dct:accessRights
type: Property
type: Concept
in scheme: rights-properties
scope note: Also used for specifying constraints on access associated with Rights Exercising (e.g. User must log in) or access to provided data (e.g. access via link)

dct:format
type: Property
type: Concept
in scheme: rights-properties
scope note: Also used for specifying the format of provided information, for example a CSV dataset

dct:hasPart
domain includes: Right Exercise Record
range includes: Right Exercise Activity
type: Property
type: Concept
in scheme: rights-properties
scope note: Also used for specifying a RightExerciseRecord has RightExerciseActivity as part of its records

dct:isPartOf
domain includes: Right Exercise Activity
range includes: Right Exercise Record
type: Property
type: Concept
in scheme: rights-properties
scope note: Also used for specifying a RightExerciseActivity is part of a RightExerciseRecord

dct:valid
type: Property
type: Concept
in scheme: rights-properties
scope note: Also used for specifying the temporal validity of an activity associated with Right Exercise. For example, limits on duration for providing or accessing provided information

dcat:Resource
created: 2022-11-02
type: Class
type: Concept
in scheme: rights-classes
scope note: A dataset, data service, or any other resource associated with Right Exercise - such as for providing a copy of data

foaf:page
domain includes: Right Exercise Activity
type: Property
type: Concept
in scheme: rights-properties
scope note: Also used to indicate a web page or document providing information or functionality associated with a Right Exercise

Data Privacy Vocabulary (DPV)
bibliographic citation: Data Privacy Vocabulary (DPV) -- Version 2. Harshvardhan J. Pandit, Beatriz Esteves, Georg P. Krog, Paul Ryan, Delaram Golpayegani, Julian Flake https://doi.org/10.48550/arXiv.2404.13426
conforms to: http://www.w3.org/2000/01/rdf-schema
conforms to: http://www.w3.org/2004/02/skos/core
contributor: Arthit Suriyawongkul
contributor: Axel Polleres
contributor: Beatriz Esteves
contributor: Bud Bruegger
contributor: Damien Desfontaines
contributor: David Hickey
contributor: Delaram Golpayegani
contributor: Elmar Kiesling
contributor: Fajar Ekaputra
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Javier Fernández
contributor: Julian Flake
contributor: Mark Lizar
contributor: Maya Borges
contributor: Paul Ryan
contributor: Piero Bonatti
contributor: Rana Saniei
contributor: Rob Brennan
contributor: Rudy Jacob
contributor: Simon Steyskal
contributor: Steve Hickman
created: 2022-08-18
creator: Beatriz Esteves
creator: Delaram Golpayegani
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
description: The Data Privacy Vocabulary (DPV) provides terms (classes and properties) to represent information about processing of personal data, for example - purposes, processing operations, personal data, technical and organisational measures.
issued: 2022-08-18
license: document-license-2023
modified: 2024-08-01
publisher: www.w3.org
source: dpvcg
doi: 10.5281/zenodo.12505841
status: http://purl.org/ontology/bibo/status/published
preferred namespace prefix: dpv
preferred namespace uri: https://w3id.org/dpv#
type: Ontology
type: Profile
label: DPV
version IRI: https://w3id.org/dpv/2.0
version info: 2.0
has resource: Data Privacy Vocabulary (DPV) - HTML serialiation
has resource: Data Privacy Vocabulary (DPV) - JSON-LD serialiation
has resource: Data Privacy Vocabulary (DPV) - N3 serialiation
has resource: Data Privacy Vocabulary (DPV) - RDF/XML serialiation
has resource: Data Privacy Vocabulary (DPV) - Turtle serialiation
has resource: Examples for Data Privacy Vocabulary
has resource: Guides for Data Privacy Vocabulary
has resource: Primer for Data Privacy Vocabulary
is profile of: rdf-schema#
is profile of: core#
version: 2.0

AI Literacy
contributor: Harshvardhan J. Pandit
created: 2024-05-17
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Digital Literacy
definition: Providing skills, knowledge, and understanding to enable reading, writing, analysing, reasoning, and communicating regarding AI
in scheme: organisational-measures-classes

Academic Research
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
created: 2019-04-05
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Research and Development
definition: Purposes associated with conducting or assisting with research conducted in an academic context e.g. within universities
in scheme: purposes-classes
related: Education

Academic or Scientific Organisation
contributor: Harshvardhan J. Pandit
created: 2022-02-02
modified: 2020-10-05
source: ADMS controlled vocabulary
type: Class
type: Concept
subclass of: Organisation
term status: accepted
broader: Organisation
definition: Organisations related to academia or scientific pursuits e.g. Universities, Schools, Research Bodies
in scheme: entities-organisation-classes

Access
contributor: Harshvardhan J. Pandit, Georg P. Krog
created: 2022-06-15
type: Class
type: Concept
type: Processing
term status: accepted
broader: Use
definition: to access data
in scheme: processing-classes

Access Control Method
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
created: 2019-04-05
example: E0020
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Technical Measure
definition: Methods which restrict access to a place or resource
in scheme: technical-measures-classes

Account Management
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
created: 2021-09-08
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Purpose
definition: Account Management refers to purposes associated with account management, such as to create, provide, maintain, and manage accounts
in scheme: purposes-classes

Acquire
created: 2019-05-07
source: GDPR Art.4-2
type: Class
type: Concept
type: Processing
term status: accepted
broader: Obtain
definition: to come into possession or control of the data
in scheme: processing-classes

Active Right
contributor: Harshvardhan J. Pandit, Beatriz Esteves, Georg P. Krog, Paul Ryan
created: 2022-10-22
type: Class
type: Concept
type: Right
term status: accepted
broader: Right
definition: The right(s) applicable, provided, or expected that need to be (actively) exercised
in scheme: rights-classes
scope note: Active rights require the entity to expressly exercise them. For example, a Data Subject exercising their right to withdraw their consent.

Actively Involved
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
created: 2024-05-10
type: Class
type: Concept
type: Involvement Status
term status: accepted
broader: Involvement Status
definition: Status indicating the specified context is 'actively' involved
in scheme: status-classes
scope note: An example of active involvement is a person directly using a system to enter information

Activity Completed
contributor: Harshvardhan J. Pandit
created: 2022-05-18
type: Class
type: Concept
type: Activity Status
term status: accepted
broader: Activity Status
definition: State of an activity that has completed i.e. is fully in the past
in scheme: status-classes

Activity Halted
contributor: Harshvardhan J. Pandit
created: 2022-05-18
type: Class
type: Concept
type: Activity Status
term status: accepted
broader: Activity Status
definition: State of an activity that was occuring in the past, and has been halted or paused or stopped
in scheme: status-classes

Activity Monitoring
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Technical Measure
definition: Monitoring of activities including assessing whether they have been successfully initiated and completed
in scheme: technical-measures-classes

Activity Not Completed
contributor: Harshvardhan J. Pandit
created: 2022-11-30
type: Class
type: Concept
type: Activity Status
term status: accepted
broader: Activity Status
definition: State of an activity that could not be completed, but has reached some end state
in scheme: status-classes
scope note: This relates to a 'Stop' state as distinct from a 'Halt' state. It makes no comments on whether the Activity can be resumed or continued towards completion.

Activity Ongoing
contributor: Harshvardhan J. Pandit
created: 2022-05-18
type: Class
type: Concept
type: Activity Status
term status: accepted
broader: Activity Status
definition: State of an activity occurring in continuation i.e. currently ongoing
in scheme: status-classes

Activity Planned
contributor: Harshvardhan J. Pandit
created: 2024-05-19
type: Class
type: Concept
type: Activity Status
term status: accepted
broader: Activity Status
definition: State of an activity being planned with concrete plans for implementation
in scheme: status-classes

Activity Proposed
contributor: Harshvardhan J. Pandit
created: 2022-05-18
modified: 2024-05-19
type: Class
type: Concept
type: Activity Status
term status: accepted
broader: Activity Status
definition: State of an activity being proposed without any concrete plans for implementation
in scheme: status-classes

Activity Status
contributor: Harshvardhan J. Pandit
created: 2022-05-18
example: E0054
type: Class
type: Concept
subclass of: Status
term status: accepted
broader: Status
definition: Status associated with activity operations and lifecycles
in scheme: status-classes

Adapt
created: 2019-05-07
source: GDPR Art.4-2
type: Class
type: Concept
type: Processing
term status: accepted
broader: Transform
definition: to modify the data, often rewritten into a new form for a new use
in scheme: processing-classes

Adult
contributor: Georg P. Krog
created: 2022-03-30
type: Class
type: Concept
type: Data Subject
term status: accepted
broader: Data Subject
definition: A natural person that is not a child i.e. has attained some legally specified age of adulthood
in scheme: entities-datasubject-classes

Advertising
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
created: 2020-11-04
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Marketing
definition: Purposes associated with conducting advertising i.e. process or artefact used to call attention to a product, service, etc. through announcements, notices, or other forms of communication
in scheme: purposes-classes
scope note: Advertising is a subset of Marketing. Advertising by itself does not indicate 'personalisation' i.e. personalised ads.

Age Verification
contributor: Beatriz Esteves, Arthit Suriyawongkul, Harshvardhan J. Pandit
created: 2024-02-14
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Verification
definition: Purposes associated with verifying or authenticating age or age related information as a form of security
in scheme: purposes-classes
scope note: Age Verification can include verification of the exact age, e.g. being 21 years old, a date, e.g. birth date is 01 January 1969, or a condition, e.g. age is over 21 years and the person is an adult. Specific dedicated resources should be used to further express information and processes associated with Age Verification, for example the Age Verification Vocabulary https://w3id.org/age/

Aggregate
contributor: Beatriz Esteves, Harshvardhan J. Pandit
created: 2024-04-14
source: SPECIAL Project
type: Class
type: Concept
type: Processing
term status: accepted
broader: Alter
definition: to aggregate data
in scheme: processing-classes
related: Aggregate

Algorithmic Logic
contributor: Harshvardhan J. Pandit
created: 2022-01-26
modified: 2023-12-10
type: Class
type: Concept
subclass of: Processing Context
term status: accepted
broader: Processing Context
definition: The algorithmic logic applied or used
in scheme: processing-context-classes
scope note: Algorithmic Logic is intended as a broad concept for explaining the use of algorithms and automated decisions making within Processing. To describe the actual algorithm, see the Algorithm concept.

Align
created: 2019-05-07
source: GDPR Art.4-2
type: Class
type: Concept
type: Processing
term status: accepted
broader: Transform
definition: to adjust the data to be in relation to another data
in scheme: processing-classes

Alter
created: 2019-05-07
source: GDPR Art.4-2
type: Class
type: Concept
type: Processing
term status: accepted
broader: Transform
definition: to change the data without changing it into something else
in scheme: processing-classes

Analyse
created: 2019-05-07
source: SPECIAL Project
type: Class
type: Concept
type: Processing
term status: accepted
broader: Use
definition: to study or examine the data in detail
in scheme: processing-classes
related: Analyse

Anonymisation
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar, Maya Borges, Damien Desfontaines
created: 2019-04-05
modified: 2022-11-24
source: ISO 29100:2011
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: De-Identification
definition: Anonymisation is the process by which data is irreversibly altered in such a way that a data subject can no longer be identified directly or indirectly, either by the entity holding the data alone or in collaboration with other entities and information sources
in scheme: technical-measures-classes

Anonymise
created: 2019-05-07
source: SPECIAL Project
type: Class
type: Concept
type: Processing
term status: accepted
broader: Transform
definition: to irreversibly alter personal data in such a way that an unique data subject can no longer be identified directly or indirectly or in combination with other data
in scheme: processing-classes
related: Anonymise

Anonymised Data
contributor: Piero Bonatti
created: 2022-01-19
type: Class
type: Concept
subclass of: Non-Personal Data
term status: accepted
broader: Non-Personal Data
definition: Personal Data that has been (fully and completely) anonymised so that it is no longer considered Personal Data
in scheme: personal-data-classes
scope note: It is advised to carefully consider indicating data is fully or completely anonymised by determining whether the data by itself or in combination with other data can identify a person. Failing this condition, the data should be denoted as PseudonymisedData. To indicate data is anonymised only for a specified entity (e.g. within an organisation), the concept ContextuallyAnonymisedData (as subclass of PseudonymisedData) should be used instead of AnonymisedData.

Applicability
contributor: Harshvardhan J. Pandit
created: 2023-08-24
example: E0053
type: Class
type: Concept
subclass of: Context
term status: accepted
broader: Context
definition: Concept provided to represent indication of cases where the information or context is not applicable (N/A) or not available or this is not known or determined yet. If the information is applicable and available, this concept should not be used.
in scheme: context-classes
scope note: These concepts are useful in closed-world interpretations, for example in forms where a field must have a value to explicitly denote it is not applicable or the information is not available yet.

Applicant
contributor: Harshvardhan J. Pandit, Georg P. Krog, Julian Flake, Paul Ryan, Beatriz Esteves
created: 2022-04-06
type: Class
type: Concept
type: Data Subject
term status: accepted
broader: Data Subject
definition: Data subjects that are applicants in some context
in scheme: entities-datasubject-classes

Assess
contributor: Harshvardhan J. Pandit, Georg P. Krog
created: 2022-06-15
type: Class
type: Concept
type: Processing
term status: accepted
broader: Use
definition: to assess data for some criteria
in scheme: processing-classes

Assessment
contributor: Harshvardhan J. Pandit
created: 2021-09-08
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Organisational Measure
definition: The document, plan, or process for assessment or determination towards a purpose e.g. assessment of legality or impact assessments
in scheme: organisational-measures-classes

Asset Management Procedures
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA 5G Cybersecurity Standards
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Governance Procedures
definition: Procedures related to management of assets
in scheme: organisational-measures-classes

Assistive Automation
contributor: Harshvardhan J. Pandit, Delaram Golpayegani
created: 2023-12-10
modified: 2024-04-20
source: ISO/IEC 22989:2022 Artificial intelligence concepts and terminology
type: Class
type: Concept
type: Automation Level
term status: accepted
broader: Automation Level
definition: Level of automation corresponding to Level 1 in ISO/IEC 22989:2022 where automation is limited to parts of the system or a specific part of the system in a manner that does not change the control of the human in using/driving the system
in scheme: processing-context-classes
scope note: Human Involvement is implied here, specifically the ability to make decisions regarding operations, but also possibly for intervention, oversight, and verification

Asylum Seeker
contributor: Georg P. Krog
created: 2022-06-15
type: Class
type: Concept
type: Data Subject
term status: accepted
broader: Vulnerable Data Subject
definition: Data subjects that are asylum seekers
in scheme: entities-datasubject-classes

Asymmetric Cryptography
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Cryptographic Methods
definition: Use of public-key cryptography or asymmetric cryptography involving a public and private pair of keys
in scheme: technical-measures-classes

Asymmetric Encryption
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Data Pseudonymisation: Advanced Techniques and Use Cases
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Encryption
definition: Use of asymmetric cryptography to encrypt data
in scheme: technical-measures-classes

Audit Approved
contributor: Harshvardhan J. Pandit
created: 2022-05-18
type: Class
type: Concept
type: Audit Status
term status: accepted
broader: Audit Status
definition: State of being approved through the audit
in scheme: status-classes

Audit Conditionally Approved
contributor: Paul Ryan
created: 2022-06-29
type: Class
type: Concept
type: Audit Status
term status: accepted
broader: Audit Status
definition: State of being conditionally approved through the audit
in scheme: status-classes
scope note: A "conditional approval" is intended to reflect states where the audit has identified further changes which must be implemented before considering the audit has been 'passed', without requiring another audit to validate them. This is distinct from the case where an audit has state 'rejected', which means changes must be made and submitted for review. The requirements of a 'conditional acceptance' are expected to be minor or not significant enough to warrant another audit to review them.

Audit Not Required
contributor: Harshvardhan J. Pandit
created: 2022-05-18
type: Class
type: Concept
type: Audit Status
term status: accepted
broader: Audit Status
definition: State where an audit is determined as not being required
in scheme: status-classes

Audit Rejected
contributor: Harshvardhan J. Pandit
created: 2022-05-18
type: Class
type: Concept
type: Audit Status
term status: accepted
broader: Audit Status
definition: State of not being approved or being rejected through the audit
in scheme: status-classes

Audit Requested
contributor: Harshvardhan J. Pandit
created: 2022-05-18
type: Class
type: Concept
type: Audit Status
term status: accepted
broader: Audit Status
definition: State of an audit being requested whose outcome is not yet known
in scheme: status-classes

Audit Required
contributor: Harshvardhan J. Pandit
created: 2022-05-18
type: Class
type: Concept
type: Audit Status
term status: accepted
broader: Audit Status
definition: State where an audit is determined as being required but has not been conducted
in scheme: status-classes

Audit Status
contributor: Harshvardhan J. Pandit
created: 2022-05-18
example: E0056
example: E0057
type: Class
type: Concept
subclass of: Status
term status: accepted
broader: Status
definition: Status associated with Auditing or Investigation
in scheme: status-classes

Authentication using ABC
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Data Protection Engineering
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Cryptographic Authentication
definition: Use of Attribute Based Credentials (ABC) to perform and manage authentication
in scheme: technical-measures-classes

Authentication using PABC
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Data Protection Engineering
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Cryptographic Authentication
definition: Use of Privacy-enhancing Attribute Based Credentials (ABC) to perform and manage authentication
in scheme: technical-measures-classes

Authentication Protocols
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
created: 2019-04-05
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Technical Measure
definition: Protocols involving validation of identity i.e. authentication of a person or information
in scheme: technical-measures-classes

Authorisation Procedure
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
created: 2019-04-05
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Security Procedure
definition: Procedures for determining authorisation through permission or authority
in scheme: organisational-measures-classes
scope note: non-technical authorisation procedures: How is it described on an organisational level, who gets access to the data

Authorisation Protocols
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Technical Measure
definition: Protocols involving authorisation of roles or profiles to determine permission, rights, or privileges
in scheme: technical-measures-classes

Authority
contributor: Georg P. Krog, Paul Ryan, Harshvardhan J. Pandit
created: 2020-11-04
type: Class
type: Concept
subclass of: Governmental Organisation
term status: accepted
broader: Governmental Organisation
definition: An authority with the power to create or enforce laws, or determine their compliance.
in scheme: entities-authority-classes

Authority Informed
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
created: 2024-05-10
type: Class
type: Concept
type: Entity Informed Status
term status: accepted
broader: Entity Informed
definition: Status indicating Authority has been informed about the specified context
in scheme: status-classes

Authority Uninformed
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
created: 2024-05-10
type: Class
type: Concept
type: Entity Informed Status
term status: accepted
broader: Entity Uninformed
definition: Status indicating Authority is uninformed i.e. has not been informed about the specified context
in scheme: status-classes

Automated Decision Making
contributor: Harshvardhan J. Pandit, Piero Bonatti
created: 2020-11-04
modified: 2022-09-07
source: GDPR Art.4-2
type: Class
type: Concept
subclass of: Decision Making
term status: accepted
broader: Decision Making
definition: Processing that involves automated decision making
in scheme: processing-context-classes
scope note: Automated decision making can be defined as “the ability to make decisions by technological means without human involvement.” (“Guidelines on Automated individual decision-making and Profiling for the purposes of Regulation 2016/679 (wp251rev.01)”, 2018, p. 8)

Automated Scoring of Individuals
contributor: Harshvardhan J. Pandit
created: 2024-04-14
type: Class
type: Concept
type: Scoring of Individuals
term status: accepted
broader: Scoring of Individuals
definition: Processing that involves automated scoring of individuals
in scheme: processing-context-classes
scope note: Scoring can lead to the action being considered Decision Making if the scoring is itself a decision - see 2023-MAR-16 opinion of Advocate General on Case C 634/21. Therefore, the assessment of whether scoring was automated or not is important given the legal obligations surrounding automated decision making e.g. in GDPR

Automation Level
contributor: Harshvardhan J. Pandit, Delaram Golpayegani
created: 2023-12-10
modified: 2024-04-20
source: ISO/IEC 22989:2022 Artificial intelligence concepts and terminology
example: E0013
type: Class
type: Concept
subclass of: Processing Context
term status: accepted
broader: Processing Context
definition: Indication of degree or level of automation associated with specified context
in scheme: processing-context-classes
scope note: This concept was called 'Automation' in previous versions

Autonomous
contributor: Harshvardhan J. Pandit, Delaram Golpayegani
created: 2023-12-10
modified: 2024-04-20
source: ISO/IEC 22989:2022 Artificial intelligence concepts and terminology
type: Class
type: Concept
type: Automation Level
term status: accepted
broader: Automation Level
definition: Level of automation corresponding to Level 6 in ISO/IEC 22989:2022 where the automation in system is capable of modifying its operation domain or its goals without external intervention, control or oversight
in scheme: processing-context-classes
scope note: Though Autonomous, such operations can still be associated with dpv:HumanInvolved e.g. for inputs, oversight or verification

Background Checks
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA 5G Cybersecurity Standards
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Security Procedure
definition: Procedure where the background of an entity is assessed to identity vulnerabilities and threats due to their current or intended role
in scheme: organisational-measures-classes

Biometric Authentication
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Authentication Protocols
definition: Use of biometric data for authentication
in scheme: technical-measures-classes

Cannot Challenge Process
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Steve Hickman
created: 2024-05-11
type: Class
type: Concept
type: Entity Non-Permissive Involvement
term status: accepted
broader: Entity Non-Permissive Involvement
definition: Involvement where entity cannot challenge the process of specified context
in scheme: processing-context-classes
scope note: Challenge refers to raising questions about validity, necessity, correctness, or other similar 'trustworthiness' attributes regarding the process or plan or implementation

Cannot Challenge Process Input
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Steve Hickman
created: 2024-05-11
type: Class
type: Concept
type: Entity Non-Permissive Involvement
term status: accepted
broader: Entity Non-Permissive Involvement
definition: Involvement where entity cannot challenge input of specified context
in scheme: processing-context-classes

Cannot Challenge Process Output
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Steve Hickman
created: 2024-05-11
type: Class
type: Concept
type: Entity Non-Permissive Involvement
term status: accepted
broader: Entity Non-Permissive Involvement
definition: Involvement where entity cannot challenge the output of specified context
in scheme: processing-context-classes
scope note: Challenge refers to raising questions about validity, necessity, correctness, or other similar 'trustworthiness' attributes regarding the output of the process or plan or implementation (where output is distinct from the process itself)

Cannot Correct Process
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Steve Hickman
created: 2024-05-11
type: Class
type: Concept
type: Entity Non-Permissive Involvement
term status: accepted
broader: Entity Non-Permissive Involvement
definition: Involvement where entity cannot correct the process of specified context
in scheme: processing-context-classes

Cannot Correct Process Input
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Steve Hickman
created: 2024-05-11
type: Class
type: Concept
type: Entity Non-Permissive Involvement
term status: accepted
broader: Entity Non-Permissive Involvement
definition: Involvement where entity cannot correct input of specified context
in scheme: processing-context-classes

Cannot Correct Process Output
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Steve Hickman
created: 2024-05-11
type: Class
type: Concept
type: Entity Non-Permissive Involvement
term status: accepted
broader: Entity Non-Permissive Involvement
definition: Involvement where entity cannot correct the output of specified context
in scheme: processing-context-classes

Cannot Object to Process
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Steve Hickman
created: 2024-05-11
type: Class
type: Concept
type: Entity Non-Permissive Involvement
term status: accepted
broader: Entity Non-Permissive Involvement
definition: Involvement where entity cannot object to process of specified context
in scheme: processing-context-classes

Cannot Opt-in to Process
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Steve Hickman
created: 2024-05-11
type: Class
type: Concept
type: Entity Non-Permissive Involvement
term status: accepted
broader: Entity Non-Permissive Involvement
definition: Involvement where entity cannot opt-in to specified context
in scheme: processing-context-classes

Cannot Opt-out from Process
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Steve Hickman
created: 2024-05-11
type: Class
type: Concept
type: Entity Non-Permissive Involvement
term status: accepted
broader: Entity Non-Permissive Involvement
definition: Involvement where entity cannot opt-out from specified context
in scheme: processing-context-classes

Cannot Reverse Process Effects
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Steve Hickman
created: 2024-05-11
type: Class
type: Concept
type: Entity Non-Permissive Involvement
term status: accepted
broader: Entity Non-Permissive Involvement
definition: Involvement where entity cannot reverse effects of specified context
in scheme: processing-context-classes
scope note: Effects refer to consequences and impacts arising from the process or from the outputs of a process

Cannot Reverse Process Input
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Steve Hickman
created: 2024-05-11
type: Class
type: Concept
type: Entity Non-Permissive Involvement
term status: accepted
broader: Entity Non-Permissive Involvement
definition: Involvement where entity cannot reverse input of specified context
in scheme: processing-context-classes
scope note: Reversion can be considered a form of correction in some instances. We welcome inputs to further explore and define this relation between correction and reversion concepts.

Cannot Reverse Process Output
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Steve Hickman
created: 2024-05-11
type: Class
type: Concept
type: Entity Non-Permissive Involvement
term status: accepted
broader: Entity Non-Permissive Involvement
definition: Involvement where entity cannot reverse output of specified context
in scheme: processing-context-classes

Cannot Withdraw from Process
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Steve Hickman
created: 2024-05-11
type: Class
type: Concept
type: Entity Non-Permissive Involvement
term status: accepted
broader: Entity Non-Permissive Involvement
definition: Involvement where entity cannot withdraw a previously given assent from specified context
in scheme: processing-context-classes

Certification
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
created: 2019-04-05
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Certification and Seal
definition: Certification mechanisms, seals, and marks for the purpose of demonstrating compliance
in scheme: organisational-measures-classes

Certification and Seal
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
created: 2019-04-05
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Organisational Measure
definition: Certifications, seals, and marks indicating compliance to regulations or practices
in scheme: organisational-measures-classes

Challenging Process
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Steve Hickman
created: 2024-05-11
type: Class
type: Concept
type: Entity Permissive Involvement
term status: accepted
broader: Entity Permissive Involvement
definition: Involvement where entity can challenge the process of specified context
in scheme: processing-context-classes
scope note: Challenge refers to raising questions about validity, necessity, correctness, or other similar 'trustworthiness' attributes regarding the process or plan or implementation

Challenging Process Input
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Steve Hickman
created: 2024-05-11
type: Class
type: Concept
type: Entity Permissive Involvement
term status: accepted
broader: Entity Permissive Involvement
definition: Involvement where entity can challenge input of specified context
in scheme: processing-context-classes

Challenging Process Output
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Steve Hickman
created: 2024-05-11
type: Class
type: Concept
type: Entity Permissive Involvement
term status: accepted
broader: Entity Permissive Involvement
definition: Involvement where entity can challenge the output of specified context
in scheme: processing-context-classes
scope note: Challenge refers to raising questions about validity, necessity, correctness, or other similar 'trustworthiness' attributes regarding the output of the process or plan or implementation (where output is distinct from the process itself)

Child
contributor: Harshvardhan J. Pandit
created: 2020-11-25
modified: 2022-06-22
type: Class
type: Concept
type: Data Subject
term status: accepted
broader: Data Subject
definition: A 'child' is a natural legal person who is below a certain legal age depending on the legal jurisdiction.
in scheme: entities-datasubject-classes
scope note: The legality of age defining a child varies by jurisdiction. In addition, 'child' is distinct from a 'minor'. For example, the legal age for consumption of alcohol can be 21, which makes a person of age 20 a 'minor' in this context. In other cases, 'minor' and 'child' are used interchangeably to refer to a person below some legally defined age.

Citizen
contributor: Harshvardhan J. Pandit, Georg P. Krog, Julian Flake, Paul Ryan, Beatriz Esteves
created: 2022-04-06
type: Class
type: Concept
type: Data Subject
term status: accepted
broader: Data Subject
definition: Data subjects that are citizens (for a jurisdiction)
in scheme: entities-datasubject-classes

City
contributor: Harshvardhan J. Pandit
created: 2022-10-22
type: Class
type: Concept
subclass of: Region
term status: accepted
broader: Region
definition: A region consisting of urban population and commerce
in scheme: jurisdiction-classes

Client
contributor: Harshvardhan J. Pandit, Georg P. Krog, Julian Flake, Paul Ryan, Beatriz Esteves
created: 2022-04-06
type: Class
type: Concept
type: Data Subject
term status: accepted
broader: Customer
definition: Data subjects that are clients or recipients of services
in scheme: entities-datasubject-classes

Cloud Location
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
type: Class
type: Concept
type: Location
term status: accepted
broader: Remote Location
definition: Location that is in the 'cloud' i.e. a logical location operated over the internet
in scheme: jurisdiction-classes

Code of Conduct
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
created: 2019-04-05
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Guidelines Principle
definition: A set of rules or procedures outlining the norms and practices for conducting activities
in scheme: organisational-measures-classes

Collect
created: 2019-05-07
source: SPECIAL Project
source: GDPR Art.4-2
type: Class
type: Concept
type: Processing
term status: accepted
broader: Obtain
definition: to gather data from someone
in scheme: processing-classes
related: Collect

Collected Data
created: 2023-12-10
type: Class
type: Concept
subclass of: Data
term status: accepted
broader: Data
definition: Data that has been obtained by collecting it from a source
in scheme: personal-data-classes

Collected Personal Data
contributor: Harshvardhan J. Pandit
created: 2022-03-30
modified: 2023-12-10
example: E0046
type: Class
type: Concept
subclass of: Collected Data
subclass of: Personal Data
term status: accepted
broader: Collected Data
broader: Personal Data
definition: Personal Data that has been collected from another source such as the Data Subject
in scheme: personal-data-classes
scope note: To indicate the source of data, use the DataSource concept with the hasDataSource relation

Combat Climate Change
contributor: Beatriz Esteves, Harshvardhan J. Pandit
created: 2024-02-14
source: DGA 2.16
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Public Benefit
definition: Purposes associated with combating the causes and consequences of climate change, including reducing gas emissions and fighting emergencies such as floods or wildfires
in scheme: purposes-classes

Combine
created: 2019-05-07
source: GDPR Art.4-2
source: SPECIAL Project
type: Class
type: Concept
type: Processing
term status: accepted
broader: Transform
definition: to join or merge data
in scheme: processing-classes
related: Aggregate

Commercial Purpose
contributor: Beatriz Esteves, Harshvardhan J. Pandit
created: 2024-02-14
source: DGA 4.4
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Purpose
definition: Purposes associated with processing activities performed in a commercial setting or with intention to commercialise
in scheme: purposes-classes

Commercial Research
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
created: 2019-04-05
modified: 2024-04-14
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Commercial Purpose
broader: Research and Development
definition: Purposes associated with conducting research in a commercial setting or with intention to commercialise e.g. in a company or sponsored by a company
in scheme: purposes-classes
related: Develop

Commercially Confidential Data
created: 2024-02-14
source: DGA 6.5(c)
type: Class
type: Concept
subclass of: Data
term status: accepted
broader: Data
definition: Data protected through Commercial Confidentiality Agreements
in scheme: personal-data-classes

Communication for Customer Care
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
created: 2020-11-04
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Communication Management
broader: Customer Care
definition: Customer Care Communication refers to purposes associated with communicating with customers for assisting them, resolving issues, ensuring satisfaction, etc. in relation to services provided
in scheme: purposes-classes

Communication Management
contributor: Georg P. Krog, Paul Ryan, David Hickey, Harshvardhan J. Pandit
created: 2021-09-01
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Purpose
definition: Communication Management refers to purposes associated with providing or managing communication activities e.g. to send an email for notifying some information
in scheme: purposes-classes
scope note: This purpose by itself does not sufficiently and clearly indicate what the communication is about. As such, it is recommended to combine it with another purpose to indicate the application. For example, Communication of Payment.

