dcat:Resource
type: Class
type: Concept
created: 2022-11-02
in scheme: rights-classes
scope note: A dataset, data service, or any other resource associated with Right Exercise - such as for providing a copy of data

AI Literacy
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2024-05-17
term status: accepted
broader: Digital Literacy
definition: Providing skills, knowledge, and understanding to enable reading, writing, analysing, reasoning, and communicating regarding AI
in scheme: organisational-measures-classes

AI Notice
type: Class
type: Concept
type: Organisational Measure
contributor: Delaram Golpayegani
created: 2024-12-01
term status: accepted
broader: Notice
definition: A notice providing information regarding the particulars of an AI system such as its intended purpose and proper use
in scheme: organisational-measures-classes

Academic Research
type: Class
type: Concept
type: Purpose
contributor: Axel Polleres
contributor: Elmar Kiesling
contributor: Fajar Ekaputra
contributor: Harshvardhan J. Pandit
contributor: Javier Fernández
contributor: Simon Steyskal
created: 2019-04-05
term status: accepted
broader: Research and Development
definition: Purposes associated with conducting or assisting with research conducted in an academic context e.g. within universities
in scheme: purposes-classes
related: Education

Academic or Scientific Organisation
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-02-02
modified: 2020-10-05
source: ADMS controlled vocabulary
subclass of: Organisation
term status: accepted
broader: Organisation
definition: Organisations related to academia or scientific pursuits e.g. Universities, Schools, Research Bodies
in scheme: entities-organisation-classes

Accept Contract
type: Class
type: Concept
created: 2024-08-27
subclass of: Contract Control
term status: accepted
broader: Contract Control
definition: Control for accepting a contract
in scheme: contract-control-classes

Acceptable Rule
type: Class
type: Concept
type: Rule
contributor: Arthit Suriyawongkul
contributor: Beatriz Esteves
contributor: Delaram Golpayegani
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2025-06-19
term status: accepted
broader: Rule
definition: A rule that is acceptable where it is either desirable if it occurs or it is not unacceptable if it does
in scheme: rules-classes
scope note: Acceptable is a subjective concept that enables distinguishing with "unacceptable". By itself it does not signal any permission or obligation - for which further specific concepts are defined

Acceptable Use Policy
type: Class
type: Concept
type: Organisational Measure
contributor: Arthit Suriyawongkul
contributor: Beatriz Esteves
contributor: Delaram Golpayegani
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Julio Hernandez
contributor: Paul Ryan
created: 2025-06-19
term status: accepted
broader: Policy
definition: Acceptable Use Policy (AUP) refers to conditions, contexts, or uses which are considered acceptable with the implication that those not covered by such a policy are to be considered unacceptable
in scheme: organisational-measures-classes

Access
type: Class
type: Concept
type: Processing
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2022-06-15
term status: accepted
broader: Use
definition: to access data
in scheme: processing-classes

Access Control Method
type: Class
type: Concept
type: Technical Measure
contributor: Axel Polleres
contributor: Harshvardhan J. Pandit
contributor: Mark Lizar
contributor: Rob Brennan
created: 2019-04-05
example: E0020
term status: accepted
broader: Technical Measure
definition: Methods which restrict access to a place or resource
in scheme: technical-measures-classes

Account Management
type: Class
type: Concept
type: Purpose
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2021-09-08
term status: accepted
broader: Purpose
definition: Account Management refers to purposes associated with account management, such as to create, provide, maintain, and manage accounts
in scheme: purposes-classes

Acquire
type: Class
type: Concept
type: Processing
created: 2019-05-07
source: GDPR Art.4-2
term status: accepted
broader: Obtain
definition: to come into possession or control of the data
in scheme: processing-classes

Active Right
type: Class
type: Concept
type: Right
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2022-10-22
term status: accepted
broader: Right
definition: The right(s) applicable, provided, or expected that need to be (actively) exercised
in scheme: rights-classes
scope note: Active rights require the entity to expressly exercise them. For example, a Data Subject exercising their right to withdraw their consent.

