A dataset, data service, or any other resource associated with Right Exercise - such as for providing a copy of data
accepted
Procedures related to governance of AI, including its procurement, development, deployment, and assessments
AI Governance
Providing skills, knowledge, and understanding to enable reading, writing, analysing, reasoning, and communicating regarding AI
AI Literacy
A notice providing information regarding the particulars of an AI system such as its intended purpose and proper use
AI Notice
Purposes associated with conducting or assisting with research conducted in an academic context e.g. within universities
Academic Research
Organisations related to academia or scientific pursuits e.g. Universities, Schools, Research Bodies
Academic or Scientific Organisation
Control for accepting a contract
Accept Contract
A rule that is acceptable where it is either desirable if it occurs or it is not unacceptable if it does
Acceptable Rule
Acceptable is a subjective concept that enables distinguishing with "unacceptable". By itself it does not signal any permission or obligation - for which further specific concepts are defined
Acceptable Use Policy (AUP) refers to conditions, contexts, or uses which are considered acceptable with the implication that those not covered by such a policy are to be considered unacceptable
Acceptable Use Policy
to access data
Access
Methods which restrict access to a place or resource
Access Control Method
Account Management refers to purposes associated with account management, such as to create, provide, maintain, and manage accounts
Account Management
to come into possession or control of the data
Acquire
The right(s) applicable, provided, or expected that need to be (actively) exercised
Active Right
Active rights require the entity to expressly exercise them. For example, a Data Subject exercising their right to withdraw their consent.
Status indicating the specified context is 'actively' involved
Actively Involved
An example of active involvement is a person directly using a system to enter information
State of an activity that has completed i.e. is fully in the past
Activity Completed
State of an activity that was occurring in the past, and has been halted or paused or stopped
Activity Halted
Monitoring of activities including assessing whether they have been successfully initiated and completed
Activity Monitoring
State of an activity that could not be completed, but has reached some end state
Activity Not Completed
This relates to a 'Stop' state as distinct from a 'Halt' state. It makes no comments on whether the Activity can be resumed or continued towards completion.
State of an activity occurring in continuation i.e. currently ongoing
Activity Ongoing
State of an activity being planned with concrete plans for implementation
Activity Planned
State of an activity being proposed without any concrete plans for implementation
Activity Proposed
Status associated with activity operations and lifecycles
Activity Status
to modify the data, often rewritten into a new form for a new use
Adapt
modified
A natural person that is not a child i.e. has attained some legally specified age of adulthood
Adult
Purposes associated with conducting advertising i.e. process or artefact used to call attention to a product, service, etc. through announcements, notices, or other forms of communication
Advertising
Advertising is a subset of Marketing. Advertising by itself does not indicate 'personalisation' i.e. personalised ads.
Purposes associated with verifying or authenticating age or age related information as a form of security
Age Verification
Age Verification can include verification of the exact age, e.g. being 21 years old, a date, e.g. birth date is 01 January 1969, or a condition, e.g. age is over 21 years and the person is an adult. Specific dedicated resources should be used to further express information and processes associated with Age Verification, for example the Age Verification Vocabulary https://w3id.org/age/
An Agent is a dpv:Entity that is (a) acting on behalf of another Entity; and (b) is authorised to do so by that Entity
Agent
the Entity the Agent is acting on behalf of can be a human or non-human and a legal or non-legal entity. For specific distinction, see dpv:LegalAgent and tech:MachineAgent. The form and validity of authorisation through which the Agent is empowered to represent and act on behalf of the Entity is not defined or covered in this concept
to aggregate data
Aggregate
The algorithmic logic applied or used
Algorithmic Logic
Algorithmic Logic is intended as a broad concept for explaining the use of algorithms and automated decisions making within Processing. To describe the actual algorithm, see the Algorithm concept.
to adjust the data to be in relation to another data
Align
to change the data without changing it into something else
Alter
An organisation that that offers transportation and medical care to patients requiring urgent medical attention
Ambulance Provider
to study or examine the data in detail
Analyse
Anonymisation is the process by which data is irreversibly altered in such a way that a data subject can no longer be identified directly or indirectly, either by the entity holding the data alone or in collaboration with other entities and information sources
Anonymisation
to irreversibly alter personal data in such a way that an unique data subject can no longer be identified directly or indirectly or in combination with other data
Anonymise
Personal Data that has been (fully and completely) anonymised so that it is no longer considered Personal Data
Anonymised Data
It is advised to carefully consider indicating data is fully or completely anonymised by determining whether the data by itself or in combination with other data can identify a person. Failing this condition, the data should be denoted as PseudonymisedData. To indicate data is anonymised only for a specified entity (e.g. within an organisation), the concept ContextuallyAnonymisedData (as subclass of PseudonymisedData) should be used instead of AnonymisedData.
Concept provided to represent indication of cases where the information or context is not applicable (N/A) or not available or this is not known or determined yet. If the information is applicable and available, this concept should not be used.
Applicability
These concepts are useful in closed-world interpretations, for example in forms where a field must have a value to explicitly denote it is not applicable or the information is not available yet.
Humans that are applicants in some context
Applicant
A procedure or process for determining and managing approvals for activities as part of governance
Approval Procedure
to assess data for some criteria
Assess
The document, plan, or process for assessment or determination towards a purpose e.g. assessment of legality or impact assessments
Assessment
Procedures related to management of assets
Asset Management Procedures
Level of automation corresponding to Level 1 in ISO/IEC 22989:2022 where automation is limited to parts of the system or a specific part of the system in a manner that does not change the control of the human in using/driving the system
Assistive Automation
Human Involvement is implied here, specifically the ability to make decisions regarding operations, but also possibly for intervention, oversight, and verification
Humans that are asylum seekers
Asylum Seeker
Use of public-key cryptography or asymmetric cryptography involving a public and private pair of keys
Asymmetric Cryptography
Use of asymmetric cryptography to encrypt data
Asymmetric Encryption
An audit is a systematic examination or evaluation of records, processes, or systems towards a specific objective such as to assess accuracy, compliance, effectiveness, or performance
Audit
State of being approved through the audit
Audit Approved
State of being conditionally approved through the audit
Audit Conditionally Approved
A "conditional approval" is intended to reflect states where the audit has identified further changes which must be implemented before considering the audit has been 'passed', without requiring another audit to validate them. This is distinct from the case where an audit has state 'rejected', which means changes must be made and submitted for review. The requirements of a 'conditional acceptance' are expected to be minor or not significant enough to warrant another audit to review them.
State where an audit is determined as not being required
Audit Not Required
State of not being approved or being rejected through the audit
Audit Rejected
State of an audit being requested whose outcome is not yet known
Audit Requested
State where an audit is determined as being required but has not been conducted
Audit Required
Status associated with Auditing or Investigation
Audit Status
Use of Attribute Based Credentials (ABC) to perform and manage authentication
Authentication using ABC
Use of Privacy-enhancing Attribute Based Credentials (ABC) to perform and manage authentication
Authentication using PABC
Protocols involving validation of identity i.e. authentication of a person or information
Authentication Protocols
Procedures for determining authorisation through permission or authority
Authorisation Procedure
non-technical authorisation procedures: How is it described on an organisational level, who gets access to the data
Protocols involving authorisation of roles or profiles to determine permission, rights, or privileges
Authorisation Protocols
An authority with the power to create or enforce laws, or determine their compliance.
Authority
Status indicating Authority has been informed about the specified context
Authority Informed
Status indicating Authority is uninformed i.e. has not been informed about the specified context
Authority Uninformed
Processing that involves automated decision making
Automated Decision Making
Automated decision making can be defined as “the ability to make decisions by technological means without human involvement.” (“Guidelines on Automated individual decision-making and Profiling for the purposes of Regulation 2016/679 (wp251rev.01)”, 2018, p. 8)
Processing that involves automated scoring of individuals
Automated Scoring of Individuals
Scoring can lead to the action being considered Decision Making if the scoring is itself a decision - see 2023-MAR-16 opinion of Advocate General on Case C 634/21. Therefore, the assessment of whether scoring was automated or not is important given the legal obligations surrounding automated decision making e.g. in GDPR
Indication of degree or level of automation associated with specified context
Automation Level
This concept was called 'Automation' in previous versions
Level of automation corresponding to Level 6 in ISO/IEC 22989:2022 where the automation in system is capable of modifying its operation domain or its goals without external intervention, control or oversight
Autonomous
Though Autonomous, such operations can still be associated with dpv:HumanInvolved e.g. for inputs, oversight or verification
A contract between two businesses who partner together to provide services to a consumer
Business-to-Business-to-Consumer Contract
A contract between two businesses
Business-to-Business Contract
A contract between a business and a consumer where the business provides goods or services to the consumer
Business-to-Consumer Contract
Procedure where the background of an entity is assessed to identity vulnerabilities and threats due to their current or intended role
Background Checks
Use of biometric data for authentication
Biometric Authentication
A contract between a consumer and a business where the business purchases goods or services from the consumer
Consumer-to-Business Contract
A contract between two consumers
Consumer-to-Consumer Contract
Involvement where entity cannot challenge the process of specified context
Cannot Challenge Process
Challenge refers to raising questions about validity, necessity, correctness, or other similar 'trustworthiness' attributes regarding the process or plan or implementation
Involvement where entity cannot challenge input of specified context
Cannot Challenge Process Input
Involvement where entity cannot challenge the output of specified context
Cannot Challenge Process Output
Challenge refers to raising questions about validity, necessity, correctness, or other similar 'trustworthiness' attributes regarding the output of the process or plan or implementation (where output is distinct from the process itself)
Involvement where entity cannot correct the process of specified context
Cannot Correct Process
Involvement where entity cannot correct input of specified context
Cannot Correct Process Input
Involvement where entity cannot correct the output of specified context
Cannot Correct Process Output
Involvement where entity cannot object to process of specified context
Cannot Object to Process
Involvement where entity cannot opt-in to specified context
Cannot Opt-in to Process
Involvement where entity cannot opt-out from specified context
Cannot Opt-out from Process
Involvement where entity cannot reverse effects of specified context
Cannot Reverse Process Effects
Effects refer to consequences and impacts arising from the process or from the outputs of a process
Involvement where entity cannot reverse input of specified context
Cannot Reverse Process Input
Reversion can be considered a form of correction in some instances. We welcome inputs to further explore and define this relation between correction and reversion concepts.
Involvement where entity cannot reverse output of specified context
Cannot Reverse Process Output
Involvement where entity cannot withdraw a previously given assent from specified context
Cannot Withdraw from Process
Certification mechanisms, seals, and marks for the purpose of demonstrating compliance
Certification
Certifications, seals, and marks indicating compliance to regulations or practices
Certification and Seal
Involvement where entity can challenge the process of specified context
Challenging Process
Involvement where entity can challenge input of specified context
Challenging Process Input
Involvement where entity can challenge the output of specified context
Challenging Process Output
A nonprofit entity dedicated to providing assistance or raising funds for social, educational, religious, or other philanthropic purposes
Charity Organisation
A 'child' is a natural legal person who is below a certain legal age depending on the legal jurisdiction.
Child
The legality of age defining a child varies by jurisdiction. In addition, 'child' is distinct from a 'minor'. For example, the legal age for consumption of alcohol can be 21, which makes a person of age 20 a 'minor' in this context. In other cases, 'minor' and 'child' are used interchangeably to refer to a person below some legally defined age.
Humans that are citizens (for a jurisdiction)
Citizen
A region consisting of urban population and commerce
City
Humans that are clients or recipients of services
Client
An organisation that is a smaller healthcare facility offering outpatient medical services for diagnosis and treatment
Clinic
Location that is in the 'cloud' i.e. a logical location operated over the internet
Cloud Location
A set of rules or procedures outlining the norms and practices for conducting activities
Code of Conduct
to gather data from someone
Collect
Data that has been obtained by collecting it from a source
Collected Data
Personal Data that has been collected from another source such as the Data Subject
Collected Personal Data
To indicate the source of data, use the DataSource concept with the hasDataSource relation
DGA 2.16
Purposes associated with combating the causes and consequences of climate change, including reducing gas emissions and fighting emergencies such as floods or wildfires
Combat Climate Change
to join or merge data
Combine
DGA 4.4
Purposes associated with processing activities performed in a commercial setting or with intention to commercialise
Commercial Purpose
Purposes associated with conducting research in a commercial setting or with intention to commercialise e.g. in a company or sponsored by a company
Commercial Research
DGA 6.5(c)
Data that is considered confidential due to business/trade secrets, confidentiality agreements, or company secrets
Commercially Confidential Data
Customer Care Communication refers to purposes associated with communicating with customers for assisting them, resolving issues, ensuring satisfaction, etc. in relation to services provided
Communication for Customer Care
Communication Management refers to purposes associated with providing or managing communication activities e.g. to send an email for notifying some information
Communication Management
This purpose by itself does not sufficiently and clearly indicate what the communication is about. As such, it is recommended to combine it with another purpose to indicate the application. For example, Communication of Payment.