Compliance Assessment
contributor: Harshvardhan J. Pandit, Georg P. Krog
created: 2024-04-14
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Assessment
definition: Assessment regarding compliance (e.g. internal policy, regulations)
in scheme: organisational-measures-classes

Compliance Indeterminate
contributor: Harshvardhan J. Pandit
created: 2022-09-07
type: Class
type: Concept
type: Compliance Status
term status: accepted
broader: Compliance Status
definition: State where the status of compliance has not been fully assessed, evaluated, or determined
in scheme: status-classes

Compliance Monitoring
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA 5G Cybersecurity Standards
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Governance Procedures
definition: Monitoring of compliance (e.g. internal policy, regulations)
in scheme: organisational-measures-classes

Compliance Status
contributor: Harshvardhan J. Pandit
created: 2022-05-18
example: E0055
type: Class
type: Concept
subclass of: Status
term status: accepted
broader: Status
definition: Status associated with Compliance with some norms, objectives, or requirements
in scheme: status-classes

Compliance Unknown
contributor: Harshvardhan J. Pandit
created: 2022-09-07
type: Class
type: Concept
type: Compliance Status
term status: accepted
broader: Compliance Status
definition: State where the status of compliance is unknown
in scheme: status-classes

Compliance Violation
contributor: Harshvardhan J. Pandit
created: 2022-05-18
modified: 2022-09-07
type: Class
type: Concept
type: Compliance Status
term status: accepted
broader: Compliance Status
definition: State where compliance cannot be achieved due to requirements being violated
in scheme: status-classes
scope note: Changed from "violation of compliance" for consistency with other terms

Compliant
contributor: Harshvardhan J. Pandit
created: 2022-05-18
type: Class
type: Concept
type: Compliance Status
term status: accepted
broader: Compliance Status
definition: State of being fully compliant
in scheme: status-classes

Conditional Automation
contributor: Harshvardhan J. Pandit, Delaram Golpayegani
created: 2023-12-10
modified: 2024-04-20
source: ISO/IEC 22989:2022 Artificial intelligence concepts and terminology
type: Class
type: Concept
type: Automation Level
term status: accepted
broader: Automation Level
definition: Level of automation corresponding to Level 3 in ISO/IEC 22989:2022 where the automation is sufficient to perform most tasks of the system with the human present to take over where necessary
in scheme: processing-context-classes
scope note: Human Involvement is implied here, e.g. for intervention, input, decisions

Confidential Data
created: 2024-02-14
source: DGA 5.10
type: Class
type: Concept
subclass of: Data
term status: accepted
broader: Data
definition: Data deemed confidential
in scheme: personal-data-classes

Confidentiality Agreement
created: 2022-02-09
source: DGA 3.1.a
type: Class
type: Concept
type: Legal Measure
term status: accepted
broader: Legal Agreement
definition: Agreements that enforce confidentiality for e.g. to protect business, professional, or company secrets
in scheme: legal-measures-classes

Conformance Assessment
contributor: Harshvardhan J. Pandit, Georg P. Krog
created: 2024-04-14
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Assessment
definition: Assessment regarding conformance with standards or norms or guidelines or similar instruments
in scheme: organisational-measures-classes

Conformance Status
contributor: Harshvardhan J. Pandit
created: 2022-10-22
type: Class
type: Concept
subclass of: Status
term status: accepted
broader: Status
definition: Status associated with conformance to a standard, guideline, code, or recommendation
in scheme: status-classes

Conformant
contributor: Harshvardhan J. Pandit
created: 2022-10-22
type: Class
type: Concept
type: Conformance Status
term status: accepted
broader: Conformance Status
definition: State of being conformant
in scheme: status-classes

Consent
contributor: Harshvardhan J. Pandit
created: 2021-04-07
example: E0015
example: E0018
type: Class
type: Concept
type: Legal Basis
term status: accepted
broader: Legal Basis
definition: Consent of the Data Subject for specified process or activity
in scheme: legal-basis-classes

Consent Control
created: 2024-05-11
type: Class
type: Concept
subclass of: Entity Involvement
term status: accepted
broader: Entity Involvement
definition: The control or activity associated with obtaining, providing, withdrawing, or reaffirming consent
in scheme: consent-controls-classes

Consent Expired
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
created: 2022-06-22
source: GConsent
type: Class
type: Concept
type: Consent Status
term status: accepted
broader: Consent Status Invalid for Processing
definition: The state where the temporal or contextual validity of consent has 'expired'
in scheme: consent-status-classes
scope note: An example of this state is when the obtained consent has been assigned a duration - which has lapsed or 'expired', making it invalid to be used further for processing data

Consent Given
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
created: 2022-06-22
source: GConsent
type: Class
type: Concept
type: Consent Status
term status: accepted
broader: Consent Status Valid for Processing
definition: The state where consent has been given
in scheme: consent-status-classes
scope note: An example of this state is when the individual clicks on a button, ticks a checkbox, verbally agrees - or any other form that communicates their decision agreeing to the processing of data

Consent Invalidated
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
created: 2022-06-22
source: GConsent
type: Class
type: Concept
type: Consent Status
term status: accepted
broader: Consent Status Invalid for Processing
definition: The state where consent has been deemed to be invalid
in scheme: consent-status-classes
scope note: An example of this state is where an investigating authority or a court finds the collected consent did not meet requirements, and 'invalidates' both prior and future uses of it to carry out processing

Consent Management
contributor: Beatriz Esteves, Harshvardhan J. Pandit, Georg P. Krog
created: 2024-04-14
source: DGA 12.n
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Permission Management
definition: Methods to obtain, provide, modify, and withdraw consent along with maintaining a record of consent, retrieving records, and processing changes in consent states
in scheme: organisational-measures-classes

Consent Notice
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
created: 2022-06-21
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Privacy Notice
definition: A Notice for information provision associated with Consent
in scheme: organisational-measures-classes

Consent Receipt
contributor: Harshvardhan J. Pandit
created: 2022-06-22
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Consent Record
definition: A record of consent or consent related activities that is provided to another entity
in scheme: organisational-measures-classes

Consent Record
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
created: 2022-06-22
example: E0016
example: E0023
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Data Processing Record
definition: A Record of Consent or Consent related activities
in scheme: organisational-measures-classes

Consent Refused
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
created: 2022-06-22
source: GConsent
type: Class
type: Concept
type: Consent Status
term status: accepted
broader: Consent Status Invalid for Processing
definition: The state where consent has been refused
in scheme: consent-status-classes
scope note: An example of this state is when the individual clicks on a 'disagree' or 'reject' or 'refuse' button, or leaves a checkbox unticked

Consent Request Deferred
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
created: 2022-06-22
source: GConsent
type: Class
type: Concept
type: Consent Status
term status: accepted
broader: Consent Status Invalid for Processing
definition: State where a request for consent has been deferred without a decision
in scheme: consent-status-classes
scope note: An example of this state is when the individual closes or dismisses a notice without making a decision. This state is intended for making the distinction between a notice being provided (as a consent request) and the individual interacting with the notice without making a decision - where the 'ignoring of a notice' is taken as consent being neither given nor refused

Consent Requested
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
created: 2022-06-22
source: GConsent
type: Class
type: Concept
type: Consent Status
term status: accepted
broader: Consent Status Invalid for Processing
definition: State where a request for consent has been made and is awaiting a decision
in scheme: consent-status-classes
scope note: An example of this state is when a notice has been presented to the individual but they have not made a decision

Consent Revoked
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
created: 2022-06-22
source: GConsent
type: Class
type: Concept
type: Consent Status
term status: accepted
broader: Consent Status Invalid for Processing
definition: The state where the consent is revoked by an entity other than the data subject and which prevents it from being further used as a valid state
in scheme: consent-status-classes
scope note: An example of this state is when a Data Controller stops utilising previously obtaining consent, such as when that service no longer exists

Consent Status
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
created: 2022-06-22
source: GConsent
type: Class
type: Concept
subclass of: Status
term status: accepted
broader: Status
definition: The state or status of 'consent' that provides information reflecting its operational status and validity for processing data
in scheme: consent-status-classes
scope note: States are useful as information artefacts to implement them in controlling processing, and to reflect the process and flow of obtaining and maintaining consent. For example, a database table that stores consent states for specific processing and can be queried to obtain them in an efficient manner. States are also useful in investigations to determine the use and validity of consenting practices

Consent Status Invalid for Processing
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
created: 2022-06-22
source: GConsent
type: Class
type: Concept
type: Consent Status
term status: accepted
broader: Consent Status
definition: States of consent that cannot be used as valid justifications for processing data
in scheme: consent-status-classes
scope note: This identifies the stages associated with consent that should not be used to process data

Consent Status Valid for Processing
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
created: 2022-06-22
source: GConsent
type: Class
type: Concept
type: Consent Status
term status: accepted
broader: Consent Status
definition: States of consent that can be used as valid justifications for processing data
in scheme: consent-status-classes
scope note: Practically, given consent is the only valid state for processing

Consent Unknown
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
created: 2022-06-22
source: GConsent
type: Class
type: Concept
type: Consent Status
term status: accepted
broader: Consent Status Invalid for Processing
definition: State where information about consent is not available or is unknown
in scheme: consent-status-classes
scope note: Consent states can be unknown, for example, when information is not available, or cannot be trusted, or is known to be inaccurate

Consent Withdrawn
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
created: 2022-06-22
source: GConsent
type: Class
type: Concept
type: Consent Status
term status: accepted
broader: Consent Status Invalid for Processing
definition: The state where the consent is withdrawn or revoked specifically by the data subject and which prevents it from being further used as a valid state
in scheme: consent-status-classes
scope note: This state can be considered a form of 'revocation' of consent, where the revocation can only be performed by the data subject. Therefore we suggest using ConsentRevoked when it is a non-data-subject entity, and ConsentWithdrawn when it is the data subject

Consequence
contributor: Harshvardhan J. Pandit
created: 2022-01-26
example: E0027
example: E0068
example: E0071
type: Class
type: Concept
term status: accepted
definition: The consequence(s) possible or arising from specified context
in scheme: risk-classes

Consequence as Side-Effect
contributor: Harshvardhan J. Pandit
created: 2022-03-30
type: Class
type: Concept
subclass of: Consequence
term status: accepted
broader: Consequence
definition: The consequence(s) possible or arising as a side-effect of specified context
in scheme: risk-classes

Consequence of Failure
contributor: Harshvardhan J. Pandit, Georg P. Krog
created: 2022-03-23
type: Class
type: Concept
subclass of: Consequence
term status: accepted
broader: Consequence
definition: The consequence(s) possible or arising from failure of specified context
in scheme: risk-classes

Consequence of Success
contributor: Harshvardhan J. Pandit, Georg P. Krog
created: 2022-03-23
type: Class
type: Concept
subclass of: Consequence
term status: accepted
broader: Consequence
definition: The consequence(s) possible or arising from success of specified context
in scheme: risk-classes

Consult
created: 2019-05-07
source: SPECIAL Project
source: GDPR Art.4-2
type: Class
type: Concept
type: Processing
term status: accepted
broader: Use
definition: to consult or query data
in scheme: processing-classes
related: Query

Consultation
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan
created: 2020-11-04
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Organisational Measure
definition: Consultation is a process of receiving feedback, advice, or opinion from an external agency
in scheme: organisational-measures-classes

Consultation with Authority
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan
created: 2020-11-04
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Consultation
definition: Consultation with an authority or authoritative entity
in scheme: organisational-measures-classes

Consultation with DPO
contributor: Harshvardhan J. Pandit, Georg P. Krog
created: 2022-06-15
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Consultation
definition: Consultation with Data Protection Officer(s)
in scheme: organisational-measures-classes

Consultation with Data Subject
contributor: Harshvardhan J. Pandit, Georg P. Krog
created: 2022-06-15
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Consultation
definition: Consultation with data subject(s) or their representative(s)
in scheme: organisational-measures-classes

Consultation with Data Subject Representative
contributor: Harshvardhan J. Pandit, Georg P. Krog
created: 2022-10-22
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Consultation with Data Subject
definition: Consultation with representative of data subject(s)
in scheme: organisational-measures-classes

Consumer
contributor: Harshvardhan J. Pandit, Georg P. Krog, Julian Flake, Paul Ryan, Beatriz Esteves
created: 2022-04-06
type: Class
type: Concept
type: Data Subject
term status: accepted
broader: Data Subject
definition: Data subjects that consume goods or services for direct use
in scheme: entities-datasubject-classes

Context
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
created: 2019-04-05
modified: 2022-06-15
type: Class
type: Concept
term status: accepted
definition: Contextually relevant information
in scheme: context-classes
scope note: Context is a catch-all concept for information of relevance not possible to represent through other core concepts. DPV offers specific contextual concepts such as Necessity, Frequency, and Duration. More can be created by extending Context within use-cases.

Contextually Anonymised Data
contributor: Harshvardhan J. Pandit
created: 2024-06-11
type: Class
type: Concept
subclass of: Pseudonymised Data
term status: accepted
broader: Pseudonymised Data
definition: Data that can be considered as being fully anonymised within the context but in actuality is not fully anonymised and is still personal data as it can be de-anonymised outside that context
in scheme: personal-data-classes
scope note: To distinguish between partially anonymised data that can be effectively treated as anonymised data (e.g. in processing) within a context (e.g. an organisation), the concept ContextuallyAnonymisedData should be used instead of AnonymisedData. Transfer of this data outside of the context should consider that it is not fully anonymised and that it is still personal data

Continuous Frequency
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
type: Class
type: Concept
type: Frequency
term status: accepted
broader: Frequency
definition: Frequency where occurrences are continuous
in scheme: context-classes

Contract
contributor: Harshvardhan J. Pandit
created: 2021-04-07
type: Class
type: Concept
type: Legal Basis
term status: accepted
broader: Legal Agreement
definition: Creation, completion, fulfilment, or performance of a contract involving specified processing of data or technologies
in scheme: legal-basis-classes

Contract Performance
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan
created: 2021-04-07
type: Class
type: Concept
type: Legal Basis
term status: accepted
broader: Contract
definition: Fulfilment or performance of a contract involving specified processing of data or technologies
in scheme: legal-basis-classes

Contractual Terms
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
created: 2019-04-05
type: Class
type: Concept
type: Legal Measure
term status: accepted
broader: Legal Agreement
definition: Contractual terms governing data handling within or with an entity
in scheme: legal-measures-classes

Controller Informed
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
created: 2024-05-10
type: Class
type: Concept
type: Entity Informed Status
term status: accepted
broader: Entity Informed
definition: Status indicating Controller has been informed about the specified context
in scheme: status-classes

Controller-Processor Agreement
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves, Paul Ryan, Julian Flake
created: 2022-01-26
example: E0024
type: Class
type: Concept
type: Legal Measure
term status: accepted
broader: Data Processing Agreement
definition: An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of data between a Data Controller and a Data Processor
in scheme: legal-measures-classes

Controller Uninformed
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
created: 2024-05-10
type: Class
type: Concept
type: Entity Informed Status
term status: accepted
broader: Entity Uninformed
definition: Status indicating Controller is uninformed i.e. has not been informed about the specified context
in scheme: status-classes

Copy
created: 2019-05-07
source: SPECIAL Project
type: Class
type: Concept
type: Processing
term status: accepted
broader: Processing
definition: to produce an exact reproduction of the data
in scheme: processing-classes
related: Copy

Correcting Process
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Steve Hickman
created: 2024-05-11
type: Class
type: Concept
type: Entity Permissive Involvement
term status: accepted
broader: Entity Permissive Involvement
definition: Involvement where entity can correct the process of specified context
in scheme: processing-context-classes
scope note: Correction of process refers to the ability to change how the process takes place

Correcting Process Input
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Steve Hickman
created: 2024-05-11
type: Class
type: Concept
type: Entity Permissive Involvement
term status: accepted
broader: Entity Permissive Involvement
definition: Involvement where entity can correct input of specified context
in scheme: processing-context-classes

Correcting Process Output
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Steve Hickman
created: 2024-05-11
type: Class
type: Concept
type: Entity Permissive Involvement
term status: accepted
broader: Entity Permissive Involvement
definition: Involvement where entity can correct the output of specified context
in scheme: processing-context-classes
scope note: Correction of outputs allows modification of the output - implying continuation of the process. This is distinct from reversing of outputs which revert the output back to its previous value and possibly imply not continuing with the process

Counter Money Laundering
contributor: Harshvardhan J. Pandit
created: 2022-04-20
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Fraud Prevention and Detection
definition: Purposes associated with detection, prevention, and mitigation of mitigate money laundering
in scheme: purposes-classes

Counterterrorism
contributor: Harshvardhan J. Pandit
created: 2022-04-20
modified: 2024-04-14
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Public Benefit
definition: Purposes associated with activities that detect, prevent, mitigate, or otherwise perform activities to combat or eliminate terrorism (also referred to as anti-terrorism)
in scheme: purposes-classes

Country
contributor: Harshvardhan J. Pandit, Georg P. Krog
created: 2022-01-19
type: Class
type: Concept
subclass of: Location
term status: accepted
broader: Location
definition: A political entity indicative of a sovereign or non-sovereign territorial state comprising of distinct geographical areas
in scheme: jurisdiction-classes
scope note: The definition of country is not intended for political interpretation. DPVCG welcomes alternate definitions based in existing sources with global scope, such as UN or ISO.

Credential Management
contributor: Georg P. Krog
created: 2022-06-15
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Authorisation Procedure
definition: Management of credentials and their use in authorisations
in scheme: organisational-measures-classes

Credit Checking
contributor: Harshvardhan J. Pandit
created: 2022-04-20
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Customer Solvency Monitoring
definition: Purposes associated with monitoring, performing, or assessing credit worthiness or solvency
in scheme: purposes-classes

Cross-Border Transfer
contributor: Harshvardhan J. Pandit
created: 2024-04-14
type: Class
type: Concept
type: Processing
term status: accepted
broader: Transfer
definition: to move data from one jurisdiction (border) to another
in scheme: processing-classes

Cryptographic Authentication
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Authentication Protocols
broader: Cryptographic Methods
definition: Use of cryptography for authentication
in scheme: technical-measures-classes

Cryptographic Key Management
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Cryptographic Methods
definition: Management of cryptographic keys, including their generation, storage, assessment, and safekeeping
in scheme: technical-measures-classes

Cryptographic Methods
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Technical Measure
definition: Use of cryptographic methods to perform tasks
in scheme: technical-measures-classes

Customer
contributor: Harshvardhan J. Pandit, Georg P. Krog, Julian Flake, Paul Ryan, Beatriz Esteves
created: 2022-04-06
type: Class
type: Concept
type: Data Subject
term status: accepted
broader: Data Subject
definition: Data subjects that purchase goods or services
in scheme: entities-datasubject-classes
scope note: note: for B2B relations where customers are organisations, this concept only applies for data subjects

Customer Care
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
created: 2019-04-05
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Customer Management
definition: Customer Care refers to purposes associated with purposes for providing assistance, resolving issues, ensuring satisfaction, etc. in relation to services provided
in scheme: purposes-classes
related: Feedback

Customer Claims Management
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
created: 2021-09-08
source: Belgian DPA ROPA Template
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Customer Management
definition: Customer Claims Management refers to purposes associated with managing claims, including repayment of monies owed
in scheme: purposes-classes

Customer Management
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
created: 2021-09-08
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Purpose
definition: Customer Management refers to purposes associated with managing activities related with past, current, and future customers
in scheme: purposes-classes

Customer Order Management
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
created: 2021-09-08
source: Belgian DPA ROPA Template
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Customer Management
definition: Customer Order Management refers to purposes associated with managing customer orders i.e. processing of an order related to customer's purchase of good or services
in scheme: purposes-classes

Customer Relationship Management
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
created: 2021-09-08
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Customer Management
definition: Customer Relationship Management refers to purposes associated with managing and analysing interactions with past, current, and potential customers
in scheme: purposes-classes

Customer Solvency Monitoring
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
created: 2021-09-08
source: Belgian DPA ROPA Template
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Customer Management
definition: Customer Solvency Monitoring refers to purposes associated with monitor solvency of customers for financial diligence
in scheme: purposes-classes

Cybersecurity Assessment
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA 5G Cybersecurity Standards
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Security Assessment
definition: Assessment of cybersecurity capabilities in terms of vulnerabilities and effectiveness of controls
in scheme: risk-classes

Cybersecurity Training
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Staff Training
definition: Training methods related to cybersecurity
in scheme: organisational-measures-classes

Data Protection Impact Assessment (DPIA)
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan
created: 2020-11-04
modified: 2024-04-14
source: GDPR Art. 35
example: E0056
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Rights Impact Assessment
definition: Impact assessment determining the potential and actual impact of processing activities on individuals or groups of individuals and taking into account the impacts of activities on their rights and freedoms
in scheme: risk-classes
scope note: Specific requirements and procedures for DPIA are defined in GDPR Art.35

Data
contributor: Harshvardhan J. Pandit
created: 2022-01-19
type: Class
type: Concept
term status: accepted
definition: A broad concept representing 'data' or 'information'
in scheme: personal-data-classes

Data Altruism
contributor: Beatriz Esteves, Harshvardhan J. Pandit
created: 2024-02-14
source: DGA 2.16
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Public Benefit
definition: Purposes associated with the voluntary sharing of data for the general interest of the public, such as healthcare or combating climate change
in scheme: purposes-classes
scope note: Data Altruism as a purpose should be combined with other purposes to indicate their altruistic interpretation or application. E.g. improving healthcare and data altruism in combination.

Data Backup Protocols
contributor: Georg P. Krog
created: 2022-06-15
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Technical Measure
definition: Protocols or plans for backing up of data
in scheme: technical-measures-classes

Data Breach Impact Assessment (DBIA)
contributor: Harshvardhan J. Pandit
created: 2024-04-15
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Rights Impact Assessment
definition: Impact Assessment concerning the consequences and impacts of a data breach
in scheme: risk-classes
scope note: Data Breach assessments can require additional non-security related assessments such as GDPR Art.34 Rights Impact Assessment

Data Breach Notice
contributor: Georg P. Krog, Paul Ryan, David Hickey, Beatriz Esteves, Harshvardhan J. Pandit
created: 2024-04-14
source: DGA 21.5 GDPR 33
source: GDPR 34
source: DGA 12.k
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Security Incident Notice
definition: A notice providing information about data breach(es) i.e. unauthorised transfer, access, use, or modification of data
in scheme: organisational-measures-classes

Data Breach Notification
contributor: Harshvardhan J. Pandit
created: 2024-04-14
source: DGA 21.5 GDPR 33
source: GDPR 34
source: DGA 12.k
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Security Incident Notification
definition: Notification of information about data breach(es) i.e. unauthorised transfer, access, use, or modification of data
in scheme: organisational-measures-classes

Data Breach Record
contributor: Harshvardhan J. Pandit
created: 2024-04-14
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Records of Activities
definition: Record of a data breach incident
in scheme: organisational-measures-classes

Data Controller
contributor: Axel Polleres, Javier Fernández
created: 2019-04-05
modified: 2020-11-04
source: GDPR Art.4-7g
example: E0032
example: E0033
type: Class
type: Concept
subclass of: Legal Entity
term status: accepted
broader: Legal Entity
definition: The individual or organisation that decides (or controls) the purpose(s) of processing personal data.
in scheme: entities-legalrole-classes
scope note: The terms 'Controller', 'Data Controller', and 'PII Controller' refer to the same concept

Data Controller Contract
created: 2023-12-10
type: Class
type: Concept
type: Legal Basis
term status: accepted
broader: Contract
definition: Creation, completion, fulfilment, or performance of a contract, with Data Controllers as parties being Joint Data Controllers, and involving specified processing of data or technologies
in scheme: legal-basis-classes

Data Controller as Data Source
created: 2023-10-12
type: Class
type: Concept
type: Data Source
term status: accepted
broader: Data Source
definition: Data Sourced from Data Controller(s), e.g. a Controller inferring data or generating data
in scheme: processing-context-classes

Data Deletion Policy
contributor: Georg P. Krog, Harshvardhan J. Pandit
created: 2024-04-14
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Data Processing Policy
definition: Policy regarding deletion of data
in scheme: organisational-measures-classes
scope note: Deletion and Erasure are distinct activities where deletion refers to logical removal of data with the possibility of retrieval whereas erasure refers to destruction of data such that it cannot be retrieved. See dpv:DataErasurePolicy

Data Erasure Policy
contributor: Harshvardhan J. Pandit
created: 2024-04-14
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Data Processing Policy
definition: Policy regarding erasure of data
in scheme: organisational-measures-classes
scope note: Erasure or data destruction or secure removal of data refers to irreversible erasure of data. See dpv:DataDeletion for reversible or logical deletion of data

Data Exporter
contributor: David Hickey, Georg P. Krog, Paul Ryan, Harshvardhan J. Pandit
created: 2021-09-08
source: EDPB Recommendations 01/2020 on Data Transfers
example: E0035
type: Class
type: Concept
subclass of: Legal Entity
term status: accepted
broader: Legal Entity
definition: An entity that 'exports' data where exporting is considered a form of data transfer
in scheme: entities-legalrole-classes
scope note: The term 'Data Exporter' is used by the EU-EDPB as the entity that transfer data across borders. While the EDPB refers to the jurisdictional border of EU, the term within DPV can be used to denote any 'export' or transfer or transmission of data and is thus a broader concept than the EDPB's definition.

Data Governance
contributor: Harshvardhan J. Pandit
created: 2024-04-14
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Organisation Governance
definition: Measures associated with topics typically considered to be part of 'Data Governance'
in scheme: organisational-measures-classes

Data Importer
contributor: David Hickey, Georg P. Krog, Paul Ryan, Harshvardhan J. Pandit
created: 2021-09-08
source: EDPB Recommendations 01/2020 on Data Transfers
example: E0035
type: Class
type: Concept
subclass of: Recipient
term status: accepted
broader: Recipient
definition: An entity that 'imports' data where importing is considered a form of data transfer
in scheme: entities-legalrole-classes
scope note: The term 'Data Importer' is used by the EU-EDPB as the entity that receives transferred data across borders. While the EDPB refers to the jurisdictional border of EU, the term within DPV can be used to denote any 'import' or reception of transfer or transmission of data and is thus a broader concept than the EDPB's definition.

Data Interoperability Assessment
contributor: Harshvardhan J. Pandit
created: 2024-04-14
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Assessment
broader: Data Interoperability Management
definition: Measures associated with assessment of data interoperability
in scheme: organisational-measures-classes

Data Interoperability Improvement
contributor: Beatriz Esteves, Harshvardhan J. Pandit
created: 2024-04-14
source: DGA 12.d
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Data Interoperability Management
definition: Measures associated with improvement of data interoperability
in scheme: organisational-measures-classes

Data Interoperability Management
contributor: Harshvardhan J. Pandit
created: 2024-04-14
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Data Governance
definition: Measures associated with management of data interoperability
in scheme: organisational-measures-classes

Data Inventory Management
contributor: Harshvardhan J. Pandit
created: 2024-04-14
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Data Governance
definition: Measures associated with management of data inventory or a data asset list
in scheme: organisational-measures-classes

Data Jurisdiction Policy
contributor: Harshvardhan J. Pandit
created: 2024-04-14
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Data Processing Policy
definition: Policy specifying jurisdictional requirements for data processing
in scheme: organisational-measures-classes
scope note: Jurisdictional requirements can refer to data being stored within specific jurisdictions, or that data must be in line with jurisdictional laws and norms

Data Literacy
contributor: Harshvardhan J. Pandit
created: 2024-05-17
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Digital Literacy
definition: Providing skills, knowledge, and understanding to enable reading, writing, analysing, reasoning, and communicating regarding data
in scheme: organisational-measures-classes

Data Processing Agreement
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves, Paul Ryan, Julian Flake
created: 2022-01-26
type: Class
type: Concept
type: Legal Measure
term status: accepted
broader: Legal Agreement
definition: An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of data
in scheme: legal-measures-classes
scope note: For specific role-based data processing agreements, see concepts for Processors and JointDataController agreements.

Data Processing Policy
contributor: Harshvardhan J. Pandit
created: 2024-04-14
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Policy
definition: Policy regarding data processing activities
in scheme: organisational-measures-classes
scope note: This only refers to the policy or plan or procedure describing how the data processing should be conducted. To represent the granular details, see further concepts e.g. dpv:DataStoragePolicy to describe policy regarding storage, or dpv:DataStorageCondition to represent information within the policy for how information should be stored

Data Processing Record
contributor: Harshvardhan J. Pandit
created: 2021-09-08
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Records of Activities
definition: Record of data processing, whether ex-ante or ex-post
in scheme: organisational-measures-classes

Data Processor
contributor: Harshvardhan J. Pandit
created: 2019-06-04
source: GDPR Art.4-8
example: E0033
type: Class
type: Concept
subclass of: Recipient
term status: accepted
broader: Recipient
definition: A ‘processor’ means a natural or legal person, public authority, agency or other body which processes data on behalf of the controller.
in scheme: entities-legalrole-classes

Data Processor Contract
created: 2023-12-10
type: Class
type: Concept
type: Legal Basis
term status: accepted
broader: Contract
definition: Creation, completion, fulfilment, or performance of a contract, with the Data Controller and Data Processor as parties, and involving specified processing of data or technologies
in scheme: legal-basis-classes

Data Protection Authority
contributor: Georg P. Krog, Paul Ryan, Harshvardhan J. Pandit
created: 2020-11-04
example: E0036
type: Class
type: Concept
subclass of: Authority
term status: accepted
broader: Authority
definition: An authority tasked with overseeing legal compliance regarding privacy and data protection laws.
in scheme: entities-authority-classes

Data Protection Officer
contributor: Georg P. Krog, Paul Ryan
created: 2020-11-04
modified: 2021-12-08
source: GDPR Art.37
type: Class
type: Concept
subclass of: Representative
term status: accepted
broader: Representative
definition: An entity within or authorised by an organisation to monitor internal compliance, inform and advise on data protection obligations and act as a contact point for data subjects and the supervisory authority.
in scheme: entities-legalrole-classes

Data Protection Training
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA 5G Cybersecurity Standards
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Staff Training
definition: Training intended to increase knowledge regarding data protection
in scheme: organisational-measures-classes

Data published by Data Subject
contributor: Julian Flake
created: 2022-08-24
modified: 2023-12-10
type: Class
type: Concept
type: Data Subject as Data Source
term status: accepted
broader: Data Subject as Data Source
definition: Data is published by the data subject
in scheme: processing-context-classes
scope note: This refers to where that data was made publicly available by the data subject. An example of this would be a social media profile that the data subject has made publicly accessible.