Actively Involved
type: Class
type: Concept
type: Involvement Status
contributor: Delaram Golpayegani
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2024-05-10
term status: accepted
broader: Involvement Status
definition: Status indicating the specified context is 'actively' involved
in scheme: status-classes
scope note: An example of active involvement is a person directly using a system to enter information

Activity Completed
type: Class
type: Concept
type: Activity Status
contributor: Harshvardhan J. Pandit
created: 2022-05-18
term status: accepted
broader: Activity Status
definition: State of an activity that has completed i.e. is fully in the past
in scheme: status-classes

Activity Halted
type: Class
type: Concept
type: Activity Status
contributor: Harshvardhan J. Pandit
created: 2022-05-18
term status: accepted
broader: Activity Status
definition: State of an activity that was occurring in the past, and has been halted or paused or stopped
in scheme: status-classes

Activity Monitoring
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Technical Measure
definition: Monitoring of activities including assessing whether they have been successfully initiated and completed
in scheme: technical-measures-classes

Activity Not Completed
type: Class
type: Concept
type: Activity Status
contributor: Harshvardhan J. Pandit
created: 2022-11-30
term status: accepted
broader: Activity Status
definition: State of an activity that could not be completed, but has reached some end state
in scheme: status-classes
scope note: This relates to a 'Stop' state as distinct from a 'Halt' state. It makes no comments on whether the Activity can be resumed or continued towards completion.

Activity Ongoing
type: Class
type: Concept
type: Activity Status
contributor: Harshvardhan J. Pandit
created: 2022-05-18
term status: accepted
broader: Activity Status
definition: State of an activity occurring in continuation i.e. currently ongoing
in scheme: status-classes

Activity Planned
type: Class
type: Concept
type: Activity Status
contributor: Harshvardhan J. Pandit
created: 2024-05-19
term status: accepted
broader: Activity Status
definition: State of an activity being planned with concrete plans for implementation
in scheme: status-classes

Activity Proposed
type: Class
type: Concept
type: Activity Status
contributor: Harshvardhan J. Pandit
created: 2022-05-18
modified: 2024-05-19
term status: accepted
broader: Activity Status
definition: State of an activity being proposed without any concrete plans for implementation
in scheme: status-classes

Activity Status
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-05-18
example: E0054
subclass of: Status
term status: accepted
broader: Status
definition: Status associated with activity operations and lifecycles
in scheme: status-classes

Adapt
type: Class
type: Concept
type: Processing
created: 2019-05-07
source: GDPR Art.4-2
term status: accepted
broader: Transform
definition: to modify the data, often rewritten into a new form for a new use
in scheme: processing-classes

Adult
type: Class
type: Concept
type: Human Subject
contributor: Georg P. Krog
created: 2022-03-30
modified: 2024-12-17
term status: modified
broader: Human Subject
definition: A natural person that is not a child i.e. has attained some legally specified age of adulthood
in scheme: entities-datasubject-classes

Advertising
type: Class
type: Concept
type: Purpose
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2020-11-04
term status: accepted
broader: Marketing
definition: Purposes associated with conducting advertising i.e. process or artefact used to call attention to a product, service, etc. through announcements, notices, or other forms of communication
in scheme: purposes-classes
scope note: Advertising is a subset of Marketing. Advertising by itself does not indicate 'personalisation' i.e. personalised ads.

Age Verification
type: Class
type: Concept
type: Purpose
contributor: Arthit Suriyawongkul
contributor: Beatriz Esteves
contributor: Harshvardhan J. Pandit
created: 2024-02-14
term status: accepted
broader: Verification
definition: Purposes associated with verifying or authenticating age or age related information as a form of security
in scheme: purposes-classes
scope note: Age Verification can include verification of the exact age, e.g. being 21 years old, a date, e.g. birth date is 01 January 1969, or a condition, e.g. age is over 21 years and the person is an adult. Specific dedicated resources should be used to further express information and processes associated with Age Verification, for example the Age Verification Vocabulary https://w3id.org/age/