Status indicating the compatibility of the context with an earlier context is currently unknown
Compatibility Unknown
Assessment regarding compliance (e.g. internal policy, regulations)
Compliance Assessment
State where the status of compliance has not been fully assessed, evaluated, or determined
Compliance Indeterminate
Monitoring of compliance (e.g. internal policy, regulations)
Compliance Monitoring
Status associated with Compliance with some norms, objectives, or requirements
Compliance Status
State where the status of compliance is unknown
Compliance Unknown
State where compliance cannot be achieved due to requirements being violated
Compliance Violation
Changed from "violation of compliance" for consistency with other terms
State of being fully compliant
Compliant
Level of automation corresponding to Level 3 in ISO/IEC 22989:2022 where the automation is sufficient to perform most tasks of the system with the human present to take over where necessary
Conditional Automation
Human Involvement is implied here, e.g. for intervention, input, decisions
DGA 5.10
Data deemed confidential
Confidential Data
DGA 3.1.a
Agreements that enforce confidentiality for e.g. to protect business, professional, or company secrets
Confidentiality Agreement
Assessment regarding conformance with standards or norms or guidelines or similar instruments
Conformance Assessment
Status associated with conformance to a standard, guideline, code, or recommendation
Conformance Status
State of being conformant
Conformant
Consent of the Data Subject for specified process or activity
Consent
The control or activity associated with obtaining, providing, withdrawing, or reaffirming consent
Consent Control
The state where the temporal or contextual validity of consent has 'expired'
Consent Expired
An example of this state is when the obtained consent has been assigned a duration - which has lapsed or 'expired', making it invalid to be used further for processing data
The state where consent has been given
Consent Given
An example of this state is when the individual clicks on a button, ticks a checkbox, verbally agrees - or any other form that communicates their decision agreeing to the processing of data
The state where consent has been deemed to be invalid
Consent Invalidated
An example of this state is where an investigating authority or a court finds the collected consent did not meet requirements, and 'invalidates' both prior and future uses of it to carry out processing
DGA 12.n
Methods to obtain, provide, modify, and withdraw consent along with maintaining a record of consent, retrieving records, and processing changes in consent states
Consent Management
A Notice for information provision associated with Consent
Consent Notice
A record of consent or consent related activities that is provided to another entity
Consent Receipt
A Record of Consent or Consent related activities
Consent Record
The state where consent has been refused
Consent Refused
An example of this state is when the individual clicks on a 'disagree' or 'reject' or 'refuse' button, or leaves a checkbox unticked
State where a request for consent has been deferred without a decision
Consent Request Deferred
An example of this state is when the individual closes or dismisses a notice without making a decision. This state is intended for making the distinction between a notice being provided (as a consent request) and the individual interacting with the notice without making a decision - where the 'ignoring of a notice' is taken as consent being neither given nor refused
State where a request for consent has been made and is awaiting a decision
Consent Requested
An example of this state is when a notice has been presented to the individual but they have not made a decision
The state where the consent is revoked by an entity other than the data subject and which prevents it from being further used as a valid state
Consent Revoked
An example of this state is when a Data Controller stops utilising previously obtaining consent, such as when that service no longer exists
The state or status of 'consent' that provides information reflecting its operational status and validity for processing data
Consent Status
States are useful as information artefacts to implement them in controlling processing, and to reflect the process and flow of obtaining and maintaining consent. For example, a database table that stores consent states for specific processing and can be queried to obtain them in an efficient manner. States are also useful in investigations to determine the use and validity of consenting practices
States of consent that cannot be used as valid justifications for processing data
Consent Status Invalid for Processing
This identifies the stages associated with consent that should not be used to process data
States of consent that can be used as valid justifications for processing data
Consent Status Valid for Processing
Practically, given consent is the only valid state for processing
State where information about consent is not available or is unknown
Consent Unknown
Consent states can be unknown, for example, when information is not available, or cannot be trusted, or is known to be inaccurate
The state where the consent is withdrawn or revoked specifically by the data subject and which prevents it from being further used as a valid state
Consent Withdrawn
This state can be considered a form of 'revocation' of consent, where the revocation can only be performed by the data subject. Therefore we suggest using ConsentRevoked when it is a non-data-subject entity, and ConsentWithdrawn when it is the data subject
The consequence(s) possible or arising from specified context
Consequence
The consequence(s) possible or arising as a side-effect of specified context
Consequence as Side-Effect
The consequence(s) possible or arising from failure of specified context
Consequence of Failure
The consequence(s) possible or arising from success of specified context
Consequence of Success
to consult or query data
Consult
Consultation is a process of receiving feedback, advice, or opinion from an external agency
Consultation
Consultation with an authority or authoritative entity
Consultation with Authority
Consultation with Data Protection Officer(s)
Consultation with DPO
Consultation with data subject(s) or their representative(s)
Consultation with Data Subject
Consultation with representative of data subject(s)
Consultation with Data Subject Representative
Humans that consume goods or services for direct use
Consumer
A contract where the terms and conditions are determined by parties in the role of a 'consumer' - whether an entity or an individual, and the other parties have negligible or no ability to negotiate the terms and conditions
Consumer Standard Form Contract
Contextually relevant information
Context
Context is a catch-all concept for information of relevance not possible to represent through other core concepts. DPV offers specific contextual concepts such as Necessity, Frequency, and Duration. More can be created by extending Context within use-cases.
Data that can be considered as being fully anonymised within the context but in actuality is not fully anonymised and is still personal data as it can be de-anonymised outside that context
Contextually Anonymised Data
To distinguish between partially anonymised data that can be effectively treated as anonymised data (e.g. in processing) within a context (e.g. an organisation), the concept ContextuallyAnonymisedData should be used instead of AnonymisedData. Transfer of this data outside of the context should consider that it is not fully anonymised and that it is still personal data
Frequency where occurrences are continuous
Continuous Frequency
Creation, completion, fulfilment, or performance of a contract involving specified processing of data or technologies
Contract
Status associated with activation of a contract i.e. whether its terms are active and are required to be performed
Contract Activation Status
Status representing contract that has been fully executed and whose terms are considered active i.e. they are applicable and are required to be performed
Contract Active
A contract being active only refers to its terms now being required to be fulfilled, while dpv:ContractBeingPerformed states that they are being performed
Status representing contract that has been fully executed and whose terms have been amended through mutual agreement or other means such that the contract is still required to be performed
Contract Amended
A provision describing how changes or modifications to the contract can be made and the process for implementing them
Contract Amendment Clause
Status representing contract has been approved and can be used for signing
Contract Approved
Status representing contract that has been fully executed and whose terms are being carried out i.e. the contract is being performed
Contract Being Performed
Status representing contract being breached where its terms are not fulfilled or are violated with legal consequences
Contract Breached
A generic concept representing contracts categorised by specific domains which dictate the drafting and interpretation of contracts
Contract by Domain
A generic concept representing contracts categorised by the type of entities involved - such as Businesses (B), Consumers (C), and Governments (G)
Contract by Entity Type
A generic concept representing contracts categorised based on their use or absence of negotiation in the contract forming process
Contract by Negotiation Type
A provision requiring parties to keep certain information confidential and not disclose it to third parties
Contract Confidentiality Clause
The control or activity associated with accepting, refusing, and other actions associated with a contract
Contract Control
A section specifying the meanings of key terms and phrases used throughout the contract
Contract Definitions
A provision detailing the methods and procedures for resolving disagreements or conflicts arising from the contract
Contract DisputeResolution Clause
Status representing contract being disputed where one or more parties have an issue regarding the interpretation and performance of the contract
Contract Disputed
Status representing the drafting of contract text has been completed and it can now be offered for signing
Contract Drafted
Status associated with execution of a contract (i.e. signing and procedural aspects before the contract terms come in to effect)
Contract Execution Status
Status representing reaching the expiry defined in the contract, such as when the stated duration or the stated obligations have been completed
Contract Expired
Status representing the duration associated with a contract being extended through mutual agreement or by a party
Contract Extended
Status representing contract where all its terms have been fulfilled in a manner that does not constitute a violation or breach of the contract
Contract Fulfilled
Status associated with fulfilment of a contract
Contract Fulfilment Status
Status representing contract has been fully executed i.e. it has been signed by all parties and all other procedural aspects such as exchange of signed contract copies have been completed
Contract Fully Executed
Status representing contract has been signed by all concerned parties
Contract Fully Signed
Status representing contract that has been fully executed and whose terms are not yet active i.e. they need to be performed at a later time
Contract Inactive
An example of an inactive contract is where its terms need to be fulfilled at a later date, at which point the contract will become active
A provision specifying the legal jurisdiction or court where disputes related to the contract will be resolved
Contract Jurisdiction Clause
Status representing contract has been successfully negotiated by involved parties
Contract Negotiated
Status representing contract where none of its terms have been fulfilled in a manner that does not constitute a violation or breach of the contract i.e. there is still time and opportunity to complete the terms
Contract Not Fulfilled
Status representing contract has been offered to a party or to parties for reviewing and signing
Contract Offered
Status representing contract where some of its terms have been fulfilled, and others are yet to be fulfilled in a manner that does not constitute a violation or breach of the contract i.e. there is still time and opportunity to complete the terms
Contract Partially Fulfilled
Status representing contract has been partially signed by parties i.e. some parties have signed the contract and others are yet to make a decision to sign it
Contract Partially Signed
Fulfilment or performance of a contract involving specified processing of data or technologies
Contract Performance
Status associated with performance of a contract
Contract Performance Status
An introductory section outlining the background, context, and purpose of the contract
Contract Preamble
Status associated with preparation of contracts before they are signed or accepted or executed
Contract Preparation Status
Status representing contract has been rejected and cannot be used for signing
Contract Rejected
Status representing contract being renewed with new duration and/or applicability where the contract has been fully executed in the past
Contract Renewed
Status representing contract has been signed by the indicated signing party
Contract Signed By Party
The signing party can be expressed using dpv:hasParty with the status along with metadata such as a timestamp, or the status can be used to list whether each party in the contract has signed or not e.g. it is reviewing the contract
Status associated with a contract
Contract Status
Status representing contract that has been temporarily suspended through mutual agreement or by some parties
Contract Temporarily Suspended
Status representing contract being terminated by one or more parties
Contract Terminated
A provision outlining the conditions under which the contract can be terminated before its completion, including any penalties or obligations
Contract Termination Clause
Status associated with termination of a contract
Contract Termination Status
Status representing contract is under negotiation between parties
Contract Under Negotiation
Status representing contract is under review and is being considered for signing
Contract Under Review
Status representing contract where one or more terms have not been fulfilled or have been fulfilled, where either is considered a violation of the terms
Contract Violated
A part or component within a contract that outlines its specifics
Contractual Clause
Status indicating the terms of the contractual clause are fulfilled i.e. they have been successfully completed without violation
Contractual Clause Fulfilled
Status associated with fulfilment of a contractual clause
Contractual Clause Fulfilment Status
Status indicating the terms of the contractual clause have not yet been fulfilled in a manner that does not constitute a violation i.e. there is still an opportunity to complete them
Contractual Clause Unfulfilled
Status indicating some of the terms of the contractual clause have been fulfilled, and others have not yet been fulfilled in a manner that does not constitute a violation i.e. there is still an opportunity to complete them
Contractual Clause Partially Fulfilled
Status indicating the terms of the contractual clause have been violated
Contractual Clause Breached
sunset
Contractual terms governing data handling within or with an entity
Contractual Terms
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of data between a Data Controller and a Data Subject
Controller-Data Subject Agreement
Status indicating Controller has been informed about the specified context
Controller Informed
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of data between a Data Controller and a Data Processor
Controller-Processor Agreement
Status indicating Controller is uninformed i.e. has not been informed about the specified context
Controller Uninformed
to produce an exact reproduction of the data
Copy
Involvement where entity can correct the process of specified context
Correcting Process
Correction of process refers to the ability to change how the process takes place
Involvement where entity can correct input of specified context
Correcting Process Input
Involvement where entity can correct the output of specified context
Correcting Process Output
Correction of outputs allows modification of the output - implying continuation of the process. This is distinct from reversing of outputs which revert the output back to its previous value and possibly imply not continuing with the process
Purposes associated with detection, prevention, and mitigation of mitigate money laundering
Counter Money Laundering
Purposes associated with activities that detect, prevent, mitigate, or otherwise perform activities to combat or eliminate terrorism (also referred to as anti-terrorism)
Counterterrorism
A political entity indicative of a sovereign or non-sovereign territorial state comprising of distinct geographical areas
Country
The definition of country is not intended for political interpretation. DPVCG welcomes alternate definitions based in existing sources with global scope, such as UN or ISO.
Management of credentials and their use in authorisations
Credential Management
to move data from one jurisdiction (border) to another
Cross-Border Transfer
Use of cryptography for authentication
Cryptographic Authentication
Management of cryptographic keys, including their generation, storage, assessment, and safekeeping
Cryptographic Key Management
Use of cryptographic methods to perform tasks
Cryptographic Methods
Humans that purchase goods or services
Customer
note: for B2B relations where customers are organisations, this concept only applies for data subjects
Customer Care refers to purposes associated with purposes for providing assistance, resolving issues, ensuring satisfaction, etc. in relation to services provided
Customer Care
Customer Claims Management refers to purposes associated with managing claims, including repayment of monies owed
Customer Claims Management
Customer Management refers to purposes associated with managing activities related with past, current, and future customers
Customer Management
Customer Order Management refers to purposes associated with managing customer orders i.e. processing of an order related to customer's purchase of good or services
Customer Order Management
Customer Relationship Management refers to purposes associated with managing and analysing interactions with past, current, and potential customers
Customer Relationship Management
Customer Solvency Monitoring refers to purposes associated with monitor solvency of customers for financial diligence
Customer Solvency Monitoring
Assessment of cybersecurity capabilities in terms of vulnerabilities and effectiveness of controls
Cybersecurity Assessment
Training methods related to cybersecurity
Cybersecurity Training
GDPR Art. 35
Impact assessment determining the potential and actual impact of processing activities on individuals or groups of individuals and taking into account the impacts of activities on their rights and freedoms
Data Protection Impact Assessment (DPIA)
Specific requirements and procedures for DPIA are defined in GDPR Art.35
A notice that is provided within a dashboard also used for other purposes
Dashboard Notice
A broad concept representing 'data' or 'information'
Data
Purposes associated with the voluntary sharing of data for the general interest of the public, such as healthcare or combating climate change
Data Altruism
Data Altruism as a purpose should be combined with other purposes to indicate their altruistic interpretation or application. E.g. improving healthcare and data altruism in combination.
Measures associated with assessment of availability of data for specific task(s)
Data Availability Assessment
Protocols or plans for backing up of data
Data Backup Protocols
Impact Assessment concerning the consequences and impacts of a data breach
Data Breach Impact Assessment (DBIA)
Data Breach assessments can require additional non-security related assessments such as GDPR Art.34 Rights Impact Assessment
DGA 21.5 GDPR 33
GDPR 34
DGA 12.k
A notice providing information about data breach(es) i.e. unauthorised transfer, access, use, or modification of data
Data Breach Notice
Notification of information about data breach(es) i.e. unauthorised transfer, access, use, or modification of data
Data Breach Notification
Record of a data breach incident
Data Breach Record
The individual or organisation that decides (or controls) the purpose(s) of processing personal data.
Data Controller
The terms 'Controller', 'Data Controller', and 'PII Controller' refer to the same concept
Creation, completion, fulfilment, or performance of a contract, with Data Controllers as parties being Joint Data Controllers, and involving specified processing of data or technologies. NOTE: This concept is being deprecated - use dpv:JointDataControllersAgreement which has a more explicit definition of the entities involved and the intent of the contract
Data Controller Contract
Data Sourced from Data Controller(s), e.g. a Controller inferring data or generating data
Data Controller as Data Source
Policy regarding deletion of data
Data Deletion Policy
Deletion and Erasure are distinct activities where deletion refers to logical removal of data with the possibility of retrieval whereas erasure refers to destruction of data such that it cannot be retrieved. See dpv:DataErasurePolicy
Policy regarding erasure of data
Data Erasure Policy
Erasure or data destruction or secure removal of data refers to irreversible erasure of data. See dpv:DataDeletion for reversible or logical deletion of data
An entity that 'exports' data where exporting is considered a form of data transfer
Data Exporter
The term 'Data Exporter' is used by the EU-EDPB as the entity that transfer data across borders. While the EDPB refers to the jurisdictional border of EU, the term within DPV can be used to denote any 'export' or transfer or transmission of data and is thus a broader concept than the EDPB's definition.
Measures associated with topics typically considered to be part of 'Data Governance'
Data Governance
Contractual clauses governing handling of data within or by an entity
Data Handling Clause
An entity that 'imports' data where importing is considered a form of data transfer
Data Importer
The term 'Data Importer' is used by the EU-EDPB as the entity that receives transferred data across borders. While the EDPB refers to the jurisdictional border of EU, the term within DPV can be used to denote any 'import' or reception of transfer or transmission of data and is thus a broader concept than the EDPB's definition.
Measures associated with assessment of data interoperability
Data Interoperability Assessment
DGA 12.d
Measures associated with improvement of data interoperability
Data Interoperability Improvement
Measures associated with management of data interoperability
Data Interoperability Management
Measures associated with management of data inventory or a data asset list
Data Inventory Management
Policy specifying jurisdictional requirements for data processing
Data Jurisdiction Policy
Jurisdictional requirements can refer to data being stored within specific jurisdictions, or that data must be in line with jurisdictional laws and norms
Providing skills, knowledge, and understanding to enable reading, writing, analysing, reasoning, and communicating regarding data
Data Literacy
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of data
Data Processing Agreement
For specific role-based data processing agreements, see concepts for Processors and JointDataController agreements.
