may be a part of other processes such as setting preferences, or agreeing to a contract, or other matters not relating to consent. An example of expressed consent is interacting with a checkbox within a dashboard or clicking a button on a web form
Data Privacy Vocabulary (DPV) - Turtle serialiation
Collected Data
Data that has been obtained by collecting it from a source
Duration
The duration or temporal limitation
has storage condition
Indicates information about storage condition
Country
A political entity indicative of a sovereign or non-sovereign territorial state comprising of distinct geographical areas
The definition of country is not intended for political interpretation. DPVCG welcomes alternate definitions based in existing sources with global scope, such as UN or ISO.
Maintain Fraud Database
Purposes associated with maintaining a database related to identifying and identified fraud risks and fraud incidents
Regional Scale
Geographic coverage spanning a specific region or regions
Assess
to assess data for some criteria
Industry Consortium
A consortium established and comprising on industry organisations
Adult
A natural person that is not a child i.e. has attained some legally specified age of adulthood
Multi-Factor Authentication (MFA)
An authentication system that uses two or more methods to authenticate
Location Locality
Locality refers to whether the specified location is local within some context, e.g. for the user
Endless Duration
Duration that is (known or intended to be) open ended or without an end
Singular Data Volume
Data volume that is considered singular i.e. a specific instance or single item
has personal data handling
Indicates association with Personal Data Handling
Human Involvement for Verification
Human involvement for the purposes of verification of specified context to ensure its operations, inputs, or outputs are correct or are acceptable.
Verification by itself does not imply ability to Control, Intervene, or having Oversight.
Marketing
Purposes associated with conducting marketing in relation to organisation or products or services e.g. promoting, selling, and distributing
Was commercial interest, changed to consider Marketing a separate Purpose category by itself
Virtualisation Security
Security implemented at or through virtualised environments
Human involved
Humans are involved in the specified context
This concept only indicates that humans are involved. For specific involvement, see specialised concepts e.g. involved for input, oversight.
Audit Status
Status associated with Auditing or Investigation
Customer Claims Management
Customer Claims Management refers to purposes associated with managing claims, including repayment of monies owed
Data Source
The source or origin of data
Source' is the direct point of data collection; 'origin' would indicate the original/others points of where the data originates from.
Economic Union
A political union of two or more countries based on economic or trade agreements
has personal data process
Indicates association with a Personal Data Process
Data Interoperability Improvement
Measures associated with improvement of data interoperability
Record Management
Purposes associated with manage creation, storage, and use of records relevant to operations, events, and processes e.g. to store logs or access requests
This purpose relates specifically for record creation and management. This can be combined or used along with other purposes to express intentions such as records for legal compliance or vendor payments.
Vendor Records Management
Purposes associated with managing records and orders related to vendors
Impact
The impact(s) possible or arising as a consequence from specified context
Impact is a stronger notion of consequence in terms of influence, change, or effect on something e.g. for impact assessments
Cannot Withdraw from Process
Involvement where entity cannot withdraw a previously given assent from specified context
Request Required Action Performed
State of a request's required action having been performed by the other party
Activity Monitoring
Monitoring of activities including assessing whether they have been successfully initiated and completed
Request Acknowledged
State of a request being acknowledged
Expected
Status indicating the specified context was expected
has recipient data controller
Indiciates inclusion or applicability of a Data Controller as a Recipient of persona data
Passive Right
The right(s) applicable, provided, or expected that are always (passively) applicable
Passive rights do not require the entity to request or exercise them. They are considered to be always applicable. For example, the Right to Privacy (in EU) does not require an exercise for it to be fulfilled.
Data Breach Notification
Notification of information about data breach(es) i.e. unauthorised transfer, access, use, or modification of data
DGA 12.k
DGA 21.5 GDPR 33
GDPR 34
has consequence on
Indicates the thing (e.g. plan, process, or entity) affected by a consequence
Support Informed Consent Decision
Supporting individuals with making a decision regarding their informed consent
Physical Interception Protection
Physical protection against interception e.g. by posting a guard
NIST SP 800-20
Audit Not Required
State where an audit is determined as not being required
Governmental Organisation
An organisation managed or part of government
has impact assessment
Indicates an impact assessment associated with the specific context
Academic Research
Purposes associated with conducting or assisting with research conducted in an academic context e.g. within universities
has data importer
Indicates inclusion or applicability of a LegalEntity in the role of Data Importer
Lawful
State of being lawful or legally compliant
Verification
Purposes association with verification e.g. information, identity, integrity
Seal
A seal or a mark indicating proof of certification to some certification or standard
is representative for
Indicates the entity is a representative for specified entity
has processing condition
Indicates information about processing condition
has legal basis
Indicates use or applicability of a Legal Basis
Nearly Global Scale
Geographic coverage nearly spanning the entire globe
has sector
Indicates the purpose is associated with activities in the indicated (Economic) Sector(s)
is mitigated by measure
Indicate a risk is mitigated by specified measure
Legal Measure
Legal measures used to safeguard and ensure good practices in connection with data and technologies
DGA 12.j
Data Restoration Policy
Policy regarding restoration of data
Restoration can refer to how data is restored from a backup
is implemented by entity
Indicates implementation details such as entities or agents
The use of 'entity' is inclusive of entities (e.g. Data Processor) as well as 'agent' (e.g. DPO). For indicating technological implementation, the property isImplementedByTechnology should be used.
Also used to indicate the Entity that implements or performs a Right Exercise Activity
Axel Polleres, Harshvardhan J. Pandit, Beatriz Esteves, Paul Ryan, Julian Flake
has likelihood
Indicates the likelihood associated with a concept
Enter Into Contract
Processing necessary to enter into contract
has applicability
Indicates situations where the context is not applicable, information is not available, or this is unknown. An appropriate instance of dpv:Applicability should be used with this relation to express the situation
has technical and organisational measure
Indicates use or applicability of Technical or Organisational measure
Transfer
to move data from one place to another
Provide Event Recommendations
Purposes associated with creating and providing personalised recommendations for events
Provide Product Recommendations
Purposes associated with creating and providing product recommendations e.g. suggest similar products
Not Available
Concept indicating the information or context is applicable but information is not yet available
This concept is useful when describing situations where information is required but is not available (yet). For example, if in a form a field asks about whether a process X was completed, and it is correct to interpret that process X is applicable and must be completed, but the information is not yet available as to whether this was done - then NotAvailable is useful to represent this.
Document Security
Security measures enacted over documents to protect against tampering or restrict access
Authorisation Protocols
Protocols involving authorisation of roles or profiles to determine permission, rights, or privileges
Download
to provide a copy or to receive a copy of data over a network or internet
DGA 2.13
Confidentiality Agreement
Agreements that enforce confidentiality for e.g. to protect business, professional, or company secrets
DGA 3.1.a
has informed status
Indicates whether an entity was informed or uninformed
Correcting Process Input
Involvement where entity can correct input of specified context
Unknown Applicability
Concept indicating information or context availability is unknown i.e. it is not known if the information exists or is applicable and therefore statements about its availability cannot be made (yet)
This concept is useful when describing situations where it cannot be stated whether the context applies or whether the information is not available yet. For example, if a form field asks about whether a process X was completed and it is not yet known whether X applies or not and therefore it is also unclear whether X was completed or not. Using UnknownApplicability is a signal that the applicability of X should be assessed, and if applicable, then information about X should be identified and used here.