Aggregate
type: Class
type: Concept
type: Processing
contributor: Beatriz Esteves
contributor: Harshvardhan J. Pandit
created: 2024-04-14
source: SPECIAL Project
term status: accepted
broader: Alter
definition: to aggregate data
in scheme: processing-classes
related: Aggregate

Algorithmic Logic
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-01-26
modified: 2023-12-10
subclass of: Processing Context
term status: accepted
broader: Processing Context
definition: The algorithmic logic applied or used
in scheme: processing-context-classes
scope note: Algorithmic Logic is intended as a broad concept for explaining the use of algorithms and automated decisions making within Processing. To describe the actual algorithm, see the Algorithm concept.

Align
type: Class
type: Concept
type: Processing
created: 2019-05-07
source: GDPR Art.4-2
term status: accepted
broader: Transform
definition: to adjust the data to be in relation to another data
in scheme: processing-classes

Alter
type: Class
type: Concept
type: Processing
created: 2019-05-07
source: GDPR Art.4-2
term status: accepted
broader: Transform
definition: to change the data without changing it into something else
in scheme: processing-classes

Ambulance Provider
type: Class
type: Concept
contributor: Delaram Golpayegani
created: 2024-12-01
subclass of: Emergency Service Provider
term status: accepted
broader: Emergency Service Provider
definition: An organisation that that offers transportation and medical care to patients requiring urgent medical attention
in scheme: entities-organisation-classes

Analyse
type: Class
type: Concept
type: Processing
created: 2019-05-07
source: SPECIAL Project
term status: accepted
broader: Use
definition: to study or examine the data in detail
in scheme: processing-classes
related: Analyse

Anonymisation
type: Class
type: Concept
type: Technical Measure
contributor: Axel Polleres
contributor: Damien Desfontaines
contributor: Harshvardhan J. Pandit
contributor: Mark Lizar
contributor: Maya Borges
contributor: Rob Brennan
created: 2019-04-05
modified: 2022-11-24
source: ISO 29100:2011
term status: accepted
broader: De-Identification
definition: Anonymisation is the process by which data is irreversibly altered in such a way that a data subject can no longer be identified directly or indirectly, either by the entity holding the data alone or in collaboration with other entities and information sources
in scheme: technical-measures-classes

Anonymise
type: Class
type: Concept
type: Processing
created: 2019-05-07
source: SPECIAL Project
term status: accepted
broader: Transform
definition: to irreversibly alter personal data in such a way that an unique data subject can no longer be identified directly or indirectly or in combination with other data
in scheme: processing-classes
related: Anonymise

Anonymised Data
type: Class
type: Concept
contributor: Piero Bonatti
created: 2022-01-19
subclass of: Non-Personal Data
term status: accepted
broader: Non-Personal Data
definition: Personal Data that has been (fully and completely) anonymised so that it is no longer considered Personal Data
in scheme: personal-data-classes
scope note: It is advised to carefully consider indicating data is fully or completely anonymised by determining whether the data by itself or in combination with other data can identify a person. Failing this condition, the data should be denoted as PseudonymisedData. To indicate data is anonymised only for a specified entity (e.g. within an organisation), the concept ContextuallyAnonymisedData (as subclass of PseudonymisedData) should be used instead of AnonymisedData.

Applicability
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2023-08-24
example: E0053
subclass of: Context
term status: accepted
broader: Context
definition: Concept provided to represent indication of cases where the information or context is not applicable (N/A) or not available or this is not known or determined yet. If the information is applicable and available, this concept should not be used.
in scheme: context-classes
scope note: These concepts are useful in closed-world interpretations, for example in forms where a field must have a value to explicitly denote it is not applicable or the information is not available yet.