Policy regarding data processing activities
Data Processing Policy
This only refers to the policy or plan or procedure describing how the data processing should be conducted. To represent the granular details, see further concepts e.g. dpv:DataStoragePolicy to describe policy regarding storage, or dpv:DataStorageCondition to represent information within the policy for how information should be stored
Record of data processing, whether ex-ante or ex-post
Data Processing Record
A ‘processor’ means a natural or legal person, public authority, agency or other body which processes data on behalf of the controller.
Data Processor
Creation, completion, fulfilment, or performance of a contract, with the Data Controller and Data Processor as parties, and involving specified processing of data or technologies. NOTE: This concept is being deprecated - use dpv:ControllerProcessorAgreement which has a more explicit definition of the entities involved and the intent of the contract
Data Processor Contract
An authority tasked with overseeing legal compliance regarding privacy and data protection laws.
Data Protection Authority
An entity within or authorised by an organisation to monitor internal compliance, inform and advise on data protection obligations and act as a contact point for data subjects and the supervisory authority.
Data Protection Officer
Training intended to increase knowledge regarding data protection
Data Protection Training
Data is published by the data subject
Data published by Data Subject
This refers to where that data was made publicly available by the data subject. An example of this would be a social media profile that the data subject has made publicly accessible.
Measures associated with assessment of data quality
Data Quality Assessment
Measures associated with improvement of data quality
Data Quality Improvement
Measures associated with management of data quality
Data Quality Management
Removal of sensitive information from a data or document
Data Redaction
Policy regarding restoration of data
Data Restoration Policy
Restoration can refer to how data is restored from a backup
Policy regarding reuse of data i.e. using data for purposes other than its initial purpose
Data Reuse Policy
This policy can be used to describe the procedures associated with undertaking such reuse of data, for example to assess its legality and the compatibility of the initial and subsequent purposes
Cleaning or any removal or re-organisation of elements in data based on selective criteria
Data Sanitisation Technique
Measures associated with management of data security
Data Security Management
Examples of data security management are assessing the appropriate security controls such as encryption, testing the implemented security controls, and ensuring it is protected and safeguarded from unintended actions
The source or origin of data
Data Source
Source' is the direct point of data collection; 'origin' would indicate the original/others points of where the data originates from.
Policy regarding storage of data, including the manner, duration, location, and conditions for storage
Data Storage Policy
A 'sub-processor' is a processor engaged by another processor
Data Sub-Processor
A 'Sub-Processor' is always a 'Processor' with the distinction of not directly being appointed by the 'Controller'
The individual (or category of individuals) whose personal data is being processed
Data Subject
The term 'data subject' is specific to the GDPR, but is functionally equivalent to the term 'individual associated with data' and the ISO/IEC term 'PII Principle'
Creation, completion, fulfilment, or performance of a contract, with the Data Controller and Data Subject as parties, and involving specified processing of data or technologies. NOTE: This concept is being deprecated - use dpv:ControllerDataSubjectAgreement which has a more explicit definition of the entities involved and the intent of the contract
Data Subject Contract
Data Sourced from Data Subject(s), e.g. when data is collected via a form or observed from their activities
Data Subject as Data Source
Status indicating DataSubject has been informed about the specified context
Data Subject Informed
The rights applicable or provided to a Data Subject
Data Subject Right
Based on use of definitions, the notion of 'Data Subject Right' can be equivalent to 'Individual Right' or 'Right of a Person'
DGA 12.m
Methods to provide, implement, and exercise data subjects' rights
Data Subject Rights Management
This concept only concerns the organisational management of rights, and does not represent the rights themselves - especially where such 'rights' are legally recognised or defined for the data subject or individual. The concept dpv:DataSubjectRight is provided to represent such legal rights.
Scale of Data Subject(s)
Data Subject Scale
Status indicating DataSubject is uninformed i.e. has not been informed about the specified context
Data Subject Uninformed
Measures associated with assessment of suitability of data for specific task(s)
Data Suitability Assessment
Impact Assessment for conducting data transfers
Data Transfer Impact Assessment
Specific or special categories and instances of legal basis intended for justifying data transfers
Data Transfer Legal Basis
DGA 5.9
Notice for the legal entity for the transfer of its data
Data Transfer Notice
Record of data transfer activities
Data Transfer Record
Volume or Scale of Data
Data Volume
Location that is spread across multiple separate areas with no distinction between their importance
Decentralised Locations
Processing that involves decision making
Decision Making
Removal of identity or information to reduce identifiability
De-Identification
to remove data in a logical fashion i.e. with the possibility of retrieval
Delete
Purposes associated with delivering goods and services requested or asked by consumer
Delivery of Goods
to create new derivative data from the original data
Derive
Derive indicates data is present or obtainable from existing data. For data that is created without such existence, see Infer.
Data that has been obtained through derivations of other data
Derived Data
Personal Data that is obtained or derived from other data
Derived Personal Data
Derived Data is data that is obtained through processing of existing data, e.g. deriving first name from full name. To indicate data that is derived but which was not present or evident within the source data, InferredPersonalData should be used.
A set of rules or guidelines outlining criterias for design
Design Standard
to process data in a way it no longer exists or cannot be repaired
Destruct
Pseudonymisation achieved through a deterministic function
Deterministic Pseudonymisation
A rule describing a deterrence for performing an activity
Deterrence
Deterrences are aligned with the term SHOULD NOT in RFC2119 where specified activities should be avoided from being carried out but are not prohibitions
Status indicating a deterrence has been followed i.e. the activity stated as being deterred has not been carried out
Deterrence Followed
Status indicating a deterrence has not been followed i.e. the activity stated as being deterred has been carried out
Deterrence Not Followed
A notice provided using the functionality provided by a device e.g. using the popup or alert feature
Device Notice
Utilisation of differential privacy where information is shared as patterns or groups to withhold individual elements
Differential Privacy
Providing skills, knowledge, and understanding to enable reading, writing, analysing, reasoning, and communicating regarding digital technologies and their implications
Digital Literacy
Management of access, use, and other operations associated with digital content
Digital Rights Management
Expression and authentication of identity through digital information containing cryptographic signatures
Digital Signatures
Purposes associated with conducting direct marketing i.e. marketing communicated directly to the individual
Direct Marketing
Procedures related to management of disasters and recovery
Disaster Recovery Procedures
to make data known
Disclose
to disclose data by means of transmission
Disclose by Transmission
DGA 2.20
to present or show data
Display
Purposes associated with activities that manage disputes by natural persons, private bodies, or public authorities relevant to organisation
Dispute Management
to spread data throughout
Disseminate
Security implementations provided using or over a distributed system
Distributed System Security
A contract regarding supply of data or technologies between a distributor and a supplier
Distribution Agreement
Use of randomised pseudonymisation where the same elements are assigned different values in the same document or database
Document Randomised Pseudonymisation
Security measures enacted over documents to protect against tampering or restrict access
Document Security
DGA 2.13
to provide a copy or to receive a copy of data over a network or internet
Download
The duration or temporal limitation
Duration
End User License Agreement is a contract entered into between a software (or service) developer or provider with the (end-)user
End User License Agreement (EULA)
A political union of two or more countries based on economic or trade agreements
Economic Union
An organisation focused on delivering formal or informal education, training, or research
Educational Organisation
Training methods that are intended to provide education on topic(s)
Educational Training
Procedures intended to determine effectiveness of other measures
Effectiveness Determination Procedures
Data subjects that are considered elderly (i.e. based on age)
Elderly Data Subject
Humans that are considered elderly (i.e. based on age)
Elderly Human
An organisation that is an emergency service provider focused on delivering immediate medical care to patients in critical or life-threatening situations
Emergency Healthcare Provider
An organisation tasked with providing emergency services such as by responding rapidly to urgent situations to protect lives, property, and the environment
Emergency Service Provider
Humans that are employees
Employee
A contract regarding employment between an employer and an employee
Employment Contract
Technical measures consisting of encryption
Encryption
Encryption of data when being stored (persistent encryption)
Encryption at Rest
Encryption of data in transit e.g. when being transferred from one location to another, including sharing
Encryption in Transfer
Encryption of data when it is being used
Encryption in Use
Encrypted communications where data is encrypted by the sender and decrypted by the intended receiver to prevent access to any third party
End-to-End Encryption (E2EE)
Duration that is (known or intended to be) open ended or without an end
Endless Duration
Purposes associated with conducting or enforcing access control as a form of security
Enforce Access Control
Was previously "Access Control". Prefixed to distinguish from Technical Measure.
Purposes associated with ensuring and enforcing security for data, personnel, or other related matters
Enforce Security
Was previous "Security". Prefixed to distinguish from TechOrg measures.
Processing necessary to enter into contract
Enter Into Contract
A human or non-human 'thing' that constitutes as an entity
Entity
Involvement where entity is 'actively' involved
Entity Active Involvement
Status indicating entity has been informed about specified context
Entity Informed
Status indicating whether an entity is informed or uninformed about specified context
Entity Informed Status
Status indicating the involvement of the entity is intended
Entity Intended Involvement
Status indicating the entity is involved
Entity Involved
Involvement of an entity in specific context
Entity Involvement
Status indicating whether an entity is involved
Entity Involvement Status
Indicating entity is not involved
Entity Non-Involvement
Involvement of an entity in specific context where it is not permitted or able to do something
Entity Non-Permissive Involvement
Status indicating the entity is not involved
Entity Not Involved
Involvement where entity is 'passively' or 'not actively' involved
Entity Passive Involvement
Involvement of an entity in specific context where it is permitted or able to do something
Entity Permissive Involvement
Status indicating entity is uninformed i.e. has been not been informed about specified context
Entity Uninformed
Status indicating the involvement of the entity is not intended
Entity Unintended Involvement
NIST SP 800-13
Physical protection against environmental threats such as fire, floods, storms, etc.
Environmental Protection
to remove data from existence i.e. without the possibility of retrieval
Erase
Purposes associated with carrying out data processing to establish an agreement, such as for entering into a contract
Establish Contractual Agreement
Processing that involves evaluation of individuals
Evaluation of Individuals
Processing that involves evaluation and scoring of individuals
Evaluation and Scoring
Status indicating whether the specified context was intended or unintended
Expectation Status
Expectation is associated with the outcome of a goal or purpose for what is expected to happen i.e. an ex-post indication of what was expected to happen in the specified context. Intention and Expectation are closely related terms. We recommend using Intention when the entity has the ability to control the implementation and Expectation for when the entity does not have control or for what happens after or beyond the exercise of control.
Status indicating the specified context was expected
Expected
Consent that is expressed through an explicit action solely conveying a consenting decision
Explicitly Expressed Consent
Explicitly expressed consent is a more specific form of Expressed consent where the action taken must 'explicitly' relate to only the consent decision. Expressed consent where the consenting is part of other matters therefore cannot satisfy the requirements of explicitly expressed consent. An example of explicit action expressing the consenting decision is a button on a web form where the form only relates to consent, or it is accompanied with suitable text that reiterates what the consenting decision is about
to provide a copy of data from one system to another
Export
Consent that is expressed through an action intended to convey a consenting decision
Expressed Consent
Expressed consent requires the individual take a specific and unambiguous action that directly indicates their consent. This action may be a part of other processes such as setting preferences, or agreeing to a contract, or other matters not relating to consent. An example of expressed consent is interacting with a checkbox within a dashboard or clicking a button on a web form
AI Act Art.27
Impact assessment which assesses the potential and actual impact on fundamental rights occurring due to processing activities
Fundamental Rights Impact Assessment (FRIA)
The fundamental rights and freedoms may be those defined in law or other norms, and may be bound to a jurisdiction - for example see EU Charter of Fundamental Rights
AI Act Article 15(4)
Use of fail-safe measures and protocols
Fail-Safe Protocols
Location that is federated across multiple separate areas with designation of a primary or central location
Federated Locations
Concept indicating a fee is not required. This is distinct from a Fee of zero as it indicates a fee is not applicable in the context
Fee Not Required
Concept indicating a fee is required. The value of the fee should be specified using rdf:value or an another relevant means
Fee Required
Concept indicating whether a fee is required
Fee Requirement
Security implemented over a file system
File System Security
to filter or keep data for some criteria
Filter
An organisation that is an emergency service provider for fire prevention, firefighting, and rescue services
Fire Department
Location that is fixed i.e. known to occur at a specific place
Fixed Location
Location that is fixed with multiple places e.g. multiple cities
Fixed Multiple Locations
Duration that takes place a fixed number of times e.g. 3 times
Fixed Occurrences Duration
Location that is fixed at a specific place e.g. a city
Fixed Singular Location
An organisation that aims to achieve profit as its primary goal
For-Profit Organisation
to arrange or structure data in a specific form
Format
Purposes associated with fraud detection, prevention, and mitigation
Fraud Prevention and Detection
The frequency or information about periods and repetitions in terms of recurrence.
Frequency
Purposes associated with carrying out data processing to fulfill a contractual obligation
Fulfilment of Contractual Obligation
Purposes associated with carrying out data processing to fulfill an obligation
Fulfilment of Obligation
Level of automation corresponding to Level 5 in ISO/IEC 22989:2022 where the automation in system is capable of performing all its tasks regardless of the conditions without human involvement
Full Automation
Though Fully Automated such operations can still be associated with dpv:HumanInvolved e.g. for inputs, oversight or verification
Use of randomised pseudonymisation where the same elements are assigned different values each time they occur
Fully Randomised Pseudonymisation
A contract between a government and a business
Government-to-Business Contract
A contract between a government and consumers
Government-to-Consumer Contract
A contract between two governments or government departments or units
Government-to-Government Contract
to generate or create data
Generate
Data that is generated or brought into existence without relation to existing data i.e. it is not derived or inferred from other data
Generated Data
Personal Data that is generated or brought into existence without relation to existing data i.e. it is not derived or inferred from other data
Generated Personal Data
Generated Data is used to indicate data that is produced and is not derived or inferred from other data
Indicate of scale in terms of geographic coverage
Geographic Coverage
Geographic coverage spanning the entire globe
Global Scale
Procedures related to governance (e.g. organisation, unit, team, process, system)
Governance Procedures
An organisation managed or part of government
Governmental Organisation
A notice that uses graphical elements such as visualisations and icons
Graphical Notice
Guardian(s) of data subjects such as children
Guardian(s) of Data Subject
Guardian(s) of humans
Guardian(s) of Human
Practices that specify how activities must be conducted
Guideline
Guidelines or Principles regarding processing and operational measures
Guidelines Principle
Security protocols implemented at or within hardware
Hardware Security Protocols
Use of hash functions to map information or to retrieve a prior categorisation
Hash Functions
Use of HMAC where message authentication code (MAC) utilise a cryptographic hash function and a secret cryptographic key
Hash-based Message Authentication Code (HMAC)
An organisation that delivers medical services, promotes health, and provides care for individuals and communities
Healthcare Organisation
Level of automation corresponding to Level 4 in ISO/IEC 22989:2022 where the automation in system is capable of performing all its tasks within specific controlled conditions without human involvement
High Automation
Use of Homomorphic encryption that permits computations on encrypted data without decrypting it
Homomorphic Encryption
An organisation that provides comprehensive medical treatment, including emergency care, surgeries, and inpatient services
Hospital
Data volume that is considered huge or more than large within the context
Huge Data Volume
Scale of data subjects considered huge or more than large within the context
Huge Scale Of Data Subjects
Humans are involved in the specified context
Human involved
This concept only indicates that humans are involved. For specific involvement, see specialised concepts e.g. involved for input, oversight.