Challenging Process Input
Involvement where entity can challenge input of specified context
Data Transfer Record
Record of data transfer activities
Third Party Security Procedures
Procedures related to security associated with Third Parties
Innovative Use of Existing Technologies
Involvement of existing technologies used in an innovative manner
Differential Privacy
Utilisation of differential privacy where information is shared as patterns or groups to withhold individual elements
Vendor Selection Assessment
Purposes associated with managing selection, assessment, and evaluation related to vendors
Password Authentication
Use of passwords to perform authentication
Metadata Management
Measures associated with management of metadata
Examples of metadata management include assessing which metadata are required or being used by technology, assessing their potential inclusion as personal data, and implementing a metadata based solution to manage data
Request Rejected
State of a request being rejected towards non-fulfilment
is before
Indicates the specified concepts is 'before' this concept in some context
Georg P. Krog, Harshvardhan J. Pandit, Julian Flake
Also used for specifying a RightExerciseActivity occurs before another RightExerciseActivity
Filter
to filter or keep data for some criteria
Data Jurisdiction Policy
Policy specifying jurisdictional requirements for data processing
Jurisdictional requirements can refer to data being stored within specific jurisdictions, or that data must be in line with jurisdictional laws and norms
Inferred Data
Data that has been obtained through inferences of other data
Innovative Use of New Technologies
Involvement of a new (innovative) technologies
New technologies are by definition considered innovative
is organisational unit of
Indicates this entity is an organisational unit of the specified entity
Pseudonymised Data
Pseudonymised Data is data that has gone a partial or incomplete anonymisation process by replacing the identifiable information with artificial identifiers or 'pseudonyms', and is still considered as personal data
has address
Specifies address of a legal entity such as street address or pin code
Audit Requested
State of an audit being requested whose outcome is not yet known
Provide Official Statistics
Purposes associated with facilitating the development, production and dissemination of reliable official statistics
Internal Resource Optimisation
Purposes associated with optimisation of internal resource availability and usage for organisation
Operating System Security
Security implemented at or through operating systems
Support Exchange of Views
Supporting individuals and entities in exchanging views e.g. regarding data processing purposes for their best interests
Disseminate
to spread data throughout
Geographic Coverage
Indicate of scale in terms of geographic coverage
Right
The right(s) applicable, provided, or expected
A 'right' is a legal, social, or ethical principle of freedom or entitlement which dictate the norms regarding what is allowed or owed. Rights as a concept encompass a broad area of norms and entities, and are not specific to Individuals or Data Protection / Privacy. For individual specific rights, see dpv:DataSubjectRight
Harshvardhan J. Pandit, Beatriz Esteves, Georg P. Krog
User
Data subjects that use service(s)
Immigrant
Data subjects that are immigrants (for a jurisdiction)
Data Subject Contract
Creation, completion, fulfilment, or performance of a contract, with the Data Controller and Data Subject as parties, and involving specified processing of data or technologies
Protection of Intellectual Property Rights
Purposes associated with the protection of intellectual property rights
DGA 3.1(c)
Non-Personal Data Process
An action, activity, or method involving non-personal data, and asserting that no personal data is involved
Use of personal data within NonPersonalDataProcess should be considered a violation of the explicit constraint that no personal data is involved.
Storage Location
Location or geospatial scope where the data is stored
Legal Basis
Legal basis used to justify processing of data or use of technology in accordance with a law
Legal basis (plural: legal bases) are defined by legislations and regulations, whose applicability is usually restricted to specific jurisdictions which can be represented using dpv:hasJurisdiction or dpv:hasLaw. Legal basis can be used without such declarations, e.g. 'Consent', however their interpretation will require association with a law, e.g. 'EU GDPR'.
Conditional Automation
Level of automation corresponding to Level 3 in ISO/IEC 22989:2022 where the automation is sufficient to perform most tasks of the system with the human present to take over where necessary
Human Involvement is implied here, e.g. for intervention, input, decisions
Organisation
A general term reflecting a company or a business or a group acting as a unit
Job Applicant
Data subjects that apply for jobs or employments
mitigates risk
Indicates risks mitigated by this concept
Algorithmic Logic
The algorithmic logic applied or used
Algorithmic Logic is intended as a broad concept for explaining the use of algorithms and automated decisions making within Processing. To describe the actual algorithm, see the Algorithm concept.
Environmental Protection
Physical protection against environmental threats such as fire, floods, storms, etc.
NIST SP 800-13
EDPB Recommendations 01/2020 on Data Transfers
Consequence of Success
The consequence(s) possible or arising from success of specified context
Likelihood
The likelihood or probability or chance of something taking place or occuring
Likelihood can be expressed in a subjective manner, such as 'Unlikely', or in a quantitative manner such as "Twice in a Day" (frequency per period). The suggestion is to use quantitative values, or to associate them with subjective terms used so as to enable accurate interpretations and interoperability. See the concepts related to Frequency and Duration for possible uses as a combination to express Likelihood.
Service Usage Analytics
Purposes associated with conducting analysis and reporting related to usage of services or products
Was "UsageAnalytics", prefixed with Service to better reflect scope
Deterministic Pseudonymisation
Pseudonymisation achieved through a deterministic function
Singular Frequency
Frequency where occurrences are singular i.e. they take place only once
AI Literacy
Providing skills, knowledge, and understanding to enable reading, writing, analysing, reasoning, and communicating regarding AI
Cryptographic Authentication
Use of cryptography for authentication
Data Subject
The individual (or category of individuals) whose personal data is being processed
The term 'data subject' is specific to the GDPR, but is functionally equivalent to the term 'individual associated with data' and the ISO/IEC term 'PII Principle'
Vital Interest of Natural Person
Activities are necessary or required to protect vital interests of a natural person
Entity
A human or non-human 'thing' that constitutes as an entity
Retrieve
to retrieve data, often in an automated manner
Counterterrorism
Purposes associated with activities that detect, prevent, mitigate, or otherwise perform activities to combat or eliminate terrorism (also referred to as anti-terrorism)
is determined by entity
Indicates the context is determined by the specified entity
Cloud Location
Location that is in the 'cloud' i.e. a logical location operated over the internet
Consent Refused
The state where consent has been refused
An example of this state is when the individual clicks on a 'disagree' or 'reject' or 'refuse' button, or leaves a checkbox unticked
Entity Informed Status
Status indicating whether an entity is informed or uninformed about specified context
has right
Indicates use or applicability of Right
Analyse
to study or examine the data in detail
Data Privacy Vocabulary (DPV)
DPV
The Data Privacy Vocabulary (DPV) provides terms (classes and properties) to represent information about processing of personal data, for example - purposes, processing operations, personal data, technical and organisational measures.
Harshvardhan J. Pandit
Beatriz Esteves
Georg P. Krog
Paul Ryan
Delaram Golpayegani
Julian Flake
Data Privacy Vocabulary (DPV) -- Version 2. Harshvardhan J. Pandit, Beatriz Esteves, Georg P. Krog, Paul Ryan, Delaram Golpayegani, Julian Flake https://doi.org/10.48550/arXiv.2404.13426
Symmetric Encryption
Use of symmetric cryptography to encrypt data
has record of activity
Indicates a relevant record of activity
is after
Indicates the specified concepts is 'after' this concept in some context
has consent control
Specific a control associated with consent
Right Exercise Notice
Information associated with exercising of an active right such as where and how to exercise the right, information required for it, or updates on an exercised rights request
This concept is intended for providing information regarding a right exercise. For specific instances of such exercises, see RightExerciseActivity and RightExerciseRecord.