Applicant
type: Class
type: Concept
type: Human Subject
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-04-06
modified: 2024-12-17
term status: modified
broader: Human Subject
definition: Humans that are applicants in some context
in scheme: entities-datasubject-classes

Approval Procedure
type: Class
type: Concept
type: Organisational Measure
contributor: Delaram Golpayegani
created: 2024-12-01
term status: accepted
broader: Governance Procedures
definition: A procedure or process for determining and managing approvals for activities as part of governance
in scheme: organisational-measures-classes

Assess
type: Class
type: Concept
type: Processing
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2022-06-15
term status: accepted
broader: Use
definition: to assess data for some criteria
in scheme: processing-classes

Assessment
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2021-09-08
term status: accepted
broader: Organisational Measure
definition: The document, plan, or process for assessment or determination towards a purpose e.g. assessment of legality or impact assessments
in scheme: organisational-measures-classes

Asset Management Procedures
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA 5G Cybersecurity Standards
term status: accepted
broader: Governance Procedures
definition: Procedures related to management of assets
in scheme: organisational-measures-classes

Assistive Automation
type: Class
type: Concept
type: Automation Level
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
created: 2023-12-10
modified: 2024-04-20
source: ISO/IEC 22989:2022 Artificial intelligence concepts and terminology
term status: accepted
broader: Automation Level
definition: Level of automation corresponding to Level 1 in ISO/IEC 22989:2022 where automation is limited to parts of the system or a specific part of the system in a manner that does not change the control of the human in using/driving the system
in scheme: processing-context-classes
scope note: Human Involvement is implied here, specifically the ability to make decisions regarding operations, but also possibly for intervention, oversight, and verification

Asylum Seeker
type: Class
type: Concept
type: Human Subject
contributor: Georg P. Krog
created: 2022-06-15
modified: 2024-12-17
term status: modified
broader: Vulnerable Human
definition: Humans that are asylum seekers
in scheme: entities-datasubject-classes

Asymmetric Cryptography
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Cryptographic Methods
definition: Use of public-key cryptography or asymmetric cryptography involving a public and private pair of keys
in scheme: technical-measures-classes

Asymmetric Encryption
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Data Pseudonymisation: Advanced Techniques and Use Cases
term status: accepted
broader: Encryption
definition: Use of asymmetric cryptography to encrypt data
in scheme: technical-measures-classes

Audit
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2024-12-17
term status: accepted
broader: Organisational Measure
definition: An audit is a systematic examination or evaluation of records, processes, or systems towards a specific objective such as to assess accuracy, compliance, effectiveness, or performance
in scheme: organisational-measures-classes

Audit Approved
type: Class
type: Concept
type: Audit Status
contributor: Harshvardhan J. Pandit
created: 2022-05-18
term status: accepted
broader: Audit Status
definition: State of being approved through the audit
in scheme: status-classes

Audit Conditionally Approved
type: Class
type: Concept
type: Audit Status
contributor: Paul Ryan
created: 2022-06-29
term status: accepted
broader: Audit Status
definition: State of being conditionally approved through the audit
in scheme: status-classes
scope note: A "conditional approval" is intended to reflect states where the audit has identified further changes which must be implemented before considering the audit has been 'passed', without requiring another audit to validate them. This is distinct from the case where an audit has state 'rejected', which means changes must be made and submitted for review. The requirements of a 'conditional acceptance' are expected to be minor or not significant enough to warrant another audit to review them.

Audit Not Required
type: Class
type: Concept
type: Audit Status
contributor: Harshvardhan J. Pandit
created: 2022-05-18
term status: accepted
broader: Audit Status
definition: State where an audit is determined as not being required
in scheme: status-classes

Audit Rejected
type: Class
type: Concept
type: Audit Status
contributor: Harshvardhan J. Pandit
created: 2022-05-18
term status: accepted
broader: Audit Status
definition: State of not being approved or being rejected through the audit
in scheme: status-classes

Audit Requested
type: Class
type: Concept
type: Audit Status
contributor: Harshvardhan J. Pandit
created: 2022-05-18
term status: accepted
broader: Audit Status
definition: State of an audit being requested whose outcome is not yet known
in scheme: status-classes