The involvement of humans in specified context
Human Involvement
Human Involvement here broadly refers to any involvement by a human in the context of carrying out processing. This may include verification of outcomes, providing input data for making decisions, or overseeing activities. To indicate whether humans are involved or not, see relevant concepts of dpv:HumanInvolved and dpv:HumanNotInvolved. The term 'Human in the loop' and its varieties are absent from DPV due to their contradictory and non-compatible use across different sources.
Human involvement for the purposes of exercising control over the specified operations in context
Human Involvement for control
Control is a broad term that can be applied to various stages and operations. It maps to None, Assistive, and Partial automation models.
Human involvement for the purposes of exercising decisions over the specified operations in context
Human Involvement for decision
Decisions are about exercising control over the operation, and are distinct from input (data or parameters).
Human involvement for the purposes of providing inputs to the specified context
Human Involvement for Input
Inputs can be in the form of data or other resources.
Human involvement for the purposes of exercising interventions over the specified operations in context
Human Involvement for intervention
Intervention indicates the ability to intervene in operations, which can be at various stages. It maps to Conditional and High automation models.
Human involvement for the purposes of having oversight over the specified context regarding its operations, inputs, or outputs
Human Involvement for Oversight
Oversight by itself does not indicate the ability to intervene or control the operations.
Human involvement for the purposes of verification of specified context to ensure its operations, inputs, or outputs are correct or are acceptable.
Human Involvement for Verification
Verification by itself does not imply ability to Control, Intervene, or having Oversight.
Humans are not involved in the specified context
Human not involved
This maps to Autonomous and Full Automation models if no humans are involved.
Procedures related to implementing and ensuring human oversight, which includes ability for humans to oversee, understand, control, and reverse processes, and to have sufficient monitoring capability to detect and address anomalies, dysfunctions, or unexpected performance
Human Oversight
DPV also provides a taxonomy for 'Entity Involvement' including specific forms of 'Human Involvement' which allow expressing the roles of humans in specific capacities such as oversight, controls, and whether they have the ability to do something or don't. The Human Oversight as an organisational measure represents the overall plans and procedures for implementation of such human involvement
Purposes associated with managing humans and 'human resources' within the organisation for effective and efficient operations.
Human Resource Management
HR is a broad concept. Its management includes, amongst others - recruiting employees and intermediaries e.g. brokers, independent representatives; payroll administration, remunerations, commissions, and wages; and application of social legislation.
The individual (or category of individuals) that is the subject within some context such as personal data (dpv:DataSubject) or technology (tech:Subject)
Human Subject
A space that is a hybrid space i.e it has both public and private components - such as by having part of it be a private space or which is operated privately
Hybrid Public Private Space
DGA 3.1.c
Management of Intellectual Property Rights with a view to identify and safeguard and enforce them
Intellectual Property Rights Management
Personal Data that explicitly and by itself is sufficient to identify a person
Identifying Personal Data
DPV does not use PII ('Personally Identifiable Information') as it has varying and conflicting definitions across sources. Instead the concept 'identifying personal data' is intended to provide a clear categorisation of its interpretation. Where multiple data categories can be combined to create an 'identifying' category e.g. fingerprinting, this concept represents the combined category.
Purposes associated with performing authentication based on identity as a form of security
Identity Authentication
Management of identity and identity-based processes
Identity Management Method
Purposes associated with verifying or authenticating identity as a form of security
Identity Verification
Humans that are immigrants (for a jurisdiction)
Immigrant
The impact(s) possible or arising as a consequence from specified context
Impact
Impact is a stronger notion of consequence in terms of influence, change, or effect on something e.g. for impact assessments
Calculating or determining the likelihood of impact of an existing or proposed process, which can involve risks or detriments.
Impact Assessment
Consent that is implied indirectly through an action not associated solely with conveying a consenting decision
Implied Consent
Implied consent is expected to also be Informed Consent. An example is a CCTV notice outside a monitored area that informs the individuals that by walking in they would be consenting to the use of camera for surveillance.
An indication of 'importance' within a context
Importance
Importance can be used to express importance, desirability, relevance, or significance as a context.
Purposes associated with improving existing products and services
Improve Existing Products and Services
Purposes associated with improving healthcare systems such as for personalised treatments and curing chronic diseases
Improve Healthcare
Purposes associated with improving customer-relationship management (CRM) processes
Improve Internal CRM Processes
Purposes associated with improving the provision of public services, such as public safety, education or law enforcement
Improve Public Services
Purposes associated with improving traffic, public transport systems or costs for drivers
Improve Transport and Mobility
Procedures related to management of incidents
Incident Management Procedures
Procedures related to management of incident reporting
Incident Reporting Communication
Data that is known to be incorrect or inconsistent with some requirements
Incorrect Data
Purposes associated with improving robustness and resilience of services
Increase Service Robustness
Duration that is indeterminate or cannot be determined
Indeterminate Duration
Indeterminate means (exact or otherwise) information about the duration cannot be determined, which is distinct from 'EndlessDuration' where it is known (or decided) that the duration is open-ended or without an end.
A consortium established and comprising on industry organisations
Industry Consortium
to infer data from existing data
Infer
Infer indicates data that is derived without it being present or obtainable from existing data. For data that is presented, and is 'extracted' or 'obtained' from existing data, see Derive.
Data that has been obtained through inferences of other data
Inferred Data
Personal Data that is obtained through inference from other data
Inferred Personal Data
Inferred Data is derived data generated from existing data, but which did not originally exist within it, e.g. inferring demographics from browsing history.
An audit that systematically examines the existence and use of information along with its associated resources (e.g. where it is stored) and flows (e.g. where it originates and with whom it is being shared)
Information Audit
Use of measures to control information flows
Information Flow Control
Policy regarding security of information
Information Security Policy
Consent that is informed i.e. with the requirement to provide sufficient information to make a consenting decision
Informed Consent
The specifics for what information should be provided or made available will depend on the context, use-case, or relevant legal requirements
Involvement of existing technologies used in an innovative manner
Innovative Use of Existing Technologies
Involvement of a new (innovative) technologies
Innovative Use of New Technologies
New technologies are by definition considered innovative
Indicates that technology is being used in an innovative manner
Innovative use of Technology
Innovative here refers to 'state of the art' rather than the implementing entity, and can be for either new technology or new uses of existing technology
Data protected by Intellectual Property rights and regulations
Intellectual Property Data
Status indicating the specified context was intended
Intended
Intention Status
Intention is associated with the goal or purpose for what is about to happen i.e. an ex-ante indication of whether the specified context is/was planned or intended. Intention and Expectation are closely related terms. We recommend using Intention when the entity has the ability to control the implementation and Expectation for when the entity does not have control or for what happens after or beyond the exercise of control.
Purposes associated with optimisation of internal resource availability and usage for organisation
Internal Resource Optimisation
An organisation and its subordinate bodies governed by public international law, or any other body which is set up by, or on the basis of, an agreement between two or more countries
International Organisation
Use of measures to detect intrusions and other unauthorised attempts to gain access to a system
Intrusion Detection System
An inverse jurisdiction for a specific jurisdiction is the set of all other jurisdictions that are not part of the specific jurisdiction
Inverse Jurisdiction
Inverse Jurisdictions are helpful when asserting and checking rules that involve a concept representing jurisdictions outside of a given jurisdiction. An inverse jurisdiction of an inverse jurisdiction should give back the same original jurisdiction but this is undefined and strongly dissuaded as it could lead to recursive definitions in some use-cases
Status indicating whether the involvement of specified context
Involvement Status
A notice that is provided "just in time" when collecting information or performing an activity
Just-in-time Notice
Humans that apply for jobs or employments
Job Applicant
A group of Data Controllers that jointly determine the purposes and means of processing
Joint Data Controllers
While Joint Data Controllers operate together, they are made up of individually distinct legal entities. To indicate the membership of this group, hasDataController should be used to denote each Data Controller. The concept of Joint Data Controllers also allows specifying a single group as the 'Controller' and to specify role and responsibilities within that group for each entity using DPV's concepts (e.g. isImplementedByEntity)
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of data between Controllers within a Joint Controllers relationship
Joint Data Controllers Agreement
An organisation involved in interpreting and applying the law, resolving disputes, and administering justice as part of the judicial system
Judicial Organisation
A jurisdiction represents the locations that define the extent of authority (or control) claimed, granted, or asserted by a legal entity (in particular a legal authority) to govern or enforce rules
Jurisdiction
A form of documentation providing reasons, explanations, or justifications
Justification
Data volume that is considered large within the context
Large Data Volume
Scale of data subjects considered large within the context
Large Scale Of Data Subjects
Processing that takes place at large scales (as specified by some criteria)
Large Scale Processing
The exact definition of what constitutes "large scale" depends on use of jurisdictional, domain-specific, or other forms of externally defined criteria. Where possible, this should be reflected by extending this term with the appropriate context.
A law is a set of rules created by government or authorities
Law
An organisation that is an agency responsible for enforcing laws, maintaining public order, and ensuring public safety
Law Enforcement Organisation
State of being lawful or legally compliant
Lawful
Status associated with expressing lawfulness or legal compliance
Lawfulness
State of the lawfulness not being known
Lawfulness Unknown
A notice that contains layered elements
Layered Notice
A Legal Agent is a Legal Entity that is authorised to act on behalf of another entity
Legal Agent
Legal agents may be human or non-human (e.g. an organisation), but they must be 'legal persons' i.e. recognised by law as such. The agency and the mechanisms through which it is given, acquired, or expressed is governed by relevant jurisdictional frameworks e.g. power of attorney
A legally binding agreement
Legal Agreement
Legal basis used to justify processing of data or use of technology in accordance with a law
Legal Basis
Legal basis (plural: legal bases) are defined by legislations and regulations, whose applicability is usually restricted to specific jurisdictions which can be represented using dpv:hasJurisdiction or dpv:hasLaw. Legal basis can be used without such declarations, e.g. 'Consent', however their interpretation will require association with a law, e.g. 'EU GDPR'.
Purposes associated with carrying out data processing to fulfill a legal or statutory obligation
Legal Compliance
This purpose only refers to processing that is additionally required in order to fulfill the obligations and requirements associated with a law. For example, the use of consent would have its own separate purposes, with this purpose addressing a legal requirement for maintaining consent record (along with RecordManagement). This purpose will typically be used with Legal Obligation as the legal basis.
Assessment regarding legal compliance
Legal Compliance Assessment
An audit that systematically examines the state of legal compliance by reviewing policies and procedures related to obligations and compliance requirements for specific laws and regulations
Legal Compliance Audit
A human or non-human 'thing' that constitutes as an entity and which is recognised and defined in law
Legal Entity
DGA 12.j
Legal measures used to safeguard and ensure good practices in connection with data and technologies
Legal Measure
Legal Obligation to conduct the specified activities
Legal Obligation
Status where the legal obligation has been completed
Legal ObligationCompleted
Status where the legal obligation is being fulfilled
Legal ObligationOngoing
Status where the legal obligation has not been started
Legal ObligationPending
Status associated with use of Legal Obligation as a legal basis
Legal ObligationStatus
Legitimate Interests of a Party as justification for specified activities
Legitimate Interest
Indicates an assessment regarding the use of legitimate interest as a lawful basis by the data controller
Legitimate Interest Assessment
Status where the Legitimate Interest was informed to the data subject or other relevant entities
Legitimate InterestInformed
Status where the use of Legitimate Interest was not objected to
Legitimate InterestNotObjected
Status where the use of Legitimate Interest was objected to
Legitimate InterestObjected
Legitimate Interests of a Data Controller in conducting specified activities
Legitimate Interest of Controller
Legitimate Interests of the Data Subject in conducting specified activities
Legitimate Interest of Data Subject
Legitimate Interests of a Third Party in conducting specified activities
Legitimate Interest of Third Party
Status associated with use of Legitimate Interest as a legal basis
Legitimate InterestStatus
Status where the Legitimate Interest was not informed to the data subject or other relevant entities
Legitimate InterestUninformed
A Legal Document providing permission to utilise data or resource and outlining the conditions under which such use is considered valid
License Agreement
The likelihood or probability or chance of something taking place or occurring
Likelihood
Likelihood can be expressed in a subjective manner, such as 'Unlikely', or in a quantitative manner such as "Twice in a Day" (frequency per period). The suggestion is to use quantitative values, or to associate them with subjective terms used so as to enable accurate interpretations and interoperability. See the concepts related to Frequency and Duration for possible uses as a combination to express Likelihood.
Geographic coverage spanning a specific environment within the locality
Local Environment Scale
For example, geographic scale of an event take place in a specific building or room
Location is local
Local Location
Geographic coverage spanning a specific locality
Locality Scale
For example, geographic scale of a city or an area within a city
A location is a position, site, or area where something is located
Location
Location may be geographic, physical, or virtual.
The fixture of location refers to whether the location is fixed
Location Fixture
Locality refers to whether the specified location is local within some context, e.g. for the user
Location Locality
Policy for logging of information
Logging Policy
Purposes associated with maintaining a database related to identifying and identified fraud risks and fraud incidents
Maintain Fraud Database
to transform or publish data to be used
Make Available
Control for managing a given consent in terms of providing, reaffirming, or withdrawing it
Manage Consent
Indicates how the data subject can manage their consent in terms of providing it, or reaffirming or withdrawing a given consent. This concept is useful to represent a single location or interface where multiple controls are provided for consent
A management standard is a standard that establishes norms or requirements regarding the management operations and processes e.g. in an organisation
Management Standard
Purposes associated with conducting marketing in relation to organisation or products or services e.g. promoting, selling, and distributing
Marketing
Was commercial interest, changed to consider Marketing a separate Purpose category by itself
to combine, compare, or match data from different sources
Match
Data volume that is considered medium i.e. neither large nor small within the context
Medium Data Volume
Scale of data subjects considered medium i.e. neither large nor small within the context
Medium Scale Of Data Subjects
Processing that takes place at medium scales (as specified by some criteria)
Medium Scale Processing
Humans that are members of a group, organisation, or other collectives
Member
Purposes associated with maintaining a registry of shareholders, members, or partners for governance, administration, and management functions
Members and Partners Management
Data subjects that are considered mentally vulnerable
Mentally Vulnerable Data Subject
Humans that are considered mentally vulnerable within the context
Mentally Vulnerable Human
Use of cryptographic methods to authenticate messages
Message Authentication Codes (MAC)
Measures associated with management of metadata
Metadata Management
Examples of metadata management include assessing which metadata are required or being used by technology, assessing their potential inclusion as personal data, and implementing a metadata based solution to manage data
DGA 22.1(a)
Prevention and Detection of Misuse or Abuse of services
Misuse, Prevention and Detection
Security implemented over a mobile platform
Mobile Platform Security
to modify or change data
Modify
to monitor data for some criteria
Monitor
Policy for monitoring (e.g. progress, performance)
Monitoring Policy
A simple pseudonymisation method where identifiers are substituted by a number chosen by a monotonic counter
Monotonic Counter Pseudonymisation
to move data from one location to another including deleting the original copy
Move
An authentication system that uses two or more methods to authenticate
Multi-Factor Authentication (MFA)
Geographic coverage spanning multiple nations
Multi National Scale
Non-disclosure Agreements e.g. preserving confidentiality of information
Non-Disclosure Agreement (NDA)
An authority tasked with overseeing legal compliance for a nation
National Authority
Geographic coverage spanning a nation
National Scale
A human
Natural Person
Geographic coverage nearly spanning the entire globe
Nearly Global Scale
An indication of 'necessity' within a context
Necessity
Necessity can be used to express need, essentiality, requirement, or compulsion.