Data Controller as Data Source
Data Sourced from Data Controller(s), e.g. a Controller inferring data or generating data
has obligation
Specifying applicability or inclusion of an obligation rule within specified context
Justification
A form of documentation providing reasons, explanations, or justifications
Data Inventory Management
Measures associated with management of data inventory or a data asset list
Storage Deletion
Deletion or Erasure of data including any deletion guarantees
Personnel Hiring
Purposes associated with management and execution of hiring processes of personnel
has active entity
indicates the entity is actively involved in specified context
Permission
A rule describing a permission to perform an activity
Passively Involved
Status indicating the specified context is 'passively' involved
An example of passive involvement is a person being monitored by a CCTV
Improve Public Services
Purposes associated with improving the provision of public services, such as public safety, education or law enforcement
Legitimate Interest Assessment
Indicates an assessment regarding the use of legitimate interest as a lawful basis by the data controller
Global Scale
Geographic coverage spanning the entire globe
Data Processor
A ‘processor’ means a natural or legal person, public authority, agency or other body which processes data on behalf of the controller.
has scope
Indicates the scope of specified concept or context
Compliance Assessment
Assessment regarding compliance (e.g. internal policy, regulations)
Sell Data to Third Parties
Purposes associated with selling or sharing data or information to third parties
Observed Personal Data
Personal Data that has been collected through observation of the Data Subject(s)
Service Provision
Purposes associated with providing service or product or activities
Rights Impact Assessment
Impact assessment which involves determining the impact on rights and freedoms
The rights and freedoms may be those defined in law or other norms, and may be bound to a jurisdiction
has prohibition
Specifying applicability or inclusion of a prohibition rule within specified context
is not applicable for
Indicates the concept or information is not applicable for specified context
has relation with data subject
Indicates the relation between specified Entity and Data Subject
Audit Rejected
State of not being approved or being rejected through the audit
Improve Transport and Mobility
Purposes associated with improving traffic, public transport systems or costs for drivers
Physical Measure
Physical measures used to safeguard and ensure good practices in connection with data and technologies
Fundamental Rights Impact Assessment (FRIA)
Impact assessment which assesses the potential and actual impact on fundamental rights occuring due to processing activities
The fundamental rights and freedoms may be those defined in law or other norms, and may be bound to a jurisdiction - for example see EU Charter of Fundamental Rights
AI Act Art.27
Sporadic Data Volume
Data volume that is considered sporadic or sparse within the context
Processing Condition
Conditions required or followed regarding processing of data or use of technologies
Copy
to produce an exact reproduction of the data
Compliance Status
Status associated with Compliance with some norms, objectives, or requirements
Network Proxy Routing
Use of network routing using proxy
has entity involvement
Indicates involvement of an entity in specified context
Joint Data Controllers Agreement
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of data between Controllers within a Joint Controllers relationship
Counter Money Laundering
Purposes associated with detection, prevention, and mitigation of mitigate money laundering
Entity Non-Permissive Involvement
Involvement of an entity in specific context where it is not permitted or able to do something
Quantum Cryptography
Cryptographic methods that utilise quantum mechanical properties to perform cryptographic tasks
Personalisation
Purposes associated with creating and providing customisation based on attributes and/or needs of person(s) or context(s).
This term is a blanket purpose category for indicating personalisation of some other purpose, e.g. by creating a subclass of the other concept and Personalisation
Communication Management
Communication Management refers to purposes associated with providing or managing communication activities e.g. to send an email for notifying some information
This purpose by itself does not sufficiently and clearly indicate what the communication is about. As such, it is recommended to combine it with another purpose to indicate the application. For example, Communication of Payment.
Necessity
An indication of 'necessity' within a context
Necessity can be used to express need, essentiality, requirement, or compulsion.
Recipient
Entities that receive data or technologies
Recipients that receive personal data can be a Third Party, Data Controller, or Data Processor.
Asylum Seeker
Data subjects that are asylum seekers
Partial Automation
Level of automation corresponding to Level 2 in ISO/IEC 22989:2022 where the automation is present in multiple parts of the system or in a manner that does not require the human to control/use these parts while still retaining control over the system
Human Involvement is implied here, specifically the ability to Control operations, but also possibly for intervention, oversight, and verification
Use
to use data
Activity Ongoing
State of an activity occurring in continuation i.e. currently ongoing
Asymmetric Encryption
Use of asymmetric cryptography to encrypt data
Legitimate Interest of Data Subject
Legitimate Interests of the Data Subject in conducting specified activities
Reaffirm Consent
Control for affirming consent
Indicates how the controller (with dpv:ObtainConsent) or data subject (with dpv:ProvideConsent) can reaffirm consent e.g. used with dpv:isExercisedAt
has consent status
Specifies the state or status of consent
has impact on
Indicates the thing (e.g. plan, process, or entity) affected by an impact
Collect
to gather data from someone
Context
Contextually relevant information
Context is a catch-all concept for information of relevance not possible to represent through other core concepts. DPV offers specific contextual concepts such as Necessity, Frequency, and Duration. More can be created by extending Context within use-cases.
Share
to give data (or a portion of it) to others
Opting in to Process
Involvement where entity can opt-in to specified context
Search Functionalities
Purposes associated with providing searching, querying, or other forms of information retrieval related functionalities
Security Incident Record
Record of a security incident
Frequency
The frequency or information about periods and repetitions in terms of recurrence.
Storage Condition
Conditions required or followed regarding storage of data
Objecting to Process
Involvement where entity can object to process of specified context
Cryptographic Key Management
Management of cryptographic keys, including their generation, storage, assessment, and safekeeping
Official Authority of Controller
Activities are necessary or authorised through the official authority granted to or vested in the Data Controller
Authority Uninformed
Status indicating Authority is uninformed i.e. has not been informed about the specified context
Data Subject Right
The rights applicable or provided to a Data Subject
Based on use of definitions, the notion of 'Data Subject Right' can be equivalent to 'Individual Right' or 'Right of a Person'
Beatriz Esteves, Georg P. Krog, Harshvardhan J. Pandit
For-Profit Organisation
An organisation that aims to achieve profit as its primary goal
Rights Fulfillment
Purposes associated with the fulfillment of rights specified in law
Where Rights Fulfillment includes activities that are not legal obligations, for example conducting Identity Verification, the documentation should indicate this by expressing them as separate purposes within the same activity
Provided Personal Data
Personal Data that has been provided by an entity such as the Data Subject
Provided personal data involves one entity (e.g. data subject) explicitly providing the data, which the other entity (e.g. data controller) then collects
Data Processing Record
Record of data processing, whether ex-ante or ex-post
Locality Scale
Geographic coverage spanning a specific locality
For example, geographic scale of a city or an area within a city
Decentralised Locations
Location that is spread across multiple separate areas with no distinction between their importance
has outcome
Indicates an outcome of specified concept or context
has importance
Indicates the importance for specified context or criteria
Data Exporter
An entity that 'exports' data where exporting is considered a form of data transfer
The term 'Data Exporter' is used by the EU-EDPB as the entity that transfer data across borders. While the EDPB refers to the jurisdictional border of EU, the term within DPV can be used to denote any 'export' or transfer or transmission of data and is thus a broader concept than the EDPB's definition.