Audit Required
type: Class
type: Concept
type: Audit Status
contributor: Harshvardhan J. Pandit
created: 2022-05-18
term status: accepted
broader: Audit Status
definition: State where an audit is determined as being required but has not been conducted
in scheme: status-classes

Audit Status
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-05-18
example: E0056
example: E0057
subclass of: Status
term status: accepted
broader: Status
definition: Status associated with Auditing or Investigation
in scheme: status-classes

Authentication using ABC
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Data Protection Engineering
term status: accepted
broader: Cryptographic Authentication
definition: Use of Attribute Based Credentials (ABC) to perform and manage authentication
in scheme: technical-measures-classes

Authentication using PABC
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Data Protection Engineering
term status: accepted
broader: Cryptographic Authentication
definition: Use of Privacy-enhancing Attribute Based Credentials (ABC) to perform and manage authentication
in scheme: technical-measures-classes

Authentication Protocols
type: Class
type: Concept
type: Technical Measure
contributor: Axel Polleres
contributor: Harshvardhan J. Pandit
contributor: Mark Lizar
contributor: Rob Brennan
created: 2019-04-05
term status: accepted
broader: Technical Measure
definition: Protocols involving validation of identity i.e. authentication of a person or information
in scheme: technical-measures-classes

Authorisation Procedure
type: Class
type: Concept
type: Organisational Measure
contributor: Axel Polleres
contributor: Harshvardhan J. Pandit
contributor: Mark Lizar
contributor: Rob Brennan
created: 2019-04-05
term status: accepted
broader: Security Procedure
definition: Procedures for determining authorisation through permission or authority
in scheme: organisational-measures-classes
scope note: non-technical authorisation procedures: How is it described on an organisational level, who gets access to the data

Authorisation Protocols
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Technical Measure
definition: Protocols involving authorisation of roles or profiles to determine permission, rights, or privileges
in scheme: technical-measures-classes

Authority
type: Class
type: Concept
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2020-11-04
subclass of: Governmental Organisation
term status: accepted
broader: Governmental Organisation
definition: An authority with the power to create or enforce laws, or determine their compliance.
in scheme: entities-authority-classes

Authority Informed
type: Class
type: Concept
type: Entity Informed Status
contributor: Delaram Golpayegani
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2024-05-10
term status: accepted
broader: Entity Informed
definition: Status indicating Authority has been informed about the specified context
in scheme: status-classes

Authority Uninformed
type: Class
type: Concept
type: Entity Informed Status
contributor: Delaram Golpayegani
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2024-05-10
term status: accepted
broader: Entity Uninformed
definition: Status indicating Authority is uninformed i.e. has not been informed about the specified context
in scheme: status-classes

Automated Decision Making
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
contributor: Piero Bonatti
created: 2020-11-04
modified: 2022-09-07
source: GDPR Art.4-2
subclass of: Decision Making
term status: accepted
broader: Decision Making
definition: Processing that involves automated decision making
in scheme: processing-context-classes
scope note: Automated decision making can be defined as “the ability to make decisions by technological means without human involvement.” (“Guidelines on Automated individual decision-making and Profiling for the purposes of Regulation 2016/679 (wp251rev.01)”, 2018, p. 8)

Automated Scoring of Individuals
type: Class
type: Concept
type: Scoring of Individuals
contributor: Harshvardhan J. Pandit
created: 2024-04-14
term status: accepted
broader: Scoring of Individuals
definition: Processing that involves automated scoring of individuals
in scheme: processing-context-classes
scope note: Scoring can lead to the action being considered Decision Making if the scoring is itself a decision - see 2023-MAR-16 opinion of Advocate General on Case C 634/21. Therefore, the assessment of whether scoring was automated or not is important given the legal obligations surrounding automated decision making e.g. in GDPR

Automation Level
type: Class
type: Concept
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
created: 2023-12-10
modified: 2024-04-20
source: ISO/IEC 22989:2022 Artificial intelligence concepts and terminology
example: E0013
subclass of: Processing Context
term status: accepted
broader: Processing Context
definition: Indication of degree or level of automation associated with specified context
in scheme: processing-context-classes
scope note: This concept was called 'Automation' in previous versions