Control for negotiating a contract
Negotiate Contract
A contract where the terms and conditions are determined with all parties having the ability to negotiate the terms and conditions
Negotiated Contract
Negotiation here refers to the opportunity for a party on their own initiative to modify or dictate terms and conditions within a contract. If the party is provided a set of options to choose from or in other ways is dictated which terms and conditions can be present in the contract, neither of these should be considered a negotiation
Use of network routing using proxy
Network Proxy Routing
Security implemented at or over networks protocols
Network Security Protocols
Humans that are not citizens (for a jurisdiction)
Non-Citizen
Purposes associated with processing activities performed in a non-commercial setting or without intention to commercialise
Non-commercial Purpose
Purposes associated with conducting research in a non-commercial setting e.g. for a non-profit-organisation (NGO)
Non-Commercial Research
State of non-compliance where objectives have not been met, but have not been violated
Non Compliant
Changed from not compliant for consistency in commonly used terms
State of being non-conformant
NonConformant
An organisation not part of or independent from the government
Non-Governmental Organisation
Data that is not Personal Data
Non-Personal Data
The term NonPersonalData is provided to distinguish between PersonalData and other data, e.g. for indicating which data is regulated by privacy laws. To specify personal data that has been anonymised, the concept AnonymisedData should be used as the anonymisation process has a risk of not being fully effective and such anonymous data may be found to be personal data depending on circumstances.
An action, activity, or method involving non-personal data, and asserting that no personal data is involved
Non-Personal Data Process
Use of personal data within NonPersonalDataProcess should be considered a violation of the explicit constraint that no personal data is involved.
An organisation that does not aim to achieve profit as its primary goal
Non-Profit Organisation
A source of data that is not publicly accessible or available
Non-Public Data Source
Concept indicating the information or context is not applicable
Not Applicable
Level of automation corresponding to Level 0 in ISO/IEC 22989:2022 where there is no automation in the system
Not Automated
Human Involvement is necessary here as there is no automation
Concept indicating the information or context is applicable but information is not yet available
Not Available
This concept is useful when describing situations where information is required but is not available (yet). For example, if in a form a field asks about whether a process X was completed, and it is correct to interpret that process X is applicable and must be completed, but the information is not yet available as to whether this was done - then NotAvailable is useful to represent this.
Status indicating the specified context is 'not' involved
Not Involved
Indication of neither being required nor optional i.e. not relevant or needed
Not Required
A notice is an artefact for providing information, choices, or controls
Notice
Notice refers to the information whereas Notification refers to the provision of that notice. In several cases, they are used interchangeably - for example Privacy Notice as a measure or control refers to both the information as well as the act of making it available. For 'active' contexts where this distinction is important, e.g. data breach notifications, see Notification concept.
Status indicating the notice has been communicated
Notice Communicated
Status indicating the notice has been generated
Notice Generated
An icon within a notice associated with specific information or elements
Notice Icon
Status indicating the notice is currently at its latest iteration
Notice Latest
A layer within a layered notice where the layer can be used for providing specific information or controls
Notice Layer
Status indicating the notice is stale or not up to date or not the latest version
Notice Stale
Status associated with notice provision, use, and management
Notice Status
Status indicating the notice has been communicated but has not yet been used e.g. the recipient has not acknowledged it or has not taken the intended action
Notice Unused
Status indicating the notice has been updated and its contents or implications have changed
Notice Updated
Status indicating the notice has been communicated and has been used e.g. the recipient has acknowledged it or taken the intended action
Notice Used
Notification represents the provision of a notice i.e. notifying
Notification
Notice refers to the information whereas Notification refers to the provision of that notice. The distinction is important as there are specific obligations associated with notice and notifications. For example, a data breach notice refers to the information about the breach intended to be provided to another entity, whereas notification refers to the act of providing the entity with the notice
Status indicating notification(s) are completed
Notification Completed
Status indicating notification(s) could not be completed due to a failure
Notification Failed
Status indicating notification(s) are not needed
Notification Not Needed
Status indicating notification(s) are ongoing
Notification Ongoing
Status indicating notification(s) are planned
Notification Planned
Status indicating whether notification(s) are planned, completed, or failed
Notification Status
Involvement where entity can object to process of specified context
Objecting to Process
A rule describing an obligation for performing an activity
Obligation
Obligations are aligned with the term MUST in RFC2119 where specified activities are mandatory to be carried out
Status indicating an obligation has been fulfilled i.e. the activity stated as being required to be carried out has been successfully completed
Obligation Fulfilled
Status indicating an obligation has not been fulfilled i.e. the activity stated as being required to be carried out has not been carried out but this is not considered as a violation e.g. there is still time to conduct the activity
Obligation Unfulfilled
Status indicating an obligation has been violated i.e. the activity stated as being required to be carried out has not been carried out and this is considered as a violation i.e. the activity can no longer be carried out to fulfil the obligation
Obligation Violated
to obtain data through observation
Observe
Data that has been obtained through observations of a source
Observed Data
Personal Data that has been collected through observation of the Data Subject(s)
Observed Personal Data
to solicit or gather data from someone
Obtain
Control for obtaining consent
Obtain Consent
Indicates how the controller or entity can obtain consent e.g. used with dpv:isExercisedAt
Control for offering a contract
Offer Contract
Status where the official authority has been exercised to completion
Official Authority Exercise Completed
Status where the official authority is being exercised
Official Authority Exercise Ongoing
Status where the official authority has not been exercised
Official Authority Exercise Pending
Status associated with use of Official Authority as a legal basis
Official Authority Exercise Status
Activities are necessary or authorised through the official authority granted to or vested in the Data Controller
Official Authority of Controller
Frequency where occurrences are often or frequent, but not continuous
Often Frequency
Security implemented at or through operating systems
Operating System Security
Purposes associated with optimisation of activities and services for consumer or user
Optimisation for Consumer
The term optimisation here refers to the efficiency of the service in terms of technical provision (or similar means) with benefits for everybody. Personalisation implies making changes that benefit the current user or persona.
Purposes associated with optimisation of activities and services for provider or controller
Optimisation for Controller
Purposes associated with optimisation of interfaces presented to the user
Optimise User Interface
Involvement where entity can opt-in to specified context
Opting in to Process
Involvement where entity can opt-out from specified context
Opting out of Process
Indication of 'optional' or 'voluntary'
Optional
A notice provided orally or verbally
Oral Notice
A general term reflecting a company or a business or a group acting as a unit
Organisation
Purposes associated with managing compliance for organisation in relation to internal policies
Organisation Compliance Management
Note that this concept relates to internal organisational compliance. The concept LegalCompliance should be used for external legal or regulatory compliance.
Purposes associated with conducting activities and functions for governance of an organisation
Organisation Governance
Purposes associated with managing risk for organisation's activities
Organisation Risk Management
Organisational measures used to safeguard and ensure good practices in connection with data and technologies
Organisational Measure
Entity within an organisation that does not constitute as a separate legal entity
Organisational Unit
to organize data for arranging or classifying
Organise
Impact assessment regarding privacy risks
Privacy Impact Assessment (PIA)
A legal entity that has one or more subsidiary entities operating under it
Parent Legal Entity
Parent(s) of data subjects such as children
Parent(s) of Data Subject
Parent(s) of humans
Parent of Human
Level of automation corresponding to Level 2 in ISO/IEC 22989:2022 where the automation is present in multiple parts of the system or in a manner that does not require the human to control/use these parts while still retaining control over the system
Partial Automation
Human Involvement is implied here, specifically the ability to Control operations, but also possibly for intervention, oversight, and verification
State of partially being compliant i.e. only some objectives have been met, and others have not been in violation
Partially Compliant
Humans that participate in some context such as volunteers in a function
Participant
The right(s) applicable, provided, or expected that are always (passively) applicable
Passive Right
Passive rights do not require the entity to request or exercise them. They are considered to be always applicable. For example, the Right to Privacy (in EU) does not require an exercise for it to be fulfilled.
Status indicating the specified context is 'passively' involved
Passively Involved
An example of passive involvement is a person being monitored by a CCTV
Use of passwords to perform authentication
Password Authentication
Humans that receive medical attention, treatment, care, advice, or other health related services
Patient
Purposes associated with processing and managing payment in relation to service, including invoicing and records
Payment Management
Use of penetration testing to identify weaknesses and vulnerabilities through simulations
Penetration Testing Methods
A rule describing a permission to perform an activity
Permission
Permissions are aligned with the term MAY in RFC2119 where specified activities may or may not be carried out
Methods to obtain, provide, modify, and withdraw permissions along with maintaining a record of permissions, retrieving records, and processing changes in permission states
Permission Management
Permission is a broader concept than '(Informed) Consent' as consent when used as a legal basis has specific requirements to be valid. For management of consent, see the concept dpv:ConsentManagement
Status indicating a permission has not been utilised i.e. the activity stated as being permitted has not been carried out
Permission Not Utilised
Status indicating a permission has been utilised i.e. the activity stated as being permitted has been carried out
Permission Utilised
Data directly or indirectly associated or related to an individual
Personal Data
This definition of personal data encompasses the concepts used in GDPR Art.4-1 for 'personal data' and ISO/IEC 2700 for 'personally identifiable information (PII)'.
An audit that systematically examines the existence and use of personal data along with its associated resources (e.g. where it is stored) and flows (e.g. where it originates and with whom it is being shared)
Personal Data Audit
This concept is the same as "Data Mapping" and "Data Flow Mapping Exercise" used by the Information Commissioner's Office as "to document the data that flows in, around, and out of information processing systems or services"
An abstract concept describing 'personal data handling'
Personal Data Handling
This concept will be deprecated in future updates. It is recommended to use dpv:Process as the equivalent alternative which is better aligned with legal and operational terminology.
An action, activity, or method involving personal data
Personal Data Process
A private space associated with an individual in a personal capacity - such as their home or the space around their physical person e.g. my home or my room
Personal Space
Purposes associated with creating and providing customisation based on attributes and/or needs of person(s) or context(s).
Personalisation
This term is a blanket purpose category for indicating personalisation of some other purpose, e.g. by creating a subclass of the other concept and Personalisation
Purposes associated with creating and providing personalised advertising
Personalised Advertising
Purposes associated with creating and providing personalised benefits for a service
Personalised Benefits
Purposes associated with monitoring behaviour of personnel
Personnel Behaviour Monitoring
Purposes associated with management and execution of hiring processes of personnel
Personnel Hiring
Purposes associated with management of personnel associated with the organisation e.g. evaluation and management of employees and intermediaries
Personnel Management
Purposes associated with monitoring of personnel
Personnel Monitoring
Purposes associated with offboarding of personnel i.e. activities and processes carried out when the person is exiting the company or role
Personnel Offboarding
Purposes associated with onboarding and integration of personnel within an organisation
Personnel Onboarding
Purposes associated with management and execution of payment of personnel
Personnel Payment
Purposes associated with evaluation or assessment of performance of employees
Personnel Performance Evaluation
Purposes associated with management of performance of personnel
Personnel Performance Management
Purposes associated with monitoring of performance of personnel
Personnel Performance Monitoring
Purposes associated with prediction of performance of personnel
Personnel Performance Prediction
Purposes associated with determination and management of promotion of personnel
Personnel Promotion Management
Purposes associated with determination and management of termination of personnel
Personnel Termination Management
Purposes assocaited with determination, scheduling, planning, and carrying out workload management of personnel
Personnel Workload Management
NIST SP 800-12
Access control applied for physical access e.g. premises or equipment
Physical Access Control Method
NIST SP 800-15
Physical implementation of authentication e.g. by matching the person to their ID card
Physical Authentication
NIST SP 800-16
Physical implementation of authorisation e.g. by stamping a visitor pass
Physical Authorisation
NIST SP 800-19
Physical protection for devices and equipment
Physical Device Security
NIST SP 800-20
Physical protection against interception e.g. by posting a guard
Physical Interception Protection
NIST SP 800-18
Physical protection against interruptions e.g. electrical supply interruption
Physical Interruption Protection
Physical measures used to safeguard and ensure good practices in connection with data and technologies
Physical Measure
NIST SP 800-17
Physical protection for networks and networking related infrastructure e.g. by isolating networking equipments
Physical Network Security
NIST SP 800-171
Physical protection for storage of information or equipment e.g. secure storage for files
Physical Secure Storage
NIST SP 800-14
Physically securing the supply of resources
Physical Supply Security
Physically monitoring areas via surveillance
Physical Surveillance
A guidance document outlining any of: procedures, plans, principles, decisions, intent, or protocols.
Policy
Purposes associated with political campaign activities related to promotion and advertisement of positions and candidates in elections at local, state or regional, or national and international levels
Political Campaign
Use of algorithms that are intended to be secure against cryptanalytic attack by a quantum computer
Post-Quantum Cryptography
A notice that is posted as a sign or banner
Posted Notice
Indication of 'primary' or 'main' or 'core' importance
Primary Importance
Status indicating compatibility based on the use being either the original context or something that is compatible with it
Primary Use
Primary Use refers to an assessment where two contexts are found to be compatible, e.g. if purpose is used to test compatibility, then for two activities the second activity is said be the primary use if its purpose is compatible with the first activity's purpose
A representation of values or norms that must be taken into consideration when conducting activities
Principle
A notice that is provided in a printed form on or along with a device
Printed Notice
Practices regarding setting the default configurations of information and services to implement data protection and privacy (synonymous with Data Protection by Default)
Privacy by Default
Practices regarding incorporating data protection and privacy in the design of information and services (synonymous with Data Protection by Design)
Privacy by Design
Represents a notice or document outlining information regarding privacy
Privacy Notice
Use of protocols designed with the intention of provided additional guarantees regarding privacy
Privacy Preserving Protocol
A space that is accessible to a group or a community within a private space and where members of the public do not have access to it e.g. society amenities such as gyms and pools
Private Communal Space
Use of cryptographic methods to retrieve a record from a system without revealing which record is retrieved
Private Information Retrieval
Location that is not or cannot be accessed by the public and is controlled as a private space
Private Location (deprecated)
This concept will be deprecated in a future DPV release, it is suggested to use the better defined and legally aligned dpv:PrivateSpace instead
An organisation owned and operated by private individuals or companies
Private Sector Body
A space that is owned or controlled by a private entity and where access to members of the public is restricted
Private Space
A space that is operated or managed by a private entity but which is accessible to the public e.g. a public bus station operated by a specific company
Privately Operated Public Space
A space that is privately owned but which is accessible and usable by the public - whether freely or through a process which is open to all members of the public e.g. hotel lobby, shopping mall atriums
Privately Owned Public Space
A place that is privately owned e.g. offices, malls
Privately Owned Space
An action, activity, or method
Process
Operations or 'processing' performed on data
Processing
Conditions required or followed regarding processing of data or use of technologies
Processing Condition
Context or conditions within which processing takes place
Processing Context
Conditions regarding duration or temporal limitation for processing
Processing Duration
Conditions regarding location or geospatial scope where processing takes places
Processing Location
Scale of Processing
Processing Scale
The exact definition of what constitutes "scale" depends on use of jurisdictional, domain-specific, or other forms of externally defined criteria. Where possible, this should be reflected by extending the scales provided with the appropriate context.