David Hickey, Georg P. Krog, Paul Ryan, Harshvardhan J. Pandit
Data Protection Impact Assessment (DPIA)
Impact assessment determining the potential and actual impact of processing activities on individuals or groups of individuals and taking into account the impacts of activities on their rights and freedoms
Specific requirements and procedures for DPIA are defined in GDPR Art.35
GDPR Art. 35
Intrusion Detection System
Use of measures to detect intrusions and other unauthorised attempts to gain access to a system
Public Data Source
A source of data that is publicly accessible or available
The term 'Public' is used here in a broad sense. Actual consideration of what is 'Public Data' can vary based on several contextual or jurisdictional factors such as definition of open, methods of access, permissions and licenses.
Use of Synthetic Data
Use of synthetic data to preserve privacy, security, or other effects and side-effects
Cybersecurity Assessment
Assessment of cybersecurity capabilities in terms of vulnerabilities and effectiveness of controls
has rule
Specifying applicability or inclusion of a rule within specified context
Optimisation for Controller
Purposes associated with optimisation of activities and services for provider or controller
Consent Withdrawn
The state where the consent is withdrawn or revoked specifically by the data subject and which prevents it from being further used as a valid state
This state can be considered a form of 'revocation' of consent, where the revocation can only be performed by the data subject. Therefore we suggest using ConsentRevoked when it is a non-data-subject entity, and ConsentWithdrawn when it is the data subject
Variable Location
Location that is known but is variable e.g. somewhere within a given area
Personal Data Process
An action, activity, or method involving personal data
Evaluation of Individuals
Processing that involves evaluation of individuals
Credit Checking
Purposes associated with monitoring, performing, or assessing credit worthiness or solvency
Anonymised Data
Personal Data that has been (fully and completely) anonymised so that it is no longer considered Personal Data
It is advised to carefully consider indicating data is fully or completely anonymised by determining whether the data by itself or in combination with other data can identify a person. Failing this condition, the data should be denoted as PseudonymisedData. To indicate data is anonymised only for a specified entity (e.g. within an organisation), the concept ContextuallyAnonymisedData (as subclass of PseudonymisedData) should be used instead of AnonymisedData.
Until Time Duration
Duration that has a fixed end date e.g. 2022-12-31
Dispute Management
Purposes associated with activities that manage disputes by natural persons, private bodies, or public authorities relevant to organisation
has service consumer
Indicates the entity that consumes or receives the associated service
Public Benefit
Purposes undertaken and intended to provide benefit to public or society
has third country
Indicates applicability or relevance of a 'third country'
Observe
to obtain data through observation
Move
to move data from one location to another including deleting the original copy
Organisation Compliance Management
Purposes associated with managing compliance for organisation in relation to internal policies
Note that this concept relates to internal organisational compliance. The concept LegalCompliance should be used for external legal or regulatory compliance.
Right Exercise Activity
An activity representing an exercising of an active right
There may be multiple activities associated with exercising and fulfilling rights. See the RightExerciseRecord concept for record-keeping of such activities in a cohesive manner.
Expectation Status
Status indicating whether the specified context was intended or unintended
Expectation is associated with the outcome of a goal or purpose for what is expected to happen i.e. an ex-post indication of what was expected to happen in the specified context. Intention and Expectation are closely related terms. We recommend using Intention when the entity has the ability to control the implementation and Expectation for when the entity does not have control or for what happens after or beyond the exercise of control.
is applicable for
Indicates the concept or information is applicable for specified context
has lawfulness
Indicates the status of being lawful or legally compliant
Data Deletion Policy
Policy regarding deletion of data
Deletion and Erasure are distinct activities where deletion refers to logical removal of data with the possibility of retrieval whereas erasure refers to destruction of data such that it cannot be retrieved. See dpv:DataErasurePolicy
Recipient Informed
Status indicating Recipient has been informed about the specified context
Scope
Indication of the extent or range or boundaries associated with(in) a context
Reversing Process Effects
Involvement where entity can reverse effects of specified context
Partially Compliant
State of partially being compliant i.e. only some objectives have been met, and others have not been in violation
Right Notice
Information associated with rights, such as which rights exist, when and where they are applicable, and other relevant information
This concept also covers information about rights exercise, with dpv:RightExerciseNotice specifically representing information provided in connection with exercising of rights. Both notices may be needed, e.g. RightNotice for providing information about existence and exercise of rights, and RightExerciseNotice for providing additional information specifically about exercise of rights - such as to request more information or provide updates on an exercised rights request
has purpose
Indicates association with Purpose
Audit Conditionally Approved
State of being conditionally approved through the audit
A "conditional approval" is intended to reflect states where the audit has identified further changes which must be implemented before considering the audit has been 'passed', without requiring another audit to validate them. This is distinct from the case where an audit has state 'rejected', which means changes must be made and submitted for review. The requirements of a 'conditional acceptance' are expected to be minor or not significant enough to warrant another audit to review them.
Unintended
Status indicating the specified context was unintended i.e. not intended
End-to-End Encryption (E2EE)
Encrypted communications where data is encrypted by the sender and decrypted by the intended receiver to prevent access to any third party
Also used for specifying the format of provided information, for example a CSV dataset
Physical Surveillance
Physically monitoring areas via surveillance
NIST SP 800-171
Establish Contractual Agreement
Purposes associated with carrying out data processing to establish an agreement, such as for entering into a contract
Data Literacy
Providing skills, knowledge, and understanding to enable reading, writing, analysing, reasoning, and communicating regarding data
Consent Status Valid for Processing
States of consent that can be used as valid justifications for processing data
Practically, given consent is the only valid state for processing
Data Sub-Processor
A 'sub-processor' is a processor engaged by another processor
A 'Sub-Processor' is always a 'Processor' with the distinction of not directly being appointed by the 'Controller'
Information Flow Control
Use of measures to control information flows
Transform
to change the form or nature of data
Private Information Retrieval
Use of cryptographic methods to retrieve a record from a system without revealing which record is retrieved
Legitimate Interest of Controller
Legitimate Interests of a Data Controller in conducting specified activities
Commercial Research
Purposes associated with conducting research in a commercial setting or with intention to commercialise e.g. in a company or sponsored by a company
Authorisation Procedure
Procedures for determining authorisation through permission or authority
non-technical authorisation procedures: How is it described on an organisational level, who gets access to the data
Delivery of Goods
Purposes associated with delivering goods and services requested or asked by consumer
Data Subject Scale
Scale of Data Subject(s)
Innovative use of Technology
Indicates that technology is being used in an innovative manner
Innovative here refers to 'state of the art' rather than the implementing entity, and can be for either new technology or new uses of existing technology
Secondary Importance
Indication of 'secondary' or 'minor' or 'auxiliary' importance
High Automation
Level of automation corresponding to Level 4 in ISO/IEC 22989:2022 where the automation in system is capable of performing all its tasks within specific controlled conditions without human involvement
Data Interoperability Assessment
Measures associated with assessment of data interoperability
Small Scale Of Data Subjects
Scale of data subjects considered small or limited within the context
Aggregate
to aggregate data
Request Status
Status associated with requests
Data Protection Authority
An authority tasked with overseeing legal compliance regarding privacy and data protection laws.
Large Scale Processing
Processing that takes place at large scales (as specified by some criteria)
The exact definition of what constitutes "large scale" depends on use of jurisdictional, domain-specific, or other forms of externally defined criterias. Where possible, this should be reflected by extending this term with the appropriate context.