Autonomous
type: Class
type: Concept
type: Automation Level
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
created: 2023-12-10
modified: 2024-04-20
source: ISO/IEC 22989:2022 Artificial intelligence concepts and terminology
term status: accepted
broader: Automation Level
definition: Level of automation corresponding to Level 6 in ISO/IEC 22989:2022 where the automation in system is capable of modifying its operation domain or its goals without external intervention, control or oversight
in scheme: processing-context-classes
scope note: Though Autonomous, such operations can still be associated with dpv:HumanInvolved e.g. for inputs, oversight or verification

Business-to-Business-to-Consumer Contract
type: Class
type: Concept
type: Legal Basis
contributor: Beatriz Esteves
contributor: Georg P. Krog
created: 2024-08-27
term status: accepted
broader: Business-to-Business Contract
broader: Business-to-Consumer Contract
definition: A contract between two businesses who partner together to provide services to a consumer
in scheme: contract-types-classes

Business-to-Business Contract
type: Class
type: Concept
type: Legal Basis
created: 2024-08-27
term status: accepted
broader: Contract by Entity Type
definition: A contract between two businesses
in scheme: contract-types-classes

Business-to-Consumer Contract
type: Class
type: Concept
type: Legal Basis
created: 2024-08-27
term status: accepted
broader: Contract by Entity Type
definition: A contract between a business and a consumer where the business provides goods or services to the consumer
in scheme: contract-types-classes

Background Checks
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA 5G Cybersecurity Standards
term status: accepted
broader: Security Procedure
definition: Procedure where the background of an entity is assessed to identity vulnerabilities and threats due to their current or intended role
in scheme: organisational-measures-classes

Biometric Authentication
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Authentication Protocols
definition: Use of biometric data for authentication
in scheme: technical-measures-classes

Consumer-to-Business Contract
type: Class
type: Concept
type: Legal Basis
created: 2024-08-27
term status: accepted
broader: Contract by Entity Type
definition: A contract between a consumer and a business where the business purchases goods or services from the consumer
in scheme: contract-types-classes

Consumer-to-Consumer Contract
type: Class
type: Concept
type: Legal Basis
created: 2024-08-27
term status: accepted
broader: Contract by Entity Type
definition: A contract between two consumers
in scheme: contract-types-classes

Cannot Challenge Process
type: Class
type: Concept
type: Entity Non-Permissive Involvement
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
contributor: Steve Hickman
created: 2024-05-11
term status: accepted
broader: Entity Non-Permissive Involvement
definition: Involvement where entity cannot challenge the process of specified context
in scheme: processing-context-classes
scope note: Challenge refers to raising questions about validity, necessity, correctness, or other similar 'trustworthiness' attributes regarding the process or plan or implementation

Cannot Challenge Process Input
type: Class
type: Concept
type: Entity Non-Permissive Involvement
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
contributor: Steve Hickman
created: 2024-05-11
term status: accepted
broader: Entity Non-Permissive Involvement
definition: Involvement where entity cannot challenge input of specified context
in scheme: processing-context-classes

Cannot Challenge Process Output
type: Class
type: Concept
type: Entity Non-Permissive Involvement
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
contributor: Steve Hickman
created: 2024-05-11
term status: accepted
broader: Entity Non-Permissive Involvement
definition: Involvement where entity cannot challenge the output of specified context
in scheme: processing-context-classes
scope note: Challenge refers to raising questions about validity, necessity, correctness, or other similar 'trustworthiness' attributes regarding the output of the process or plan or implementation (where output is distinct from the process itself)

Cannot Correct Process
type: Class
type: Concept
type: Entity Non-Permissive Involvement
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
contributor: Steve Hickman
created: 2024-05-11
term status: accepted
broader: Entity Non-Permissive Involvement
definition: Involvement where entity cannot correct the process of specified context
in scheme: processing-context-classes