Data Quality Assessment
contributor: Harshvardhan J. Pandit
created: 2024-04-14
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Assessment
broader: Data Quality Management
definition: Measures associated with assessment of data quality
in scheme: organisational-measures-classes

Data Quality Improvement
contributor: Harshvardhan J. Pandit
created: 2024-04-14
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Data Quality Management
definition: Measures associated with improvement of data quality
in scheme: organisational-measures-classes

Data Quality Management
contributor: Harshvardhan J. Pandit
created: 2024-04-14
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Data Governance
definition: Measures associated with management of data quality
in scheme: organisational-measures-classes

Data Redaction
contributor: Harshvardhan J. Pandit
created: 2020-10-01
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Data Sanitisation Technique
definition: Removal of sensitive information from a data or document
in scheme: technical-measures-classes

Data Restoration Policy
contributor: Georg P. Krog, Harshvardhan J. Pandit
created: 2024-04-14
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Data Processing Policy
definition: Policy regarding restoration of data
in scheme: organisational-measures-classes
scope note: Restoration can refer to how data is restored from a backup

Data Reuse Policy
contributor: Harshvardhan J. Pandit
created: 2024-04-14
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Data Processing Policy
definition: Policy regarding reuse of data i.e. using data for purposes other than its initial purpose
in scheme: organisational-measures-classes
scope note: This policy can be used to describe the procedures associated with undertaking such reuse of data, for example to assess its legality and the compatibility of the initial and subsequent purposes

Data Sanitisation Technique
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Technical Measure
definition: Cleaning or any removal or re-organisation of elements in data based on selective criteria
in scheme: technical-measures-classes

Data Security Management
contributor: Harshvardhan J. Pandit
created: 2024-04-14
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Data Governance
broader: Security Procedure
definition: Measures associated with management of data security
in scheme: organisational-measures-classes
scope note: Examples of data security management are assessing the appropriate security controls such as encryption, testing the implemented security controls, and ensuring it is protected and safeguarded from unintended actions

Data Source
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
created: 2020-11-04
example: E0012
type: Class
type: Concept
subclass of: Processing Context
term status: accepted
broader: Processing Context
definition: The source or origin of data
in scheme: processing-context-classes
scope note: Source' is the direct point of data collection; 'origin' would indicate the original/others points of where the data originates from.

Data Storage Policy
contributor: Georg P. Krog, Harshvardhan J. Pandit
created: 2024-04-14
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Data Processing Policy
definition: Policy regarding storage of data, including the manner, duration, location, and conditions for storage
in scheme: organisational-measures-classes

Data Sub-Processor
contributor: Harshvardhan J. Pandit
created: 2020-11-25
type: Class
type: Concept
subclass of: Data Processor
term status: accepted
broader: Data Processor
definition: A 'sub-processor' is a processor engaged by another processor
in scheme: entities-legalrole-classes
scope note: A 'Sub-Processor' is always a 'Processor' with the distinction of not directly being appointed by the 'Controller'

Data Subject
contributor: Axel Polleres, Javier Fernández
created: 2019-04-05
modified: 2020-11-04
source: GDPR Art.4-1g
example: E0039
type: Class
type: Concept
subclass of: Legal Entity
term status: accepted
broader: Legal Entity
definition: The individual (or category of individuals) whose personal data is being processed
in scheme: entities-datasubject-classes
scope note: The term 'data subject' is specific to the GDPR, but is functionally equivalent to the term 'individual associated with data' and the ISO/IEC term 'PII Principle'

Data Subject Contract
created: 2023-12-10
type: Class
type: Concept
type: Legal Basis
term status: accepted
broader: Contract
definition: Creation, completion, fulfilment, or performance of a contract, with the Data Controller and Data Subject as parties, and involving specified processing of data or technologies
in scheme: legal-basis-classes

Data Subject as Data Source
created: 2023-10-12
type: Class
type: Concept
type: Data Source
term status: accepted
broader: Data Source
definition: Data Sourced from Data Subject(s), e.g. when data is collected via a form or observed from their activities
in scheme: processing-context-classes

Data Subject Informed
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
created: 2024-05-10
type: Class
type: Concept
type: Entity Informed Status
term status: accepted
broader: Entity Informed
definition: Status indicating DataSubject has been informed about the specified context
in scheme: status-classes

Data Subject Right
contributor: Beatriz Esteves, Georg P. Krog, Harshvardhan J. Pandit
created: 2020-11-18
type: Class
type: Concept
type: Right
term status: accepted
broader: Right
definition: The rights applicable or provided to a Data Subject
in scheme: rights-classes
scope note: Based on use of definitions, the notion of 'Data Subject Right' can be equivalent to 'Individual Right' or 'Right of a Person'

Data Subject Rights Management
contributor: Beatriz Esteves, Harshvardhan J. Pandit, Georg P. Krog
created: 2024-04-14
source: DGA 12.m
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Rights Management
definition: Methods to provide, implement, and exercise data subjects' rights
in scheme: organisational-measures-classes
scope note: This concept only concerns the organisational management of rights, and does not represent the rights themselves - especially where such 'rights' are legally recognised or defined for the data subject or individual. The concept dpv:DataSubjectRight is provided to represent such legal rights.

Data Subject Scale
contributor: Harshvardhan J. Pandit, Georg P. Krog, Rana Saniei
created: 2022-06-15
example: E0049
type: Class
type: Concept
subclass of: Scale
term status: accepted
broader: Scale
definition: Scale of Data Subject(s)
in scheme: processing-scale-classes

Data Subject Uninformed
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
created: 2024-05-10
type: Class
type: Concept
type: Entity Informed Status
term status: accepted
broader: Entity Uninformed
definition: Status indicating DataSubject is uninformed i.e. has not been informed about the specified context
in scheme: status-classes

Data Transfer Impact Assessment
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan
created: 2021-09-08
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Impact Assessment
definition: Impact Assessment for conducting data transfers
in scheme: risk-classes

Data Transfer Legal Basis
contributor: David Hickey, Georg P. Krog
created: 2021-09-08
type: Class
type: Concept
type: Legal Basis
term status: accepted
broader: Legal Basis
definition: Specific or special categories and instances of legal basis intended for justifying data transfers
in scheme: legal-basis-classes

Data Transfer Notice
contributor: Georg P. Krog, Paul Ryan, David Hickey, Beatriz Esteves, Harshvardhan J. Pandit
created: 2024-04-14
source: DGA 5.9
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Notice
definition: Notice for the legal entity for the transfer of its data
in scheme: organisational-measures-classes

Data Transfer Record
contributor: Harshvardhan J. Pandit
created: 2024-04-14
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Data Processing Record
definition: Record of data transfer activities
in scheme: organisational-measures-classes

Data Volume
contributor: Harshvardhan J. Pandit, Georg P. Krog, Rana Saniei
created: 2022-06-15
example: E0049
type: Class
type: Concept
subclass of: Scale
term status: accepted
broader: Scale
definition: Volume or Scale of Data
in scheme: processing-scale-classes

Decentralised Locations
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
type: Class
type: Concept
type: Location Fixture
term status: accepted
broader: Location Fixture
definition: Location that is spread across multiple separate areas with no distinction between their importance
in scheme: jurisdiction-classes

Decision Making
contributor: Harshvardhan J. Pandit
created: 2022-09-07
type: Class
type: Concept
subclass of: Processing Context
term status: accepted
broader: Processing Context
definition: Processing that involves decision making
in scheme: processing-context-classes

De-Identification
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
created: 2019-04-05
modified: 2022-11-24
source: NISTIR 8053
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Data Sanitisation Technique
definition: Removal of identity or information to reduce identifiability
in scheme: technical-measures-classes

Delete
contributor: Harshvardhan J. Pandit
created: 2024-04-14
type: Class
type: Concept
type: Processing
term status: accepted
broader: Remove
definition: to remove data in a logical fashion i.e. with the possibility of retrieval
in scheme: processing-classes

Delivery of Goods
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
created: 2019-04-05
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Requested Service Provision
definition: Purposes associated with delivering goods and services requested or asked by consumer
in scheme: purposes-classes
related: Delivery

Derive
created: 2019-05-07
source: SPECIAL Project
example: E0009
type: Class
type: Concept
type: Processing
term status: accepted
broader: Obtain
definition: to create new derivative data from the original data
in scheme: processing-classes
related: Derive
scope note: Derive indicates data is present or obtainable from existing data. For data that is created without such existence, see Infer.

Derived Data
created: 2023-12-10
type: Class
type: Concept
subclass of: Data
term status: accepted
broader: Data
definition: Data that has been obtained through derivations of other data
in scheme: personal-data-classes

Derived Personal Data
contributor: Elmar Kiesling; Harshvardhan J. Pandit, Fajar Ekaputra
created: 2019-05-07
modified: 2023-12-10
source: DPVCG
example: E0009
example: E0046
type: Class
type: Concept
subclass of: Derived Data
subclass of: Personal Data
term status: accepted
broader: Derived Data
broader: Personal Data
definition: Personal Data that is obtained or derived from other data
in scheme: personal-data-classes
related: Derived
scope note: Derived Data is data that is obtained through processing of existing data, e.g. deriving first name from full name. To indicate data that is derived but which was not present or evident within the source data, InferredPersonalData should be used.

Design Standard
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
created: 2019-04-05
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Guidelines Principle
definition: A set of rules or guidelines outlining criterias for design
in scheme: organisational-measures-classes

Destruct
created: 2019-05-07
source: GDPR Art.4-2
type: Class
type: Concept
type: Processing
term status: accepted
broader: Remove
definition: to process data in a way it no longer exists or cannot be repaired
in scheme: processing-classes

Deterministic Pseudonymisation
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Data Pseudonymisation: Advanced Techniques and Use Cases
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Pseudonymisation
definition: Pseudonymisation achieved through a deterministic function
in scheme: technical-measures-classes

Differential Privacy
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Data Protection Engineering
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Cryptographic Methods
definition: Utilisation of differential privacy where information is shared as patterns or groups to withhold individual elements
in scheme: technical-measures-classes

Digital Literacy
contributor: Harshvardhan J. Pandit
created: 2024-05-17
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Organisational Measure
definition: Providing skills, knowledge, and understanding to enable reading, writing, analysing, reasoning, and communicating regarding digital technologies and their implications
in scheme: organisational-measures-classes

Digital Rights Management
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Technical Measure
definition: Management of access, use, and other operations associated with digital content
in scheme: technical-measures-classes

Digital Signatures
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Cryptographic Methods
definition: Expression and authentication of identity through digital information containing cryptographic signatures
in scheme: technical-measures-classes

Direct Marketing
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
created: 2020-11-04
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Marketing
definition: Purposes associated with conducting direct marketing i.e. marketing communicated directly to the individual
in scheme: purposes-classes

Disaster Recovery Procedures
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA 5G Cybersecurity Standards
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Governance Procedures
definition: Procedures related to management of disasters and recovery
in scheme: organisational-measures-classes

Disclose
created: 2019-05-07
source: GDPR Art.4-2
type: Class
type: Concept
type: Processing
term status: accepted
broader: Processing
definition: to make data known
in scheme: processing-classes

Disclose by Transmission
created: 2019-05-07
source: GDPR Art.4-2
type: Class
type: Concept
type: Processing
term status: accepted
broader: Disclose
definition: to disclose data by means of transmission
in scheme: processing-classes

Display
contributor: Beatriz Esteves
created: 2024-04-14
source: DGA 2.20
type: Class
type: Concept
type: Processing
term status: accepted
broader: Disclose
definition: to present or show data
in scheme: processing-classes

Dispute Management
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
created: 2021-09-08
source: Belgian DPA ROPA Template
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Organisation Governance
definition: Purposes associated with activities that manage disputes by natural persons, private bodies, or public authorities relevant to organisation
in scheme: purposes-classes

Disseminate
created: 2019-05-07
source: GDPR Art.4-2
type: Class
type: Concept
type: Processing
term status: accepted
broader: Disclose
definition: to spread data throughout
in scheme: processing-classes

Distributed System Security
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Security Method
definition: Security implementations provided using or over a distributed system
in scheme: technical-measures-classes

Document Randomised Pseudonymisation
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Data Pseudonymisation: Advanced Techniques and Use Cases
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Pseudonymisation
definition: Use of randomised pseudonymisation where the same elements are assigned different values in the same document or database
in scheme: technical-measures-classes

Document Security
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Security Method
definition: Security measures enacted over documents to protect against tampering or restrict access
in scheme: technical-measures-classes

Download
contributor: Beatriz Esteves
created: 2024-04-14
source: 2.20
source: DGA 2.13
type: Class
type: Concept
type: Processing
term status: accepted
broader: Disclose
definition: to provide a copy or to receive a copy of data over a network or internet
in scheme: processing-classes

Duration
contributor: Harshvardhan J. Pandit
created: 2022-02-09
example: E0050
example: E0070
type: Class
type: Concept
subclass of: Context
term status: accepted
broader: Context
definition: The duration or temporal limitation
in scheme: context-classes

Economic Union
contributor: Harshvardhan J. Pandit
created: 2022-01-19
type: Class
type: Concept
subclass of: Location
term status: accepted
broader: Location
definition: A political union of two or more countries based on economic or trade agreements
in scheme: jurisdiction-classes

Educational Training
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Staff Training
definition: Training methods that are intended to provide education on topic(s)
in scheme: organisational-measures-classes

Effectiveness Determination Procedures
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA 5G Cybersecurity Standards
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Assessment
definition: Procedures intended to determine effectiveness of other measures
in scheme: organisational-measures-classes

Elderly Data Subject
contributor: Georg P. Krog
created: 2022-06-15
type: Class
type: Concept
type: Data Subject
term status: accepted
broader: Vulnerable Data Subject
definition: Data subjects that are considered elderly (i.e. based on age)
in scheme: entities-datasubject-classes

Employee
contributor: Harshvardhan J. Pandit, Georg P. Krog, Julian Flake, Paul Ryan, Beatriz Esteves
created: 2022-04-06
type: Class
type: Concept
type: Data Subject
term status: accepted
broader: Data Subject
definition: Data subjects that are employees
in scheme: entities-datasubject-classes

Encryption
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
created: 2019-04-05
example: E0020
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Technical Measure
definition: Technical measures consisting of encryption
in scheme: technical-measures-classes

Encryption at Rest
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
created: 2019-04-05
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Encryption
definition: Encryption of data when being stored (persistent encryption)
in scheme: technical-measures-classes

Encryption in Transfer
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
created: 2019-04-05
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Encryption
definition: Encryption of data in transit e.g. when being transferred from one location to another, including sharing
in scheme: technical-measures-classes

Encryption in Use
contributor: Harshvardhan J. Pandit
created: 2022-10-22
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Encryption
definition: Encryption of data when it is being used
in scheme: technical-measures-classes

End-to-End Encryption (E2EE)
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Data Protection Engineering
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Encryption
definition: Encrypted communications where data is encrypted by the sender and decrypted by the intended receiver to prevent access to any third party
in scheme: technical-measures-classes

Endless Duration
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
type: Class
type: Concept
type: Duration
term status: accepted
broader: Duration
definition: Duration that is (known or intended to be) open ended or without an end
in scheme: context-classes

Enforce Access Control
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
created: 2019-04-05
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Enforce Security
definition: Purposes associated with conducting or enforcing access control as a form of security
in scheme: purposes-classes
related: Login
scope note: Was previously "Access Control". Prefixed to distinguish from Technical Measure.

Enforce Security
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
created: 2019-04-05
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Purpose
definition: Purposes associated with ensuring and enforcing security for data, personnel, or other related matters
in scheme: purposes-classes
scope note: Was previous "Security". Prefixed to distinguish from TechOrg measures.

Enter Into Contract
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan
created: 2021-04-07
type: Class
type: Concept
type: Legal Basis
term status: accepted
broader: Contract
definition: Processing necessary to enter into contract
in scheme: legal-basis-classes

Entity
contributor: Harshvardhan J. Pandit
created: 2022-02-02
type: Class
type: Concept
term status: accepted
definition: A human or non-human 'thing' that constitutes as an entity
in scheme: entities-classes

Entity Active Involvement
contributor: Delaram Golpayegani
created: 2024-05-11
type: Class
type: Concept
subclass of: Entity Involvement
term status: accepted
broader: Entity Involvement
definition: Involvement where entity is 'actively' involved
in scheme: processing-context-classes

Entity Informed
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
created: 2024-05-10
type: Class
type: Concept
type: Entity Informed Status
term status: accepted
broader: Entity Informed Status
definition: Status indicating entity has been informed about specified context
in scheme: status-classes

Entity Informed Status
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
created: 2024-05-10
type: Class
type: Concept
subclass of: Status
term status: accepted
broader: Status
definition: Status indicating whether an entity is informed or uninformed about specified context
in scheme: status-classes

Entity Involvement
contributor: Harshvardhan J. Pandit, Delaram Golpayegani
created: 2024-05-11
type: Class
type: Concept
subclass of: Processing Context
term status: accepted
broader: Processing Context
definition: Involvement of an entity in specific context
in scheme: processing-context-classes

Entity Non-Involvement
contributor: Delaram Golpayegani
created: 2024-05-11
type: Class
type: Concept
subclass of: Entity Involvement
term status: accepted
broader: Entity Involvement
definition: Indicating entity is not involved
in scheme: processing-context-classes

Entity Non-Permissive Involvement
contributor: Harshvardhan J. Pandit, Delaram Golpayegani
created: 2024-05-11
type: Class
type: Concept
subclass of: Entity Involvement
term status: accepted
broader: Entity Involvement
definition: Involvement of an entity in specific context where it is not permitted or able to do something
in scheme: processing-context-classes

Entity Passive Involvement
contributor: Delaram Golpayegani
created: 2024-05-11
type: Class
type: Concept
subclass of: Entity Involvement
term status: accepted
broader: Entity Involvement
definition: Involvement where entity is 'passively' or 'not actively' involved
in scheme: processing-context-classes

Entity Permissive Involvement
contributor: Harshvardhan J. Pandit, Delaram Golpayegani
created: 2024-05-11
type: Class
type: Concept
subclass of: Entity Involvement
term status: accepted
broader: Entity Involvement
definition: Involvement of an entity in specific context where it is permitted or able to do something
in scheme: processing-context-classes

Entity Uninformed
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
created: 2024-05-10
type: Class
type: Concept
subclass of: Entity Informed Status
term status: accepted
broader: Entity Informed Status
definition: Status indicating entity is uninformed i.e. has been not been informed about specified context
in scheme: status-classes

Environmental Protection
contributor: Harshvardhan J. Pandit
created: 2024-04-14
source: NIST SP 800-13
type: Class
type: Concept
type: Physical Measure
term status: accepted
broader: Physical Measure
definition: Physical protection against environmental threats such as fire, floods, storms, etc.
in scheme: physical-measures-classes

Erase
created: 2019-05-07
source: GDPR Art.4-2
type: Class
type: Concept
type: Processing
term status: accepted
broader: Remove
definition: to remove data from existence i.e. without the possibility of retrieval
in scheme: processing-classes

Establish Contractual Agreement
contributor: Georg P. Krog, Harshvardhan J. Pandit
created: 2022-11-09
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Purpose
definition: Purposes associated with carrying out data processing to establish an agreement, such as for entering into a contract
in scheme: purposes-classes

Evaluation of Individuals
contributor: Harshvardhan J. Pandit
created: 2022-10-22
modified: 2022-11-30
source: GDPR Art.4-2
type: Class
type: Concept
type: Evaluation and Scoring
term status: accepted
broader: Evaluation and Scoring
definition: Processing that involves evaluation of individuals
in scheme: processing-context-classes

Evaluation and Scoring
contributor: Harshvardhan J. Pandit, Piero Bonatti
created: 2020-11-04
source: GDPR Art.4-2
type: Class
type: Concept
subclass of: Processing Context
term status: accepted
broader: Processing Context
definition: Processing that involves evaluation and scoring of individuals
in scheme: processing-context-classes

Expectation Status
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
created: 2024-05-10
type: Class
type: Concept
term status: accepted
definition: Status indicating whether the specified context was intended or unintended
in scheme: status-classes
scope note: Expectation is associated with the outcome of a goal or purpose for what is expected to happen i.e. an ex-post indication of what was expected to happen in the specified context. Intention and Expectation are closely related terms. We recommend using Intention when the entity has the ability to control the implementation and Expectation for when the entity does not have control or for what happens after or beyond the exercise of control.

Expected
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
created: 2024-05-10
type: Class
type: Concept
type: Expectation Status
term status: accepted
broader: Expectation Status
definition: Status indicating the specified context was expected
in scheme: status-classes

Explicitly Expressed Consent
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
created: 2022-06-21
example: E0018
type: Class
type: Concept
type: Legal Basis
term status: accepted
broader: Expressed Consent
definition: Consent that is expressed through an explicit action solely conveying a consenting decision
in scheme: consent-types-classes
scope note: Explicitly expressed consent is a more specific form of Expressed consent where the action taken must 'explicitly' relate to only the consent decision. Expressed consent where the consenting is part of other matters therefore cannot satisfy the requirements of explicitly expressed consent. An example of explicit action expressing the consenting decision is a button on a web form where the form only relates to consent, or it is accompanied with suitable text that reiterates what the consenting decision is about

Export
contributor: Beatriz Esteves
created: 2024-04-14
source: DGA 2.20
type: Class
type: Concept
type: Processing
term status: accepted
broader: Disclose
definition: to provide a copy of data from one system to another
in scheme: processing-classes

Expressed Consent
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
created: 2022-06-21
example: E0018
type: Class
type: Concept
type: Legal Basis
term status: accepted
broader: Informed Consent
definition: Consent that is expressed through an action intended to convey a consenting decision
in scheme: consent-types-classes
scope note: Expressed consent requires the individual take a specific and unambiguous action that directly indicates their consent. This action may be a part of other processes such as setting preferences, or agreeing to a contract, or other matters not relating to consent. An example of expressed consent is interacting with a checkbox within a dashboard or clicking a button on a web form

Fundamental Rights Impact Assessment (FRIA)
contributor: Harshvardhan J. Pandit
created: 2024-04-14
source: AI Act Art.27
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Rights Impact Assessment
definition: Impact assessment which assesses the potential and actual impact on fundamental rights occuring due to processing activities
in scheme: risk-classes
scope note: The fundamental rights and freedoms may be those defined in law or other norms, and may be bound to a jurisdiction - for example see EU Charter of Fundamental Rights

Federated Locations
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
type: Class
type: Concept
type: Location Fixture
term status: accepted
broader: Location Fixture
definition: Location that is federated across multiple separate areas with designation of a primary or central location
in scheme: jurisdiction-classes

File System Security
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Security Method
definition: Security implemented over a file system
in scheme: technical-measures-classes

Filter
contributor: Harshvardhan J. Pandit, Georg P. Krog
created: 2022-06-15
type: Class
type: Concept
type: Processing
term status: accepted
broader: Transform
definition: to filter or keep data for some criteria
in scheme: processing-classes

Fixed Location
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
type: Class
type: Concept
type: Location Fixture
term status: accepted
broader: Location Fixture
definition: Location that is fixed i.e. known to occur at a specific place
in scheme: jurisdiction-classes

Fixed Multiple Locations
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
type: Class
type: Concept
type: Location Fixture
term status: accepted
broader: Fixed Location
definition: Location that is fixed with multiple places e.g. multiple cities
in scheme: jurisdiction-classes

Fixed Occurrences Duration
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
type: Class
type: Concept
subclass of: Duration
term status: accepted
broader: Duration
definition: Duration that takes place a fixed number of times e.g. 3 times
in scheme: context-classes

Fixed Singular Location
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
type: Class
type: Concept
type: Location Fixture
term status: accepted
broader: Fixed Location
definition: Location that is fixed at a specific place e.g. a city
in scheme: jurisdiction-classes

For-Profit Organisation
contributor: Harshvardhan J. Pandit
created: 2022-02-02
modified: 2020-10-05
type: Class
type: Concept
subclass of: Organisation
term status: accepted
broader: Organisation
definition: An organisation that aims to achieve profit as its primary goal
in scheme: entities-organisation-classes

Format
contributor: Beatriz Esteves
created: 2024-04-14
source: DGA 12.d
type: Class
type: Concept
type: Processing
term status: accepted
broader: Structure
definition: to arrange or structure data in a specific form
in scheme: processing-classes

Fraud Prevention and Detection
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
created: 2019-04-05
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Misuse, Prevention and Detection
definition: Purposes associated with fraud detection, prevention, and mitigation
in scheme: purposes-classes
related: Government

Frequency
contributor: Harshvardhan J. Pandit
created: 2022-02-16
example: E0051
type: Class
type: Concept
subclass of: Context
term status: accepted
broader: Context
definition: The frequency or information about periods and repetitions in terms of recurrence.
in scheme: context-classes

Fulfilment of Contractual Obligation
contributor: Georg P. Krog, Harshvardhan J. Pandit
created: 2022-11-09
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Fulfilment of Obligation
definition: Purposes associated with carrying out data processing to fulfill a contractual obligation
in scheme: purposes-classes

Fulfilment of Obligation
contributor: Georg P. Krog, Harshvardhan J. Pandit
created: 2022-11-09
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Purpose
definition: Purposes associated with carrying out data processing to fulfill an obligation
in scheme: purposes-classes

Full Automation
contributor: Harshvardhan J. Pandit, Delaram Golpayegani
created: 2023-12-10
modified: 2024-04-20
source: ISO/IEC 22989:2022 Artificial intelligence concepts and terminology
type: Class
type: Concept
type: Automation Level
term status: accepted
broader: Automation Level
definition: Level of automation corresponding to Level 5 in ISO/IEC 22989:2022 where the automation in system is capable of performing all its tasks regardless of the conditions without human involvement
in scheme: processing-context-classes
scope note: Though Fully Automated such operations can still be associated with dpv:HumanInvolved e.g. for inputs, oversight or verification

Fully Randomised Pseudonymisation
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Data Pseudonymisation: Advanced Techniques and Use Cases
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Pseudonymisation
definition: Use of randomised pseudonymisation where the same elements are assigned different values each time they occur
in scheme: technical-measures-classes

Generate
contributor: Harshvardhan J. Pandit
created: 2022-04-20
type: Class
type: Concept
type: Processing
term status: accepted
broader: Obtain
definition: to generate or create data
in scheme: processing-classes

Generated Data
created: 2023-12-10
type: Class
type: Concept
subclass of: Data
term status: accepted
broader: Data
definition: Data that is generated or brought into existence without relation to existing data i.e. it is not derived or inferred from other data
in scheme: personal-data-classes

Generated Personal Data
contributor: Harshvardhan J. Pandit
created: 2022-03-30
modified: 2023-12-10
type: Class
type: Concept
subclass of: Personal Data
term status: accepted
broader: Personal Data
definition: Personal Data that is generated or brought into existence without relation to existing data i.e. it is not derived or inferred from other data
in scheme: personal-data-classes
scope note: Generated Data is used to indicate data that is produced and is not derived or inferred from other data

Geographic Coverage
contributor: Harshvardhan J. Pandit, Georg P. Krog, Paul Ryan
created: 2022-06-15
example: E0049
type: Class
type: Concept
subclass of: Scale
term status: accepted
broader: Scale
definition: Indicate of scale in terms of geographic coverage
in scheme: processing-scale-classes

Global Scale
contributor: Harshvardhan J. Pandit
created: 2022-06-15
type: Class
type: Concept
type: Geographic Coverage
term status: accepted
broader: Geographic Coverage
definition: Geographic coverage spanning the entire globe
in scheme: processing-scale-classes

Governance Procedures
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA 5G Cybersecurity Standards
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Organisational Measure
definition: Procedures related to governance (e.g. organisation, unit, team, process, system)
in scheme: organisational-measures-classes

Governmental Organisation
contributor: Harshvardhan J. Pandit
created: 2022-02-02
modified: 2020-10-05
type: Class
type: Concept
subclass of: Organisation
term status: accepted
broader: Organisation
definition: An organisation managed or part of government
in scheme: entities-organisation-classes

Guardian(s) of Data Subject
contributor: Georg P. Krog
created: 2022-08-03
type: Class
type: Concept
type: Data Subject
term status: accepted
broader: Data Subject
definition: Guardian(s) of data subjects such as children
in scheme: entities-datasubject-classes

Guideline
contributor: Harshvardhan J. Pandit
created: 2024-05-12
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Guidelines Principle
definition: Practices that specify how activities must be conducted
in scheme: organisational-measures-classes

Guidelines Principle
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
created: 2019-04-05
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Organisational Measure
definition: Guidelines or Principles regarding processing and operational measures
in scheme: organisational-measures-classes

Hardware Security Protocols
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Security Method
definition: Security protocols implemented at or within hardware
in scheme: technical-measures-classes

Hash Functions
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Cryptographic Methods
definition: Use of hash functions to map information or to retrieve a prior categorisation
in scheme: technical-measures-classes

Hash-based Message Authentication Code (HMAC)
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA 5G Cybersecurity Standards
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Cryptographic Authentication
definition: Use of HMAC where message authentication code (MAC) utilise a cryptographic hash function and a secret cryptographic key
in scheme: technical-measures-classes

High Automation
contributor: Harshvardhan J. Pandit, Delaram Golpayegani
created: 2023-12-10
modified: 2024-04-20
source: ISO/IEC 22989:2022 Artificial intelligence concepts and terminology
type: Class
type: Concept
type: Automation Level
term status: accepted
broader: Automation Level
definition: Level of automation corresponding to Level 4 in ISO/IEC 22989:2022 where the automation in system is capable of performing all its tasks within specific controlled conditions without human involvement
in scheme: processing-context-classes
scope note: Human Involvement is implied here, e.g. for intervention, input, decisions

Homomorphic Encryption
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Cryptographic Methods
definition: Use of Homomorphic encryption that permits computations on encrypted data without decrypting it
in scheme: technical-measures-classes

Huge Data Volume
contributor: Harshvardhan J. Pandit
created: 2022-06-15
type: Class
type: Concept
type: Data Volume
term status: accepted
broader: Data Volume
definition: Data volume that is considered huge or more than large within the context
in scheme: processing-scale-classes

Huge Scale Of Data Subjects
contributor: Harshvardhan J. Pandit
created: 2022-06-15
type: Class
type: Concept
type: Data Subject Scale
term status: accepted
broader: Data Subject Scale
definition: Scale of data subjects considered huge or more than large within the context
in scheme: processing-scale-classes

Human involved
created: 2022-09-03
modified: 2023-12-10
type: Class
type: Concept
type: Human Involvement
term status: accepted
broader: Human Involvement
definition: Humans are involved in the specified context
in scheme: processing-context-classes
scope note: This concept only indicates that humans are involved. For specific involvement, see specialised concepts e.g. involved for input, oversight.

Human Involvement
contributor: Harshvardhan J. Pandit
created: 2022-01-26
modified: 2024-04-20
example: E0013
type: Class
type: Concept
subclass of: Entity Involvement
term status: accepted
broader: Entity Involvement
definition: The involvement of humans in specified context
in scheme: processing-context-classes
scope note: Human Involvement here broadly refers to any involvement by a human in the context of carrying out processing. This may include verification of outcomes, providing input data for making decisions, or overseeing activities. To indicate whether humans are involved or not, see relevant concepts of dpv:HumanInvolved and dpv:HumanNotInvolved. The term 'Human in the loop' and its varieties are absent from DPV due to their contradictory and non-compatible use across different sources.

Human Involvement for control
created: 2022-09-04
modified: 2023-12-10
type: Class
type: Concept
type: Human Involvement
term status: accepted
broader: Human Involvement
definition: Human involvement for the purposes of exercising control over the specified operations in context
in scheme: processing-context-classes
scope note: Control is a broad term that can be applied to various stages and operations. It maps to None, Assistive, and Partial automation models.

Human Involvement for decision
created: 2022-09-06
modified: 2023-12-10
type: Class
type: Concept
type: Human Involvement
term status: accepted
broader: Human Involvement
definition: Human involvement for the purposes of exercising decisions over the specified operations in context
in scheme: processing-context-classes
scope note: Decisions are about exercising control over the operation, and are distinct from input (data or parameters).