Consent Expired
The state where the temporal or contextual validity of consent has 'expired'
An example of this state is when the obtained consent has been assigned a duration - which has lapsed or 'expired', making it invalid to be used further for processing data
Effectiveness Determination Procedures
Procedures intended to determine effectiveness of other measures
Support Entity Decision Making
Supporting entities, including individuals, in making decisions
has severity
Indicates the severity associated with a concept
Regional Authority
An authority tasked with overseeing legal compliance for a region
Physical Access Control Method
Access control applied for physical access e.g. premises or equipment
NIST SP 800-12
Also used for specifying a RightExerciseActivity is part of a RightExerciseRecord
Personnel Payment
Purposes associated with management and execution of payment of personnel
Certification
Certification mechanisms, seals, and marks for the purpose of demonstrating compliance
Physical Interruption Protection
Physical protection against interruptions e.g. electrical supply interruption
NIST SP 800-18
Audit Required
State where an audit is determined as being required but has not been conducted
Improve Internal CRM Processes
Purposes associated with improving customer-relationship management (CRM) processes
Physical Authorisation
Physical implementation of authorisation e.g. by stamping a visitor pass
NIST SP 800-16
Access Control Method
Methods which restrict access to a place or resource
Data Redaction
Removal of sensitive information from a data or document
Joint Data Controllers
A group of Data Controllers that jointly determine the purposes and means of processing
While Joint Data Controllers operate together, they are made up of individually distinct legal entities. To indicate the membership of this group, hasDataController should be used to denote each Data Controller. The concept of Joint Data Controllers also allows specifying a single group as the 'Controller' and to specify role and responsibilities within that group for each entity using DPV's concepts (e.g. isImplementedByEntity)
Local Environment Scale
Geographic coverage spanning a specific environment within the locality
For example, geographic scale of an event take place in a specific building or room
Physical Authentication
Physical implementation of authentication e.g. by matching the person to their ID card
NIST SP 800-15
Risk Level
The magnitude of a risk expressed as an indication to aid in its management
Risk Levels can be defined as a combination of different characteristics. For example, ISO 31073:2022 defines it as a combination of consequences and their likelihood. Another example would be the Risk Matrix where Risk Level is defined as a combination of Likelihood and Severity associated with the Risk.
has consequence
Indicates consequence(s) possible or arising from specified concept
Removed plural suffix for consistency
Activity Halted
State of an activity that was occuring in the past, and has been halted or paused or stopped
Security Method
Methods that relate to creating and providing security
Activity Completed
State of an activity that has completed i.e. is fully in the past
Challenging Process
Involvement where entity can challenge the process of specified context
Challenge refers to raising questions about validity, necessity, correctness, or other similar 'trustworthiness' attributes regarding the process or plan or implementation
Data Quality Assessment
Measures associated with assessment of data quality
Informed Consent
Consent that is informed i.e. with the requirement to provide sufficient information to make a consenting decision
The specifics for what information should be provided or made available will depend on the context, use-case, or relevant legal requirements
Consent Record
A Record of Consent or Consent related activities
Prohibition
A rule describing a prohibition to perform an activity
Human Involvement for intervention
Human involvement for the purposes of exercising interventions over the specified operations in context
Intervention indicates the ability to intervene in operations, which can be at various stages. It maps to Conditional and High automation models.
Consent Revoked
The state where the consent is revoked by an entity other than the data subject and which prevents it from being further used as a valid state
An example of this state is when a Data Controller stops utilising previously obtaining consent, such as when that service no longer exists
Regulatory Sandbox
Mechanism used by regulators and businesses for gauging the compatibility of regulations and innovative products, particularly in the context of digitalisation, in a controlled real-world environment with appropriate safeguards in place
Within Device
Location is local and entirely within a device, such as a smartphone
Secure Multi-Party Computation
Use of cryptographic methods for entities to jointly compute functions without revealing inputs
Zero Knowledge Authentication
Authentication using Zero-Knowledge proofs
Recertification Policy
Policy regarding repetition or renewal of existing certification(s)
Sensitivity Level
Sensitivity' reflects the risk of impact if not secured or utilised with appropriate measures and controls e.g. for sensitive data
ISO/IEC TS 38505-3:2021 defines 'data sensitivity' as the potential harm of unauthorised disclosure. DPV's use of the concept goes beyond disclosure as it refers to the level of safeguards or controls the data requires as a reflection of its 'sensitive' nature. To indicate quantified levels of sensitivity, e.g. "high sensitivity", instances of severity can be directly used or specialised
Certification and Seal
Certifications, seals, and marks indicating compliance to regulations or practices
has data source
Indicates the source or origin of data being processed
Match
to combine, compare, or match data from different sources
Small Scale Processing
Processing that takes place at small scales (as specified by some criteria)
Contractual Terms
Contractual terms governing data handling within or with an entity
Incorrect Data
Data that is known to be incorrect or inconsistent with some requirements
Data Storage Policy
Policy regarding storage of data, including the manner, duration, location, and conditions for storage
Consultation
Consultation is a process of receiving feedback, advice, or opinion from an external agency
Non Compliant
State of non-compliance where objectives have not been met, but have not been violated
Changed from not compliant for consistency in commonly used terms
Digital Literacy
Providing skills, knowledge, and understanding to enable reading, writing, analysing, reasoning, and communicating regarding digital technologies and their implications
Transmit
to send out data
Human Involvement for decision
Human involvement for the purposes of exercising decisions over the specified operations in context
Decisions are about exercising control over the operation, and are distinct from input (data or parameters).
Unexpected
Status indicating the specified context was unexpected i.e. not expected
Cannot Opt-in to Process
Involvement where entity cannot opt-in to specified context
Identity Authentication
Purposes associated with performing authentication based on identity as a form of security
has geographic coverage
Indicate the geographic coverage (of specified context)
Often Frequency
Frequency where occurrences are often or frequent, but not continuous
Compliance Unknown
State where the status of compliance is unknown
Third Country
Represents a country outside applicable or compatible jurisdiction as outlined in law
Derived Personal Data
Personal Data that is obtained or derived from other data
Derived Data is data that is obtained through processing of existing data, e.g. deriving first name from full name. To indicate data that is derived but which was not present or evident within the source data, InferredPersonalData should be used.
Reversing Process Output
Involvement where entity can reverse output of specified context
Reversing of outputs indicate discarding the output and going back to the previous output. This is different from correction of output which allows modification of the output - implying continuation of the process.
Entity Uninformed
Status indicating entity is uninformed i.e. has been not been informed about specified context
Data Breach Notice
A notice providing information about data breach(es) i.e. unauthorised transfer, access, use, or modification of data
Georg P. Krog, Paul Ryan, David Hickey, Beatriz Esteves, Harshvardhan J. Pandit
Compliance Indeterminate
State where the status of compliance has not been fully assessed, evaluated, or determined
Improve Existing Products and Services
Purposes associated with improving existing products and services
City
A region consisting of urban population and commerce
Automation Level
Indication of degree or level of automation associated with specified context
This concept was called 'Automation' in previous versions
Consultation with Authority
Consultation with an authority or authoritative entity
Cannot Opt-out from Process
Involvement where entity cannot opt-out from specified context
Assistive Automation
Level of automation corresponding to Level 1 in ISO/IEC 22989:2022 where automation is limited to parts of the system or a specific part of the system in a manner that does not change the control of the human in using/driving the system
Human Involvement is implied here, specifically the ability to make decisions regarding operations, but also possibly for intervention, oversight, and verification
has indication method
Specifies the method by which an entity has indicated the specific context
Incident Management Procedures
Procedures related to management of incidents
Data Controller
The individual or organisation that decides (or controls) the purpose(s) of processing personal data.