Cannot Correct Process Input
type: Class
type: Concept
type: Entity Non-Permissive Involvement
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
contributor: Steve Hickman
created: 2024-05-11
term status: accepted
broader: Entity Non-Permissive Involvement
definition: Involvement where entity cannot correct input of specified context
in scheme: processing-context-classes

Cannot Correct Process Output
type: Class
type: Concept
type: Entity Non-Permissive Involvement
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
contributor: Steve Hickman
created: 2024-05-11
term status: accepted
broader: Entity Non-Permissive Involvement
definition: Involvement where entity cannot correct the output of specified context
in scheme: processing-context-classes

Cannot Object to Process
type: Class
type: Concept
type: Entity Non-Permissive Involvement
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
contributor: Steve Hickman
created: 2024-05-11
term status: accepted
broader: Entity Non-Permissive Involvement
definition: Involvement where entity cannot object to process of specified context
in scheme: processing-context-classes

Cannot Opt-in to Process
type: Class
type: Concept
type: Entity Non-Permissive Involvement
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
contributor: Steve Hickman
created: 2024-05-11
term status: accepted
broader: Entity Non-Permissive Involvement
definition: Involvement where entity cannot opt-in to specified context
in scheme: processing-context-classes

Cannot Opt-out from Process
type: Class
type: Concept
type: Entity Non-Permissive Involvement
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
contributor: Steve Hickman
created: 2024-05-11
term status: accepted
broader: Entity Non-Permissive Involvement
definition: Involvement where entity cannot opt-out from specified context
in scheme: processing-context-classes

Cannot Reverse Process Effects
type: Class
type: Concept
type: Entity Non-Permissive Involvement
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
contributor: Steve Hickman
created: 2024-05-11
term status: accepted
broader: Entity Non-Permissive Involvement
definition: Involvement where entity cannot reverse effects of specified context
in scheme: processing-context-classes
scope note: Effects refer to consequences and impacts arising from the process or from the outputs of a process

Cannot Reverse Process Input
type: Class
type: Concept
type: Entity Non-Permissive Involvement
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
contributor: Steve Hickman
created: 2024-05-11
term status: accepted
broader: Entity Non-Permissive Involvement
definition: Involvement where entity cannot reverse input of specified context
in scheme: processing-context-classes
scope note: Reversion can be considered a form of correction in some instances. We welcome inputs to further explore and define this relation between correction and reversion concepts.

Cannot Reverse Process Output
type: Class
type: Concept
type: Entity Non-Permissive Involvement
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
contributor: Steve Hickman
created: 2024-05-11
term status: accepted
broader: Entity Non-Permissive Involvement
definition: Involvement where entity cannot reverse output of specified context
in scheme: processing-context-classes

Cannot Withdraw from Process
type: Class
type: Concept
type: Entity Non-Permissive Involvement
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
contributor: Steve Hickman
created: 2024-05-11
term status: accepted
broader: Entity Non-Permissive Involvement
definition: Involvement where entity cannot withdraw a previously given assent from specified context
in scheme: processing-context-classes

Certification
type: Class
type: Concept
type: Organisational Measure
contributor: Axel Polleres
contributor: Harshvardhan J. Pandit
contributor: Mark Lizar
contributor: Rob Brennan
created: 2019-04-05
term status: accepted
broader: Certification and Seal
definition: Certification mechanisms, seals, and marks for the purpose of demonstrating compliance
in scheme: organisational-measures-classes

Certification and Seal
type: Class
type: Concept
type: Organisational Measure
contributor: Axel Polleres
contributor: Harshvardhan J. Pandit
contributor: Mark Lizar
contributor: Rob Brennan
created: 2019-04-05
term status: accepted
broader: Organisational Measure
definition: Certifications, seals, and marks indicating compliance to regulations or practices
in scheme: organisational-measures-classes

Challenging Process
type: Class
type: Concept
type: Entity Permissive Involvement
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
contributor: Steve Hickman
created: 2024-05-11
term status: accepted
broader: Entity Permissive Involvement
definition: Involvement where entity can challenge the process of specified context
in scheme: processing-context-classes
scope note: Challenge refers to raising questions about validity, necessity, correctness, or other similar 'trustworthiness' attributes regarding the process or plan or implementation