Human Involvement for Input
contributor: Harshvardhan J. Pandit
created: 2022-09-07
modified: 2023-12-10
type: Class
type: Concept
type: Human Involvement
term status: accepted
broader: Human Involvement
definition: Human involvement for the purposes of providing inputs to the specified context
in scheme: processing-context-classes
scope note: Inputs can be in the form of data or other resources.

Human Involvement for intervention
created: 2022-09-05
modified: 2023-12-10
type: Class
type: Concept
type: Human Involvement
term status: accepted
broader: Human Involvement
definition: Human involvement for the purposes of exercising interventions over the specified operations in context
in scheme: processing-context-classes
scope note: Intervention indicates the ability to intervene in operations, which can be at various stages. It maps to Conditional and High automation models.

Human Involvement for Oversight
contributor: Harshvardhan J. Pandit
created: 2022-09-07
modified: 2023-12-10
type: Class
type: Concept
type: Human Involvement
term status: accepted
broader: Human Involvement
definition: Human involvement for the purposes of having oversight over the specified context regarding its operations, inputs, or outputs
in scheme: processing-context-classes
scope note: Oversight by itself does not indicate the ability to intervene or control the operations.

Human Involvement for Verification
contributor: Harshvardhan J. Pandit
created: 2022-09-07
modified: 2023-12-10
type: Class
type: Concept
type: Human Involvement
term status: accepted
broader: Human Involvement
definition: Human involvement for the purposes of verification of specified context to ensure its operations, inputs, or outputs are correct or are acceptable.
in scheme: processing-context-classes
scope note: Verification by itself does not imply ability to Control, Intervene, or having Oversight.

Human not involved
created: 2023-12-10
type: Class
type: Concept
type: Human Involvement
term status: accepted
broader: Human Involvement
definition: Humans are not involved in the specified context
in scheme: processing-context-classes
scope note: This maps to Autonomous and Full Automation models if no humans are involved.

Human Resource Management
contributor: Paul Ryan, David Hickey, Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
created: 2021-09-01
source: Belgian DPA ROPA Template
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Purpose
definition: Purposes associated with managing humans and 'human resources' within the organisation for effective and efficient operations.
in scheme: purposes-classes
scope note: HR is a broad concept. Its management includes, amongst others - recruiting employees and intermediaries e.g. brokers, independent representatives; payroll administration, remunerations, commissions, and wages; and application of social legislation.

Intellectual Property Rights Management
contributor: Beatriz Esteves, Harshvardhan J. Pandit, Georg P. Krog
created: 2024-04-14
source: DGA 3.1.c
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Rights Management
definition: Management of Intellectual Property Rights with a view to identify and safeguard and enforce them
in scheme: organisational-measures-classes

Identifying Personal Data
created: 2024-02-14
type: Class
type: Concept
subclass of: Personal Data
term status: accepted
broader: Personal Data
definition: Personal Data that explicitly and by itself is sufficient to identify a person
in scheme: personal-data-classes
scope note: DPV does not use PII ('Personally Identifiable Information') as it has varying and conflicting definitions across sources. Instead the concept 'identifying personal data' is intended to provide a clear categorisation of its interpretation. Where multiple data categories can be combined to create an 'identifying' category e.g. fingerprinting, this concept represents the combined category.

Identity Authentication
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
created: 2024-04-14
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Enforce Security
definition: Purposes associated with performing authentication based on identity as a form of security
in scheme: purposes-classes

Identity Management Method
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Authorisation Procedure
definition: Management of identity and identity-based processes
in scheme: organisational-measures-classes

Identity Verification
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
created: 2019-04-05
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Verification
definition: Purposes associated with verifying or authenticating identity as a form of security
in scheme: purposes-classes

Immigrant
contributor: Harshvardhan J. Pandit, Georg P. Krog, Julian Flake, Paul Ryan, Beatriz Esteves
created: 2022-04-06
type: Class
type: Concept
type: Data Subject
term status: accepted
broader: Data Subject
definition: Data subjects that are immigrants (for a jurisdiction)
in scheme: entities-datasubject-classes

Impact
contributor: Harshvardhan J. Pandit, Julian Flake, Georg P. Krog, Fajar Ekaputra, Beatriz Esteves
created: 2022-03-23
example: E0027
example: E0068
example: E0069
type: Class
type: Concept
subclass of: Consequence
term status: accepted
broader: Consequence
definition: The impact(s) possible or arising as a consequence from specified context
in scheme: risk-classes
scope note: Impact is a stronger notion of consequence in terms of influence, change, or effect on something e.g. for impact assessments

Impact Assessment
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan
created: 2020-11-04
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Risk Assessment
definition: Calculating or determining the likelihood of impact of an existing or proposed process, which can involve risks or detriments.
in scheme: risk-classes

Implied Consent
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
created: 2022-06-21
type: Class
type: Concept
type: Legal Basis
term status: accepted
broader: Informed Consent
definition: Consent that is implied indirectly through an action not associated solely with conveying a consenting decision
in scheme: consent-types-classes
scope note: Implied consent is expected to also be Informed Consent. An example is a CCTV notice outside a monitored area that informs the individuals that by walking in they would be consenting to the use of camera for surveillance.

Importance
contributor: Harshvardhan J. Pandit, Paul Ryan, Georg P. Krog, Julian Flake, Beatriz Esteves
created: 2022-02-09
type: Class
type: Concept
subclass of: Context
term status: accepted
broader: Context
definition: An indication of 'importance' within a context
in scheme: context-classes
scope note: Importance can be used to express importance, desirability, relevance, or significance as a context.

Improve Existing Products and Services
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
created: 2019-04-05
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Optimisation for Controller
definition: Purposes associated with improving existing products and services
in scheme: purposes-classes

Improve Healthcare
contributor: Beatriz Esteves, Harshvardhan J. Pandit
created: 2024-02-14
source: DGA 2.16
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Public Benefit
definition: Purposes associated with improving healthcare systems such as for personalised treatments and curing chronic diseases
in scheme: purposes-classes

Improve Internal CRM Processes
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
created: 2019-04-05
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Customer Relationship Management
broader: Optimisation for Controller
definition: Purposes associated with improving customer-relationship management (CRM) processes
in scheme: purposes-classes

Improve Public Services
contributor: Beatriz Esteves, Harshvardhan J. Pandit
created: 2024-02-14
source: DGA 2.16
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Public Benefit
definition: Purposes associated with improving the provision of public services, such as public safety, education or law enforcement
in scheme: purposes-classes

Improve Transport and Mobility
contributor: Beatriz Esteves, Harshvardhan J. Pandit
created: 2024-02-14
source: DGA 2.16
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Public Benefit
definition: Purposes associated with improving traffic, public transport systems or costs for drivers
in scheme: purposes-classes

Incident Management Procedures
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA 5G Cybersecurity Standards
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Governance Procedures
definition: Procedures related to management of incidents
in scheme: organisational-measures-classes

Incident Reporting Communication
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA 5G Cybersecurity Standards
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Governance Procedures
definition: Procedures related to management of incident reporting
in scheme: organisational-measures-classes

Incorrect Data
contributor: Harshvardhan J. Pandit
created: 2022-11-02
type: Class
type: Concept
subclass of: Data
term status: accepted
broader: Data
definition: Data that is known to be incorrect or inconsistent with some requirements
in scheme: personal-data-classes

Increase Service Robustness
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
created: 2019-04-05
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Optimisation for Controller
definition: Purposes associated with improving robustness and resilience of services
in scheme: purposes-classes

Indeterminate Duration
contributor: Harshvardhan J. Pandit
created: 2022-11-30
type: Class
type: Concept
type: Duration
term status: accepted
broader: Duration
definition: Duration that is indeterminate or cannot be determined
in scheme: context-classes
scope note: Indeterminate means (exact or otherwise) information about the duration cannot be determined, which is distinct from 'EndlessDuration' where it is known (or decided) that the duration is open-ended or without an end.

Industry Consortium
contributor: Harshvardhan J. Pandit
created: 2022-02-02
modified: 2020-10-05
source: ADMS controlled vocabulary
type: Class
type: Concept
subclass of: Organisation
term status: accepted
broader: Organisation
definition: A consortium established and comprising on industry organisations
in scheme: entities-organisation-classes

Infer
contributor: Harshvardhan J. Pandit
created: 2022-04-20
modified: 2022-10-14
example: E0009
type: Class
type: Concept
type: Processing
term status: accepted
broader: Derive
definition: to infer data from existing data
in scheme: processing-classes
scope note: Infer indicates data that is derived without it being present or obtainable from existing data. For data that is presented, and is 'extracted' or 'obtained' from existing data, see Derive.

Inferred Data
created: 2023-12-10
type: Class
type: Concept
subclass of: Derived Data
term status: accepted
broader: Derived Data
definition: Data that has been obtained through inferences of other data
in scheme: personal-data-classes

Inferred Personal Data
contributor: Harshvardhan J. Pandit
created: 2022-01-19
modified: 2023-12-10
example: E0009
type: Class
type: Concept
subclass of: Derived Personal Data
subclass of: Inferred Data
term status: accepted
broader: Derived Personal Data
broader: Inferred Data
definition: Personal Data that is obtained through inference from other data
in scheme: personal-data-classes
scope note: Inferred Data is derived data generated from existing data, but which did not originally exist within it, e.g. inferring demographics from browsing history.

Information Flow Control
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Technical Measure
definition: Use of measures to control information flows
in scheme: technical-measures-classes

Information Security Policy
contributor: Harshvardhan J. Pandit
created: 2022-08-17
modified: 2024-04-14
source: ENISA 5G Cybersecurity Standards
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Policy
definition: Policy regarding security of information
in scheme: organisational-measures-classes

Informed Consent
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
created: 2022-06-21
type: Class
type: Concept
type: Legal Basis
term status: accepted
broader: Consent
definition: Consent that is informed i.e. with the requirement to provide sufficient information to make a consenting decision
in scheme: consent-types-classes
scope note: The specifics for what information should be provided or made available will depend on the context, use-case, or relevant legal requirements

Innovative Use of Existing Technologies
created: 2023-12-10
type: Class
type: Concept
type: Innovative use of Technology
term status: accepted
broader: Innovative use of Technology
definition: Involvement of existing technologies used in an innovative manner
in scheme: processing-context-classes

Innovative Use of New Technologies
contributor: Harshvardhan J. Pandit, Piero Bonatti
created: 2020-11-04
modified: 2023-12-10
source: GDPR Art.4-2
type: Class
type: Concept
type: Innovative use of Technology
term status: accepted
broader: Innovative use of Technology
definition: Involvement of a new (innovative) technologies
in scheme: processing-context-classes
scope note: New technologies are by definition considered innovative

Innovative use of Technology
created: 2023-12-10
type: Class
type: Concept
subclass of: Processing Context
term status: accepted
broader: Processing Context
definition: Indicates that technology is being used in an innovative manner
in scheme: processing-context-classes
scope note: Innovative here refers to 'state of the art' rather than the implementing entity, and can be for either new technology or new uses of existing technology

Intellectual Property Data
created: 2024-02-14
source: DGA 5.10
type: Class
type: Concept
subclass of: Confidential Data
term status: accepted
broader: Confidential Data
definition: Data protected by Intellectual Property rights and regulations
in scheme: personal-data-classes

Intended
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
created: 2024-05-10
type: Class
type: Concept
type: Intention Status
term status: accepted
broader: Intention Status
definition: Status indicating the specified context was intended
in scheme: status-classes

Intention Status
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
created: 2024-05-10
type: Class
type: Concept
subclass of: Status
term status: accepted
broader: Status
definition: Status indicating whether the specified context was intended or unintended
in scheme: status-classes
scope note: Intention is associated with the goal or purpose for what is about to happen i.e. an ex-ante indication of whether the specified context is/was planned or intended. Intention and Expectation are closely related terms. We recommend using Intention when the entity has the ability to control the implementation and Expectation for when the entity does not have control or for what happens after or beyond the exercise of control.

Internal Resource Optimisation
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
created: 2019-04-05
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Optimisation for Controller
definition: Purposes associated with optimisation of internal resource availability and usage for organisation
in scheme: purposes-classes

International Organisation
contributor: Julian Flake, Georg P. Krog
created: 2022-03-23
modified: 2020-10-05
source: GDPR Art.4-26
type: Class
type: Concept
subclass of: Organisation
term status: accepted
broader: Organisation
definition: An organisation and its subordinate bodies governed by public international law, or any other body which is set up by, or on the basis of, an agreement between two or more countries
in scheme: entities-organisation-classes

Intrusion Detection System
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Security Method
definition: Use of measures to detect intrusions and other unauthorised attempts to gain access to a system
in scheme: technical-measures-classes

Involvement Status
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
created: 2024-05-10
type: Class
type: Concept
subclass of: Status
term status: accepted
broader: Status
definition: Status indicating whether the involvement of specified context
in scheme: status-classes

Job Applicant
contributor: Harshvardhan J. Pandit, Georg P. Krog, Julian Flake, Paul Ryan, Beatriz Esteves
created: 2022-04-06
type: Class
type: Concept
type: Data Subject
term status: accepted
broader: Data Subject
definition: Data subjects that apply for jobs or employments
in scheme: entities-datasubject-classes

Joint Data Controllers
contributor: Georg P. Krog, Harshvardhan J. Pandit
created: 2022-02-02
type: Class
type: Concept
subclass of: Data Controller
term status: accepted
broader: Data Controller
definition: A group of Data Controllers that jointly determine the purposes and means of processing
in scheme: entities-legalrole-classes
scope note: While Joint Data Controllers operate together, they are made up of individually distinct legal entities. To indicate the membership of this group, hasDataController should be used to denote each Data Controller. The concept of Joint Data Controllers also allows specifying a single group as the 'Controller' and to specify role and responsibilities within that group for each entity using DPV's concepts (e.g. isImplementedByEntity)

Joint Data Controllers Agreement
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves, Paul Ryan, Julian Flake
created: 2022-01-26
type: Class
type: Concept
type: Legal Measure
term status: accepted
broader: Data Processing Agreement
definition: An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of data between Controllers within a Joint Controllers relationship
in scheme: legal-measures-classes

Justification
contributor: Harshvardhan J. Pandit
created: 2022-06-15
example: E0057
example: E0058
example: E0059
example: E0061
example: E0062
example: E0063
type: Class
type: Concept
subclass of: Context
term status: accepted
broader: Context
definition: A form of documentation providing reasons, explanations, or justifications
in scheme: context-classes

Large Data Volume
contributor: Harshvardhan J. Pandit
created: 2022-06-15
type: Class
type: Concept
type: Data Volume
term status: accepted
broader: Data Volume
definition: Data volume that is considered large within the context
in scheme: processing-scale-classes

Large Scale Of Data Subjects
contributor: Harshvardhan J. Pandit
created: 2022-06-15
type: Class
type: Concept
type: Data Subject Scale
term status: accepted
broader: Data Subject Scale
definition: Scale of data subjects considered large within the context
in scheme: processing-scale-classes

Large Scale Processing
contributor: Harshvardhan J. Pandit, Piero Bonatti
created: 2020-11-04
modified: 2022-09-07
source: GDPR Art.4-2
type: Class
type: Concept
type: Processing Scale
term status: accepted
broader: Processing Scale
definition: Processing that takes place at large scales (as specified by some criteria)
in scheme: processing-scale-classes
scope note: The exact definition of what constitutes "large scale" depends on use of jurisdictional, domain-specific, or other forms of externally defined criterias. Where possible, this should be reflected by extending this term with the appropriate context.

Law
contributor: Harshvardhan J. Pandit
created: 2022-01-19
type: Class
type: Concept
subclass of: Class
term status: accepted
definition: A law is a set of rules created by government or authorities
in scheme: jurisdiction-classes

Lawful
contributor: Harshvardhan J. Pandit
created: 2022-10-19
type: Class
type: Concept
type: Lawfulness
term status: accepted
broader: Lawfulness
definition: State of being lawful or legally compliant
in scheme: status-classes

Lawfulness
contributor: Harshvardhan J. Pandit
created: 2022-10-19
type: Class
type: Concept
subclass of: Compliance Status
term status: accepted
broader: Compliance Status
definition: Status associated with expressing lawfulness or legal compliance
in scheme: status-classes

Lawfulness Unknown
contributor: Harshvardhan J. Pandit
created: 2022-10-19
type: Class
type: Concept
type: Lawfulness
term status: accepted
broader: Lawfulness
definition: State of the lawfulness not being known
in scheme: status-classes

Legal Agreement
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
created: 2019-04-05
type: Class
type: Concept
type: Legal Measure
term status: accepted
broader: Legal Measure
definition: A legally binding agreement
in scheme: legal-measures-classes

Legal Basis
created: 2019-04-05
modified: 2020-11-04
example: E0014
type: Class
type: Concept
term status: accepted
definition: Legal basis used to justify processing of data or use of technology in accordance with a law
in scheme: legal-basis-classes
scope note: Legal basis (plural: legal bases) are defined by legislations and regulations, whose applicability is usually restricted to specific jurisdictions which can be represented using dpv:hasJurisdiction or dpv:hasLaw. Legal basis can be used without such declarations, e.g. 'Consent', however their interpretation will require association with a law, e.g. 'EU GDPR'.

Legal Compliance
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
created: 2020-11-04
modified: 2022-11-09
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Fulfilment of Obligation
definition: Purposes associated with carrying out data processing to fulfill a legal or statutory obligation
in scheme: purposes-classes
scope note: This purpose only refers to processing that is additionally required in order to fulfill the obligations and requirements associated with a law. For example, the use of consent would have its own separate purposes, with this purpose addressing a legal requirement for maintaining consent record (along with RecordManagement). This purpose will typically be used with Legal Obligation as the legal basis.

Legal Compliance Assessment
contributor: Harshvardhan J. Pandit, Georg P. Krog
created: 2024-04-14
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Compliance Assessment
definition: Assessment regarding legal compliance
in scheme: organisational-measures-classes

Legal Entity
contributor: Harshvardhan J. Pandit
created: 2019-04-05
type: Class
type: Concept
subclass of: Entity
term status: accepted
broader: Entity
definition: A human or non-human 'thing' that constitutes as an entity and which is recognised and defined in law
in scheme: entities-classes

Legal Measure
created: 2023-12-10
modified: 2023-12-10
source: DGA 12.j
type: Class
type: Concept
subclass of: Technical and Organisational Measure
term status: accepted
broader: Technical and Organisational Measure
definition: Legal measures used to safeguard and ensure good practices in connection with data and technologies
in scheme: TOM-classes

Legal Obligation
contributor: Harshvardhan J. Pandit
created: 2021-04-07
example: E0042
type: Class
type: Concept
type: Legal Basis
term status: accepted
broader: Legal Basis
definition: Legal Obligation to conduct the specified activities
in scheme: legal-basis-classes

Legitimate Interest
contributor: Harshvardhan J. Pandit
created: 2021-05-19
example: E0065
type: Class
type: Concept
type: Legal Basis
term status: accepted
broader: Legal Basis
definition: Legitimate Interests of a Party as justification for specified activities
in scheme: legal-basis-classes

Legitimate Interest Assessment
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan
created: 2021-09-08
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Assessment
definition: Indicates an assessment regarding the use of legitimate interest as a lawful basis by the data controller
in scheme: organisational-measures-classes

Legitimate Interest of Controller
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan
created: 2021-05-19
example: E0065
type: Class
type: Concept
type: Legal Basis
term status: accepted
broader: Legitimate Interest
definition: Legitimate Interests of a Data Controller in conducting specified activities
in scheme: legal-basis-classes

Legitimate Interest of Data Subject
contributor: Georg P. Krog
created: 2022-10-22
type: Class
type: Concept
type: Legal Basis
term status: accepted
broader: Legitimate Interest
definition: Legitimate Interests of the Data Subject in conducting specified activities
in scheme: legal-basis-classes

Legitimate Interest of Third Party
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan
created: 2021-05-19
type: Class
type: Concept
type: Legal Basis
term status: accepted
broader: Legitimate Interest
definition: Legitimate Interests of a Third Party in conducting specified activities
in scheme: legal-basis-classes

Licence
contributor: Beatriz Esteves, Harshvardhan J. Pandit
created: 2022-02-09
source: DGA 2.10
type: Class
type: Concept
type: Legal Measure
term status: accepted
broader: Contractual Terms
definition: A Legal Document providing permission to utilise data or resource and outlining the conditions under which such use is considered valid
in scheme: legal-measures-classes
related: Offer

Likelihood
contributor: Harshvardhan J. Pandit
created: 2022-07-22
example: E0068
type: Class
type: Concept
term status: accepted
definition: The likelihood or probability or chance of something taking place or occuring
in scheme: risk-classes
scope note: Likelihood can be expressed in a subjective manner, such as 'Unlikely', or in a quantitative manner such as "Twice in a Day" (frequency per period). The suggestion is to use quantitative values, or to associate them with subjective terms used so as to enable accurate interpretations and interoperability. See the concepts related to Frequency and Duration for possible uses as a combination to express Likelihood.

Local Environment Scale
contributor: Harshvardhan J. Pandit
created: 2022-06-15
type: Class
type: Concept
type: Geographic Coverage
term status: accepted
broader: Geographic Coverage
definition: Geographic coverage spanning a specific environment within the locality
in scheme: processing-scale-classes
scope note: For example, geographic scale of an event take place in a specific building or room

Local Location
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
type: Class
type: Concept
type: Location
term status: accepted
broader: Location Locality
definition: Location is local
in scheme: jurisdiction-classes

Locality Scale
contributor: Harshvardhan J. Pandit
created: 2022-06-15
type: Class
type: Concept
type: Geographic Coverage
term status: accepted
broader: Geographic Coverage
definition: Geographic coverage spanning a specific locality
in scheme: processing-scale-classes
scope note: For example, geographic scale of a city or an area within a city

Location
contributor: Harshvardhan J. Pandit, Georg P. Krog
created: 2022-01-19
example: E0060
type: Class
type: Concept
subclass of: Class
term status: accepted
definition: A location is a position, site, or area where something is located
in scheme: jurisdiction-classes
scope note: Location may be geographic, physical, or virtual.

Location Fixture
contributor: Harshvardhan J. Pandit
created: 2022-06-15
example: E0060
type: Class
type: Concept
subclass of: Class
term status: accepted
definition: The fixture of location refers to whether the location is fixed
in scheme: jurisdiction-classes

Location Locality
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2022-10-04
example: E0060
type: Class
type: Concept
type: Location
term status: accepted
broader: Location
definition: Locality refers to whether the specified location is local within some context, e.g. for the user
in scheme: jurisdiction-classes

Logging Policy
contributor: Harshvardhan J. Pandit
created: 2022-08-17
modified: 2024-04-14
source: ENISA 5G Cybersecurity Standards
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Policy
definition: Policy for logging of information
in scheme: organisational-measures-classes

Maintain Credit Checking Database
contributor: Harshvardhan J. Pandit, Georg P. Krog
created: 2022-06-15
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Credit Checking
definition: Purposes associated with maintaining a Credit Checking Database
in scheme: purposes-classes

Maintain Credit Rating Database
contributor: Harshvardhan J. Pandit, Georg P. Krog
created: 2022-06-15
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Credit Checking
definition: Purposes associated with maintaining a Credit Rating Database
in scheme: purposes-classes

Maintain Fraud Database
contributor: Harshvardhan J. Pandit, Georg P. Krog
created: 2022-06-15
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Fraud Prevention and Detection
definition: Purposes associated with maintaining a database related to identifying and identified fraud risks and fraud incidents
in scheme: purposes-classes

Make Available
created: 2019-05-07
source: GDPR Art.4-2
type: Class
type: Concept
type: Processing
term status: accepted
broader: Disclose
definition: to transform or publish data to be used
in scheme: processing-classes

Marketing
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
created: 2020-11-04
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Purpose
definition: Purposes associated with conducting marketing in relation to organisation or products or services e.g. promoting, selling, and distributing
in scheme: purposes-classes
scope note: Was commercial interest, changed to consider Marketing a separate Purpose category by itself

Match
contributor: Harshvardhan J. Pandit
created: 2022-04-20
source: A29WP WP 248 rev.01 Guideliens on DPIA
type: Class
type: Concept
type: Processing
term status: accepted
broader: Use
definition: to combine, compare, or match data from different sources
in scheme: processing-classes

Medium Data Volume
contributor: Harshvardhan J. Pandit, Georg P. Krog, Paul Ryan
created: 2022-06-15
type: Class
type: Concept
type: Data Volume
term status: accepted
broader: Data Volume
definition: Data volume that is considered medium i.e. neither large nor small within the context
in scheme: processing-scale-classes

Medium Scale Of Data Subjects
contributor: Harshvardhan J. Pandit, Georg P. Krog, Paul Ryan
created: 2022-06-15
type: Class
type: Concept
type: Data Subject Scale
term status: accepted
broader: Data Subject Scale
definition: Scale of data subjects considered medium i.e. neither large nor small within the context
in scheme: processing-scale-classes

Medium Scale Processing
contributor: Harshvardhan J. Pandit
created: 2022-09-07
type: Class
type: Concept
type: Processing Scale
term status: accepted
broader: Processing Scale
definition: Processing that takes place at medium scales (as specified by some criteria)
in scheme: processing-scale-classes

Member
contributor: Harshvardhan J. Pandit, Georg P. Krog, Julian Flake, Paul Ryan, Beatriz Esteves
created: 2022-04-06
type: Class
type: Concept
type: Data Subject
term status: accepted
broader: Data Subject
definition: Data subjects that are members of a group, organisation, or other collectives
in scheme: entities-datasubject-classes

Members and Partners Management
contributor: Paul Ryan, Georg P. Krog, David Hickey, Harshvardhan J. Pandit
created: 2021-09-01
source: Belgian DPA ROPA Template
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Organisation Governance
definition: Purposes associated with maintaining a registry of shareholders, members, or partners for governance, administration, and management functions
in scheme: purposes-classes

Mentally Vulnerable Data Subject
contributor: Georg P. Krog
created: 2022-06-15
type: Class
type: Concept
type: Data Subject
term status: accepted
broader: Vulnerable Data Subject
definition: Data subjects that are considered mentally vulnerable
in scheme: entities-datasubject-classes

Message Authentication Codes (MAC)
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Cryptographic Authentication
definition: Use of cryptographic methods to authenticate messages
in scheme: technical-measures-classes

Metadata Management
contributor: Harshvardhan J. Pandit
created: 2024-04-14
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Data Governance
definition: Measures associated with management of metadata
in scheme: organisational-measures-classes
scope note: Examples of metadata management include assessing which metadata are required or being used by technology, assessing their potential inclusion as personal data, and implementing a metadata based solution to manage data

Misuse, Prevention and Detection
created: 2024-05-09
source: DGA 22.1(a)
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Enforce Security
definition: Prevention and Detection of Misuse or Abuse of services
in scheme: purposes-classes

Mobile Platform Security
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Security Method
definition: Security implemented over a mobile platform
in scheme: technical-measures-classes

Modify
contributor: Harshvardhan J. Pandit, Georg P. Krog
created: 2022-06-15
type: Class
type: Concept
type: Processing
term status: accepted
broader: Alter
definition: to modify or change data
in scheme: processing-classes

Monitor
contributor: Harshvardhan J. Pandit, Georg P. Krog
created: 2022-06-15
type: Class
type: Concept
type: Processing
term status: accepted
broader: Consult
definition: to monitor data for some criteria
in scheme: processing-classes

Monitoring Policy
contributor: Harshvardhan J. Pandit
created: 2022-08-17
modified: 2024-04-14
source: ENISA 5G Cybersecurity Standards
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Policy
definition: Policy for monitoring (e.g. progress, performance)
in scheme: organisational-measures-classes

Monotonic Counter Pseudonymisation
contributor: Harshvardhan J. Pandit
created: 2022-08-17
modified: 2022-10-13
source: ENISA Data Pseudonymisation: Advanced Techniques and Use Cases
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Pseudonymisation
definition: A simple pseudonymisation method where identifiers are substituted by a number chosen by a monotonic counter
in scheme: technical-measures-classes

Move
created: 2019-05-07
source: SPECIAL Project
type: Class
type: Concept
type: Processing
term status: accepted
broader: Transfer
definition: to move data from one location to another including deleting the original copy
in scheme: processing-classes
related: Move

Multi-Factor Authentication (MFA)
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Authentication Protocols
definition: An authentication system that uses two or more methods to authenticate
in scheme: technical-measures-classes

Multi National Scale
contributor: Harshvardhan J. Pandit
created: 2022-06-15
type: Class
type: Concept
type: Geographic Coverage
term status: accepted
broader: Geographic Coverage
definition: Geographic coverage spanning multiple nations
in scheme: processing-scale-classes

Non-Disclosure Agreement (NDA)
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
created: 2019-04-05
type: Class
type: Concept
type: Legal Measure
term status: accepted
broader: Legal Agreement
definition: Non-disclosure Agreements e.g. preserving confidentiality of information
in scheme: legal-measures-classes

National Authority
contributor: Harshvardhan J. Pandit
created: 2022-02-02
source: ADMS controlled vocabulary
type: Class
type: Concept
subclass of: Authority
term status: accepted
broader: Authority
definition: An authority tasked with overseeing legal compliance for a nation
in scheme: entities-authority-classes

National Scale
contributor: Harshvardhan J. Pandit
created: 2022-06-15
type: Class
type: Concept
type: Geographic Coverage
term status: accepted
broader: Geographic Coverage
definition: Geographic coverage spanning a nation
in scheme: processing-scale-classes

Natural Person
contributor: Harshvardhan J. Pandit
created: 2022-02-09
type: Class
type: Concept
subclass of: Entity
term status: accepted
broader: Entity
definition: A human
in scheme: entities-classes

Nearly Global Scale
contributor: Harshvardhan J. Pandit
created: 2022-06-15
type: Class
type: Concept
type: Geographic Coverage
term status: accepted
broader: Geographic Coverage
definition: Geographic coverage nearly spanning the entire globe
in scheme: processing-scale-classes

Necessity
contributor: Harshvardhan J. Pandit, Paul Ryan, Georg P. Krog, Julian Flake, Beatriz Esteves
created: 2022-02-12
example: E0026
example: E0052
type: Class
type: Concept
subclass of: Context
term status: accepted
broader: Context
definition: An indication of 'necessity' within a context
in scheme: context-classes
scope note: Necessity can be used to express need, essentiality, requirement, or compulsion.