The terms 'Controller', 'Data Controller', and 'PII Controller' refer to the same concept
Data Governance
Measures associated with topics typically considered to be part of 'Data Governance'
Lawfulness Unknown
State of the lawfulness not being known
Customer Care
Customer Care refers to purposes associated with purposes for providing assistance, resolving issues, ensuring satisfaction, etc. in relation to services provided
Data Protection Officer
An entity within or authorised by an organisation to monitor internal compliance, inform and advise on data protection obligations and act as a contact point for data subjects and the supervisory authority.
Huge Scale Of Data Subjects
Scale of data subjects considered huge or more than large within the context
Sporadic Scale Of Data Subjects
Scale of data subjects considered sporadic or sparse within the context
is subsidiary of
Indicates this entity is the subsidiary of the specified entity
Legal Obligation
Legal Obligation to conduct the specified activities
Commercially Confidential Data
Data protected through Commercial Confidentiality Agreements
DGA 6.5(c)
Organisation Governance
Purposes associated with conducting activities and functions for governance of an organisation
Request Status Query
State of a request's status being queried
EU Council Regulatory sandboxes and experimentation clauses as tools for better regulation
Cannot Challenge Process
Involvement where entity cannot challenge the process of specified context
Impact Assessment
Calculating or determining the likelihood of impact of an existing or proposed process, which can involve risks or detriments.
Cybersecurity Training
Training methods related to cybersecurity
Autonomous
Level of automation corresponding to Level 6 in ISO/IEC 22989:2022 where the automation in system is capable of modifying its operation domain or its goals without external intervention, control or oversight
Though Autonomous, such operations can still be associated with dpv:HumanInvolved e.g. for inputs, oversight or verification
Controller Uninformed
Status indicating Controller is uninformed i.e. has not been informed about the specified context
Storage Duration
Duration or temporal limitation on storage of data
Consultation with Data Subject
Consultation with data subject(s) or their representative(s)
has data volume
Indicates the volume of data
has identifier
Indicates an identifier associated for identification or reference
Risk Mitigation Measure
Measures intended to mitigate, minimise, or prevent risk.
Controller Informed
Status indicating Controller has been informed about the specified context
Organisational Unit
Entity within an organisation that does not constitute as a separate legal entity
Employee
Data subjects that are employees
Professional Training
Training methods that are intended to provide professional knowledge and expertise
Governance Procedures
Procedures related to governance (e.g. organisation, unit, team, process, system)
Multi National Scale
Geographic coverage spanning multiple nations
has context
Indicates a purpose is restricted to the specified context(s)
has expectation
Indicates whether the specified context was expected or unexpected
has status
Indicates the status of specified concept
Also used to Indicate the status of a Right Exercise Activity
Monotonic Counter Pseudonymisation
A simple pseudonymisation method where identifiers are substituted by a number chosen by a monotonic counter
Primary Importance
Indication of 'primary' or 'main' or 'core' importance
Data Breach Record
Record of a data breach incident
Notification Failed
Status indicating notification(s) could not be completed due to a failure
Data Altruism
Purposes associated with the voluntary sharing of data for the general interest of the public, such as healthcare or combating climate change
Data Altruism as a purpose should be combined with other purposes to indicate their altruistic interpretation or application. E.g. improving healthcare and data altruism in combination.
Authentication using PABC
Use of Privacy-enhancing Attribute Based Credentials (ABC) to perform and manage authentication
Consent Control
The control or activity associated with obtaining, providing, withdrawing, or reaffirming consent
has personal data
Indicates association with Personal Data
has passive entity
indicates the entity is passively involved in specified context
Increase Service Robustness
Purposes associated with improving robustness and resilience of services
Random Location
Location that is random or unknown
Data Processing Policy
Policy regarding data processing activities
This only refers to the policy or plan or procedure describing how the data processing should be conducted. To represent the granular details, see further concepts e.g. dpv:DataStoragePolicy to describe policy regarding storage, or dpv:DataStorageCondition to represent information within the policy for how information should be stored
Risk
A risk or possibility or uncertainty of negative effects, impacts, or consequences
Risks can be associated with one or more different concepts such as purpose, processing, personal data, technical or organisational measure
Physical Device Security
Physical protection for devices and equipment
NIST SP 800-19
Logging Policy
Policy for logging of information
Processing Duration
Conditions regarding duration or temporal limitation for processing
Data Transfer Impact Assessment
Impact Assessment for conducting data transfers
Rule
A rule describing a process or control that directs or determines if and how an activity should be conducted
Consultation with DPO
Consultation with Data Protection Officer(s)
Data Importer
An entity that 'imports' data where importing is considered a form of data transfer
The term 'Data Importer' is used by the EU-EDPB as the entity that receives transferred data across borders. While the EDPB refers to the jurisdictional border of EU, the term within DPV can be used to denote any 'import' or reception of transfer or transmission of data and is thus a broader concept than the EDPB's definition.
Protection of Public Security
Purposes associated with the protection of public security
DGA 3.2(d)
File System Security
Security implemented over a file system
Authentication using ABC
Use of Attribute Based Credentials (ABC) to perform and manage authentication
International Organisation
An organisation and its subordinate bodies governed by public international law, or any other body which is set up by, or on the basis of, an agreement between two or more countries
Consequence as Side-Effect
The consequence(s) possible or arising as a side-effect of specified context
Trusted Execution Environment
Use of cryptographic methods to restrict access and execution to trusted parties and code within a dedicated execution environment
Local Location
Location is local
Non-Citizen
Data subjects that are not citizens (for a jurisdiction)
Huge Data Volume
Data volume that is considered huge or more than large within the context
Structure
to arrange data according to a structure
Vital Interest of Data Subject
Activities are necessary or required to protect vital interests of a data subject
Query
to query or make enquiries over data
Third Party
A ‘third party’ means any natural or legal person other than - the entities directly involved or operating under those directly involved in a process
Third Party in the context of personal data processing are entities other than the data subject, controllers, processors, and authorities
Small Data Volume
Data volume that is considered small or limited within the context
Private Location
Location that is not or cannot be accessed by the public and is controlled as a private space
Third Party as Data Source
Data Sourced from a Third Party, e.g. when data is collected from an entity that is neither the Controller nor the Data Subject
Non-commercial Purpose
Purposes associated with processing activities performed in a non-commercial setting or without intention to commercialise
Statistical Confidentiality Agreement
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for classification and management of 'confidential data' based on a statistical framework
Data
A broad concept representing 'data' or 'information'
Authority Informed
Status indicating Authority has been informed about the specified context
has algorithmic logic
Indicates the logic used in processing such as for automated decision making
Privacy Impact Assessment (PIA)
Impact assessment regarding privacy risks
Implied Consent
Consent that is implied indirectly through an action not associated solely with conveying a consenting decision
Implied consent is expected to also be Informed Consent. An example is a CCTV notice outside a monitored area that informs the individuals that by walking in they would be consenting to the use of camera for surveillance.