Data protected by professional secrecy or confidentiality, including but not limited to data covered by professional privilege or secrecy obligations such as that covered by lawyer or doctor-patient confidentiality and other forms of recognised professional confidentiality obligations
Professional Confidential Data
Training methods that are intended to provide professional knowledge and expertise
Professional Training
to create a profile that describes or represents a person
Profiling
A rule describing a prohibition to perform an activity
Prohibition
Prohibitions are aligned with the term MUST NOT in RFC2119 where specified activities are prohibited from being carried out
Status indicating a prohibition has not been violated i.e. the activity stated as being prohibited has not been carried out
Prohibition Unviolated
Status indicating a prohibition has been violated i.e. the activity stated as being prohibited has been carried out
Prohibition Violated
DGA 3.1(c)
Purposes associated with the protection of intellectual property rights
Protection of Intellectual Property Rights
DGA 1.5
Purposes associated with the protection of national security
Protection of National Security
DGA 3.2(d)
Purposes associated with the protection of public security
Protection of Public Security
Control for providing consent
Provide Consent
Indicates how the data subject can provide consent e.g. used with dpv:isExercisedAt
Purposes associated with creating and providing personalised recommendations for events
Provide Event Recommendations
Purposes associated with facilitating the development, production and dissemination of reliable official statistics
Provide Official Statistics
Purposes associated with creating and providing personalised recommendations
Provide Personalised Recommendations
Purposes associated with creating and providing product recommendations e.g. suggest similar products
Provide Product Recommendations
Data that has been provided by an entity
Provided Data
Provided data involves one entity explicitly providing the data, which the other entity then collects
Personal Data that has been provided by an entity such as the Data Subject
Provided Personal Data
Provided personal data involves one entity (e.g. data subject) explicitly providing the data, which the other entity (e.g. data controller) then collects
A contract where the terms and conditions are determined by parties in the role of a 'provider', and the other parties have negligible or no ability to negotiate the terms and conditions
Provider Standard Form Contract
Pseudonymisation means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person;
Pseudonymisation
to replace personal identifiable information by artificial identifiers
Pseudonymise
Pseudonymised Data is data that has gone a partial or incomplete anonymisation process by replacing the identifiable information with artificial identifiers or 'pseudonyms', and is still considered as personal data
Pseudonymised Data
Purposes undertaken and intended to provide benefit to public or society
Public Benefit
A source of data that is publicly accessible or available
Public Data Source
The term 'Public' is used here in a broad sense. Actual consideration of what is 'Public Data' can vary based on several contextual or jurisdictional factors such as definition of open, methods of access, permissions and licenses.
Activities are necessary or beneficial for interest of the public or society at large
Public Interest
Status where the public interest activity has been completed
Public Interest Completed
Status where the public interest activity was objected to by the Data Subject or another relevant entity
Public Interest Objected
Status where the public interest activity is ongoing
Public Interest Ongoing
Status where the public interest activity has not started
Public Interest Pending
Status associated with use of Public Interest as a legal basis
Public Interest Status
Location that is or can be accessed by the public
Public Location (deprecated)
This concept will be deprecated in a future DPV release, it is suggested to use the better defined and legally aligned dpv:PublicSpace instead
Purposes associated with public policy making, such as the development of new laws
Public Policy Making
A publicly available list of entities e.g. to indicate which entities perform a certain activity within a certain location or jurisdiction
Public Register of Entities
Purposes associated with managing and conducting public relations processes, including creating goodwill for the organisation
Public Relations
A government-controlled organisation that provides services or goods to the public
Public Sector Body
Any space that is accessible to the public or is owned by the public
Public Space
Public space is distinct from places under (public) government ownership as such places can exclude public from accessing the place e.g. government military installations or reserved land
A space that is accessible to all members of the public e.g. parks, malls, train stations
Publicly Accessible Space
A space that is owned by the public e.g. national parks, forests
Publicly Owned Space
Purpose or (broader) Goal associated with data or technology
Purpose
The purpose or goal here is intended to sufficiently describe the intention or objective of why the data or technology is being used, and should be broader than mere technical descriptions of achieving a capability. For example, "Analyse Data" is an abstract purpose with no indication of what the analyses is for as compared to a purpose such as "Marketing" or "Service Provision" which provide clarity and comprehension of the 'purpose' and can be enhanced with additional descriptions. Such modelling is in line with regulatory requirements regarding the specificity of purposes, for example in GDPR
Cryptographic methods that utilise quantum mechanical properties to perform cryptographic tasks
Quantum Cryptography
to query or make enquiries over data
Query
A pseudonymisation method where identifiers are substituted by a number chosen by a Random Number Generator (RNG)
RNG Pseudonymisation
A Record of Processing Activities (ROPA) is a document detailing processing activities
Records of Processing Activities
ROPA under GDPR Art.30 has specific requirements regarding the information to be maintained. Additionally, Data Protection Authorities also provide additional information guidelines for information to be maintained in a ROPA. For more information see https://w3id.org/dpcat
Location that is random or unknown
Random Location
Control for affirming consent
Reaffirm Consent
Indicates how the controller (with dpv:ObtainConsent) or data subject (with dpv:ProvideConsent) can reaffirm consent e.g. used with dpv:isExercisedAt
Policy regarding repetition or renewal of existing certification(s)
Recertification Policy
Entities that receive data or technologies
Recipient
Recipients that receive personal data can be a Third Party, Data Controller, or Data Processor.
Status indicating Recipient has been informed about the specified context
Recipient Informed
Status indicating Recipient is uninformed i.e. has not been informed about the specified context
Recipient Uninformed
A rule describing a recommendation for performing an activity
Recommendation
Recommendations are aligned with the term SHOULD in RFC2119 where specified activities should be carried out but are not obligations
Status indicating a recommendation has been followed i.e. the activity stated as being recommended has been carried out
Recommendation Followed
Status indicating a recommendation has not been followed i.e. the activity stated as being recommended has not been carried out
Recommendation Not Followed
to make a record (especially media)
Record
Purposes associated with manage creation, storage, and use of records relevant to operations, events, and processes e.g. to store logs or access requests
Record Management
This purpose relates specifically for record creation and management. This can be combined or used along with other purposes to express intentions such as records for legal compliance or vendor payments.
Records of activities within some context such as maintenance tasks or governance functions
Records of Activities
Records can be any information associated with the activity e.g. logs, summaries.
Purposes associated with advertisement for Recruitments and personnel hiring
Recruitment Advertising
Purposes assocaited with conducting background checks for prospective and current job applicants for recruitment
Recruitment Applicant Background Check
Purposes associated with conducting criminal background assessment for prospective and current job applicants for recruitment
Recruitment Applicant Criminal Background Check
Purposes associated with authentication and verification of information as part of recruitment
Recruitment Applicant Information Authentication
Purposes associated with determination or selection of candidates, whether for a specific job or job pool, or for a specific stage as part of recruitment
Recruitment Applicant Selection
Purposes assocaited with analysis of job applications or job candidates for recruitment
Recruitment Application Analysis
Purposes associated with managing job applications for recruitment
Recruitment Application Management
Purposes associated with screening and filtering of job applications or job candidates for recruitment
Recruitment Application Screening
Purposes associated with analysis of interviews, including the people and involved, for recruitment
Recruitment Interview Analysis
Purposes associated with assessment of interviews, including assessment of people and information, for recruitment
Recruitment Interview Assessment
Purposes associated conducting and managing interviews for recruitment
Recruitment Interview Management
Purposes associated with scheduling interviews for recruitment
Recruitment Interview Scheduling
Purposes assocaited with recruitment of personnel, which includes identifying, sourcing, screening, filtering, shortlisting, and interviewing candidates
Recruitment Management
Purposes associated with targeted advertisement for Recruitments and personnel hiring
Targeted Recruitment Advertising
to rearrange or restructure data to change its form
Reformat
Control for refusing consent
Refuse Consent
Control for refusing a contract
Refuse Contract
A region is an area or site that is considered a location
Region
An authority tasked with overseeing legal compliance for a region
Regional Authority
Geographic coverage spanning a specific region or regions
Regional Scale
EU Council Regulatory sandboxes and experimentation clauses as tools for better regulation
Mechanism used by regulators and businesses for gauging the compatibility of regulations and innovative products, particularly in the context of digitalisation, in a controlled real-world environment with appropriate safeguards in place
Regulatory Sandbox
An organisations that supports the practice, promotion, and management of religious activities and beliefs
Religious Associations
Location is remote i.e. not local
Remote Location
to destruct or erase data
Remove
The state where a previously given consent has been 'renewed' or 'refreshed' or 'reaffirmed' to form a new instance of given consent
Renewed Consent Given
An example of this state is when a previously given consent has expired, and the individual is presented a notice regarding continuing associated processing operations - to which they agree. This state can be useful to keep track of 'reconfirmed' or 'refreshed' consent within consent records, assist notices and contextual agents to create better consenting dialogues, and assist with specific legal obligations related to subsequent consenting
Purposes associated with identifying, rectifying, or otherwise undertaking activities intended to fix or repair impairments to existing functionalities
Repair Impairments
An example of identifying and rectifying impairments is the process of finding and fixing errors in products, commonly referred to as debugging
A representative of a legal entity
Representative
A representative may not be a 'legal agent' if it is authorised to only represent the entity and not to take actions on its behalf
State of a request being accepted towards fulfilment
Request Accepted
State of a request being acknowledged
Request Acknowledged
State of a request being delayed towards fulfilment
Request Action Delayed
State of a request being fulfilled
Request Fulfilled
State of a request being initiated
Request Initiated
State of a request being rejected towards non-fulfilment
Request Rejected
State of a request's required action having been performed by the other party
Request Required Action Performed
State of a request requiring an action to be performed from another party
Request Requires Action
Status associated with requests
Request Status
State of a request's status being queried
Request Status Query
State of a request being unfulfilled
Request Unfulfilled
Purposes associated with delivering services as requested by user or consumer
Requested Service Provision
The use of 'request' here includes where an user explicitly asks for the service and also when an established contract requires the provision of the service
Indication of 'required' or 'necessary'
Required
Purposes associated with conducting research and development for new methods, products, or services
Research and Development
Risk remaining after treatment or mitigation
Residual Risk
to apply a restriction on the processing of specific records
Restrict
to retrieve data, often in an automated manner
Retrieve
Status indicating whether the specified context is compatible with another earlier context
ReuseCompatibility
Compatibility refers to whether two contexts, such as dpv:Process instances, are compatible with each other based on a criteria which is not defined by the concept. This criteria can be based on requirements from law, such as GDPR's purpose compatibility or can be based on privacy norms such as contextual integrity. To express such interpretations, further concepts should be expanded from this base concept
Involvement where entity can reverse effects of specified context
Reversing Process Effects
Involvement where entity can reverse input of specified context
Reversing Process Input
Involvement where entity can reverse output of specified context
Reversing Process Output
Reversing of outputs indicate discarding the output and going back to the previous output. This is different from correction of output which allows modification of the output - implying continuation of the process.
Procedures to review impact assessments in terms of continued validity, adequacy for intended purposes, and conformance of processes with findings
Review Impact Assessment
A procedure or process that reviews the correctness and validity of other procedures and policies e.g. to ensure continued validity, adequacy for intended purposes, and conformance of processes with findings
Review Procedure
The right(s) applicable, provided, or expected
Right
A 'right' is a legal, social, or ethical principle of freedom or entitlement which dictate the norms regarding what is allowed or owed. Rights as a concept encompass a broad area of norms and entities, and are not specific to Individuals or Data Protection / Privacy. For individual specific rights, see dpv:DataSubjectRight
An activity representing an exercising of an active right
Right Exercise Activity
There may be multiple activities associated with exercising and fulfilling rights. See the RightExerciseRecord concept for record-keeping of such activities in a cohesive manner.
Information associated with exercising of an active right such as where and how to exercise the right, information required for it, or updates on an exercised rights request
Right Exercise Notice
This concept is intended for providing information regarding a right exercise. For specific instances of such exercises, see RightExerciseActivity and RightExerciseRecord.
Record of a Right being exercised
Right Exercise Record
This concept represents a record of one or more right exercise activities, such as those associated with a single data subject or service or entity
Notice provided regarding fulfilment of a right
Right Fulfilment Notice
This notice is associated with situations where information is provided with the intention of progressing the fulfilment of a right. For example, a notice asking for more information regarding the scope of the right, or providing information on where to access the data provided under a right.
Notice provided regarding non-fulfilment of a right
Right Non-Fulfilment Notice
This notice is associated with situations where information is provided with the intention of communicating non-fulfilment of a right. For example, to provide justifications on why a right could not be fulfilled or providing information about another entity who should be approached for exercising this right.
Information associated with rights, such as which rights exist, when and where they are applicable, and other relevant information
Right Notice
This concept also covers information about rights exercise, with dpv:RightExerciseNotice specifically representing information provided in connection with exercising of rights. Both notices may be needed, e.g. RightNotice for providing information about existence and exercise of rights, and RightExerciseNotice for providing additional information specifically about exercise of rights - such as to request more information or provide updates on an exercised rights request
Purposes associated with the fulfillment of rights specified in law
Rights Fulfilment
Where Rights Fulfillment includes activities that are not legal obligations, for example conducting Identity Verification, the documentation should indicate this by expressing them as separate purposes within the same activity
Impact assessment which involves determining the impact on rights and freedoms
Rights Impact Assessment
The rights and freedoms may be those defined in law or other norms, and may be bound to a jurisdiction
Methods associated with rights management where 'rights' refer to controlling who can do what with a resource
Rights Management
A risk or possibility or uncertainty of negative effects, impacts, or consequences
Risk
Risks can be associated with one or more different concepts such as purpose, processing, personal data, technical or organisational measure
Assessment involving identification, analysis, and evaluation of risk
Risk Assessment
Parent concept for combining concepts associated with risk assessment such as actual and potential Risk, Risk Source, Consequences, and Impacts
Risk Concept
RiskConcept is a generic concept used for creation of specific taxonomies in the RISK extension to provide guidance on how a concept can potentially be a risk, risk source, consequence, and impact. It is not intended to be used directly and is only created for organisation of concepts in DPV vocabularies
The magnitude of a risk expressed as an indication to aid in its management
Risk Level
Risk Levels can be defined as a combination of different characteristics. For example, ISO 31073:2022 defines it as a combination of consequences and their likelihood. Another example would be the Risk Matrix where Risk Level is defined as a combination of Likelihood and Severity associated with the Risk.