Network Proxy Routing
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Data Protection Engineering
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Security Method
definition: Use of network routing using proxy
in scheme: technical-measures-classes

Network Security Protocols
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Security Method
definition: Security implemented at or over networks protocols
in scheme: technical-measures-classes

Non-Citizen
contributor: Harshvardhan J. Pandit, Georg P. Krog, Julian Flake, Paul Ryan, Beatriz Esteves
created: 2022-04-06
type: Class
type: Concept
type: Data Subject
term status: accepted
broader: Data Subject
definition: Data subjects that are not citizens (for a jurisdiction)
in scheme: entities-datasubject-classes

Non-commercial Purpose
contributor: Beatriz Esteves, Harshvardhan J. Pandit
created: 2024-02-14
source: DGA 4.4
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Purpose
definition: Purposes associated with processing activities performed in a non-commercial setting or without intention to commercialise
in scheme: purposes-classes

Non-Commercial Research
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
created: 2019-04-05
modified: 2024-04-14
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Non-commercial Purpose
broader: Research and Development
definition: Purposes associated with conducting research in a non-commercial setting e.g. for a non-profit-organisation (NGO)
in scheme: purposes-classes

Non Compliant
contributor: Harshvardhan J. Pandit
created: 2022-05-18
modified: 2022-09-07
type: Class
type: Concept
type: Compliance Status
term status: accepted
broader: Compliance Status
definition: State of non-compliance where objectives have not been met, but have not been violated
in scheme: status-classes
scope note: Changed from not compliant for consistency in commonly used terms

NonConformant
contributor: Harshvardhan J. Pandit
created: 2022-10-22
type: Class
type: Concept
type: Conformance Status
term status: accepted
broader: Conformance Status
definition: State of being non-conformant
in scheme: status-classes

Non-Governmental Organisation
contributor: Harshvardhan J. Pandit
created: 2022-02-02
modified: 2020-10-05
source: ADMS controlled vocabulary
type: Class
type: Concept
subclass of: Organisation
term status: accepted
broader: Organisation
definition: An organisation not part of or independent from the government
in scheme: entities-organisation-classes

Non-Personal Data
contributor: Harshvardhan J. Pandit
created: 2022-01-19
type: Class
type: Concept
subclass of: Data
term status: accepted
broader: Data
definition: Data that is not Personal Data
in scheme: personal-data-classes
scope note: The term NonPersonalData is provided to distinguish between PersonalData and other data, e.g. for indicating which data is regulated by privacy laws. To specify personal data that has been anonymised, the concept AnonymisedData should be used as the anonymisation process has a risk of not being fully effective and such anonymous data may be found to be personal data depending on circumstances.

Non-Personal Data Process
contributor: Harshvardhan J. Pandit
created: 2024-05-09
type: Class
type: Concept
subclass of: Process
term status: accepted
broader: Process
definition: An action, activity, or method involving non-personal data, and asserting that no personal data is involved
in scheme: process-classes
scope note: Use of personal data within NonPersonalDataProcess should be considered a violation of the explicit constraint that no personal data is involved.

Non-Profit Organisation
contributor: Harshvardhan J. Pandit
created: 2022-02-02
modified: 2020-10-05
source: ADMS controlled vocabulary
type: Class
type: Concept
subclass of: Organisation
term status: accepted
broader: Organisation
definition: An organisation that does not aim to achieve profit as its primary goal
in scheme: entities-organisation-classes

Non-Public Data Source
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves, Paul Ryan, Julian Flake
created: 2022-01-26
type: Class
type: Concept
type: Data Source
term status: accepted
broader: Data Source
definition: A source of data that is not publicly accessible or available
in scheme: processing-context-classes

Not Applicable
contributor: Harshvardhan J. Pandit
created: 2023-08-24
type: Class
type: Concept
type: Applicability
term status: accepted
broader: Applicability
definition: Concept indicating the information or context is not applicable
in scheme: context-classes
scope note: This relates to a 'Stop' state as distinct from a 'Halt' state. It makes no comments on whether the Activity can be resumed or continued towards completion.

Not Automated
contributor: Harshvardhan J. Pandit, Delaram Golpayegani
created: 2023-12-10
modified: 2024-04-20
source: ISO/IEC 22989:2022 Artificial intelligence concepts and terminology
type: Class
type: Concept
type: Automation Level
term status: accepted
broader: Automation Level
definition: Level of automation corresponding to Level 0 in ISO/IEC 22989:2022 where there is no automation in the system
in scheme: processing-context-classes
scope note: Human Involvement is necessary here as there is no automation

Not Available
contributor: Harshvardhan J. Pandit
created: 2023-08-24
type: Class
type: Concept
type: Applicability
term status: accepted
broader: Applicability
definition: Concept indicating the information or context is applicable but information is not yet available
in scheme: context-classes
scope note: This concept is useful when describing situations where information is required but is not available (yet). For example, if in a form a field asks about whether a process X was completed, and it is correct to interpret that process X is applicable and must be completed, but the information is not yet available as to whether this was done - then NotAvailable is useful to represent this.

Not Involved
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
created: 2024-05-10
type: Class
type: Concept
type: Involvement Status
term status: accepted
broader: Involvement Status
definition: Status indicating the specified context is 'not' involved
in scheme: status-classes

Not Required
contributor: Harshvardhan J. Pandit, Paul Ryan, Georg P. Krog, Julian Flake, Beatriz Esteves
created: 2022-02-15
type: Class
type: Concept
type: Necessity
term status: accepted
broader: Necessity
definition: Indication of neither being required nor optional i.e. not relevant or needed
in scheme: context-classes

Notice
contributor: Paul Ryan, David Hickey, Georg P. Krog, Harshvardhan J. Pandit
created: 2021-09-08
example: E0017
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Organisational Measure
definition: A notice is an artefact for providing information, choices, or controls
in scheme: organisational-measures-classes
scope note: Notice refers to the information whereas Notification refers to the provision of that notice. In several cases, they are used interchangeably - for example Privacy Notice as a measure or control refers to both the information as well as the act of making it available. For 'active' contexts where this distinction is important, e.g. data breach notifications, see Notification concept.

Notification
contributor: Harshvardhan J. Pandit
created: 2024-04-14
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Organisational Measure
definition: Notification represents the provision of a notice i.e. notifying
in scheme: organisational-measures-classes
scope note: Notice refers to the information whereas Notification refers to the provision of that notice. The distinction is important as there are specific obligations associated with notice and notifications. For example, a data breach notice refers to the information about the breach intended to be provided to another entity, whereas notification refers to the act of providing the entity with the notice

Notification Completed
contributor: Harshvardhan J. Pandit
created: 2024-05-19
type: Class
type: Concept
type: Notification Status
term status: accepted
broader: Notification Status
definition: Status indicating notification(s) are completed
in scheme: status-classes

Notification Failed
contributor: Harshvardhan J. Pandit
created: 2024-05-19
type: Class
type: Concept
type: Notification Status
term status: accepted
broader: Notification Status
definition: Status indicating notification(s) could not be completed due to a failure
in scheme: status-classes

Notification Not Needed
contributor: Harshvardhan J. Pandit
created: 2024-05-19
type: Class
type: Concept
type: Notification Status
term status: accepted
broader: Notification Status
definition: Status indicating notification(s) are not needed
in scheme: status-classes

Notification Ongoing
contributor: Harshvardhan J. Pandit
created: 2024-05-19
type: Class
type: Concept
type: Notification Status
term status: accepted
broader: Notification Status
definition: Status indicating notification(s) are ongoing
in scheme: status-classes

Notification Planned
contributor: Harshvardhan J. Pandit
created: 2024-05-19
type: Class
type: Concept
type: Notification Status
term status: accepted
broader: Notification Status
definition: Status indicating notification(s) are planned
in scheme: status-classes

Notification Status
contributor: Harshvardhan J. Pandit
created: 2024-05-19
type: Class
type: Concept
subclass of: Status
term status: accepted
broader: Status
definition: Status indicating whether notification(s) are planned, completed, or failed
in scheme: status-classes

Objecting to Process
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Steve Hickman
created: 2024-05-11
type: Class
type: Concept
type: Entity Permissive Involvement
term status: accepted
broader: Entity Permissive Involvement
definition: Involvement where entity can object to process of specified context
in scheme: processing-context-classes

Obligation
contributor: Harshvardhan J. Pandit, Georg P. Krog, Beatriz Esteves, Paul Ryan
created: 2022-10-19
type: Class
type: Concept
type: Rule
term status: accepted
broader: Rule
definition: A rule describing an obligation for performing an activity
in scheme: rules-classes

Observe
contributor: Harshvardhan J. Pandit, Georg P. Krog
created: 2022-06-15
type: Class
type: Concept
type: Processing
term status: accepted
broader: Obtain
definition: to obtain data through observation
in scheme: processing-classes

Observed Data
created: 2023-12-10
type: Class
type: Concept
subclass of: Collected Data
term status: accepted
broader: Collected Data
definition: Data that has been obtained through observations of a source
in scheme: personal-data-classes

Observed Personal Data
contributor: Georg P. Krog
created: 2022-08-24
modified: 2023-12-10
type: Class
type: Concept
subclass of: Collected Personal Data
subclass of: Observed Data
term status: accepted
broader: Collected Personal Data
broader: Observed Data
definition: Personal Data that has been collected through observation of the Data Subject(s)
in scheme: personal-data-classes

Obtain
created: 2019-05-07
source: GDPR Art.4-2
type: Class
type: Concept
type: Processing
term status: accepted
broader: Processing
definition: to solicit or gather data from someone
in scheme: processing-classes

Obtain Consent
created: 2024-05-11
type: Class
type: Concept
subclass of: Consent Control
term status: accepted
broader: Consent Control
definition: Control for obtaining consent
in scheme: consent-controls-classes
scope note: Indicates how the controller or entity can obtain consent e.g. used with dpv:isExercisedAt

Official Authority of Controller
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan
created: 2021-05-05
type: Class
type: Concept
type: Legal Basis
term status: accepted
broader: Legal Basis
definition: Activities are necessary or authorised through the official authority granted to or vested in the Data Controller
in scheme: legal-basis-classes

Often Frequency
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
type: Class
type: Concept
type: Frequency
term status: accepted
broader: Frequency
definition: Frequency where occurrences are often or frequent, but not continuous
in scheme: context-classes

Operating System Security
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Security Method
definition: Security implemented at or through operating systems
in scheme: technical-measures-classes

Optimisation for Consumer
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
created: 2019-04-05
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Service Optimisation
definition: Purposes associated with optimisation of activities and services for consumer or user
in scheme: purposes-classes
related: Custom
scope note: The term optimisation here refers to the efficiency of the service in terms of technical provision (or similar means) with benefits for everybody. Personalisation implies making changes that benefit the current user or persona.

Optimisation for Controller
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
created: 2019-04-05
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Service Optimisation
definition: Purposes associated with optimisation of activities and services for provider or controller
in scheme: purposes-classes

Optimise User Interface
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
created: 2019-04-05
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Optimisation for Consumer
definition: Purposes associated with optimisation of interfaces presented to the user
in scheme: purposes-classes

Opting in to Process
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Steve Hickman
created: 2024-05-11
type: Class
type: Concept
type: Entity Permissive Involvement
term status: accepted
broader: Entity Permissive Involvement
definition: Involvement where entity can opt-in to specified context
in scheme: processing-context-classes

Opting out of Process
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Steve Hickman
created: 2024-05-11
type: Class
type: Concept
type: Entity Permissive Involvement
term status: accepted
broader: Entity Permissive Involvement
definition: Involvement where entity can opt-out from specified context
in scheme: processing-context-classes

Optional
contributor: Harshvardhan J. Pandit, Paul Ryan, Georg P. Krog, Julian Flake, Beatriz Esteves
created: 2022-02-14
type: Class
type: Concept
type: Necessity
term status: accepted
broader: Necessity
definition: Indication of 'optional' or 'voluntary'
in scheme: context-classes

Organisation
contributor: Harshvardhan J. Pandit
created: 2022-02-02
type: Class
type: Concept
subclass of: Legal Entity
term status: accepted
broader: Legal Entity
definition: A general term reflecting a company or a business or a group acting as a unit
in scheme: entities-organisation-classes

Organisation Compliance Management
contributor: Paul Ryan, Georg P. Krog, David Hickey, Harshvardhan J. Pandit
created: 2021-09-01
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Organisation Governance
definition: Purposes associated with managing compliance for organisation in relation to internal policies
in scheme: purposes-classes
scope note: Note that this concept relates to internal organisational compliance. The concept LegalCompliance should be used for external legal or regulatory compliance.

Organisation Governance
contributor: Paul Ryan, Georg P. Krog, David Hickey, Harshvardhan J. Pandit
created: 2021-09-01
source: Belgian DPA ROPA Template
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Purpose
definition: Purposes associated with conducting activities and functions for governance of an organisation
in scheme: purposes-classes

Organisation Risk Management
contributor: Paul Ryan, Georg P. Krog, David Hickey, Harshvardhan J. Pandit
created: 2021-09-01
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Organisation Governance
definition: Purposes associated with managing risk for organisation's activities
in scheme: purposes-classes

Organisational Measure
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
created: 2019-04-05
modified: 2023-12-10
example: E0021
type: Class
type: Concept
subclass of: Technical and Organisational Measure
term status: accepted
broader: Technical and Organisational Measure
definition: Organisational measures used to safeguard and ensure good practices in connection with data and technologies
in scheme: TOM-classes

Organisational Unit
contributor: Harshvardhan J. Pandit, Paul Ryan
created: 2022-03-23
example: E0037
type: Class
type: Concept
subclass of: Entity
term status: accepted
broader: Entity
definition: Entity within an organisation that does not constitute as a separate legal entity
in scheme: entities-organisation-classes

Organise
created: 2019-05-07
source: GDPR Art.4-2
type: Class
type: Concept
type: Processing
term status: accepted
broader: Processing
definition: to organize data for arranging or classifying
in scheme: processing-classes

Privacy Impact Assessment (PIA)
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan
created: 2020-11-04
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Impact Assessment
definition: Impact assessment regarding privacy risks
in scheme: risk-classes

Parent Legal Entity
contributor: Harshvardhan J. Pandit, Georg P. Krog
created: 2024-04-14
type: Class
type: Concept
subclass of: Organisation
term status: accepted
broader: Organisation
definition: A legal entity that has one or more subsidiary entities operating under it
in scheme: entities-classes

Parent(s) of Data Subject
contributor: Georg P. Krog
created: 2022-08-03
type: Class
type: Concept
type: Data Subject
term status: accepted
broader: Data Subject
definition: Parent(s) of data subjects such as children
in scheme: entities-datasubject-classes

Partial Automation
contributor: Harshvardhan J. Pandit, Delaram Golpayegani
created: 2023-12-10
modified: 2024-04-20
source: ISO/IEC 22989:2022 Artificial intelligence concepts and terminology
type: Class
type: Concept
type: Automation Level
term status: accepted
broader: Automation Level
definition: Level of automation corresponding to Level 2 in ISO/IEC 22989:2022 where the automation is present in multiple parts of the system or in a manner that does not require the human to control/use these parts while still retaining control over the system
in scheme: processing-context-classes
scope note: Human Involvement is implied here, specifically the ability to Control operations, but also possibly for intervention, oversight, and verification

Partially Compliant
contributor: Harshvardhan J. Pandit
created: 2022-05-18
type: Class
type: Concept
type: Compliance Status
term status: accepted
broader: Compliance Status
definition: State of partially being compliant i.e. only some objectives have been met, and others have not been in violation
in scheme: status-classes

Participant
contributor: Harshvardhan J. Pandit, Georg P. Krog, Julian Flake, Paul Ryan, Beatriz Esteves
created: 2022-04-06
type: Class
type: Concept
type: Data Subject
term status: accepted
broader: Data Subject
definition: Data subjects that participate in some context such as volunteers in a function
in scheme: entities-datasubject-classes

Passive Right
contributor: Harshvardhan J. Pandit, Beatriz Esteves, Georg P. Krog, Paul Ryan
created: 2022-10-22
type: Class
type: Concept
type: Right
term status: accepted
broader: Right
definition: The right(s) applicable, provided, or expected that are always (passively) applicable
in scheme: rights-classes
scope note: Passive rights do not require the entity to request or exercise them. They are considered to be always applicable. For example, the Right to Privacy (in EU) does not require an exercise for it to be fulfilled.

Passively Involved
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
created: 2024-05-10
type: Class
type: Concept
type: Involvement Status
term status: accepted
broader: Involvement Status
definition: Status indicating the specified context is 'passively' involved
in scheme: status-classes
scope note: An example of passive involvement is a person being monitored by a CCTV

Password Authentication
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Authentication Protocols
definition: Use of passwords to perform authentication
in scheme: technical-measures-classes

Patient
contributor: Harshvardhan J. Pandit, Georg P. Krog, Julian Flake, Paul Ryan, Beatriz Esteves
created: 2022-04-06
type: Class
type: Concept
type: Data Subject
term status: accepted
broader: Data Subject
definition: Data subjects that receive medical attention, treatment, care, advice, or other health related services
in scheme: entities-datasubject-classes

Payment Management
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
created: 2020-11-04
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Service Provision
definition: Purposes associated with processing and managing payment in relation to service, including invoicing and records
in scheme: purposes-classes

Penetration Testing Methods
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Security Method
definition: Use of penetration testing to identify weaknesses and vulnerabilities through simulations
in scheme: technical-measures-classes

Permission
contributor: Harshvardhan J. Pandit, Georg P. Krog, Beatriz Esteves, Paul Ryan
created: 2022-10-19
example: E0028
example: E0066
type: Class
type: Concept
type: Rule
term status: accepted
broader: Rule
definition: A rule describing a permission to perform an activity
in scheme: rules-classes

Permission Management
contributor: Beatriz Esteves, Harshvardhan J. Pandit, Georg P. Krog
created: 2024-04-14
source: DGA 12.n
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Rights Management
definition: Methods to obtain, provide, modify, and withdraw permissions along with maintaining a record of permissions, retrieving records, and processing changes in permission states
in scheme: organisational-measures-classes
scope note: Permission is a broader concept than '(Informed) Consent' as consent when used as a legal basis has specific requirements to be valid. For management of consent, see the concept dpv:ConsentManagement

Personal Data
contributor: Harshvardhan J. Pandit
created: 2019-04-05
modified: 2022-01-19
source: GDPR Art.4-1g
example: E0044
type: Class
type: Concept
subclass of: Data
term status: accepted
broader: Data
definition: Data directly or indirectly associated or related to an individual.
in scheme: personal-data-classes
related: AnyData
scope note: This definition of personal data encompasses the concepts used in GDPR Art.4-1 for 'personal data' and ISO/IEC 2700 for 'personally identifiable information (PII)'.

Personal Data Handling
contributor: Axel Polleres, Javier Fernández
created: 2019-04-05
modified: 2023-12-10
type: Class
type: Concept
subclass of: Process
term status: sunset
broader: Process
definition: An abstract concept describing 'personal data handling'
in scheme: process-classes
scope note: This concept will be deprecated in future updates. It is recommended to use dpv:Process as the equivalent alternative which is better aligned with legal and operational terminology.

Personal Data Process
contributor: Harshvardhan J. Pandit
created: 2024-05-09
type: Class
type: Concept
subclass of: Process
term status: accepted
broader: Process
definition: An action, activity, or method involving personal data
in scheme: process-classes

Personalisation
contributor: Harshvardhan J. Pandit
created: 2021-09-01
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Purpose
definition: Purposes associated with creating and providing customisation based on attributes and/or needs of person(s) or context(s).
in scheme: purposes-classes
scope note: This term is a blanket purpose category for indicating personalisation of some other purpose, e.g. by creating a subclass of the other concept and Personalisation

Personalised Advertising
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
created: 2020-11-04
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Advertising
broader: Personalisation
definition: Purposes associated with creating and providing personalised advertising
in scheme: purposes-classes

Personalised Benefits
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
created: 2019-04-05
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Service Personalisation
definition: Purposes associated with creating and providing personalised benefits for a service
in scheme: purposes-classes

Personnel Hiring
contributor: Harshvardhan J. Pandit
created: 2022-04-20
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Personnel Management
definition: Purposes associated with management and execution of hiring processes of personnel
in scheme: purposes-classes

Personnel Management
contributor: Paul Ryan, Harshvardhan J. Pandit
created: 2022-03-30
source: Belgian DPA ROPA Template
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Human Resource Management
definition: Purposes associated with management of personnel associated with the organisation e.g. evaluation and management of employees and intermediaries
in scheme: purposes-classes

Personnel Payment
contributor: Harshvardhan J. Pandit
created: 2022-04-20
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Personnel Management
definition: Purposes associated with management and execution of payment of personnel
in scheme: purposes-classes

Physical Access Control Method
contributor: Georg P. Krog
created: 2022-06-15
source: NIST SP 800-12
type: Class
type: Concept
type: Physical Measure
term status: accepted
broader: Access Control Method
definition: Access control applied for physical access e.g. premises or equipment
in scheme: physical-measures-classes

Physical Authentication
contributor: Harshvardhan J. Pandit
created: 2024-04-14
source: NIST SP 800-15
type: Class
type: Concept
type: Physical Measure
term status: accepted
broader: Physical Measure
definition: Physical implementation of authentication e.g. by matching the person to their ID card
in scheme: physical-measures-classes

Physical Authorisation
contributor: Harshvardhan J. Pandit
created: 2024-04-14
source: NIST SP 800-16
type: Class
type: Concept
type: Physical Measure
term status: accepted
broader: Physical Measure
definition: Physical implementation of authorisation e.g. by stamping a visitor pass
in scheme: physical-measures-classes

Physical Device Security
contributor: Harshvardhan J. Pandit
created: 2024-04-14
source: NIST SP 800-19
type: Class
type: Concept
type: Physical Measure
term status: accepted
broader: Physical Measure
definition: Physical protection for devices and equipment
in scheme: physical-measures-classes

Physical Interception Protection
contributor: Harshvardhan J. Pandit
created: 2024-04-14
source: NIST SP 800-20
type: Class
type: Concept
type: Physical Measure
term status: accepted
broader: Physical Measure
definition: Physical protection against interception e.g. by posting a guard
in scheme: physical-measures-classes

Physical Interruption Protection
contributor: Harshvardhan J. Pandit
created: 2024-04-14
source: NIST SP 800-18
type: Class
type: Concept
type: Physical Measure
term status: accepted
broader: Physical Measure
definition: Physical protection against interruptions e.g. electrical supply interruption
in scheme: physical-measures-classes

Physical Measure
created: 2023-12-10
modified: 2023-12-10
type: Class
type: Concept
subclass of: Technical and Organisational Measure
term status: accepted
broader: Technical and Organisational Measure
definition: Physical measures used to safeguard and ensure good practices in connection with data and technologies
in scheme: TOM-classes

Physical Network Security
contributor: Harshvardhan J. Pandit
created: 2024-04-14
source: NIST SP 800-17
type: Class
type: Concept
type: Physical Measure
term status: accepted
broader: Physical Measure
definition: Physical protection for networks and networking related infrastructure e.g. by isolating networking equipments
in scheme: physical-measures-classes

Physical Secure Storage
contributor: Harshvardhan J. Pandit
created: 2024-04-14
source: NIST SP 800-171
type: Class
type: Concept
type: Physical Measure
term status: accepted
broader: Physical Measure
definition: Physical protection for storage of information or equipment e.g. secure storage for files
in scheme: physical-measures-classes

Physical Supply Security
contributor: Harshvardhan J. Pandit
created: 2024-04-14
source: NIST SP 800-14
type: Class
type: Concept
type: Physical Measure
term status: accepted
broader: Physical Measure
definition: Physically securing the supply of resources
in scheme: physical-measures-classes

Physical Surveillance
contributor: Harshvardhan J. Pandit
created: 2024-04-14
source: NIST SP 800-171
type: Class
type: Concept
type: Physical Measure
term status: accepted
broader: Physical Measure
definition: Physically monitoring areas via surveillance
in scheme: physical-measures-classes

Policy
contributor: Paul Ryan, David Hickey, Georg P. Krog, Harshvardhan J. Pandit
created: 2021-09-08
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Governance Procedures
definition: A guidance document outlining any of: procedures, plans, principles, decisions, intent, or protocols.
in scheme: organisational-measures-classes

Post-Quantum Cryptography
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Cryptographic Methods
definition: Use of algorithms that are intended to be secure against cryptanalytic attack by a quantum computer
in scheme: technical-measures-classes

Primary Importance
contributor: Harshvardhan J. Pandit, Paul Ryan, Georg P. Krog, Julian Flake, Beatriz Esteves
created: 2022-02-10
type: Class
type: Concept
type: Importance
term status: accepted
broader: Importance
definition: Indication of 'primary' or 'main' or 'core' importance
in scheme: context-classes

Principle
contributor: Harshvardhan J. Pandit
created: 2024-05-12
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Guidelines Principle
definition: A representation of values or norms that must be taken into consideration when conducting activities
in scheme: organisational-measures-classes

Privacy by Default
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
created: 2019-04-05
modified: 2024-04-14
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Guidelines Principle
definition: Practices regarding setting the default configurations of information and services to implement data protection and privacy (synonymous with Data Protection by Default)
in scheme: organisational-measures-classes

Privacy by Design
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
created: 2019-04-05
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Guidelines Principle
definition: Practices regarding incorporating data protection and privacy in the design of information and services (synonymous with Data Protection by Design)
in scheme: organisational-measures-classes

Privacy Notice
contributor: Georg P. Krog, Paul Ryan, David Hickey, Harshvardhan J. Pandit
created: 2021-09-08
example: E0017
example: E0022
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Notice
definition: Represents a notice or document outlining information regarding privacy
in scheme: organisational-measures-classes

Privacy Preserving Protocol
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Cryptographic Methods
definition: Use of protocols designed with the intention of provided additional guarantees regarding privacy
in scheme: technical-measures-classes

Private Information Retrieval
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Data Protection Engineering
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Cryptographic Methods
definition: Use of cryptographic methods to retrieve a record from a system without revealing which record is retrieved
in scheme: technical-measures-classes

Private Location
contributor: Harshvardhan J. Pandit
created: 2022-10-22
type: Class
type: Concept
type: Location
term status: accepted
broader: Local Location
definition: Location that is not or cannot be accessed by the public and is controlled as a private space
in scheme: jurisdiction-classes

Process
contributor: Harshvardhan J. Pandit
created: 2024-05-09
example: E0005
example: E0006
example: E0031
example: E0041
type: Class
type: Concept
term status: accepted
definition: An action, activity, or method
in scheme: process-classes

Processing
contributor: Axel Polleres, Javier Fernández
created: 2019-04-05
modified: 2020-11-04
source: SPECIAL Project
type: Class
type: Concept
term status: accepted
definition: Operations or 'processing' performed on data
in scheme: processing-classes
related: AnyProcessing

Processing Condition
created: 2023-12-10
example: E0047
type: Class
type: Concept
subclass of: Processing Context
term status: accepted
broader: Processing Context
definition: Conditions required or followed regarding processing of data or use of technologies
in scheme: processing-context-classes

Processing Context
contributor: Harshvardhan J. Pandit
created: 2022-02-09
type: Class
type: Concept
subclass of: Context
term status: accepted
broader: Context
definition: Context or conditions within which processing takes place
in scheme: processing-context-classes

Processing Duration
created: 2023-12-10
modified: 2024-05-11
example: E0047
type: Class
type: Concept
subclass of: Duration
subclass of: Processing Condition
term status: accepted
broader: Duration
broader: Processing Condition
definition: Conditions regarding duration or temporal limitation for processing
in scheme: processing-context-classes

Processing Location
created: 2023-12-10
modified: 2024-05-11
example: E0047
type: Class
type: Concept
subclass of: Location
subclass of: Processing Condition
term status: accepted
broader: Location
broader: Processing Condition
definition: Conditions regarding location or geospatial scope where processing takes places
in scheme: processing-context-classes

Processing Scale
contributor: Harshvardhan J. Pandit, Piero Bonatti
created: 2022-09-07
example: E0049
type: Class
type: Concept
subclass of: Scale
term status: accepted
broader: Scale
definition: Scale of Processing
in scheme: processing-scale-classes
scope note: The exact definition of what constitutes "scale" depends on use of jurisdictional, domain-specific, or other forms of externally defined criterias. Where possible, this should be reflected by extending the scales provided with the appropriate context.

Professional Training
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Staff Training
definition: Training methods that are intended to provide professional knowledge and expertise
in scheme: organisational-measures-classes

Profiling
created: 2019-05-07
source: GDPR Art.4-2
type: Class
type: Concept
type: Processing
term status: accepted
broader: Use
definition: to create a profile that describes or represents a person
in scheme: processing-classes

Prohibition
contributor: Harshvardhan J. Pandit, Georg P. Krog, Beatriz Esteves, Paul Ryan
created: 2022-10-19
example: E0029
example: E0066
type: Class
type: Concept
type: Rule
term status: accepted
broader: Rule
definition: A rule describing a prohibition to perform an activity
in scheme: rules-classes

Protection of Intellectual Property Rights
contributor: Beatriz Esteves, Harshvardhan J. Pandit
created: 2024-02-14
source: DGA 3.1(c)
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Fulfilment of Obligation
definition: Purposes associated with the protection of intellectual property rights
in scheme: purposes-classes

Protection of National Security
contributor: Beatriz Esteves, Harshvardhan J. Pandit
created: 2024-02-14
source: DGA 1.5
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Public Benefit
definition: Purposes associated with the protection of national security
in scheme: purposes-classes

Protection of Public Security
contributor: Beatriz Esteves, Harshvardhan J. Pandit
created: 2024-02-14
source: DGA 3.2(d)
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Public Benefit
definition: Purposes associated with the protection of public security
in scheme: purposes-classes

Provide Consent
created: 2024-05-11
type: Class
type: Concept
subclass of: Consent Control
subclass of: Opting in to Process
term status: accepted
broader: Consent Control
broader: Opting in to Process
definition: Control for providing consent
in scheme: consent-controls-classes
scope note: Indicates how the data subject can provide consent e.g. used with dpv:isExercisedAt

Provide Event Recommendations
contributor: Harshvardhan J. Pandit, Rudy Jacob
created: 2019-11-26
modified: 2022-10-14
source: SPECIAL Project
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Provide Personalised Recommendations
definition: Purposes associated with creating and providing personalised recommendations for events
in scheme: purposes-classes

Provide Official Statistics
contributor: Beatriz Esteves, Harshvardhan J. Pandit
created: 2024-02-14
source: DGA 2.16
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Public Benefit
definition: Purposes associated with facilitating the development, production and dissemination of reliable official statistics
in scheme: purposes-classes

Provide Personalised Recommendations
contributor: Harshvardhan J. Pandit, Rudy Jacob
created: 2019-11-26
modified: 2022-10-14
source: SPECIAL Project
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Service Personalisation
definition: Purposes associated with creating and providing personalised recommendations
in scheme: purposes-classes

Provide Product Recommendations
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
created: 2019-04-05
modified: 2022-10-14
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Provide Personalised Recommendations
definition: Purposes associated with creating and providing product recommendations e.g. suggest similar products
in scheme: purposes-classes
related: Marketing

Provided Data
contributor: Harshvardhan J. Pandit, Paul Ryan
created: 2024-04-20
type: Class
type: Concept
subclass of: Collected Data
term status: accepted
broader: Collected Data
definition: Data that has been provided by an entity
in scheme: personal-data-classes
scope note: Provided data involves one entity explicitly providing the data, which the other entity then collects

Provided Personal Data
contributor: Harshvardhan J. Pandit, Paul Ryan
created: 2024-04-20
example: E0046
type: Class
type: Concept
subclass of: Collected Personal Data
subclass of: Provided Data
term status: accepted
broader: Collected Personal Data
broader: Provided Data
definition: Personal Data that has been provided by an entity such as the Data Subject
in scheme: personal-data-classes
scope note: Provided personal data involves one entity (e.g. data subject) explicitly providing the data, which the other entity (e.g. data controller) then collects

Pseudonymisation
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar, Maya Borges, Damien Desfontaines
created: 2019-04-05
modified: 2022-11-24
source: GDPR Art.4-5
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: De-Identification
definition: Pseudonymisation means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person;
in scheme: technical-measures-classes

Pseudonymise
created: 2019-05-07
modified: 2022-10-14
source: GDPR Art.4-2
type: Class
type: Concept
type: Processing
term status: accepted
broader: Transform
definition: to replace personal identifiable information by artificial identifiers
in scheme: processing-classes

Pseudonymised Data
contributor: Harshvardhan J. Pandit
created: 2022-01-19
type: Class
type: Concept
subclass of: Personal Data
term status: accepted
broader: Personal Data
definition: Pseudonymised Data is data that has gone a partial or incomplete anonymisation process by replacing the identifiable information with artificial identifiers or 'pseudonyms', and is still considered as personal data
in scheme: personal-data-classes

Public Benefit
contributor: Harshvardhan J. Pandit
created: 2024-02-14
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Purpose
definition: Purposes undertaken and intended to provide benefit to public or society
in scheme: purposes-classes

Public Data Source
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves, Paul Ryan, Julian Flake
created: 2022-01-26
type: Class
type: Concept
type: Data Source
term status: accepted
broader: Data Source
definition: A source of data that is publicly accessible or available
in scheme: processing-context-classes
scope note: The term 'Public' is used here in a broad sense. Actual consideration of what is 'Public Data' can vary based on several contextual or jurisdictional factors such as definition of open, methods of access, permissions and licenses.