Guidelines Principle
Guidelines or Principles regarding processing and operational measures
Combat Climate Change
Purposes associated with combating the causes and consequences of climate change, including reducing gas emissions and fighting emergencies such as floods or wildfires
Post-Quantum Cryptography
Use of algorithms that are intended to be secure against cryptanalytic attack by a quantum computer
Information Security Policy
Policy regarding security of information
Entity Passive Involvement
Involvement where entity is 'passively' or 'not actively' involved
Permission Management
Methods to obtain, provide, modify, and withdraw permissions along with maintaining a record of permissions, retrieving records, and processing changes in permission states
Permission is a broader concept than '(Informed) Consent' as consent when used as a legal basis has specific requirements to be valid. For management of consent, see the concept dpv:ConsentManagement
DGA 12.n
Opting out of Process
Involvement where entity can opt-out from specified context
Compliant
State of being fully compliant
Usage Control
Management of usage, which is intended to be broader than access control and may cover trust, digital rights, or other relevant controls
Identifying Personal Data
Personal Data that explicitly and by itself is sufficient to identify a person
DPV does not use PII ('Personally Identifiable Information') as it has varying and conflicting definitions across sources. Instead the concept 'identifying personal data' is intended to provide a clear categorisation of its interpretation. Where multiple data categories can be combined to create an 'identifying' category e.g. fingerprinting, this concept represents the combined category.
Federated Locations
Location that is federated across multiple separate areas with designation of a primary or central location
Within Virtual Environment
Location is local and entirely within a virtual environment, such as a shared network directory
Make Available
to transform or publish data to be used
Background Checks
Procedure where the background of an entity is assessed to identity vulnerabilities and threats due to their current or intended role
Sub-Processor Agreement
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of data between a Data Processor and a Data (Sub-)Processor
Public Location
Location that is or can be accessed by the public
Public Register of Entities
A publicly available list of entities e.g. to indicate which entities perform a certain activity within a certain location or jurisdiction
Consent Management
Methods to obtain, provide, modify, and withdraw consent along with maintaining a record of consent, retrieving records, and processing changes in consent states
has risk level
Indicates the associated risk level associated with a risk
Sensitive Non Personal Data
Non-personal data deemed sensitive
DGA 30(a)
Generate
to generate or create data
Request Accepted
State of a request being accepted towards fulfilment
Privacy Preserving Protocol
Use of protocols designed with the intention of provided additional guarantees regarding privacy
has conformance status
Indicates the status of being conformant or non-conformant
Disaster Recovery Procedures
Procedures related to management of disasters and recovery
Physical Secure Storage
Physical protection for storage of information or equipment e.g. secure storage for files
Homomorphic Encryption
Use of Homomorphic encryption that permits computations on encrypted data without decrypting it
Automated Decision Making
Processing that involves automated decision making
Automated decision making can be defined as “the ability to make decisions by technological means without human involvement.” (“Guidelines on Automated individual decision-making and Profiling for the purposes of Regulation 2016/679 (wp251rev.01)”, 2018, p. 8)
Technology
The technology, technological implementation, or any techniques, skills, methods, and processes used or applied
Examples (non-exhaustive) include: Algorithm, Process, Method, Skill, Database, Cookies, Server, Device
Consent Status Invalid for Processing
States of consent that cannot be used as valid justifications for processing data
This identifies the stages associated with consent that should not be used to process data
Recipient Uninformed
Status indicating Recipient is uninformed i.e. has not been informed about the specified context
Scoring of Individuals
Processing that involves scoring of individuals
Web Security Protocols
Security implemented at or over web-based protocols
Security Incident Notification
Notification of information about security incident(s)
Social Media Marketing
Purposes associated with conducting marketing through social media
Enforce Access Control
Purposes associated with conducting or enforcing access control as a form of security
Was previously "Access Control". Prefixed to distinguish from Technical Measure.
Subsidiary Legal Entity
A legal entity that operates as a subsidiary of another legal entity
Cannot Correct Process
Involvement where entity cannot correct the process of specified context
Generated Data
Data that is generated or brought into existence without relation to existing data i.e. it is not derived or inferred from other data
Format
to arrange or structure data in a specific form
Legitimate Interest
Legitimate Interests of a Party as justification for specified activities
Biometric Authentication
Use of biometric data for authentication
Uninformed Consent
Consent that is uninformed i.e. without requirement to provide sufficient information to make a consenting decision
Optimise User Interface
Purposes associated with optimisation of interfaces presented to the user
Intended
Status indicating the specified context was intended
has policy
Indicates policy applicable or used
has contact
Specifies contact details of a legal entity such as phone or email
has data subject
Indicates association with Data Subject
Also used to indicate a web page or document providing information or functionality associated with a Right Exercise
Rights Management
Methods associated with rights management where 'rights' refer to controlling who can do what with a resource
Consent
Consent of the Data Subject for specified process or activity
Cannot Reverse Process Output
Involvement where entity cannot reverse output of specified context
Obtain
to solicit or gather data from someone
has service
Indicates associated with the specified service
Consent Notice
A Notice for information provision associated with Consent
Data Subject as Data Source
Data Sourced from Data Subject(s), e.g. when data is collected via a form or observed from their activities
Intellectual Property Rights Management
Management of Intellectual Property Rights with a view to identify and safeguard and enforce them
DGA 3.1.c
has data
Indicates associated with Data (may or may not be personal)
Vendor Management
Purposes associated with manage orders, payment, evaluation, and prospecting related to vendors
Maintain Credit Checking Database
Purposes associated with maintaining a Credit Checking Database
has risk
Indicates applicability of Risk for this concept
Provide Personalised Recommendations
Purposes associated with creating and providing personalised recommendations
Data Breach Impact Assessment (DBIA)
Impact Assessment concerning the consequences and impacts of a data breach
Data Breach assessments can require additional non-security related assessments such as GDPR Art.34 Rights Impact Assessment
Screen
to remove data for some criteria
Consult
to consult or query data
Profiling
to create a profile that describes or represents a person
Sensitive Personal Data
Personal data that is considered 'sensitive' in terms of privacy and/or impact, and therefore requires additional considerations and/or protection
Sensitivity' is a matter of context, and may be defined within legal frameworks. For GDPR, Special categories of personal data are considered a subset of sensitive data. To illustrate the difference between the two, consider the situation where Location data is collected, and which is considered 'sensitive' but not 'special'. As a probable rule, sensitive data require additional considerations whereas special category data requires additional legal basis / justifications.
Legal Compliance
Purposes associated with carrying out data processing to fulfill a legal or statutory obligation
This purpose only refers to processing that is additionally required in order to fulfill the obligations and requirements associated with a law. For example, the use of consent would have its own separate purposes, with this purpose addressing a legal requirement for maintaining consent record (along with RecordManagement). This purpose will typically be used with Legal Obligation as the legal basis.
has recipient
Indicates Recipient of Data
Also used to indicate the Recipient of a Right Exercise Activity
Data Quality Management
Measures associated with management of data quality
Personnel Management
Purposes associated with management of personnel associated with the organisation e.g. evaluation and management of employees and intermediaries
Fulfilment of Contractual Obligation
Purposes associated with carrying out data processing to fulfill a contractual obligation
Targeted Advertising
Purposes associated with creating and providing personalised advertisement where the personalisation is targeted to a specific individual or group of individuals
Renewed Consent Given
The state where a previously given consent has been 'renewed' or 'refreshed' or 'reaffirmed' to form a new instance of given consent
An example of this state is when a previously given consent has expired, and the individual is presented a notice regarding continuing associated processing operations - to which they agree. This state can be useful to keep track of 'reconfirmed' or 'refreshed' consent within consent records, assist notices and contextual agents to create better consenting dialogues, and assist with specific legal obligations related to subsequent consenting
Educational Training
Training methods that are intended to provide education on topic(s)
Indeterminate Duration
Duration that is indeterminate or cannot be determined
Indeterminate means (exact or otherwise) information about the duration cannot be determined, which is distinct from 'EndlessDuration' where it is known (or decided) that the duration is open-ended or without an end.