Measures intended to mitigate, minimise, or prevent risk.
Risk Mitigation Measure
A rule describing a process or control that directs or determines if and how an activity should be conducted
Rule
Status indicating a rule has been fulfilled, completed, or satisfied
Rule Fulfilled
Status associated with a rule for indicating whether it is applicable, or has been utilised, and whether the requirements of the rule have been fulfilled or violated
Rule Fulfilment Status
Status indicating a rule has not been fulfilled nor violated
Rule Unfulfilled
Status indicating a rule has been violated, breached, broken, or infracted
Rule Violated
An organisation that is characterised as a Small or Medium-sized Enterprise based on limited staff and revenue
SME Organisation
A safeguard is a precautionary measure for the protection against or mitigation of negative effects
Safeguard
This concept is relevant given the requirement to assert safeguards in cross-border data transfers
Represents a safeguard used for data transfer. Can include technical or organisational measures.
Safeguard for Data Transfer
A measurement along some dimension
Scale
Scales are subjective concepts that need to be defined and interpreted within the context of their application. For example, what would be small within one context could be large within another.
Purposes associated with scientific research
Scientific Research
Indication of the extent or range or boundaries associated with(in) a context
Scope
Processing that involves scoring of individuals
Scoring of Individuals
to remove data for some criteria
Screen
A seal or a mark indicating proof of certification to some certification or standard
Seal
Purposes associated with providing searching, querying, or other forms of information retrieval related functionalities
Search Functionalities
Indication of 'secondary' or 'minor' or 'auxiliary' importance
Secondary Importance
Status indicating incompatibility based on the use not being compatible with an earlier context
Secondary Use
Secondary Use refers to an assessment where two contexts are found to be incompatible, e.g. if purpose is used to test compatibility, then for two activities the second activity is said be the secondary use if its purpose is incompatible with the first activity's purpose
Use of secret sharing schemes where the secret can only be reconstructed through combination of sufficient number of individuals
Secret Sharing Schemes
Sector describes the area of application or domain that indicates or restricts scope for interpretation and application of purpose e.g. Agriculture, Banking
Sector
There are various sector codes used commonly to indicate the domain of an organisation or business. Examples include NACE (EU), ISIC (UN), SIC and NAICS (USA).
Use of cryptographic methods for entities to jointly compute functions without revealing inputs
Secure Multi-Party Computation
A physical or virtual environment supported by organisational means that integrates security and compliance requirements and allows supervising data processing actions
Secure Processing Environment
Assessment of security intended to identify gaps, vulnerabilities, risks, and effectiveness of controls
Security Assessment
An audit that systematically examines the existence and use of security risks and measures within information systems, networks, and security policies to identify vulnerabilities, risks, and gaps
Security Audit
A notice providing information about security incident(s)
Security Incident Notice
Notification of information about security incident(s)
Security Incident Notification
Record of a security incident
Security Incident Record
Training intended to increase knowledge regarding security
Security Knowledge Training
Methods that relate to creating and providing security
Security Method
Procedures associated with assessing, implementing, and evaluating security
Security Procedure
Procedures related to security roles
Security Role Procedures
Purposes associated with selling or sharing data or information to third parties
Sell Data to Third Parties
Sell here means exchange, submit, or provide in return for direct or indirect compensation. Was subclass of commercial interest, changed to reflect selling something
Purposes associated with selling or sharing insights obtained from analysis of data
Sell Insights from Data
Purposes associated with selling products or services
Sell Products
Sell here means exchange, submit, or provide in return for direct or indirect compensation.
Purposes associated with selling products or services to the user, consumer, or data subjects
Sell Products to Data Subject
Sell Products here refers to processing necessary to provide and complete a sale to customers. It should not be confused with providing services with a cost based on an established agreement.
A private space that acts as a shared space with other entities but which is still essentially private for the individuals e.g. a semi-private hospital room shared with another patient
Semi Private Space
Data deemed sensitive
Sensitive Data
DGA 30(a)
Non-personal data deemed sensitive
Sensitive Non Personal Data
Personal data that is considered 'sensitive' in terms of privacy and/or impact, and therefore requires additional considerations and/or protection
Sensitive Personal Data
Sensitivity' is a matter of context, and may be defined within legal frameworks. For GDPR, Special categories of personal data are considered a subset of sensitive data. To illustrate the difference between the two, consider the situation where Location data is collected, and which is considered 'sensitive' but not 'special'. As a probable rule, sensitive data require additional considerations whereas special category data requires additional legal basis / justifications.
Sensitivity' reflects the risk of impact if not secured or utilised with appropriate measures and controls e.g. for sensitive data
Sensitivity Level
ISO/IEC TS 38505-3:2021 defines 'data sensitivity' as the potential harm of unauthorised disclosure. DPV's use of the concept goes beyond disclosure as it refers to the level of safeguards or controls the data requires as a reflection of its 'sensitive' nature. To indicate quantified levels of sensitivity, e.g. "high sensitivity", instances of severity can be directly used or specialised
A service is a process where one entity provides some benefit or assistance to another entity
Service
Service Provider and Service Consumer reflect the roles associated with a service. 'Service' as a process is a distinct concept from the use of 'service' as a provision method in Tech extension
Purposes associated with the determination of whether specific conditions or criteria are met for accessing, using, or gaining access to a service
Service Access Determination
The entity that consumes or receives the service
Service Consumer
A contract regarding the provision of a service which outlines the acceptable metrics and performance of the service for the consumer
Service Level Agreement (SLA)
Purposes associated with the management of services or products
Service Management
Purposes associated with the monitoring of services or products to understand their performance and utilisation with a view to inform their management
Service Monitoring
Purposes associated with optimisation of services or activities
Service Optimisation
Subclass of ServiceProvision since optimisation is usually considered part of providing services
Purposes associated with providing personalisation within services or product or activities
Service Personalisation
The entity that provides a service
Service Provider
Purposes associated with providing service or product or activities
Service Provision
This concept was modified as a breaking change in v2.3 with the introduction of `dpv:ServiceManagement`. This concept should therefore be used only to describe the provision of a service, and should not be used to represent its management, monitoring, or other non-provision related purposes (see the taxonomy for other Service Management related purposes)
Purposes associated with registering users and collecting information required for providing a service
Service Registration
An example of service registration is to provide a form that collects information such as preferred language or media format for downloading a movie
Purposes associated with conducting analysis and reporting related to usage of services or products
Service Usage Analytics
Was "UsageAnalytics", prefixed with Service to better reflect scope
The magnitude of being unwanted or having negative effects such as harmful impacts
Severity
Severity can be associated with Risk, or its Consequences and Impacts
to give data (or a portion of it) to others
Share
Use of credentials or processes that enable using one set of credentials to authenticate multiple contexts.
Single Sign On
Data volume that is considered singular i.e. a specific instance or single item
Singular Data Volume
Frequency where occurrences are singular i.e. they take place only once
Singular Frequency
Scale of data subjects considered singular i.e. a specific data subject
Singular Scale Of Data Subjects
Data volume that is considered small or limited within the context
Small Data Volume
Scale of data subjects considered small or limited within the context
Small Scale Of Data Subjects
Processing that takes place at small scales (as specified by some criteria)
Small Scale Processing
Purposes associated with conducting marketing through social media
Social Media Marketing
Sensitive Personal Data whose use requires specific additional legal permission or justification
Special Category Personal Data
The term 'special category' is based on GDPR Art.9, but should not be considered as exclusive to it. DPV considers all Special Categories to also be Sensitive, but whose use is either prohibited or regulated and therefore requires additional legal basis for justification that is separate from that for general personal data.
Data volume that is considered sporadic or sparse within the context
Sporadic Data Volume
Frequency where occurrences are sporadic or infrequent or sparse
Sporadic Frequency
Scale of data subjects considered sporadic or sparse within the context
Sporadic Scale Of Data Subjects
Practices and policies regarding training of staff members
Staff Training
A set of requirements or norms that are agreed upon i.e. they are considered a 'standard'
Standard
DPV does not restrict the notion of 'standard' to those published by specific or 'formal' bodies
A contract where the terms and conditions are determined by one or more of the parties, and the other parties have negligible or no ability to negotiate the terms and conditions
Standard Form Contract
Such a contract results in the unempowered parties being in a "take it or leave it" position as they can only accept or reject the contract. Standard form contracts are also known as "Adhesion contract" or "Boilerplate contract"
Purposes associated with activities undertaken to ensure or achieve conformance with standards
Standards Conformance
An organisation that is newly established and is nascent in terms of available resources
Startup Organisation
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for classification and management of 'confidential data' based on a statistical framework
Statistical Confidentiality Agreement
DGA 2(20)
Data protected through Statistical Confidentiality regulations and agreements
Statistically Confidential Data
The status or state of something
Status
Conditions required or followed regarding storage of data
Storage Condition
Deletion or Erasure of data including any deletion guarantees
Storage Deletion
Duration or temporal limitation on storage of data
Storage Duration
Location or geospatial scope where the data is stored
Storage Location
Regularity and temporal span of data restoration/backup mechanisms that guarantee that data is preserved
Storage Restoration
to keep data for future use
Store
to arrange data according to a structure
Structure
Humans that are students
Student
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of data between a Data Processor and a Data (Sub-)Processor
Sub-Processor Agreement
Humans that subscribe to service(s)
Subscriber
note: subscriber can be customer or consumer
A legal entity that operates as a subsidiary of another legal entity
Subsidiary Legal Entity
DGA 2.15
Supporting entities, including individuals, with negotiating a contract and its terms and conditions
Support Contract Negotiation
Supporting entities, including individuals, in making decisions
Support Entity Decision Making
Supporting individuals and entities in exchanging views e.g. regarding data processing purposes for their best interests
Support Exchange of Views
Supporting individuals with making a decision regarding their informed consent
Support Informed Consent Decision
An authority tasked with overseeing legal compliance for a supra-national union e.g. EU
Supranational Authority
A political union of two or more countries with an establishment of common authority
Supranational Union
Use of cryptography where the same keys are utilised for encryption and decryption of information
Symmetric Cryptography
Use of symmetric cryptography to encrypt data
Symmetric Encryption
Synthetic data refers to artificially created data such that it is intended to resemble real data (personal or non-personal), but does not refer to any specific identified or identifiable individual, or to the real measure of an observable parameter in the case of non-personal data
Synthetic Data
Processing that involves systematic monitoring of individuals
Systematic Monitoring
Purposes associated with creating and providing personalised advertisement where the personalisation is targeted to a specific individual or group of individuals
Targeted Advertising
Technical measures used to safeguard and ensure good practices in connection with data and technologies
Technical Measure
Technical and Organisational measures used to safeguard and ensure good practices in connection with data and technologies
Technical and Organisational Measure
Purposes associated with managing and providing technical processes and functions necessary for delivering services
Technical Service Provision
A technical standard is a standard that establishes norms or requirements regarding technology or technical processes
Technical Standard
The technology, technological implementation, or any techniques, skills, methods, and processes used or applied
Technology
Examples (non-exhaustive) include: Algorithm, Process, Method, Skill, Database, Cookies, Server, Device
Duration that has a fixed temporal duration e.g. 6 months
Temporal Duration
Control for terminating a contract
Terminate Contract
Contractual clauses outlining the terms and conditions regarding the provision of a service, typically between a service provider and a service consumer, also know as 'Terms of Use' and 'Terms and Conditions' and commonly abbreviated as TOS, ToS, ToU, or T&C
Terms of Service
Represents a country outside applicable or compatible jurisdiction as outlined in law
Third Country
A ‘third party’ means any natural or legal person other than - the entities directly involved or operating under those directly involved in a process
Third Party
Third Party in the context of personal data processing are entities other than the data subject, controllers, processors, and authorities
An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of data between a Data Controller or Processor and a Third Party
Third-Party Agreement
Creation, completion, fulfilment, or performance of a contract, with the Data Controller and Third Party as parties, and involving specified processing of data or technologies. NOTE: This concept is being deprecated - use dpv:ThirdPartyAgreement which has a more explicit definition of the entities involved and the intent of the contract
Third Party Contract
Data Sourced from a Third Party, e.g. when data is collected from an entity that is neither the Controller nor the Data Subject
Third Party as Data Source
Procedures related to security associated with Third Parties
Third Party Security Procedures
Humans that are tourists i.e. not citizens and not immigrants
Tourist
to use data to track a specific factor (e.g. a human or their activities) across multiple distinct contexts
Tracking
Tracking is a widely used (and abused) concept and therefore carries several distinct interpretations, for example see Do Not Track which defines tracking in the context of the web, and where other forms of tracking such as location tracking or physical biometric tracking may exist which are defined differently. For this concept, DPVCG defines Tracking in the broadest possible sense and strongly recommends adopters to provide their specific definition or interpretation by either extending this concept, through a usage note, or by contributing the specific term back to DPVCG for inclusion in DPV or an extension. This concept may change in the future based on developments in privacy and legal spaces. In DPV, Tracking is defined as a type of processing operation that may collect and/or may use data - which covers both initial collection and usage as well as subsequent use of existing data to track an individual. The classification of Tracking as a processing operation also implies that it is not sufficient as a Purpose on its own and therefore a suitable purpose from the DPV taxonomy should be used to justify it.
to perform tracking where the performing entity is a first party within the context
Tracking by First Party
This concept does not strictly only specify the processing operation, but also the relation of the individual with the implementing entity. These concepts may change in the future based on discussions around how to express First and Third Party.
to perform tracking where the performing entity is a third party within the context
Tracking by Third Party
to move data from one place to another
Transfer
to change the form or nature of data
Transform
to send out data
Transmit
Use of cryptographic methods to restrict access and execution to trusted parties and code
Trusted Computing
Use of cryptographic methods to restrict access and execution to trusted parties and code within a dedicated execution environment
Trusted Execution Environment
A rule that is unacceptable where it is not desirable if it occurs
Unacceptable Rule
Unacceptable is a subjective concept that enables specifying something is to be avoided as compared to "acceptable". By itself it does not signal any deterrence or prohibition - for which further specific concepts are defined
Data whose categorisation is not known e.g. whether it is personal or non-personal data
Uncategorised Data
This concept is intended for indicating that a legally relevant categorisation of data has not been made - specifically regarding whether it is personal data or not, but it can also be extended for other categorisations such as sensitive data or domain-specific confidential data
Status indicating the specified context was unexpected i.e. not expected
Unexpected
Consent that is uninformed i.e. without requirement to provide sufficient information to make a consenting decision
Uninformed Consent
Status indicating the specified context was unintended i.e. not intended
Unintended
Concept indicating information or context availability is unknown i.e. it is not known if the information exists or is applicable and therefore statements about its availability cannot be made (yet)
Unknown Applicability
This concept is useful when describing situations where it cannot be stated whether the context applies or whether the information is not available yet. For example, if a form field asks about whether a process X was completed and it is not yet known whether X applies or not and therefore it is also unclear whether X was completed or not. Using UnknownApplicability is a signal that the applicability of X should be assessed, and if applicable, then information about X should be identified and used here.