Public Interest
contributor: Harshvardhan J. Pandit
created: 2021-04-21
type: Class
type: Concept
type: Legal Basis
term status: accepted
broader: Legal Basis
definition: Activities are necessary or beneficial for interest of the public or society at large
in scheme: legal-basis-classes

Public Location
contributor: Georg P. Krog
created: 2022-10-22
type: Class
type: Concept
type: Location
term status: accepted
broader: Local Location
definition: Location that is or can be accessed by the public
in scheme: jurisdiction-classes

Public Policy Making
contributor: Beatriz Esteves, Harshvardhan J. Pandit
created: 2024-02-14
source: DGA 2.16
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Public Benefit
definition: Purposes associated with public policy making, such as the development of new laws
in scheme: purposes-classes

Public Register of Entities
contributor: Beatriz Esteves
created: 2024-06-11
type: Class
type: Concept
term status: accepted
definition: A publicly available list of entities e.g. to indicate which entities perform a certain activity within a certain location or jurisdiction
in scheme: entities-classes

Public Relations
contributor: Paul Ryan, Georg P. Krog, David Hickey, Harshvardhan J. Pandit
created: 2021-09-01
source: Belgian DPA ROPA Template
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Marketing
definition: Purposes associated with managing and conducting public relations processes, including creating goodwill for the organisation
in scheme: purposes-classes

Purpose
contributor: Axel Polleres, Javier Fernández, Harshvardhan J. Pandit, Delaram Golpayegani
created: 2019-04-05
modified: 2024-04-14
source: SPECIAL Project
example: E0003
example: E0004
example: E0007
example: E0008
example: E0040
example: E0041
example: E0042
example: E0043
type: Class
type: Concept
term status: accepted
definition: Purpose or (broader) Goal associated with data or technology
in scheme: purposes-classes
related: AnyPurpose
scope note: The purpose or goal here is intended to sufficiently describe the intention or objective of why the data or technology is being used, and should be broader than mere technical descriptions of achieving a capability. For example, "Analyse Data" is an abstract purpose with no indication of what the analyses is for as compared to a purpose such as "Marketing" or "Service Provision" which provide clarity and comprehension of the 'purpose' and can be enhanced with additional descriptions. Such modelling is in line with regulatory requirements regarding the specificity of purposes, for example in GDPR

Quantum Cryptography
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Cryptographic Methods
definition: Cryptographic methods that utilise quantum mechanical properties to perform cryptographic tasks
in scheme: technical-measures-classes

Query
contributor: Harshvardhan J. Pandit
created: 2022-06-15
type: Class
type: Concept
type: Processing
term status: accepted
broader: Consult
definition: to query or make enquiries over data
in scheme: processing-classes

RNG Pseudonymisation
contributor: Harshvardhan J. Pandit
created: 2022-08-17
modified: 2022-10-13
source: ENISA Data Pseudonymisation: Advanced Techniques and Use Cases
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Pseudonymisation
definition: A pseudonymisation method where identifiers are substituted by a number chosen by a Random Number Generator (RNG)
in scheme: technical-measures-classes

Records of Processing Activities
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan
created: 2021-09-08
modified: 2024-04-14
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Data Processing Record
definition: A Record of Processing Activities (ROPA) is a document detailing processing activities
in scheme: organisational-measures-classes
scope note: ROPA under GDPR Art.30 has specific requirements regarding the information to be maintained. Additionally, Data Protection Authorities also provide additional information guidelines for information to be maintained in a ROPA. For more information see https://w3id.org/dpcat

Random Location
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
type: Class
type: Concept
type: Location Fixture
term status: accepted
broader: Location Fixture
definition: Location that is random or unknown
in scheme: jurisdiction-classes

Reaffirm Consent
created: 2024-05-11
type: Class
type: Concept
subclass of: Consent Control
term status: accepted
broader: Consent Control
definition: Control for affirming consent
in scheme: consent-controls-classes
scope note: Indicates how the controller (with dpv:ObtainConsent) or data subject (with dpv:ProvideConsent) can reaffirm consent e.g. used with dpv:isExercisedAt

Recertification Policy
created: 2019-04-05
modified: 2024-04-14
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Policy
definition: Policy regarding repetition or renewal of existing certification(s)
in scheme: organisational-measures-classes

Recipient
contributor: Axel Polleres, Javier Fernández
created: 2019-04-05
modified: 2024-05-21
source: SPECIAL Project
source: GDPR Art.4-9g
type: Class
type: Concept
subclass of: Legal Entity
term status: accepted
broader: Legal Entity
definition: Entities that receive data or technologies
in scheme: entities-legalrole-classes
related: AnyRecipient
scope note: Recipients that receive personal data can be a Third Party, Data Controller, or Data Processor.

Recipient Informed
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
created: 2024-05-10
type: Class
type: Concept
type: Entity Informed Status
term status: accepted
broader: Entity Informed
definition: Status indicating Recipient has been informed about the specified context
in scheme: status-classes

Recipient Uninformed
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
created: 2024-05-10
type: Class
type: Concept
type: Entity Informed Status
term status: accepted
broader: Entity Uninformed
definition: Status indicating Recipient is uninformed i.e. has not been informed about the specified context
in scheme: status-classes

Record
created: 2019-05-07
source: GDPR Art.4-2
type: Class
type: Concept
type: Processing
term status: accepted
broader: Obtain
definition: to make a record (especially media)
in scheme: processing-classes

Record Management
contributor: Paul Ryan, Georg P. Krog, David Hickey, Harshvardhan J. Pandit
created: 2021-09-01
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Purpose
definition: Purposes associated with manage creation, storage, and use of records relevant to operations, events, and processes e.g. to store logs or access requests
in scheme: purposes-classes
scope note: This purpose relates specifically for record creation and management. This can be combined or used along with other purposes to express intentions such as records for legal compliance or vendor payments.

Records of Activities
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan
created: 2021-09-08
modified: 2024-05-05
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Organisational Measure
definition: Records of activities within some context such as maintenance tasks or governance functions
in scheme: organisational-measures-classes
scope note: Records can be any information associated with the activity e.g. logs, summaries.

Reformat
contributor: Beatriz Esteves
created: 2024-04-14
source: DGA 12.d
type: Class
type: Concept
type: Processing
term status: accepted
broader: Format
definition: to rearrange or restructure data to change its form
in scheme: processing-classes

Region
contributor: Harshvardhan J. Pandit
created: 2022-01-19
type: Class
type: Concept
subclass of: Country
term status: accepted
broader: Country
definition: A region is an area or site that is considered a location
in scheme: jurisdiction-classes

Regional Authority
contributor: Harshvardhan J. Pandit
created: 2022-02-02
source: ADMS controlled vocabulary
type: Class
type: Concept
subclass of: Authority
term status: accepted
broader: Authority
definition: An authority tasked with overseeing legal compliance for a region
in scheme: entities-authority-classes

Regional Scale
contributor: Harshvardhan J. Pandit
created: 2022-06-15
type: Class
type: Concept
type: Geographic Coverage
term status: accepted
broader: Geographic Coverage
definition: Geographic coverage spanning a specific region or regions
in scheme: processing-scale-classes

Regulatory Sandbox
contributor: Harshvardhan J. Pandit
created: 2024-05-17
source: EU Council Regulatory sandboxes and experimentation clauses as tools for better regulation
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Safeguard
definition: Mechanism used by regulators and businesses for gauging the compatibility of regulations and innovative products, particularly in the context of digitalisation, in a controlled real-world environment with appropriate safeguards in place
in scheme: organisational-measures-classes

Remote Location
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
type: Class
type: Concept
type: Location
term status: accepted
broader: Location Locality
definition: Location is remote i.e. not local
in scheme: jurisdiction-classes

Remove
created: 2019-05-07
source: GDPR Art.4-2
type: Class
type: Concept
type: Processing
term status: accepted
broader: Processing
definition: to destruct or erase data
in scheme: processing-classes

Renewed Consent Given
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
created: 2022-06-22
source: GConsent
type: Class
type: Concept
type: Consent Status
term status: accepted
broader: Consent Status Valid for Processing
definition: The state where a previously given consent has been 'renewed' or 'refreshed' or 'reaffirmed' to form a new instance of given consent
in scheme: consent-status-classes
scope note: An example of this state is when a previously given consent has expired, and the individual is presented a notice regarding continuing associated processing operations - to which they agree. This state can be useful to keep track of 'reconfirmed' or 'refreshed' consent within consent records, assist notices and contextual agents to create better consenting dialogues, and assist with specific legal obligations related to subsequent consenting

Repair Impairments
contributor: Harshvardhan J. Pandit
created: 2022-08-24
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Service Provision
definition: Purposes associated with identifying, rectifying, or otherwise undertaking activities intended to fix or repair impairments to existing functionalities
in scheme: purposes-classes
scope note: An example of identifying and rectifying impairments is the process of finding and fixing errors in products, commonly referred to as debugging

Representative
contributor: Georg P. Krog, Paul Ryan, Harshvardhan J. Pandit, Beatriz Esteves
created: 2020-11-04
source: GDPR Art.27
example: E0019
example: E0032
type: Class
type: Concept
subclass of: Legal Entity
term status: accepted
broader: Legal Entity
definition: A representative of a legal entity
in scheme: entities-classes

Request Accepted
contributor: Harshvardhan J. Pandit
created: 2022-11-30
type: Class
type: Concept
type: Request Status
term status: accepted
broader: Request Status
definition: State of a request being accepted towards fulfilment
in scheme: status-classes

Request Acknowledged
contributor: Harshvardhan J. Pandit
created: 2022-11-30
type: Class
type: Concept
type: Request Status
term status: accepted
broader: Request Status
definition: State of a request being acknowledged
in scheme: status-classes

Request Action Delayed
contributor: Harshvardhan J. Pandit
created: 2022-11-30
example: E0058
type: Class
type: Concept
type: Request Status
term status: accepted
broader: Request Status
definition: State of a request being delayed towards fulfilment
in scheme: status-classes

Request Fulfilled
contributor: Harshvardhan J. Pandit
created: 2022-11-30
type: Class
type: Concept
type: Request Status
term status: accepted
broader: Request Status
definition: State of a request being fulfilled
in scheme: status-classes

Request Initiated
contributor: Harshvardhan J. Pandit
created: 2022-11-30
type: Class
type: Concept
type: Request Status
term status: accepted
broader: Request Status
definition: State of a request being initiated
in scheme: status-classes

Request Rejected
contributor: Harshvardhan J. Pandit
created: 2022-11-30
type: Class
type: Concept
type: Request Status
term status: accepted
broader: Request Status
definition: State of a request being rejected towards non-fulfilment
in scheme: status-classes

Request Required Action Performed
contributor: Harshvardhan J. Pandit
created: 2022-11-30
type: Class
type: Concept
type: Request Status
term status: accepted
broader: Request Status
definition: State of a request's required action having been performed by the other party
in scheme: status-classes

Request Requires Action
contributor: Harshvardhan J. Pandit
created: 2022-11-30
type: Class
type: Concept
type: Request Status
term status: accepted
broader: Request Status
definition: State of a request requiring an action to be performed from another party
in scheme: status-classes

Request Status
contributor: Harshvardhan J. Pandit
created: 2022-11-30
type: Class
type: Concept
subclass of: Status
term status: accepted
broader: Status
definition: Status associated with requests
in scheme: status-classes

Request Status Query
contributor: Harshvardhan J. Pandit
created: 2022-11-30
type: Class
type: Concept
type: Request Status
term status: accepted
broader: Request Status
definition: State of a request's status being queried
in scheme: status-classes

Request Unfulfilled
contributor: Harshvardhan J. Pandit
created: 2022-11-30
type: Class
type: Concept
type: Request Status
term status: accepted
broader: Request Status
definition: State of a request being unfulfilled
in scheme: status-classes

Requested Service Provision
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
created: 2021-09-08
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Service Provision
definition: Purposes associated with delivering services as requested by user or consumer
in scheme: purposes-classes
scope note: The use of 'request' here includes where an user explicitly asks for the service and also when an established contract requires the provision of the service

Required
contributor: Harshvardhan J. Pandit, Paul Ryan, Georg P. Krog, Julian Flake, Beatriz Esteves
created: 2022-02-13
type: Class
type: Concept
type: Necessity
term status: accepted
broader: Necessity
definition: Indication of 'required' or 'necessary'
in scheme: context-classes

Research and Development
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
created: 2019-04-05
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Purpose
definition: Purposes associated with conducting research and development for new methods, products, or services
in scheme: purposes-classes

Residual Risk
contributor: Harshvardhan J. Pandit
created: 2024-06-16
example: E0068
type: Class
type: Concept
subclass of: Risk
term status: accepted
broader: Risk
definition: Risk remaining after treatment or mitigation
in scheme: risk-classes

Restrict
created: 2019-05-07
source: GDPR Art.4-2
type: Class
type: Concept
type: Processing
term status: accepted
broader: Transform
definition: to apply a restriction on the processing of specific records
in scheme: processing-classes

Retrieve
created: 2019-05-07
source: GDPR Art.4-2
type: Class
type: Concept
type: Processing
term status: accepted
broader: Use
definition: to retrieve data, often in an automated manner
in scheme: processing-classes

Reversing Process Effects
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Steve Hickman
created: 2024-05-11
type: Class
type: Concept
type: Entity Permissive Involvement
term status: accepted
broader: Entity Permissive Involvement
definition: Involvement where entity can reverse effects of specified context
in scheme: processing-context-classes
scope note: Effects refer to consequences and impacts arising from the process or from the outputs of a process

Reversing Process Input
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Steve Hickman
created: 2024-05-11
type: Class
type: Concept
type: Entity Permissive Involvement
term status: accepted
broader: Entity Permissive Involvement
definition: Involvement where entity can reverse input of specified context
in scheme: processing-context-classes
scope note: Reversion can be considered a form of correction in some instances. We welcome inputs to further explore and define this relation between correction and reversion concepts.

Reversing Process Output
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Steve Hickman
created: 2024-05-11
type: Class
type: Concept
type: Entity Permissive Involvement
term status: accepted
broader: Entity Permissive Involvement
definition: Involvement where entity can reverse output of specified context
in scheme: processing-context-classes
scope note: Reversing of outputs indicate discarding the output and going back to the previous output. This is different from correction of output which allows modification of the output - implying continuation of the process.

Review Impact Assessment
contributor: Harshvardhan J. Pandit, Georg P. Krog
created: 2022-10-22
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Impact Assessment
broader: Review Procedure
definition: Procedures to review impact assessments in terms of continued validity, adequacy for intended purposes, and conformance of processes with findings
in scheme: organisational-measures-classes

Review Procedure
contributor: Harshvardhan J. Pandit, Georg P. Krog
created: 2022-10-22
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Governance Procedures
definition: A procedure or process that reviews the correctness and validity of other procedures and policies e.g. to ensure continued validity, adequacy for intended purposes, and conformance of processes with findings
in scheme: organisational-measures-classes

Right
contributor: Harshvardhan J. Pandit, Beatriz Esteves, Georg P. Krog
created: 2020-11-18
example: E0067
type: Class
type: Concept
term status: accepted
definition: The right(s) applicable, provided, or expected
in scheme: rights-classes
scope note: A 'right' is a legal, social, or ethical principle of freedom or entitlement which dictate the norms regarding what is allowed or owed. Rights as a concept encompass a broad area of norms and entities, and are not specific to Individuals or Data Protection / Privacy. For individual specific rights, see dpv:DataSubjectRight

Right Exercise Activity
contributor: Harshvardhan J. Pandit, Beatriz Esteves, Georg P. Krog, Paul Ryan
created: 2022-11-02
example: E0059
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Organisational Measure
definition: An activity representing an exercising of an active right
in scheme: rights-classes
scope note: There may be multiple activities associated with exercising and fulfilling rights. See the RightExerciseRecord concept for record-keeping of such activities in a cohesive manner.

Right Exercise Notice
contributor: Harshvardhan J. Pandit, Beatriz Esteves, Georg P. Krog, Paul Ryan
created: 2022-10-22
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Right Notice
definition: Information associated with exercising of an active right such as where and how to exercise the right, information required for it, or updates on an exercised rights request
in scheme: rights-classes
scope note: This concept is intended for providing information regarding a right exercise. For specific instances of such exercises, see RightExerciseActivity and RightExerciseRecord.

Right Exercise Record
contributor: Harshvardhan J. Pandit, Beatriz Esteves, Georg P. Krog, Paul Ryan
created: 2022-11-02
example: E0057
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Record
definition: Record of a Right being exercised
in scheme: rights-classes
scope note: This concept represents a record of one or more right exercise activities, such as those associated with a single data subject or service or entity

Right Fulfilment Notice
contributor: Harshvardhan J. Pandit, Beatriz Esteves
created: 2022-11-02
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Right Exercise Notice
definition: Notice provided regarding fulfilment of a right
in scheme: rights-classes
scope note: This notice is associated with situations where information is provided with the intention of progressing the fulfilment of a right. For example, a notice asking for more information regarding the scope of the right, or providing information on where to access the data provided under a right.

Right Non-Fulfilment Notice
contributor: Harshvardhan J. Pandit, Beatriz Esteves
created: 2022-11-02
example: E0058
example: E0061
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Right Exercise Notice
definition: Notice provided regarding non-fulfilment of a right
in scheme: rights-classes
scope note: This notice is associated with situations where information is provided with the intention of communicating non-fulfilment of a right. For example, to provide justifications on why a right could not be fulfilled or providing information about another entity who should be approached for exercising this right.

Right Notice
contributor: Harshvardhan J. Pandit
created: 2024-06-16
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Notice
definition: Information associated with rights, such as which rights exist, when and where they are applicable, and other relevant information
in scheme: rights-classes
scope note: This concept also covers information about rights exercise, with dpv:RightExerciseNotice specifically representing information provided in connection with exercising of rights. Both notices may be needed, e.g. RightNotice for providing information about existence and exercise of rights, and RightExerciseNotice for providing additional information specifically about exercise of rights - such as to request more information or provide updates on an exercised rights request

Rights Fulfillment
contributor: Beatriz Esteves, Georg P. Krog, Harshvardhan J. Pandit
created: 2024-02-14
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Legal Obligation
definition: Purposes associated with the fulfillment of rights specified in law
in scheme: purposes-classes
scope note: Where Rights Fulfillment includes activities that are not legal obligations, for example conducting Identity Verification, the documentation should indicate this by expressing them as separate purposes within the same activity

Rights Impact Assessment
contributor: Harshvardhan J. Pandit
created: 2024-04-14
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Impact Assessment
definition: Impact assessment which involves determining the impact on rights and freedoms
in scheme: risk-classes
scope note: The rights and freedoms may be those defined in law or other norms, and may be bound to a jurisdiction

Rights Management
contributor: Beatriz Esteves, Harshvardhan J. Pandit, Georg P. Krog
created: 2024-04-14
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Organisational Measure
definition: Methods associated with rights management where 'rights' refer to controlling who can do what with a resource
in scheme: organisational-measures-classes

Risk
contributor: Harshvardhan J. Pandit
created: 2020-11-18
example: E0027
example: E0068
example: E0071
type: Class
type: Concept
term status: accepted
definition: A risk or possibility or uncertainty of negative effects, impacts, or consequences
in scheme: risk-classes
scope note: Risks can be associated with one or more different concepts such as purpose, processing, personal data, technical or organisational measure

Risk Assessment
contributor: Harshvardhan J. Pandit
created: 2024-04-14
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Assessment
definition: Assessment involving identification, analysis, and evaluation of risk
in scheme: risk-classes

Risk Level
contributor: Harshvardhan J. Pandit
created: 2022-07-20
example: E0068
example: E0071
type: Class
type: Concept
term status: accepted
definition: The magnitude of a risk expressed as an indication to aid in its management
in scheme: risk-classes
scope note: Risk Levels can be defined as a combination of different characteristics. For example, ISO 31073:2022 defines it as a combination of consequences and their likelihood. Another example would be the Risk Matrix where Risk Level is defined as a combination of Likelihood and Severity associated with the Risk.

Risk Mitigation Measure
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan
created: 2020-11-04
example: E0068
type: Class
type: Concept
subclass of: Technical and Organisational Measure
term status: accepted
broader: Technical and Organisational Measure
definition: Measures intended to mitigate, minimise, or prevent risk.
in scheme: risk-classes

Rule
contributor: Harshvardhan J. Pandit, Georg P. Krog, Beatriz Esteves, Paul Ryan
created: 2022-10-19
example: E0030
type: Class
type: Concept
term status: accepted
definition: A rule describing a process or control that directs or determines if and how an activity should be conducted
in scheme: rules-classes

Safeguard
contributor: David Hickey, Paul Ryan, Georg P. Krog, Harshvardhan J. Pandit
created: 2021-09-22
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Organisational Measure
definition: A safeguard is a precautionary measure for the protection against or mitigation of negative effects
in scheme: organisational-measures-classes
scope note: This concept is relevant given the requirement to assert safeguards in cross-border data transfers

Safeguard for Data Transfer
contributor: David Hickey, Paul Ryan, Georg P. Krog, Harshvardhan J. Pandit
created: 2021-09-22
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Safeguard
definition: Represents a safeguard used for data transfer. Can include technical or organisational measures.
in scheme: organisational-measures-classes

Scale
contributor: Harshvardhan J. Pandit, Georg P. Krog, Rana Saniei
created: 2022-06-15
type: Class
type: Concept
subclass of: Processing Context
term status: accepted
broader: Processing Context
definition: A measurement along some dimension
in scheme: processing-scale-classes
scope note: Scales are subjective concepts that need to be defined and interpreted within the context of their application. For example, what would be small within one context could be large within another.

Scientific Research
contributor: Beatriz Esteves, Harshvardhan J. Pandit
created: 2024-02-14
source: DGA 2.16
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Research and Development
definition: Purposes associated with scientific research
in scheme: purposes-classes

Scope
contributor: Harshvardhan J. Pandit
created: 2022-06-15
type: Class
type: Concept
subclass of: Context
term status: accepted
broader: Context
definition: Indication of the extent or range or boundaries associated with(in) a context
in scheme: context-classes

Scoring of Individuals
contributor: Harshvardhan J. Pandit
created: 2022-10-22
modified: 2022-11-30
source: GDPR Art.4-2
type: Class
type: Concept
type: Evaluation and Scoring
term status: accepted
broader: Evaluation and Scoring
definition: Processing that involves scoring of individuals
in scheme: processing-context-classes

Screen
contributor: Harshvardhan J. Pandit, Georg P. Krog
created: 2022-06-15
type: Class
type: Concept
type: Processing
term status: accepted
broader: Transform
definition: to remove data for some criteria
in scheme: processing-classes

Seal
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
created: 2019-04-05
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Certification and Seal
definition: A seal or a mark indicating proof of certification to some certification or standard
in scheme: organisational-measures-classes

Search Functionalities
contributor: Georg P. Krog
created: 2022-11-09
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Service Provision
definition: Purposes associated with providing searching, querying, or other forms of information retrieval related functionalities
in scheme: purposes-classes

Secondary Importance
contributor: Harshvardhan J. Pandit, Paul Ryan, Georg P. Krog, Julian Flake, Beatriz Esteves
created: 2022-02-11
type: Class
type: Concept
type: Importance
term status: accepted
broader: Importance
definition: Indication of 'secondary' or 'minor' or 'auxiliary' importance
in scheme: context-classes

Secret Sharing Schemes
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Data Pseudonymisation: Advanced Techniques and Use Cases
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Cryptographic Methods
definition: Use of secret sharing schemes where the secret can only be reconstructed through combination of sufficient number of individuals
in scheme: technical-measures-classes

Sector
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
created: 2019-04-05
example: E0043
type: Class
type: Concept
term status: accepted
definition: Sector describes the area of application or domain that indicates or restricts scope for interpretation and application of purpose e.g. Agriculture, Banking
in scheme: purposes-classes
scope note: There are various sector codes used commonly to indicate the domain of an organisation or business. Examples include NACE (EU), ISIC (UN), SIC and NAICS (USA).

Secure Multi-Party Computation
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Cryptographic Methods
definition: Use of cryptographic methods for entities to jointly compute functions without revealing inputs
in scheme: technical-measures-classes

Secure Processing Environment
contributor: Beatriz Esteves, Harshvardhan J. Pandit
created: 2024-04-14
source: DGA 2.20
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Security Procedure
definition: A physical or virtual environment supported by organisational means that integrates security and compliance requirements and allows supervising data processing actions
in scheme: organisational-measures-classes

Security Assessment
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA 5G Cybersecurity Standards
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Risk Assessment
definition: Assessment of security intended to identity gaps, vulnerabilities, risks, and effectiveness of controls
in scheme: risk-classes

Security Incident Notice
contributor: Harshvardhan J. Pandit
created: 2024-04-14
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Notice
definition: A notice providing information about security incident(s)
in scheme: organisational-measures-classes

Security Incident Notification
contributor: Harshvardhan J. Pandit
created: 2024-04-14
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Notification
definition: Notification of information about security incident(s)
in scheme: organisational-measures-classes

Security Incident Record
contributor: Harshvardhan J. Pandit
created: 2024-04-14
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Records of Activities
definition: Record of a security incident
in scheme: organisational-measures-classes

Security Knowledge Training
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA 5G Cybersecurity Standards
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Staff Training
definition: Training intended to increase knowledge regarding security
in scheme: organisational-measures-classes

Security Method
contributor: Harshvardhan J. Pandit
created: 2022-08-24
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Technical Measure
definition: Methods that relate to creating and providing security
in scheme: technical-measures-classes

Security Procedure
contributor: Harshvardhan J. Pandit
created: 2022-08-24
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Organisational Measure
definition: Procedures associated with assessing, implementing, and evaluating security
in scheme: organisational-measures-classes

Security Role Procedures
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA 5G Cybersecurity Standards
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Security Procedure
definition: Procedures related to security roles
in scheme: organisational-measures-classes

Sell Data to Third Parties
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
created: 2019-04-05
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Sell Products
definition: Purposes associated with selling or sharing data or information to third parties
in scheme: purposes-classes
scope note: Sell here means exchange, submit, or provide in return for direct or indirect compensation. Was subclass of commercial interest, changed to reflect selling something

Sell Insights from Data
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
created: 2019-04-05
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Sell Products
definition: Purposes associated with selling or sharing insights obtained from analysis of data
in scheme: purposes-classes
scope note: Sell here means exchange, submit, or provide in return for direct or indirect compensation. Was subclass of commercial interest, changed to reflect selling something

Sell Products
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
created: 2021-09-08
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Service Provision
definition: Purposes associated with selling products or services
in scheme: purposes-classes
scope note: Sell here means exchange, submit, or provide in return for direct or indirect compensation.

Sell Products to Data Subject
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
created: 2019-04-05
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Sell Products
definition: Purposes associated with selling products or services to the user, consumer, or data subjects
in scheme: purposes-classes
scope note: Sell Products here refers to processing necessary to provide and complete a sale to customers. It should not be confused with providing services with a cost based on an established agreement.

Sensitive Data
created: 2024-02-14
type: Class
type: Concept
subclass of: Data
term status: accepted
broader: Data
definition: Data deemed sensitive
in scheme: personal-data-classes

Sensitive Non Personal Data
created: 2024-02-14
source: DGA 30(a)
type: Class
type: Concept
subclass of: Sensitive Data
term status: accepted
broader: Sensitive Data
definition: Non-personal data deemed sensitive
in scheme: personal-data-classes

Sensitive Personal Data
contributor: Harshvardhan J. Pandit
created: 2022-01-19
example: E0010
example: E0045
type: Class
type: Concept
subclass of: Personal Data
subclass of: Sensitive Data
term status: accepted
broader: Personal Data
broader: Sensitive Data
definition: Personal data that is considered 'sensitive' in terms of privacy and/or impact, and therefore requires additional considerations and/or protection
in scheme: personal-data-classes
scope note: Sensitivity' is a matter of context, and may be defined within legal frameworks. For GDPR, Special categories of personal data are considered a subset of sensitive data. To illustrate the difference between the two, consider the situation where Location data is collected, and which is considered 'sensitive' but not 'special'. As a probable rule, sensitive data require additional considerations whereas special category data requires additional legal basis / justifications.