Security Assessment
Assessment of security intended to identity gaps, vulnerabilities, risks, and effectiveness of controls
Client
Data subjects that are clients or recipients of services
Document Randomised Pseudonymisation
Use of randomised pseudonymisation where the same elements are assigned different values in the same document or database
Security Incident Notice
A notice providing information about security incident(s)
Not Required
Indication of neither being required nor optional i.e. not relevant or needed
Purpose
Purpose or (broader) Goal associated with data or technology
The purpose or goal here is intended to sufficiently describe the intention or objective of why the data or technology is being used, and should be broader than mere technical descriptions of achieving a capability. For example, "Analyse Data" is an abstract purpose with no indication of what the analyses is for as compared to a purpose such as "Marketing" or "Service Provision" which provide clarity and comprehension of the 'purpose' and can be enhanced with additional descriptions. Such modelling is in line with regulatory requirements regarding the specificity of purposes, for example in GDPR
Axel Polleres, Javier Fernández, Harshvardhan J. Pandit, Delaram Golpayegani
Verified Data
Data that has been verified in terms of accuracy, consistency, or quality
Reversing Process Input
Involvement where entity can reverse input of specified context
Consumer
Data subjects that consume goods or services for direct use
Fixed Occurrences Duration
Duration that takes place a fixed number of times e.g. 3 times
Incident Reporting Communication
Procedures related to management of incident reporting
Patient
Data subjects that receive medical attention, treatment, care, advice, or other health related services
Data Reuse Policy
Policy regarding reuse of data i.e. using data for purposes other than its initial purpose
This policy can be used to describe the procedures associated with undertaking such reuse of data, for example to assess its legality and the compatibility of the initial and subsequent purposes
Consultation with Data Subject Representative
Consultation with representative of data subject(s)
Location Fixture
The fixture of location refers to whether the location is fixed
User Interface Personalisation
Purposes associated with personalisation of interfaces presented to the user
Examples of user-interface personalisation include changing the language to match the locale
Entity Involvement
Involvement of an entity in specific context
Provide Consent
Control for providing consent
Indicates how the data subject can provide consent e.g. used with dpv:isExercisedAt
Sporadic Frequency
Frequency where occurrences are sporadic or infrequent or sparse
Review Procedure
A procedure or process that reviews the correctness and validity of other procedures and policies e.g. to ensure continued validity, adequacy for intended purposes, and conformance of processes with findings
Obtain Consent
Control for obtaining consent
Indicates how the controller or entity can obtain consent e.g. used with dpv:isExercisedAt
Repair Impairments
Purposes associated with identifying, rectifying, or otherwise undertaking activities intended to fix or repair impairments to existing functionalities
An example of identifying and rectifying impairments is the process of finding and fixing errors in products, commonly referred to as debugging
Mobile Platform Security
Security implemented over a mobile platform
has notification status
Indicates the status associated with a notice
Data Privacy Vocabulary (DPV) - RDF/XML serialiation
Delete
to remove data in a logical fashion i.e. with the possibility of retrieval
Natural Person
A human
Involvement Status
Status indicating whether the involvement of specified context
Adapt
to modify the data, often rewritten into a new form for a new use
Data Erasure Policy
Policy regarding erasure of data
Erasure or data destruction or secure removal of data refers to irreversible erasure of data. See dpv:DataDeletion for reversible or logical deletion of data
Consent Invalidated
The state where consent has been deemed to be invalid
An example of this state is where an investigating authority or a court finds the collected consent did not meet requirements, and 'invalidates' both prior and future uses of it to carry out processing
Data Subject Informed
Status indicating DataSubject has been informed about the specified context
Modify
to modify or change data
Also used for specifying the temporal validity of an activity associated with Right Exercise. For example, limits on duration for providing or accessing provided information
Audit Approved
State of being approved through the audit
Importance
An indication of 'importance' within a context
Importance can be used to express importance, desirability, relevance, or significance as a context.
Guardian(s) of Data Subject
Guardian(s) of data subjects such as children
Notification Ongoing
Status indicating notification(s) are ongoing
has technical measure
Indicates use or applicability of Technical measure
Technical and Organisational Measure
Technical and Organisational measures used to safeguard and ensure good practices in connection with data and technologies
Organisation Risk Management
Purposes associated with managing risk for organisation's activities
Data Protection Training
Training intended to increase knowledge regarding data protection
has involvement
Indicates the involvement status for the specified context
Align
to adjust the data to be in relation to another data
Conformance Assessment
Assessment regarding conformance with standards or norms or guidelines or similar instruments
Actively Involved
Status indicating the specified context is 'actively' involved
An example of active involvement is a person directly using a system to enter information
Data Privacy Vocabulary (DPV) - N3 serialiation
has jurisdiction
Indicates applicability of specified jurisdiction
Fulfilment of Obligation
Purposes associated with carrying out data processing to fulfill an obligation
Personalised Benefits
Purposes associated with creating and providing personalised benefits for a service
Digital Signatures
Expression and authentication of identity through digital information containing cryptographic signatures
Remove
to destruct or erase data
Non-Commercial Research
Purposes associated with conducting research in a non-commercial setting e.g. for a non-profit-organisation (NGO)
WebBrowser Security
Security implemented at or over web browsers
Member
Data subjects that are members of a group, organisation, or other collectives
Intention Status
Intention is associated with the goal or purpose for what is about to happen i.e. an ex-ante indication of whether the specified context is/was planned or intended. Intention and Expectation are closely related terms. We recommend using Intention when the entity has the ability to control the implementation and Expectation for when the entity does not have control or for what happens after or beyond the exercise of control.
Until Event Duration
Duration that takes place until a specific event occurs e.g. Account Closure
Fixed Multiple Locations
Location that is fixed with multiple places e.g. multiple cities
Supranational Authority
An authority tasked with overseeing legal compliance for a supra-national union e.g. EU
is indicated at time
Specifies the temporal information for when the entity has indicated the specific context
Maintain Credit Rating Database
Purposes associated with maintaining a Credit Rating Database
Not Involved
Status indicating the specified context is 'not' involved
Data Transfer Notice
Notice for the legal entity for the transfer of its data
DGA 5.9
Customer Order Management
Customer Order Management refers to purposes associated with managing customer orders i.e. processing of an order related to customer's purchase of good or services
Anonymise
to irreversibly alter personal data in such a way that an unique data subject can no longer be identified directly or indirectly or in combination with other data
has notice
Indicates the use or applicability of a Notice for the specified context
Sensitive Data
Data deemed sensitive
has risk assessment
Indicates an associated risk assessment
National Authority
An authority tasked with overseeing legal compliance for a nation
Processing Context
Context or conditions within which processing takes place
Withdraw Consent
Control for withdrawing consent
Indicates how the data subject can withdraw consent e.g. used with dpv:isExercisedAt
Lawfulness
Status associated with expressing lawfulness or legal compliance
has non-involved entity
indicates the entity is not involved in specified context
Data Privacy Vocabulary (DPV) - HTML serialiation
Acquire
to come into possession or control of the data
Activity Planned
State of an activity being planned with concrete plans for implementation
Identity Verification
Purposes associated with verifying or authenticating identity as a form of security
Large Scale Of Data Subjects
Scale of data subjects considered large within the context
Student
Data subjects that are students
Hash-based Message Authentication Code (HMAC)
Use of HMAC where message authentication code (MAC) utilise a cryptographic hash function and a secret cryptographic key
Contract
Creation, completion, fulfilment, or performance of a contract involving specified processing of data or technologies