State of being unlawful or legally non-compliant
Unlawful
Data that is without a predefined data model or is not organised in a pre-defined manner
Unstructured Data
This concept is relevant to application of privacy/data protection regulations like GDPR as unstructured data may contain PII/personal data and it is useful to flag such data with unknown or incomplete modelling information for audits. It is also useful to flag data for potential quality issues
Duration that takes place until a specific event occurs e.g. Account Closure
Until Event Duration
Duration that has a fixed end date e.g. 2022-12-31
Until Time Duration
Data that has not been verified in terms of accuracy, inconsistency, or quality
Unverified Data
Management of usage, which is intended to be broader than access control and may cover trust, digital rights, or other relevant controls
Usage Control
to use data
Use
Use of synthetic data to preserve privacy, security, or other effects and side-effects
Use of Synthetic Data
Humans that use service(s)
User
Purposes associated with personalisation of interfaces presented to the user
User Interface Personalisation
Examples of user-interface personalisation include changing the language to match the locale
Location that is known but is variable e.g. somewhere within a given area
Variable Location
Purposes associated with manage orders, payment, evaluation, and prospecting related to vendors
Vendor Management
Purposes associated with managing payment of vendors
Vendor Payment
Purposes associated with managing records and orders related to vendors
Vendor Records Management
Purposes associated with managing selection, assessment, and evaluation related to vendors
Vendor Selection Assessment
Purposes association with verification e.g. information, identity, integrity
Verification
Data that has been verified in terms of accuracy, consistency, or quality
Verified Data
Security implemented at or through virtualised environments
Virtualisation Security
Humans that are temporary visitors
Visitor
Activities are necessary or required to protect vital interests of a data subject or other natural person
Vital Interest
Status where the vital interest activity has been completed
Vital Interest Completed
Status where the vital interest activity was objected to by the Data Subject or another relevant entity
Vital Interest Objected
Activities are necessary or required to protect vital interests of a data subject
Vital Interest of Data Subject
Activities are necessary or required to protect vital interests of a natural person
Vital Interest of Natural Person
Status where the vital interest activity is ongoing
Vital Interest Ongoing
Status where the vital interest activity has not started
Vital Interest Pending
Status associated with use of Vital Interest as a legal basis
Vital Interest Status
Methods that assess or discover vulnerabilities in a system
Vulnerability Testing Methods
Humans which should be considered 'vulnerable' and therefore would require additional measures and safeguards
Vulnerable Data Subject
This concept denotes a Data Subject or a group are vulnerable, but not what vulnerability they possess or its context. This information can be provided additionally as comments, or as separate concepts and relations. Proposals for this are welcome.
Human(s) which should be considered 'vulnerable' within the context
Vulnerable Human
Security implemented at or over web browsers
WebBrowser Security
Security implemented at or over web-based protocols
Web Security Protocols
Security implemented at or over wireless communication protocols
Wireless Security Protocols
Control for withdrawing consent
Withdraw Consent
Indicates how the data subject can withdraw consent e.g. used with dpv:isExercisedAt
Involvement where entity can withdraw a previously given assent from specified context
Withdrawing from Process
Location is local and entirely within a device, such as a smartphone
Within Device (deprecated)
This concept will be deprecated in a future DPV release, it is suggested to use the existing concepts representing device as tech:Device to have parity and consistency between the use of device as a technology and for data storage
Location is local and entirely within a physical environment, such as a room
Within Physical Environment
This concept will be deprecated in a future DPV release, it is suggested to use other concepts that also represent the nature of the location e.g. dpv:PrivateSpace or its accessibility dpv:PubliclyAccessibleSpace
Location is local and entirely within a virtual environment, such as a software system
Within Virtual Environment
This concept will be deprecated in a future DPV release, it is suggested to use the existing concepts representing device as tech:Software and its taxonomy to have parity and consistency between the use of software as a technology and as a virtual environment for data storage and operations
Authentication using Zero-Knowledge proofs
Zero Knowledge Authentication
Also used for specifying constraints on access associated with Rights Exercising (e.g. User must log in) or access to provided data (e.g. access via link)
Also used for specifying the format of provided information, for example a CSV dataset
Also used for specifying a RightExerciseRecord has RightExerciseActivity as part of its records
Also used for specifying a RightExerciseActivity is part of a RightExerciseRecord
Also used for specifying the temporal validity of an activity associated with Right Exercise. For example, limits on duration for providing or accessing provided information
Also used to indicate a web page or document providing information or functionality associated with a Right Exercise
Harshvardhan J. Pandit, Beatriz Esteves, Georg P. Krog, Paul Ryan, Delaram Golpayegani, Julian Flake (2025) Data Privacy Vocabulary (DPV) – Version 2.0. In: Demartini, G., et al. The Semantic Web – ISWC 2024. ISWC 2024. Lecture Notes in Computer Science, vol 15233. Springer, Cham. https://doi.org/10.1007/978-3-031-77847-6_10
The Data Privacy Vocabulary (DPV) provides terms (classes and properties) to represent information about processing of personal data, for example - purposes, processing operations, personal data, technical and organisational measures.
Data Privacy Vocabulary (DPV)
DPV
indicates the entity is actively involved in specified context
has active entity
Indicates the status of activity of specified concept
has activity status
Specifies address of a legal entity such as street address or pin code
has address
Indicates the logic used in processing such as for automated decision making
has algorithmic logic
Indicates situations where the context is not applicable, information is not available, or this is unknown. An appropriate instance of dpv:Applicability should be used with this relation to express the situation
has applicability
Indicates applicability of a Law
has applicable law
Indicates the status of audit associated with specified concept
has audit status
Indicates applicability of authority for a jurisdiction
has authority
Indicates the level of automation involved in implementation of the specified context
has automation level
Indicates the status of being conformant or non-conformant
has conformance status
Specific a control associated with consent
has consent control
Specifies the state or status of consent
has consent status
Specifies contact details of a legal entity such as phone or email
has contact
Indicates a purpose is restricted to the specified context(s)
has context
Indicates the contract to be used with a contract
has contract control
Indicates the association or involvement of specified contractual clause
has contractual clause
Indicates the fulfilment status of a contract or a contractual clause
has contractual fulfilment status
Indicates inclusion or applicability of a LegalEntity in the role of Data Exporter
has data exporter
Indicates inclusion or applicability of a LegalEntity in the role of Data Importer
has data importer
Indicates inclusion or applicability of a Data Processor
has data processor
Specifies an associated data protection officer
has data protection officer
Indicates the source or origin of data being processed
has data source
Indicates association with Data Subject
has data subject
Indicates the scale of data subjects
has data subject scale
Indicates the volume of data
has data volume
Specifies applicability or inclusion of a deterrence rule within specified context
has deterrence
Indicates information about duration
has duration
Indicates a control or measure provided for an entity to perform the specified action
has entity control
Indicates involvement of an entity in specified context
has entity involvement
Indicates whether the specified context was expected or unexpected
has expectation
Indicates whether a fee is required for the specified context
has fee
Indicates the frequency with which something takes place
has frequency
Specifies the fulfillment status associated with a rule
has fulfilment status
Indicates the geographic coverage (of specified context)
has geographic coverage
Indicates Involvement of humans in processing such as within automated decision making process
has human involvement
Human involvement is also relevant to 'human in the loop'
Indicates an identifier associated for identification or reference
has identifier
Indicates impact(s) possible or arising as consequences from specified concept
has impact
Indicates an impact assessment associated with the specific context
has impact assessment
Indicates the thing (e.g. plan, process, or entity) affected by an impact
has impact on
Indicates the importance for specified context or criteria
has importance
Specifies the method by which an entity has indicated the specific context
has indication method
Indicates whether an entity was informed or uninformed
has informed status
Indicates whether the specified context was intended or unintended
has intention
Indicates the inverse jurisdiction for a given jurisdiction
has inverse jurisdiction
Using this property gives the set of all other jurisdictions that are not part of the jurisdiction e.g. when used with a country, it refers to all other countries
Indicates the involvement status for the specified context
has involvement
Indicates inclusion or applicability of a Joint Data Controller
has joint data controllers
Indicates applicability of specified jurisdiction
has jurisdiction
Indicates a justification for specified concept or context
has justification
Also used for specifying a justification for non-fulfilment of Right Exercise
Indicates the status of being lawful or legally compliant
has lawfulness
Indicates use or applicability of a Legal Basis
has legal basis
Indicates use or applicability of Legal measure
has legal measure
Indicates the likelihood associated with a concept
has likelihood
Specifies name of a legal entity
has name
Indicates the necessity for specified context or criteria
has necessity
indicates the entity is not involved in specified context
has non-involved entity
Indicates association with a Non-Personal Data Process
has non-personal data process
Indicates the use or applicability of a Notice for the specified context
has notice
Indicates the concept can be represented graphically using the specified icon
has notice icon
Indicates the use of a notice layer within a notice or to associate a layer with another layer
has notice layer
Indicates the status of the associated notice
has notice status
Indicates the status associated with a notice
has notification status
Specifies applicability or inclusion of an obligation rule within specified context
has obligation
Indicates the specified entity is a unit of the organisation
has organisational unit
Indicates an outcome of specified concept or context
has outcome
Indicates a legal entity involved as a party in a contract
has party
indicates the entity is passively involved in specified context
has passive entity
Specifies applicability or inclusion of a permission rule within specified context
has permission
Indicates association with Personal Data
has personal data
Indicates association with Personal Data Handling
has personal data handling
Indicates association with a Personal Data Process
has personal data process
Indicates use or applicability of Physical measure
has physical measure
Indicates policy applicable or used
has policy
Indicates association with a Process
has process
Indicates association with Processing
has processing
Indicates the scale of processing operations
has processing scale
Specifies applicability or inclusion of a prohibition rule within specified context
has prohibition
Indicates association with Purpose
has purpose
Indicates inclusion or applicability of a Data Controller as a Recipient of personal data
has recipient data controller
Indicates inclusion or applicability of a Third Party as a Recipient of personal data
has recipient third party
Specifies applicability or inclusion of a recommendation rule within specified context
has recommendation
Indicates a relevant record of activity
has record of activity
Indicates the relation between specified Entity and Data Subject
has relation with data subject
Indicates the status associated with a request
has request status
Indicates the associated risk is the remaining or residual risk from applying mitigation measures or treatments to this risk
has residual risk
Specifies the indicated entity is responsible within some context
has responsible entity
Indicates the reuse compatibility for the specified context
has reuse compatibility
Indicates use or applicability of Right
has right
Indicates applicability of Risk for this concept
has risk
Indicates an associated risk assessment
has risk assessment
Indicates the associated risk level associated with a risk
has risk level
Indicates the scope of specified concept or context
has scope
Indicates the purpose is associated with activities in the indicated (Economic) Sector(s)
has sector
Indicates the associated level of sensitivity
has sensitivity level
Indicates associated with the specified service
has service
Indicates the entity that consumes or receives the associated service
has service consumer
Indicates the entity that provides the associated service
has service provider
Indicates the severity associated with a concept
has severity
Indicates information about storage condition
has storage condition
Indicates this entity has the specified entity as its subsidiary
has subsidiary
Indicates use or applicability of Technical measure
has technical measure
Indicates applicability or relevance of a 'third country'
has third country
Indicates association with Third Party
has third party
Indicates association with the specified uncategorised data
has uncategorised data
Indicates association with the specified unstructured data
has unstructured data
Indicates the specified concepts is 'after' this concept in some context
is after
Also used for specifying a RightExerciseActivity occurs before another RightExerciseActivity
Indicates the concept or information is applicable for specified context
is applicable for
Indicates area, scope, or applicability of an Authority
is authority for
Indicates the specified concepts is 'before' this concept in some context
is before
Indicates the context is determined by the specified entity
is determined by entity
Indicates the specified concepts occur 'during' this concept in some context
is during
Indicates context or information about exercising a right
is exercised at
Indicates implementation details such as entities or agents
is implemented by entity
Also used to indicate the Entity that implements or performs a Right Exercise Activity
The use of 'entity' is inclusive of entities (e.g. Data Processor) as well as 'agent' (e.g. DPO). For indicating technological implementation, the property isImplementedByTechnology should be used.
Indicates implementation details such as technologies or processes
is implemented using technology
The term 'technology' is inclusive of technologies, processes, and methods.
Specifies the temporal information for when the entity has indicated the specific context
is indicated at time
Specifies entity who indicates the specific context
is indicated by
Indicate a risk is mitigated by specified measure
is mitigated by measure
Indicates the concept or information is not applicable for specified context
is not applicable for
Indicates this entity is an organisational unit of the specified entity
is organisational unit of
Indicates the interpretation where the location being referenced is outside of the indicated concept
is outside of location
This property is helpful for cases where a distinction needs to be made between inside/outside of a concept, and the area outside of that concept is to be referenced. For example, using Home with dpv:hasLocation means inside the Home, and using this property along with Home means outside of Home - such as the yard or porch
Indicates the context or application of policy
is policy for
Indicates the entity is a representative for specified entity
is representative for
Indicates this risk is the remaining or residual risk from applying mitigation measures or treatments to specified risk
is residual risk of
Indicates this entity is the subsidiary of the specified entity
is subsidiary of
Indicates risks mitigated by this concept
mitigates risk
Indicate the measure is required for meeting specified requirement or satisfying specified condition/constraint
supports Compliance With
Data Privacy Vocabulary (DPV) - HTML serialisation
Data Privacy Vocabulary (DPV) - JSON-LD serialisation
Data Privacy Vocabulary (DPV) - N3 serialisation
Data Privacy Vocabulary (DPV) - RDF/XML serialisation
Data Privacy Vocabulary (DPV) - Turtle serialisation
Indicates the status of compliance of specified concept
has compliance status
Indicates consequence(s) possible or arising from specified concept
has consequence
Removed plural suffix for consistency
Indicates the thing (e.g. plan, process, or entity) affected by a consequence
has consequence on
Indicates the status of the contract
has contract status
Indicates applicability of specified country
has country
Indicates association with Data Controller
has data controller
Indicates association with Human Subject
has human subject
Indicates information about processing condition
has processing condition
Specifies representative of the legal entity
has representative
Indicates a relevant assessment associated with the specific context
has assessment
Indicates associated with Data (may or may not be personal)
has data
Indicates information about location
has location
Indicates use or applicability of Organisational measure
has organisational measure
Indicates Recipient of Data
has recipient
Also used to indicate the Recipient of a Right Exercise Activity
Indicates the scale of specified concept
has scale
Specifies applicability or inclusion of a rule within specified context
has rule
Indicates use or applicability of Technical or Organisational measure
has technical and organisational measure
Indicates the status of specified concept
has status
Also used to Indicate the status of a Right Exercise Activity
Indicates inclusion or applicability of an entity to some concept
has entity
parent property for controller, processor, data subject, authority, etc.?
AI Accountability Lab (AIAL), Trinity College Dublin
Unabhängige Landeszentrum für Datenschutz Schleswig-Holstein
EDPB Recommendations 01/2020 on Data Transfers
Vienna University of Economics and Business
ENISA Data Pseudonymisation: Advanced Techniques and Use Cases
ISO/IEC 22989:2022 Artificial intelligence concepts and terminology
ICO - What methods can we use to provide privacy information?
ENISA Reference Incident Classification Taxonomy 2018