Sensitivity Level
contributor: Harshvardhan J. Pandit
created: 2023-08-24
type: Class
type: Concept
subclass of: Severity
term status: accepted
broader: Severity
definition: Sensitivity' reflects the risk of impact if not secured or utilised with appropriate measures and controls e.g. for sensitive data
in scheme: risk-classes
scope note: ISO/IEC TS 38505-3:2021 defines 'data sensitivity' as the potential harm of unauthorised disclosure. DPV's use of the concept goes beyond disclosure as it refers to the level of safeguards or controls the data requires as a reflection of its 'sensitive' nature. To indicate quantified levels of sensitivity, e.g. "high sensitivity", instances of severity can be directly used or specialised

Service
contributor: Harshvardhan J. Pandit
created: 2024-05-09
example: E0031
example: E0041
type: Class
type: Concept
subclass of: Process
term status: accepted
broader: Process
definition: A service is a process where one entity provides some benefit or assistance to another entity
in scheme: process-classes
scope note: Service Provider and Service Consumer reflect the roles associated with a service. 'Service' as a process is a distinct concept from the use of 'service' as a provision method in Tech extension

Service Consumer
contributor: Harshvardhan J. Pandit
created: 2024-04-20
type: Class
type: Concept
subclass of: Legal Entity
term status: accepted
broader: Legal Entity
definition: The entity that consumes or receives the service
in scheme: entities-legalrole-classes

Service Optimisation
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
created: 2019-04-05
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Service Provision
definition: Purposes associated with optimisation of services or activities
in scheme: purposes-classes
scope note: Subclass of ServiceProvision since optimisation is usually considered part of providing services

Service Personalisation
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
created: 2019-04-05
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Personalisation
broader: Service Provision
definition: Purposes associated with providing personalisation within services or product or activities
in scheme: purposes-classes

Service Provider
contributor: Harshvardhan J. Pandit
created: 2024-04-20
type: Class
type: Concept
subclass of: Legal Entity
term status: accepted
broader: Legal Entity
definition: The entity that provides a service
in scheme: entities-legalrole-classes

Service Provision
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
created: 2019-04-05
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Purpose
definition: Purposes associated with providing service or product or activities
in scheme: purposes-classes

Service Registration
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
created: 2020-11-04
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Service Provision
definition: Purposes associated with registering users and collecting information required for providing a service
in scheme: purposes-classes
scope note: An example of service registration is to provide a form that collects information such as preferred language or media format for downloading a movie

Service Usage Analytics
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
created: 2020-11-04
modified: 2022-10-05
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Service Provision
definition: Purposes associated with conducting analysis and reporting related to usage of services or products
in scheme: purposes-classes
scope note: Was "UsageAnalytics", prefixed with Service to better reflect scope

Severity
contributor: Harshvardhan J. Pandit
created: 2022-07-21
example: E0068
type: Class
type: Concept
term status: accepted
definition: The magnitude of being unwanted or having negative effects such as harmful impacts
in scheme: risk-classes
scope note: Severity can be associated with Risk, or its Consequences and Impacts

Share
created: 2019-05-07
source: GDPR Art.4-2
type: Class
type: Concept
type: Processing
term status: accepted
broader: Disclose
definition: to give data (or a portion of it) to others
in scheme: processing-classes

Single Sign On
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan
created: 2020-11-04
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Authentication Protocols
definition: Use of credentials or processes that enable using one set of credentials to authenticate multiple contexts.
in scheme: technical-measures-classes

Singular Data Volume
contributor: Harshvardhan J. Pandit
created: 2022-06-15
type: Class
type: Concept
type: Data Volume
term status: accepted
broader: Data Volume
definition: Data volume that is considered singular i.e. a specific instance or single item
in scheme: processing-scale-classes

Singular Frequency
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
type: Class
type: Concept
type: Frequency
term status: accepted
broader: Frequency
definition: Frequency where occurrences are singular i.e. they take place only once
in scheme: context-classes

Singular Scale Of Data Subjects
contributor: Harshvardhan J. Pandit
created: 2022-06-15
type: Class
type: Concept
type: Data Subject Scale
term status: accepted
broader: Data Subject Scale
definition: Scale of data subjects considered singular i.e. a specific data subject
in scheme: processing-scale-classes

Small Data Volume
contributor: Harshvardhan J. Pandit
created: 2022-06-15
type: Class
type: Concept
type: Data Volume
term status: accepted
broader: Data Volume
definition: Data volume that is considered small or limited within the context
in scheme: processing-scale-classes

Small Scale Of Data Subjects
contributor: Harshvardhan J. Pandit
created: 2022-06-15
type: Class
type: Concept
type: Data Subject Scale
term status: accepted
broader: Data Subject Scale
definition: Scale of data subjects considered small or limited within the context
in scheme: processing-scale-classes

Small Scale Processing
contributor: Harshvardhan J. Pandit
created: 2022-09-07
type: Class
type: Concept
type: Processing Scale
term status: accepted
broader: Processing Scale
definition: Processing that takes place at small scales (as specified by some criteria)
in scheme: processing-scale-classes

Social Media Marketing
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves
created: 2020-11-04
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Marketing
definition: Purposes associated with conducting marketing through social media
in scheme: purposes-classes

Special Category Personal Data
contributor: Elmar Kiesling; Harshvardhan J. Pandit, Fajar Ekaputra
created: 2019-05-07
modified: 2022-01-19
source: GDPR Art.9-1
example: E0010
example: E0045
type: Class
type: Concept
subclass of: Sensitive Personal Data
term status: accepted
broader: Sensitive Personal Data
definition: Sensitive Personal Data whose use requires specific additional legal permission or justification
in scheme: personal-data-classes
scope note: The term 'special category' is based on GDPR Art.9, but should not be considered as exclusive to it. DPV considers all Special Categories to also be Sensitive, but whose use is either prohibited or regulated and therefore requires additional legal basis for justification that is separate from that for general personal data.

Sporadic Data Volume
contributor: Harshvardhan J. Pandit
created: 2022-06-15
type: Class
type: Concept
type: Data Volume
term status: accepted
broader: Data Volume
definition: Data volume that is considered sporadic or sparse within the context
in scheme: processing-scale-classes

Sporadic Frequency
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
type: Class
type: Concept
type: Frequency
term status: accepted
broader: Frequency
definition: Frequency where occurrences are sporadic or infrequent or sparse
in scheme: context-classes

Sporadic Scale Of Data Subjects
contributor: Harshvardhan J. Pandit
created: 2022-06-15
type: Class
type: Concept
type: Data Subject Scale
term status: accepted
broader: Data Subject Scale
definition: Scale of data subjects considered sporadic or sparse within the context
in scheme: processing-scale-classes

Staff Training
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
created: 2019-04-05
example: E0021
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Organisational Measure
definition: Practices and policies regarding training of staff members
in scheme: organisational-measures-classes

Standards Conformance
contributor: Beatriz Esteves, Harshvardhan J. Pandit
created: 2024-04-14
source: DGA 12.d
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Governance Procedures
definition: Purposes associated with activities undertaken to ensure or achieve conformance with standards
in scheme: organisational-measures-classes

Statistical Confidentiality Agreement
created: 2022-02-09
type: Class
type: Concept
type: Legal Measure
term status: accepted
broader: Legal Agreement
definition: An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for classification and management of 'confidential data' based on a statistical framework
in scheme: legal-measures-classes

Statistically Confidential Data
created: 2024-02-14
source: DGA 2(20)
type: Class
type: Concept
subclass of: Confidential Data
term status: accepted
broader: Confidential Data
definition: Data protected through Statistical Confidentiality regulations and agreements
in scheme: personal-data-classes

Status
contributor: Harshvardhan J. Pandit
created: 2022-05-18
type: Class
type: Concept
subclass of: Context
term status: accepted
broader: Context
definition: The status or state of something
in scheme: status-classes

Storage Condition
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
created: 2019-04-05
example: E0011
example: E0048
type: Class
type: Concept
subclass of: Processing Condition
term status: accepted
broader: Processing Condition
definition: Conditions required or followed regarding storage of data
in scheme: processing-context-classes

Storage Deletion
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
created: 2019-04-05
example: E0048
type: Class
type: Concept
subclass of: Storage Condition
term status: accepted
broader: Storage Condition
definition: Deletion or Erasure of data including any deletion guarantees
in scheme: processing-context-classes

Storage Duration
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
created: 2019-04-05
example: E0048
type: Class
type: Concept
subclass of: Processing Duration
subclass of: Storage Condition
term status: accepted
broader: Processing Duration
broader: Storage Condition
definition: Duration or temporal limitation on storage of data
in scheme: processing-context-classes

Storage Location
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
created: 2019-04-05
example: E0048
type: Class
type: Concept
subclass of: Processing Location
subclass of: Storage Condition
term status: accepted
broader: Processing Location
broader: Storage Condition
definition: Location or geospatial scope where the data is stored
in scheme: processing-context-classes

Storage Restoration
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
created: 2019-04-05
example: E0048
type: Class
type: Concept
subclass of: Storage Condition
term status: accepted
broader: Storage Condition
definition: Regularity and temporal span of data restoration/backup mechanisms that guarantee that data is preserved
in scheme: processing-context-classes

Store
created: 2019-05-07
source: GDPR Art.4-2
type: Class
type: Concept
type: Processing
term status: accepted
broader: Processing
definition: to keep data for future use
in scheme: processing-classes

Structure
created: 2019-05-07
source: GDPR Art.4-2
type: Class
type: Concept
type: Processing
term status: accepted
broader: Organise
definition: to arrange data according to a structure
in scheme: processing-classes

Student
contributor: Harshvardhan J. Pandit, Georg P. Krog, Julian Flake, Paul Ryan, Beatriz Esteves
created: 2022-04-06
type: Class
type: Concept
type: Data Subject
term status: accepted
broader: Data Subject
definition: Data subjects that are students
in scheme: entities-datasubject-classes

Sub-Processor Agreement
contributor: Georg P. Krog, Harshvardhan J. Pandit, Beatriz Esteves, Paul Ryan, Julian Flake
created: 2022-01-26
type: Class
type: Concept
type: Legal Measure
term status: accepted
broader: Data Processing Agreement
definition: An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of data between a Data Processor and a Data (Sub-)Processor
in scheme: legal-measures-classes

Subscriber
contributor: Harshvardhan J. Pandit, Georg P. Krog, Julian Flake, Paul Ryan, Beatriz Esteves
created: 2022-04-06
type: Class
type: Concept
type: Data Subject
term status: accepted
broader: Data Subject
definition: Data subjects that subscribe to service(s)
in scheme: entities-datasubject-classes
scope note: note: subscriber can be customer or consumer

Subsidiary Legal Entity
contributor: Harshvardhan J. Pandit, Georg P. Krog
created: 2024-04-14
type: Class
type: Concept
subclass of: Organisation
term status: accepted
broader: Organisation
definition: A legal entity that operates as a subsidiary of another legal entity
in scheme: entities-classes

Support Contract Negotiation
contributor: Beatriz Esteves, Harshvardhan J. Pandit
created: 2024-04-14
source: DGA 2.15
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Support Entity Decision Making
definition: Supporting entities, including individuals, with negotiating a contract and its terms and conditions
in scheme: organisational-measures-classes

Support Entity Decision Making
contributor: Beatriz Esteves, Harshvardhan J. Pandit
created: 2024-04-14
source: DGA 2.15
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Organisational Measure
definition: Supporting entities, including individuals, in making decisions
in scheme: organisational-measures-classes

Support Exchange of Views
contributor: Beatriz Esteves, Harshvardhan J. Pandit
created: 2024-04-14
source: DGA 2.15
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Support Entity Decision Making
definition: Supporting individuals and entities in exchanging views e.g. regarding data processing purposes for their best interests
in scheme: organisational-measures-classes

Support Informed Consent Decision
contributor: Beatriz Esteves, Harshvardhan J. Pandit
created: 2024-04-14
source: DGA 2.15
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Support Entity Decision Making
definition: Supporting individuals with making a decision regarding their informed consent
in scheme: organisational-measures-classes

Supranational Authority
contributor: Harshvardhan J. Pandit
created: 2022-02-02
source: ADMS controlled vocabulary
type: Class
type: Concept
subclass of: Authority
term status: accepted
broader: Authority
definition: An authority tasked with overseeing legal compliance for a supra-national union e.g. EU
in scheme: entities-authority-classes

Supranational Union
contributor: Harshvardhan J. Pandit
created: 2022-01-19
type: Class
type: Concept
subclass of: Location
term status: accepted
broader: Location
definition: A political union of two or more countries with an establishment of common authority
in scheme: jurisdiction-classes

Symmetric Cryptography
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Cryptographic Methods
definition: Use of cryptography where the same keys are utilised for encryption and decryption of information
in scheme: technical-measures-classes

Symmetric Encryption
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Data Pseudonymisation: Advanced Techniques and Use Cases
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Encryption
definition: Use of symmetric cryptography to encrypt data
in scheme: technical-measures-classes

Synthetic Data
contributor: Harshvardhan J. Pandit
created: 2022-08-18
modified: 2023-12-10
source: ENISA Data Protection Engineering
type: Class
type: Concept
subclass of: Generated Data
term status: accepted
broader: Generated Data
definition: Synthetic data refers to artificially created data such that it is intended to resemble real data (personal or non-personal), but does not refer to any specific identified or identifiable individual, or to the real measure of an observable parameter in the case of non-personal data
in scheme: personal-data-classes

Systematic Monitoring
contributor: Harshvardhan J. Pandit, Piero Bonatti
created: 2020-11-04
source: GDPR Art.4-2
type: Class
type: Concept
type: Processing Context
term status: accepted
broader: Processing Context
definition: Processing that involves systematic monitoring of individuals
in scheme: processing-context-classes

Targeted Advertising
contributor: Harshvardhan J. Pandit
created: 2022-03-30
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Personalised Advertising
definition: Purposes associated with creating and providing personalised advertisement where the personalisation is targeted to a specific individual or group of individuals
in scheme: purposes-classes

Technical Measure
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
created: 2019-04-05
modified: 2023-12-10
example: E0020
example: E0064
type: Class
type: Concept
subclass of: Technical and Organisational Measure
term status: accepted
broader: Technical and Organisational Measure
definition: Technical measures used to safeguard and ensure good practices in connection with data and technologies
in scheme: TOM-classes

Technical and Organisational Measure
contributor: Bud Bruegger
created: 2019-04-05
modified: 2023-12-10
type: Class
type: Concept
term status: accepted
definition: Technical and Organisational measures used to safeguard and ensure good practices in connection with data and technologies
in scheme: TOM-classes

Technical Service Provision
contributor: Harshvardhan J. Pandit
created: 2021-09-08
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Service Provision
definition: Purposes associated with managing and providing technical processes and functions necessary for delivering services
in scheme: purposes-classes

Technology
contributor: Harshvardhan J. Pandit
created: 2022-01-26
type: Class
type: Concept
term status: accepted
definition: The technology, technological implementation, or any techniques, skills, methods, and processes used or applied
in scheme: processing-context-classes
scope note: Examples (non-exhaustive) include: Algorithm, Process, Method, Skill, Database, Cookies, Server, Device

Temporal Duration
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
type: Class
type: Concept
subclass of: Duration
term status: accepted
broader: Duration
definition: Duration that has a fixed temporal duration e.g. 6 months
in scheme: context-classes

Third Country
contributor: Harshvardhan J. Pandit
created: 2022-02-09
type: Class
type: Concept
subclass of: Country
term status: accepted
broader: Country
definition: Represents a country outside applicable or compatible jurisdiction as outlined in law
in scheme: jurisdiction-classes

Third Party
contributor: Harshvardhan J. Pandit
created: 2019-06-04
modified: 2024-05-21
source: GDPR Art.4-10
type: Class
type: Concept
subclass of: Recipient
term status: accepted
broader: Recipient
definition: A ‘third party’ means any natural or legal person other than - the entities directly involved or operating under those directly involved in a process
in scheme: entities-legalrole-classes
scope note: Third Party in the context of personal data processing are entities other than the data subject, controllers, processors, and authorities

Third-Party Agreement
contributor: Harshvardhan J. Pandit
created: 2022-02-09
type: Class
type: Concept
type: Legal Measure
term status: accepted
broader: Data Processing Agreement
definition: An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of data between a Data Controller or Processor and a Third Party
in scheme: legal-measures-classes

Third Party Contract
created: 2023-12-10
type: Class
type: Concept
type: Legal Basis
term status: accepted
broader: Contract
definition: Creation, completion, fulfilment, or performance of a contract, with the Data Controller and Third Party as parties, and involving specified processing of data or technologies
in scheme: legal-basis-classes

Third Party as Data Source
created: 2023-10-12
type: Class
type: Concept
type: Data Source
term status: accepted
broader: Data Source
definition: Data Sourced from a Third Party, e.g. when data is collected from an entity that is neither the Controller nor the Data Subject
in scheme: processing-context-classes

Third Party Security Procedures
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA 5G Cybersecurity Standards
type: Class
type: Concept
type: Organisational Measure
term status: accepted
broader: Security Procedure
definition: Procedures related to security associated with Third Parties
in scheme: organisational-measures-classes

Tourist
contributor: Harshvardhan J. Pandit, Georg P. Krog, Julian Flake, Paul Ryan, Beatriz Esteves
created: 2022-04-06
type: Class
type: Concept
type: Data Subject
term status: accepted
broader: Data Subject
definition: Data subjects that are tourists i.e. not citizens and not immigrants
in scheme: entities-datasubject-classes

Transfer
created: 2019-05-07
source: SPECIAL Project
example: E0035
type: Class
type: Concept
type: Processing
term status: accepted
broader: Processing
definition: to move data from one place to another
in scheme: processing-classes
related: Transfer

Transform
created: 2019-05-07
source: GDPR Art.4-2
type: Class
type: Concept
type: Processing
term status: accepted
broader: Processing
definition: to change the form or nature of data
in scheme: processing-classes

Transmit
created: 2019-05-07
source: GDPR Art.4-2
type: Class
type: Concept
type: Processing
term status: accepted
broader: Disclose
definition: to send out data
in scheme: processing-classes

Trusted Computing
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Cryptographic Methods
definition: Use of cryptographic methods to restrict access and execution to trusted parties and code
in scheme: technical-measures-classes

Trusted Execution Environment
contributor: Harshvardhan J. Pandit
created: 2022-08-17
modified: 2024-04-14
source: ENISA Data Protection Engineering
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Cryptographic Methods
definition: Use of cryptographic methods to restrict access and execution to trusted parties and code within a dedicated execution environment
in scheme: technical-measures-classes

Unexpected
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
created: 2024-05-10
type: Class
type: Concept
type: Expectation Status
term status: accepted
broader: Expectation Status
definition: Status indicating the specified context was unexpected i.e. not expected
in scheme: status-classes

Uninformed Consent
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
created: 2022-06-21
type: Class
type: Concept
type: Legal Basis
term status: accepted
broader: Consent
definition: Consent that is uninformed i.e. without requirement to provide sufficient information to make a consenting decision
in scheme: consent-types-classes

Unintended
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Georg P. Krog, Paul Ryan
created: 2024-05-10
type: Class
type: Concept
type: Intention Status
term status: accepted
broader: Intention Status
definition: Status indicating the specified context was unintended i.e. not intended
in scheme: status-classes

Unknown Applicability
contributor: Harshvardhan J. Pandit
created: 2023-08-24
type: Class
type: Concept
type: Applicability
term status: accepted
broader: Applicability
definition: Concept indicating information or context availability is unknown i.e. it is not known if the information exists or is applicable and therefore statements about its availability cannot be made (yet)
in scheme: context-classes
scope note: This concept is useful when describing situations where it cannot be stated whether the context applies or whether the information is not available yet. For example, if a form field asks about whether a process X was completed and it is not yet known whether X applies or not and therefore it is also unclear whether X was completed or not. Using UnknownApplicability is a signal that the applicability of X should be assessed, and if applicable, then information about X should be identified and used here.

Unlawful
contributor: Harshvardhan J. Pandit
created: 2022-10-19
type: Class
type: Concept
type: Lawfulness
term status: accepted
broader: Lawfulness
definition: State of being unlawful or legally non-compliant
in scheme: status-classes

Until Event Duration
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
type: Class
type: Concept
subclass of: Duration
term status: accepted
broader: Duration
definition: Duration that takes place until a specific event occurs e.g. Account Closure
in scheme: context-classes

Until Time Duration
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
type: Class
type: Concept
subclass of: Duration
term status: accepted
broader: Duration
definition: Duration that has a fixed end date e.g. 2022-12-31
in scheme: context-classes

Unverified Data
contributor: Harshvardhan J. Pandit
created: 2022-11-02
type: Class
type: Concept
subclass of: Data
term status: accepted
broader: Data
definition: Data that has not been verified in terms of accuracy, inconsistency, or quality
in scheme: personal-data-classes

Usage Control
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Access Control Method
definition: Management of usage, which is intended to be broader than access control and may cover trust, digital rights, or other relevant controls
in scheme: technical-measures-classes

Use
created: 2019-05-07
source: GDPR Art.4-2
type: Class
type: Concept
type: Processing
term status: accepted
broader: Processing
definition: to use data
in scheme: processing-classes

Use of Synthetic Data
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Data Protection Engineering
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Security Method
definition: Use of synthetic data to preserve privacy, security, or other effects and side-effects
in scheme: technical-measures-classes

User
contributor: Harshvardhan J. Pandit, Georg P. Krog, Julian Flake, Paul Ryan, Beatriz Esteves
created: 2022-04-06
type: Class
type: Concept
type: Data Subject
term status: accepted
broader: Data Subject
definition: Data subjects that use service(s)
in scheme: entities-datasubject-classes

User Interface Personalisation
contributor: Harshvardhan J. Pandit, Javier Fernández, Axel Polleres, Elmar Kiesling, Fajar Ekaputra, Simon Steyskal
created: 2019-04-05
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Service Personalisation
definition: Purposes associated with personalisation of interfaces presented to the user
in scheme: purposes-classes
scope note: Examples of user-interface personalisation include changing the language to match the locale

Variable Location
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
type: Class
type: Concept
type: Location Fixture
term status: accepted
broader: Location Fixture
definition: Location that is known but is variable e.g. somewhere within a given area
in scheme: jurisdiction-classes

Vendor Management
contributor: Paul Ryan, Georg P. Krog, David Hickey, Harshvardhan J. Pandit
created: 2021-09-01
source: Belgian DPA ROPA Template
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Purpose
definition: Purposes associated with manage orders, payment, evaluation, and prospecting related to vendors
in scheme: purposes-classes

Vendor Payment
contributor: Paul Ryan, Georg P. Krog, David Hickey, Harshvardhan J. Pandit
created: 2021-09-01
source: Belgian DPA ROPA Template
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Vendor Management
definition: Purposes associated with managing payment of vendors
in scheme: purposes-classes

Vendor Records Management
contributor: Paul Ryan, Georg P. Krog, David Hickey, Harshvardhan J. Pandit
created: 2021-09-01
source: Belgian DPA ROPA Template
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Vendor Management
definition: Purposes associated with managing records and orders related to vendors
in scheme: purposes-classes

Vendor Selection Assessment
contributor: Paul Ryan, Georg P. Krog, David Hickey, Harshvardhan J. Pandit
created: 2021-09-01
source: Belgian DPA ROPA Template
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Vendor Management
definition: Purposes associated with managing selection, assessment, and evaluation related to vendors
in scheme: purposes-classes

Verification
contributor: Beatriz Esteves, Harshvardhan J. Pandit
created: 2024-02-14
type: Class
type: Concept
type: Purpose
term status: accepted
broader: Enforce Security
definition: Purposes association with verification e.g. information, identity, integrity
in scheme: purposes-classes

Verified Data
contributor: Harshvardhan J. Pandit
created: 2022-11-02
type: Class
type: Concept
subclass of: Data
term status: accepted
broader: Data
definition: Data that has been verified in terms of accuracy, consistency, or quality
in scheme: personal-data-classes

Virtualisation Security
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Security Method
definition: Security implemented at or through virtualised environments
in scheme: technical-measures-classes

Visitor
contributor: Harshvardhan J. Pandit, Georg P. Krog, Julian Flake, Paul Ryan, Beatriz Esteves
created: 2022-04-06
type: Class
type: Concept
type: Data Subject
term status: accepted
broader: Data Subject
definition: Data subjects that are temporary visitors
in scheme: entities-datasubject-classes

Vital Interest
contributor: Harshvardhan J. Pandit
created: 2021-04-21
type: Class
type: Concept
type: Legal Basis
term status: accepted
broader: Legal Basis
definition: Activities are necessary or required to protect vital interests of a data subject or other natural person
in scheme: legal-basis-classes

Vital Interest of Data Subject
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan
created: 2021-04-21
type: Class
type: Concept
type: Legal Basis
term status: accepted
broader: Vital Interest of Natural Person
definition: Activities are necessary or required to protect vital interests of a data subject
in scheme: legal-basis-classes

Vital Interest of Natural Person
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan
created: 2021-04-21
type: Class
type: Concept
type: Legal Basis
term status: accepted
broader: Vital Interest
definition: Activities are necessary or required to protect vital interests of a natural person
in scheme: legal-basis-classes

Vulnerability Testing Methods
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Security Method
definition: Methods that assess or discover vulnerabilities in a system
in scheme: technical-measures-classes

Vulnerable Data Subject
contributor: Georg P. Krog, Paul Ryan, Harshvardhan J. Pandit
created: 2020-11-04
type: Class
type: Concept
type: Data Subject
term status: accepted
broader: Data Subject
definition: Data Subjects which should be considered 'vulnerable' and therefore would require additional measures and safeguards
in scheme: entities-datasubject-classes
scope note: This concept denotes a Data Subject or a group are vulnerable, but not what vulnerability they possess or its context. This information can be provided additionally as comments, or as separate concepts and relations. Proposals for this are welcome.

WebBrowser Security
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Security Method
definition: Security implemented at or over web browsers
in scheme: technical-measures-classes

Web Security Protocols
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Security Method
definition: Security implemented at or over web-based protocols
in scheme: technical-measures-classes

Wireless Security Protocols
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Security Method
definition: Security implemented at or over wireless communication protocols
in scheme: technical-measures-classes

Withdraw Consent
created: 2024-05-11
type: Class
type: Concept
subclass of: Consent Control
subclass of: Withdrawing from Process
term status: accepted
broader: Consent Control
broader: Withdrawing from Process
definition: Control for withdrawing consent
in scheme: consent-controls-classes
scope note: Indicates how the data subject can withdraw consent e.g. used with dpv:isExercisedAt

Withdrawing from Process
contributor: Harshvardhan J. Pandit, Delaram Golpayegani, Steve Hickman
created: 2024-05-11
type: Class
type: Concept
type: Entity Permissive Involvement
term status: accepted
broader: Entity Permissive Involvement
definition: Involvement where entity can withdraw a previously given assent from specified context
in scheme: processing-context-classes

Within Device
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
type: Class
type: Concept
type: Location
term status: accepted
broader: Local Location
definition: Location is local and entirely within a device, such as a smartphone
in scheme: jurisdiction-classes

Within Physical Environment
contributor: Harshvardhan J. Pandit
created: 2020-10-06
type: Class
type: Concept
type: Location
term status: accepted
broader: Local Location
definition: Location is local and entirely within a physical environment, such as a room
in scheme: jurisdiction-classes

Within Virtual Environment
contributor: Harshvardhan J. Pandit
created: 2020-10-06
type: Class
type: Concept
type: Location
term status: accepted
broader: Local Location
definition: Location is local and entirely within a virtual environment, such as a shared network directory
in scheme: jurisdiction-classes

Zero Knowledge Authentication
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Data Protection Engineering
type: Class
type: Concept
type: Technical Measure
term status: accepted
broader: Authentication Protocols
broader: Cryptographic Methods
definition: Authentication using Zero-Knowledge proofs
in scheme: technical-measures-classes

has active entity
range includes: Entity Active Involvement
created: 2024-05-11
type: Property
type: Concept
sub property of: has entity
term status: accepted
broader: has entity
definition: indicates the entity is actively involved in specified context
in scheme: processing-context-properties

has activity status
range includes: Activity Status
contributor: Harshvardhan J. Pandit
created: 2022-05-18
example: E0054
type: Property
type: Concept
sub property of: has status
term status: accepted
broader: has status
definition: Indicates the status of activity of specified concept
in scheme: status-properties

has address
domain includes: Entity
contributor: Harshvardhan J. Pandit, Georg P. Krog, Paul Ryan, Beatriz Esteves
created: 2020-11-04
type: Property
type: Concept
term status: accepted
definition: Specifies address of a legal entity such as street address or pin code
in scheme: entities-properties

has algorithmic logic
range includes: Algorithmic Logic
contributor: Georg P. Krog, Paul Ryan, Harshvardhan J. Pandit
created: 2020-11-04
modified: 2022-06-15
type: Property
type: Concept
term status: accepted
definition: Indicates the logic used in processing such as for automated decision making
in scheme: processing-context-properties

has applicability
range includes: Applicability
contributor: Harshvardhan J. Pandit
created: 2023-08-24
example: E0053
type: Property
type: Concept
term status: accepted
definition: Indicates situations where the context is not applicable, information is not available, or this is unknown. An appropriate instance of dpv:Applicability should be used with this relation to express the situation
in scheme: context-properties

has applicable law
range includes: Law
contributor: Harshvardhan J. Pandit
created: 2022-01-19
type: Property
type: Concept
term status: accepted
definition: Indicates applicability of a Law
in scheme: jurisdiction-properties

has assessment
range includes: Assessment
contributor: Harshvardhan J. Pandit
created: 2024-04-14
type: Property
type: Concept
sub property of: has organisational measure
term status: accepted
broader: has organisational measure
definition: Indicates a relevant assessment associated with the specific context
in scheme: TOM-properties

has audit status
range includes: Audit Status
contributor: Harshvardhan J. Pandit
created: 2022-06-22
example: E0056
example: E0057
type: Property
type: Concept
sub property of: has status
term status: accepted
broader: has status
definition: Indicates the status of audit associated with specified concept
in scheme: status-properties

has authority
range includes: Authority
contributor: Harshvardhan J. Pandit, Georg P. Krog
created: 2022-01-19
type: Property
type: Concept
term status: accepted
definition: Indicates applicability of authority for a jurisdiction
in scheme: entities-authority-properties

has automation level
range includes: Automation Level
contributor: Harshvardhan J. Pandit
created: 2022-08-13
modified: 2024-04-20
type: Property
type: Concept
term status: accepted
definition: Indicates the level of automation involved in implementation of the specified context
in scheme: processing-context-properties

has compliance status
range includes: Compliance Status
contributor: Harshvardhan J. Pandit
created: 2022-05-18
example: E0055
type: Property
type: Concept
sub property of: has status
term status: accepted
broader: has status
definition: Indicates the status of compliance of specified concept
in scheme: status-properties

has conformance status
range includes: Conformance Status
contributor: Harshvardhan J. Pandit
created: 2024-06-10
type: Property
type: Concept
term status: accepted
definition: Indicates the status of being conformant or non-conformant
in scheme: status-properties

has consent control
range includes: Consent Control
created: 2024-05-11
type: Property
type: Concept
term status: accepted
definition: Specific a control associated with consent
in scheme: consent-properties

has consent status
range includes: Consent Status
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
created: 2022-06-21
type: Property
type: Concept
term status: accepted
definition: Specifies the state or status of consent
in scheme: consent-properties

has consequence
range includes: Consequence
contributor: Harshvardhan J. Pandit, Julian Flake, Georg P. Krog, Fajar Ekaputra, Beatriz Esteves
created: 2020-11-04
modified: 2021-09-21
example: E0068
example: E0071
type: Property
type: Concept
term status: accepted
definition: Indicates consequence(s) possible or arising from specified concept
in scheme: risk-properties
scope note: Removed plural suffix for consistency

has consequence on
domain includes: Consequence
contributor: Harshvardhan J. Pandit, Georg P. Krog
created: 2022-11-24
type: Property
type: Concept
term status: accepted
definition: Indicates the thing (e.g. plan, process, or entity) affected by a consequence
in scheme: risk-properties

has contact
domain includes: Entity
contributor: Harshvardhan J. Pandit, Georg P. Krog, Paul Ryan, Beatriz Esteves
created: 2020-11-04
type: Property
type: Concept
term status: accepted
definition: Specifies contact details of a legal entity such as phone or email
in scheme: entities-properties

has context
range includes: Context
created: 2019-04-05
type: Property
type: Concept
term status: accepted
definition: Indicates a purpose is restricted to the specified context(s)
in scheme: context-properties

has country
range includes: Country
contributor: Harshvardhan J. Pandit, Georg P. Krog
created: 2022-01-19
type: Property
type: Concept
sub property of: has location
term status: accepted
broader: has location
definition: Indicates applicability of specified country
in scheme: jurisdiction-properties

has data
range includes: Data
contributor: Harshvardhan J. Pandit
created: 2022-08-18
type: Property
type: Concept
term status: accepted
definition: Indicates associated with Data (may or may not be personal)
in scheme: personal-data-properties

has data controller
range includes: Data Controller
contributor: Axel Polleres, Javier Fernández, Harshvardhan J. Pandit, Mark Lizar, Bud Bruegger
created: 2019-04-04
modified: 2020-11-04
type: Property
type: Concept
sub property of: has entity
term status: accepted
broader: has entity
definition: Indicates association with Data Controller
in scheme: entities-legalrole-properties

has data exporter
range includes: Data Exporter
contributor: Paul Ryan, Georg P. Krog, Harshvardhan J. Pandit
created: 2022-02-09
type: Property
type: Concept
sub property of: has entity
term status: accepted
broader: has entity
definition: Indicates inclusion or applicability of a LegalEntity in the role of Data Exporter
in scheme: entities-legalrole-properties

has data importer
range includes: Data Importer
contributor: Paul Ryan, Georg P. Krog, Harshvardhan J. Pandit
created: 2022-02-09
type: Property
type: Concept
sub property of: has recipient
term status: accepted
broader: has recipient
definition: Indicates inclusion or applicability of a LegalEntity in the role of Data Importer
in scheme: entities-legalrole-properties

has data processor
range includes: Data Processor
contributor: Paul Ryan, Georg P. Krog, Harshvardhan J. Pandit
created: 2022-02-09
type: Property
type: Concept
sub property of: has recipient
term status: accepted
broader: has recipient
definition: Indiciates inclusion or applicability of a Data Processor
in scheme: entities-legalrole-properties

has data protection officer
range includes: Data Protection Officer
contributor: Paul Ryan, Rob Brennan
created: 2022-03-02
type: Property
type: Concept
sub property of: has representative
term status: accepted
broader: has representative
definition: Specifies an associated data protection officer
in scheme: entities-legalrole-properties

has data source
range includes: Data Source
contributor: Georg P. Krog, Paul Ryan, Harshvardhan J. Pandit
created: 2020-11-04
type: Property
type: Concept
term status: accepted
definition: Indicates the source or origin of data being processed
in scheme: processing-context-properties

has data subject
range includes: Data Subject
contributor: Axel Polleres, Javier Fernández, Harshvardhan J. Pandit, Mark Lizar, Bud Bruegger
created: 2019-04-04
modified: 2020-11-04
type: Property
type: Concept
sub property of: has entity
term status: accepted
broader: has entity
definition: Indicates association with Data Subject
in scheme: entities-datasubject-properties

has data subject scale
range includes: Data Subject Scale
contributor: Harshvardhan J. Pandit
created: 2022-06-22
type: Property
type: Concept
sub property of: has scale
term status: accepted
broader: has scale
definition: Indicates the scale of data subjects
in scheme: processing-scale-properties

has data volume
range includes: Data Volume
contributor: Harshvardhan J. Pandit
created: 2022-06-22
type: Property
type: Concept
sub property of: has scale
term status: accepted
broader: has scale
definition: Indicates the volume of data
in scheme: processing-scale-properties

has duration
range includes: Duration
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
created: 2019-04-05
source: SPECIAL Project
example: E0050
example: E0070
type: Property
type: Concept
term status: accepted
definition: Indicates information about duration
in scheme: context-properties

has entity
range includes: Entity
contributor: Harshvardhan J. Pandit
created: 2022-02-09
type: Property
type: Concept
term status: accepted
definition: Indicates inclusion or applicability of an entity to some concept
in scheme: entities-properties
scope note: parent property for controller, processor, data subject, authority, etc.?

has entity control
range includes: EntityControl
contributor: Harshvardhan J. Pandit
created: 2024-04-14
type: Property
type: Concept
sub property of: has technical and organisational measure
term status: accepted
broader: has technical and organisational measure
definition: Indicates a control or measure provided for an entity to perform the specified action
in scheme: TOM-properties

has entity involvement
range includes: Entity Involvement
created: 2024-05-11
type: Property
type: Concept
term status: accepted
definition: Indicates involvement of an entity in specified context
in scheme: processing-context-properties

has expectation
range includes: Expectation Status
contributor: Harshvardhan J. Pandit
created: 2024-05-10
modified: 2024-06-10
type: Property
type: Concept
sub property of: has status
term status: accepted
broader: has status
definition: Indicates whether the specified context was expected or unexpected
in scheme: status-properties

has frequency
range includes: Frequency
contributor: Harshvardhan J. Pandit
created: 2022-02-16
example: E0051
type: Property
type: Concept
term status: accepted
definition: Indicates the frequency with which something takes place
in scheme: context-properties

has geographic coverage
range includes: Geographic Coverage
contributor: Harshvardhan J. Pandit
created: 2022-06-22
type: Property
type: Concept
sub property of: has scale
term status: accepted
broader: has scale
definition: Indicate the geographic coverage (of specified context)
in scheme: processing-scale-properties

has human involvement
range includes: Human Involvement
contributor: Georg P. Krog, Paul Ryan, Harshvardhan J. Pandit
created: 2020-11-04
type: Property
type: Concept
term status: accepted
definition: Indicates Involvement of humans in processing such as within automated decision making process
in scheme: processing-context-properties
scope note: Human involvement is also relevant to 'human in the loop'

has identifier
contributor: Harshvardhan J. Pandit, Georg P. Krog, Paul Ryan, Beatriz Esteves
created: 2020-11-25
type: Property
type: Concept
term status: accepted
definition: Indicates an identifier associated for identification or reference
in scheme: context-properties

has impact
range includes: Impact
contributor: Harshvardhan J. Pandit, Julian Flake, Georg P. Krog, Fajar Ekaputra, Beatriz Esteves
created: 2022-05-18
example: E0068
example: E0069
type: Property
type: Concept
sub property of: has consequence
term status: accepted
broader: has consequence
definition: Indicates impact(s) possible or arising as consequences from specified concept
in scheme: risk-properties

has impact assessment
range includes: Impact Assessment
contributor: Harshvardhan J. Pandit
created: 2024-04-14
type: Property
type: Concept
sub property of: has assessment
term status: accepted
broader: has assessment
definition: Indicates an impact assessment associated with the specific context
in scheme: risk-properties

has impact on
domain includes: Impact
contributor: Harshvardhan J. Pandit, Julian Flake, Georg P. Krog, Fajar Ekaputra, Beatriz Esteves
created: 2022-05-18
example: E0068
type: Property
type: Concept
sub property of: has consequence on
term status: accepted
broader: has consequence on
definition: Indicates the thing (e.g. plan, process, or entity) affected by an impact
in scheme: risk-properties

has importance
range includes: Importance
contributor: Harshvardhan J. Pandit
created: 2024-04-13
type: Property
type: Concept
term status: accepted
definition: Indicates the importance for specified context or criteria
in scheme: context-properties

has indication method
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
created: 2022-06-21
type: Property
type: Concept
term status: accepted
definition: Specifies the method by which an entity has indicated the specific context
in scheme: legal-basis-properties

has informed status
range includes: Entity Informed Status
contributor: Harshvardhan J. Pandit
created: 2024-05-10
type: Property
type: Concept
sub property of: has status
term status: accepted
broader: has status
definition: Indicates whether an entity was informed or uninformed
in scheme: status-properties

has intention
range includes: Intention Status
contributor: Harshvardhan J. Pandit
created: 2024-05-10
type: Property
type: Concept
sub property of: has status
term status: accepted
broader: has status
definition: Indicates whether the specified context was intended or unintended
in scheme: status-properties

has involvement
range includes: Involvement Status
contributor: Harshvardhan J. Pandit
created: 2024-05-10
type: Property
type: Concept
sub property of: has status
term status: accepted
broader: has status
definition: Indicates the involvement status for the specified context
in scheme: status-properties

has joint data controllers
range includes: Joint Data Controllers
contributor: Paul Ryan, Georg P. Krog, Harshvardhan J. Pandit
created: 2022-02-09
type: Property
type: Concept
sub property of: has data controller
term status: accepted
broader: has data controller
definition: Indicates inclusion or applicability of a Joint Data Controller
in scheme: entities-legalrole-properties

has jurisdiction
range includes: Location
contributor: Harshvardhan J. Pandit
created: 2022-01-19
type: Property
type: Concept
term status: accepted
definition: Indicates applicability of specified jurisdiction
in scheme: jurisdiction-properties

has justification
domain includes: Right Exercise Activity
range includes: Justification
contributor: Harshvardhan J. Pandit
created: 2022-06-15
example: E0057
example: E0058
example: E0059
example: E0061
example: E0062
example: E0063
type: Property
type: Concept
term status: accepted
definition: Indicates a justification for specified concept or context
in scheme: context-properties
in scheme: rights-properties
scope note: Also used for specifying a justification for non-fulfilment of Right Exercise

has lawfulness
range includes: Lawfulness
contributor: Harshvardhan J. Pandit
created: 2022-10-22
type: Property
type: Concept
sub property of: has compliance status
term status: accepted
broader: has compliance status
definition: Indicates the status of being lawful or legally compliant
in scheme: status-properties

has legal basis
range includes: Legal Basis
contributor: Axel Polleres, Javier Fernández
created: 2019-04-04
modified: 2020-11-04
type: Property
type: Concept
term status: accepted
definition: Indicates use or applicability of a Legal Basis
in scheme: legal-basis-properties

has legal measure
range includes: Legal Measure
created: 2023-12-10
type: Property
type: Concept
sub property of: has organisational measure
term status: accepted
broader: has organisational measure
definition: Indicates use or applicability of Legal measure
in scheme: TOM-properties

has likelihood
range includes: Likelihood
contributor: Harshvardhan J. Pandit, Georg P. Krog, Paul Ryan, Julian Flake
created: 2022-07-20
example: E0068
type: Property
type: Concept
term status: accepted
definition: Indicates the likelihood associated with a concept
in scheme: risk-properties

has location
range includes: Location
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
created: 2019-04-05
source: SPECIAL Project
example: E0060
type: Property
type: Concept
term status: accepted
definition: Indicates information about location
in scheme: jurisdiction-properties

has name
domain includes: Entity
contributor: Harshvardhan J. Pandit, Georg P. Krog, Paul Ryan, Beatriz Esteves
created: 2020-11-04
type: Property
type: Concept
term status: accepted
definition: Specifies name of a legal entity
in scheme: entities-properties

has necessity
range includes: Necessity
contributor: Harshvardhan J. Pandit
created: 2024-04-13
example: E0052
type: Property
type: Concept
term status: accepted
definition: Indicates the necessity for specified context or criteria
in scheme: context-properties

has non-involved entity
range includes: EntityNoInvolvement
created: 2024-05-11
type: Property
type: Concept
sub property of: has entity
term status: accepted
broader: has entity
definition: indicates the entity is not involved in specified context
in scheme: processing-context-properties

has non-personal data process
range includes: Non-Personal Data Process
contributor: Harshvardhan J. Pandit
created: 2023-12-12
type: Property
type: Concept
term status: accepted
definition: Indicates association with a Non-Personal Data Process
in scheme: process-properties

has notice
range includes: Notice
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
created: 2022-06-22
type: Property
type: Concept
sub property of: has organisational measure
term status: accepted
broader: has organisational measure
definition: Indicates the use or applicability of a Notice for the specified context
in scheme: TOM-properties

has notification status
range includes: Notification Status
contributor: Harshvardhan J. Pandit
created: 2024-06-10
type: Property
type: Concept
term status: accepted
definition: Indicates the status associated with a notice
in scheme: status-properties

has obligation
domain includes: Context
range includes: Obligation
contributor: Harshvardhan J. Pandit, Georg P. Krog, Beatriz Esteves, Paul Ryan
created: 2022-10-19
type: Property
type: Concept
sub property of: has rule
term status: accepted
broader: has rule
definition: Specifying applicability or inclusion of an obligation rule within specified context
in scheme: rules-properties

has organisational measure
range includes: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2022-02-09
type: Property
type: Concept
sub property of: has technical and organisational measure
term status: accepted
broader: has technical and organisational measure
definition: Indicates use or applicability of Organisational measure
in scheme: TOM-properties

has organisational unit
domain includes: Entity
range includes: Organisational Unit
contributor: Harshvardhan J. Pandit
created: 2024-06-10
type: Property
type: Concept
sub property of: has entity
term status: accepted
broader: has entity
definition: Indicates the specified entity is a unit of the organisation
in scheme: entities-properties

has outcome
contributor: Harshvardhan J. Pandit
created: 2022-05-18
type: Property
type: Concept
term status: accepted
definition: Indicates an outcome of specified concept or context
in scheme: context-properties

has passive entity
range includes: Entity Passive Involvement
created: 2024-05-11
type: Property
type: Concept
sub property of: has entity
term status: accepted
broader: has entity
definition: indicates the entity is passively involved in specified context
in scheme: processing-context-properties

has permission
domain includes: Context
range includes: Permission
contributor: Harshvardhan J. Pandit, Georg P. Krog, Beatriz Esteves, Paul Ryan
created: 2022-10-19
example: E0066
type: Property
type: Concept
sub property of: has rule
term status: accepted
broader: has rule
definition: Specifying applicability or inclusion of a permission rule within specified context
in scheme: rules-properties

has personal data
range includes: Personal Data
contributor: Harshvardhan J. Pandit
created: 2022-01-19
example: E0044
type: Property
type: Concept
sub property of: has data
term status: accepted
broader: has data
definition: Indicates association with Personal Data
in scheme: personal-data-properties

has personal data handling
range includes: Personal Data Handling
contributor: Harshvardhan J. Pandit, Georg P. Krog
created: 2022-01-19
type: Property
type: Concept
term status: accepted
definition: Indicates association with Personal Data Handling
in scheme: process-properties

has personal data process
range includes: Personal Data Process
contributor: Harshvardhan J. Pandit
created: 2023-12-11
type: Property
type: Concept
term status: accepted
definition: Indicates association with a Personal Data Process
in scheme: process-properties

has physical measure
range includes: Physical Measure
created: 2023-12-10
type: Property
type: Concept
sub property of: has technical and organisational measure
term status: accepted
broader: has technical and organisational measure
definition: Indicates use or applicability of Physical measure
in scheme: TOM-properties

has policy
range includes: Policy
contributor: Harshvardhan J. Pandit
created: 2022-01-26
type: Property
type: Concept
sub property of: has technical and organisational measure
term status: accepted
broader: has technical and organisational measure
definition: Indicates policy applicable or used
in scheme: TOM-properties

has process
range includes: Process
contributor: Harshvardhan J. Pandit
created: 2023-12-10
type: Property
type: Concept
term status: accepted
definition: Indicates association with a Process
in scheme: process-properties

has processing
range includes: Processing
contributor: Axel Polleres, Javier Fernández, Harshvardhan J. Pandit, Mark Lizar, Bud Bruegger
created: 2019-04-04
modified: 2020-11-04
source: SPECIAL Project
type: Property
type: Concept
term status: accepted
definition: Indicates association with Processing
in scheme: processing-properties

has processing condition
range includes: Processing Condition
contributor: Harshvardhan J. Pandit
created: 2023-12-10
type: Property
type: Concept
term status: accepted
definition: Indicates information about processing condition
in scheme: processing-context-properties

has prohibition
domain includes: Context
range includes: Prohibition
contributor: Harshvardhan J. Pandit, Georg P. Krog, Beatriz Esteves, Paul Ryan
created: 2022-10-19
example: E0066
type: Property
type: Concept
sub property of: has rule
term status: accepted
broader: has rule
definition: Specifying applicability or inclusion of a prohibition rule within specified context
in scheme: rules-properties

has purpose
range includes: Purpose
contributor: Axel Polleres, Javier Fernández, Harshvardhan J. Pandit, Mark Lizar, Bud Bruegger
created: 2019-04-04
modified: 2020-11-04
source: SPECIAL Project
type: Property
type: Concept
term status: accepted
definition: Indicates association with Purpose
in scheme: purposes-properties

has recipient
domain includes: Right Exercise Activity
range includes: Recipient
contributor: Axel Polleres, Javier Fernández, Harshvardhan J. Pandit, Mark Lizar, Bud Bruegger
created: 2019-04-04
modified: 2020-11-04
source: SPECIAL Project
type: Property
type: Concept
sub property of: has entity
term status: accepted
broader: has entity
definition: Indicates Recipient of Data
in scheme: entities-legalrole-properties
in scheme: rights-properties
scope note: Also used to indicate the Recipient of a Right Exercise Activity

has recipient data controller
range includes: Data Controller
contributor: Paul Ryan, Georg P. Krog, Harshvardhan J. Pandit
created: 2022-02-09
type: Property
type: Concept
sub property of: has recipient
term status: accepted
broader: has recipient
definition: Indiciates inclusion or applicability of a Data Controller as a Recipient of persona data
in scheme: entities-legalrole-properties

has recipient third party
range includes: Third Party
contributor: Paul Ryan, Georg P. Krog, Harshvardhan J. Pandit
created: 2022-02-09
type: Property
type: Concept
sub property of: has recipient
term status: accepted
broader: has recipient
definition: Indiciates inclusion or applicability of a Third Party as a Recipient of persona data
in scheme: entities-legalrole-properties

has record of activity
range includes: Records of Activities
contributor: Harshvardhan J. Pandit
created: 2024-05-05
type: Property
type: Concept
sub property of: has organisational measure
term status: accepted
broader: has organisational measure
definition: Indicates a relevant record of activity
in scheme: TOM-properties

has relation with data subject
domain includes: Entity
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
created: 2022-06-21
type: Property
type: Concept
sub property of: has entity
term status: accepted
broader: has entity
definition: Indicates the relation between specified Entity and Data Subject
in scheme: entities-datasubject-properties

has representative
domain includes: Entity
range includes: Representative
contributor: Harshvardhan J. Pandit, Georg P. Krog, Paul Ryan, Beatriz Esteves
created: 2020-11-04
type: Property
type: Concept
sub property of: has entity
term status: accepted
broader: has entity
definition: Specifies representative of the legal entity
in scheme: entities-properties

has request status
range includes: Request Status
contributor: Harshvardhan J. Pandit
created: 2024-06-10
type: Property
type: Concept
term status: accepted
definition: Indicates the status associated with a request
in scheme: status-properties

has residual risk
domain includes: Risk
range includes: Residual Risk
contributor: Harshvardhan J. Pandit, Georg P. Krog, Paul Ryan, Julian Flake
created: 2022-07-20
example: E0068
type: Property
type: Concept
term status: accepted
definition: Indicates the associated risk is the remaining or residual risk from applying mitigation measures or treatments to this risk
in scheme: risk-properties

has responsible entity
range includes: Entity
contributor: Harshvardhan J. Pandit
created: 2022-03-02
type: Property
type: Concept
sub property of: has entity
term status: accepted
broader: has entity
definition: Specifies the indicated entity is responsible within some context
in scheme: entities-properties

has right
range includes: Right
contributor: Harshvardhan J. Pandit
created: 2020-11-18
example: E0061
example: E0067
type: Property
type: Concept
term status: accepted
definition: Indicates use or applicability of Right
in scheme: rights-properties

has risk
range includes: Risk
contributor: Harshvardhan J. Pandit
created: 2020-11-18
example: E0068
type: Property
type: Concept
term status: accepted
definition: Indicates applicability of Risk for this concept
in scheme: risk-properties

has risk assessment
range includes: Risk Assessment
contributor: Harshvardhan J. Pandit
created: 2024-04-14
type: Property
type: Concept
sub property of: has assessment
term status: accepted
broader: has assessment
definition: Indicates an associated risk assessment
in scheme: risk-properties

has risk level
domain includes: Risk
range includes: Risk Level
contributor: Harshvardhan J. Pandit, Georg P. Krog, Paul Ryan, Julian Flake
created: 2022-07-20
example: E0068
example: E0071
type: Property
type: Concept
term status: accepted
definition: Indicates the associated risk level associated with a risk
in scheme: risk-properties

has rule
domain includes: Context
range includes: Rule
contributor: Harshvardhan J. Pandit, Georg P. Krog, Beatriz Esteves, Paul Ryan
created: 2022-10-19
type: Property
type: Concept
term status: accepted
definition: Specifying applicability or inclusion of a rule within specified context
in scheme: rules-properties

has scale
range includes: Scale
contributor: Harshvardhan J. Pandit
created: 2022-06-15
type: Property
type: Concept
term status: accepted
definition: Indicates the scale of specified concept
in scheme: processing-scale-properties

has scope
range includes: Scope
contributor: Harshvardhan J. Pandit
created: 2022-06-15
type: Property
type: Concept
term status: accepted
definition: Indicates the scope of specified concept or context
in scheme: context-properties

has sector
range includes: Sector
created: 2019-04-05
type: Property
type: Concept
term status: accepted
definition: Indicates the purpose is associated with activities in the indicated (Economic) Sector(s)
in scheme: purposes-properties

has sensitivity level
range includes: Sensitivity Level
contributor: Harshvardhan J. Pandit
created: 2023-08-24
type: Property
type: Concept
term status: accepted
definition: Indicates the associated level of sensitivity
in scheme: risk-properties

has service
range includes: Service
contributor: Harshvardhan J. Pandit
created: 2024-04-20
type: Property
type: Concept
term status: accepted
definition: Indicates associated with the specified service
in scheme: process-properties

has service consumer
domain includes: Service
range includes: Service Consumer
contributor: Harshvardhan J. Pandit
created: 2024-04-20
type: Property
type: Concept
sub property of: has entity
term status: accepted
broader: has entity
definition: Indicates the entity that consumes or receives the associated service
in scheme: entities-legalrole-properties

has service provider
domain includes: Service
range includes: Service Provider
contributor: Harshvardhan J. Pandit
created: 2024-04-20
type: Property
type: Concept
sub property of: has entity
term status: accepted
broader: has entity
definition: Indicates the entity that provides the associated service
in scheme: entities-legalrole-properties

has severity
range includes: Severity
contributor: Harshvardhan J. Pandit, Georg P. Krog, Paul Ryan, Julian Flake
created: 2022-07-20
example: E0068
type: Property
type: Concept
term status: accepted
definition: Indicates the severity associated with a concept
in scheme: risk-properties

has status
domain includes: Right Exercise Activity
range includes: Status
contributor: Harshvardhan J. Pandit
created: 2022-05-18
example: E0069
type: Property
type: Concept
term status: accepted
definition: Indicates the status of specified concept
in scheme: rights-properties
in scheme: status-properties
scope note: Also used to Indicate the status of a Right Exercise Activity

has storage condition
range includes: Storage Condition
contributor: Axel Polleres, Rob Brennan, Harshvardhan J. Pandit, Mark Lizar
created: 2022-08-13
source: SPECIAL Project
type: Property
type: Concept
sub property of: has processing condition
term status: accepted
broader: has processing condition
definition: Indicates information about storage condition
in scheme: processing-context-properties

has subsidiary
domain includes: Organisation
range includes: Organisation
contributor: Harshvardhan J. Pandit, Georg P. Krog
created: 2024-04-14
example: E0038
type: Property
type: Concept
sub property of: has entity
term status: accepted
broader: has entity
definition: Indicates this entity has the specified entity as its subsidiary
in scheme: entities-properties

has technical measure
range includes: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-02-09
example: E0064
example: E0070
type: Property
type: Concept
sub property of: has technical and organisational measure
term status: accepted
broader: has technical and organisational measure
definition: Indicates use or applicability of Technical measure
in scheme: TOM-properties

has technical and organisational measure
range includes: Technical and Organisational Measure
contributor: Axel Polleres, Javier Fernández, Harshvardhan J. Pandit, Mark Lizar, Bud Bruegger
created: 2019-04-04
modified: 2020-11-04
type: Property
type: Concept
term status: accepted
definition: Indicates use or applicability of Technical or Organisational measure
in scheme: TOM-properties

has third country
range includes: Third Country
contributor: Harshvardhan J. Pandit, Georg P. Krog
created: 2022-02-09
type: Property
type: Concept
sub property of: has country
term status: accepted
broader: has country
definition: Indicates applicability or relevance of a 'third country'
in scheme: jurisdiction-properties

is after
domain includes: Right Exercise Activity
range includes: Right Exercise Activity
contributor: Georg P. Krog, Harshvardhan J. Pandit, Julian Flake
created: 2022-03-02
type: Property
type: Concept
term status: accepted
definition: Indicates the specified concepts is 'after' this concept in some context
in scheme: context-properties
in scheme: rights-properties
scope note: Also used for specifying a RightExerciseActivity occurs before another RightExerciseActivity

is applicable for
range includes: Scope
contributor: Harshvardhan J. Pandit, Beatriz Esteves, Georg P. Krog, Paul Ryan
created: 2024-04-13
type: Property
type: Concept
term status: accepted
definition: Indicates the concept or information is applicable for specified context
in scheme: context-properties

is authority for
domain includes: Authority
contributor: Harshvardhan J. Pandit, Georg P. Krog
created: 2022-01-19
type: Property
type: Concept
term status: accepted
definition: Indicates area, scope, or applicability of an Authority
in scheme: entities-authority-properties

is before
domain includes: Right Exercise Activity
range includes: Right Exercise Activity
contributor: Georg P. Krog, Harshvardhan J. Pandit, Julian Flake
created: 2022-03-02
type: Property
type: Concept
term status: accepted
definition: Indicates the specified concepts is 'before' this concept in some context
in scheme: context-properties
in scheme: rights-properties
scope note: Also used for specifying a RightExerciseActivity occurs before another RightExerciseActivity

is determined by entity
range includes: Entity
contributor: Harshvardhan J. Pandit
created: 2024-05-10
type: Property
type: Concept
sub property of: has entity
term status: accepted
broader: has entity
definition: Indicates the context is determined by the specified entity
in scheme: processing-context-properties

is exercised at
domain includes: Active Right
range includes: Right Exercise Notice
contributor: Harshvardhan J. Pandit
created: 2022-10-22
type: Property
type: Concept
term status: accepted
definition: Indicates context or information about exercising a right
in scheme: rights-properties

is implemented by entity
domain includes: Right Exercise Activity
range includes: Entity
contributor: Axel Polleres, Harshvardhan J. Pandit, Beatriz Esteves, Paul Ryan, Julian Flake
created: 2019-05-07
modified: 2022-01-26
example: E0037
type: Property
type: Concept
term status: accepted
definition: Indicates implementation details such as entities or agents
in scheme: processing-context-properties
in scheme: rights-properties
scope note: Also used to indicate the Entity that implements or performs a Right Exercise Activity
scope note: The use of 'entity' is inclusive of entities (e.g. Data Processor) as well as 'agent' (e.g. DPO). For indicating technological implementation, the property isImplementedByTechnology should be used.

is implemented using technology
range includes: Technology
contributor: Beatriz Esteves, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
created: 2022-01-26
modified: 2022-06-15
example: E0064
type: Property
type: Concept
term status: accepted
definition: Indicates implementation details such as technologies or processes
in scheme: processing-context-properties
scope note: The term 'technology' is inclusive of technologies, processes, and methods.

is indicated at time
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
created: 2022-06-21
type: Property
type: Concept
term status: accepted
definition: Specifies the temporal information for when the entity has indicated the specific context
in scheme: legal-basis-properties

is indicated by
range includes: Entity
contributor: Georg P. Krog, Harshvardhan J. Pandit, Paul Ryan, Julian Flake
created: 2022-06-21
type: Property
type: Concept
term status: accepted
definition: Specifies entity who indicates the specific context
in scheme: legal-basis-properties

is mitigated by measure
domain includes: Risk
range includes: Risk Mitigation Measure
contributor: Harshvardhan J. Pandit
created: 2022-02-09
example: E0068
type: Property
type: Concept
sub property of: has technical and organisational measure
term status: accepted
broader: has technical and organisational measure
definition: Indicate a risk is mitigated by specified measure
in scheme: risk-properties

is not applicable for
range includes: Scope
contributor: Harshvardhan J. Pandit, Beatriz Esteves, Georg P. Krog, Paul Ryan
created: 2024-04-13
type: Property
type: Concept
term status: accepted
definition: Indicates the concept or information is not applicable for specified context
in scheme: context-properties

is organisational unit of
domain includes: Organisational Unit
range includes: Entity
contributor: Harshvardhan J. Pandit
created: 2024-06-10
type: Property
type: Concept
sub property of: has entity
term status: accepted
broader: has entity
definition: Indicates this entity is an organisational unit of the specified entity
in scheme: entities-properties

is policy for
domain includes: Policy
contributor: Harshvardhan J. Pandit
created: 2022-01-26
type: Property
type: Concept
term status: accepted
definition: Indicates the context or application of policy
in scheme: TOM-properties

is representative for
domain includes: Representative
range includes: Entity
contributor: Harshvardhan J. Pandit
created: 2022-11-09
type: Property
type: Concept
sub property of: has entity
term status: accepted
broader: has entity
definition: Indicates the entity is a representative for specified entity
in scheme: entities-properties

is residual risk of
domain includes: Residual Risk
range includes: Risk
contributor: Harshvardhan J. Pandit, Georg P. Krog, Paul Ryan, Julian Flake
created: 2022-07-20
type: Property
type: Concept
term status: accepted
definition: Indicates this risk is the remaining or residual risk from applying mitigation measures or treatments to specified risk
in scheme: risk-properties

is subsidiary of
domain includes: Organisation
range includes: Organisation
contributor: Harshvardhan J. Pandit, Georg P. Krog
created: 2024-04-14
type: Property
type: Concept
sub property of: has entity
term status: accepted
broader: has entity
definition: Indicates this entity is the subsidiary of the specified entity
in scheme: entities-properties

mitigates risk
domain includes: Risk Mitigation Measure
range includes: Risk
contributor: Harshvardhan J. Pandit
created: 2020-11-04
type: Property
type: Concept
term status: accepted
definition: Indicates risks mitigated by this concept
in scheme: risk-properties

Data Privacy Vocabulary (DPV) - HTML serialiation
conforms to: https://www.w3.org/TR/html/
dct:format: https://www.iana.org/assignments/media-types/text/html
type: ResourceDescriptor
has artifact: dpv.html
has role: specification

Data Privacy Vocabulary (DPV) - JSON-LD serialiation
conforms to: json-ld11
dct:format: ld+json
type: ResourceDescriptor
has artifact: dpv.jsonld
has role: vocabulary

Data Privacy Vocabulary (DPV) - N3 serialiation
conforms to: https://www.w3.org/TeamSubmission/n3/
dct:format: https://www.iana.org/assignments/media-types/text/n3
type: ResourceDescriptor
has artifact: dpv.n3
has role: vocabulary

Data Privacy Vocabulary (DPV) - RDF/XML serialiation
conforms to: 22-rdf-syntax-ns#
dct:format: rdf+xml
type: ResourceDescriptor
has artifact: dpv.rdf
has role: vocabulary

Data Privacy Vocabulary (DPV) - Turtle serialiation
conforms to: turtle
dct:format: turtle
type: ResourceDescriptor
has artifact: dpv.ttl
has role: vocabulary

supports Compliance With
domain includes: Technical and Organisational Measure
contributor: Julian Flake, Georg P. Krog, Harshvardhan J. Pandit
created: 2024-04-14
type: Property
type: Concept
term status: accepted
definition: Indicate the measure is required for meeting specified requirement or satisfying specified condition/constraint
in scheme: TOM-properties

Examples for Data Privacy Vocabulary
conforms to: https://www.w3.org/TR/html/
dct:format: https://www.iana.org/assignments/media-types/text/html
type: ResourceDescriptor
has role: guidance

Guides for Data Privacy Vocabulary
conforms to: https://www.w3.org/TR/html/
dct:format: https://www.iana.org/assignments/media-types/text/html
type: ResourceDescriptor
has role: guidance

Primer for Data Privacy Vocabulary
conforms to: https://www.w3.org/TR/html/
dct:format: https://www.iana.org/assignments/media-types/text/html
type: ResourceDescriptor
has role: guidance