Challenging Process Input
type: Class
type: Concept
type: Entity Permissive Involvement
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
contributor: Steve Hickman
created: 2024-05-11
term status: accepted
broader: Entity Permissive Involvement
definition: Involvement where entity can challenge input of specified context
in scheme: processing-context-classes

Challenging Process Output
type: Class
type: Concept
type: Entity Permissive Involvement
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
contributor: Steve Hickman
created: 2024-05-11
term status: accepted
broader: Entity Permissive Involvement
definition: Involvement where entity can challenge the output of specified context
in scheme: processing-context-classes
scope note: Challenge refers to raising questions about validity, necessity, correctness, or other similar 'trustworthiness' attributes regarding the output of the process or plan or implementation (where output is distinct from the process itself)

Charity Organisation
type: Class
type: Concept
contributor: Georg P. Krog
created: 2024-12-01
subclass of: Legal Entity
term status: accepted
broader: Legal Entity
definition: A nonprofit entity dedicated to providing assistance or raising funds for social, educational, religious, or other philanthropic purposes
in scheme: entities-organisation-classes

Child
type: Class
type: Concept
type: Human Subject
contributor: Harshvardhan J. Pandit
created: 2020-11-25
modified: 2024-12-17
term status: modified
broader: Vulnerable Human
definition: A 'child' is a natural legal person who is below a certain legal age depending on the legal jurisdiction.
in scheme: entities-datasubject-classes
scope note: The legality of age defining a child varies by jurisdiction. In addition, 'child' is distinct from a 'minor'. For example, the legal age for consumption of alcohol can be 21, which makes a person of age 20 a 'minor' in this context. In other cases, 'minor' and 'child' are used interchangeably to refer to a person below some legally defined age.

Citizen
type: Class
type: Concept
type: Human Subject
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-04-06
modified: 2024-12-17
term status: modified
broader: Human Subject
definition: Humans that are citizens (for a jurisdiction)
in scheme: entities-datasubject-classes

City
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-10-22
modified: 2025-05-04
subclass of: Region
term status: modified
broader: Region
definition: A region consisting of urban population and commerce
in scheme: jurisdiction-classes

Client
type: Class
type: Concept
type: Human Subject
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-04-06
modified: 2024-12-17
term status: modified
broader: Customer
definition: Humans that are clients or recipients of services
in scheme: entities-datasubject-classes

Clinic
type: Class
type: Concept
contributor: Delaram Golpayegani
created: 2024-12-01
subclass of: Organisation
term status: accepted
broader: Organisation
definition: An organisation that is a smaller healthcare facility offering outpatient medical services for diagnosis and treatment
in scheme: entities-organisation-classes

Cloud Location
type: Class
type: Concept
type: Location
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
term status: accepted
broader: Remote Location
definition: Location that is in the 'cloud' i.e. a logical location operated over the internet
in scheme: jurisdiction-classes

Code of Conduct
type: Class
type: Concept
type: Organisational Measure
contributor: Axel Polleres
contributor: Harshvardhan J. Pandit
contributor: Mark Lizar
contributor: Rob Brennan
created: 2019-04-05
term status: accepted
broader: Guidelines Principle
definition: A set of rules or procedures outlining the norms and practices for conducting activities
in scheme: organisational-measures-classes

Collect
type: Class
type: Concept
type: Processing
created: 2019-05-07
source: GDPR Art.4-2
term status: accepted
broader: Obtain
definition: to gather data from someone
in scheme: processing-classes
related: Collect

Collected Data
type: Class
type: Concept
created: 2023-12-10
subclass of: Data
term status: accepted
broader: Data
definition: Data that has been obtained by collecting it from a source
in scheme: personal-data-classes

Collected Personal Data
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-03-30
modified: 2023-12-10
example: E0046
subclass of: Collected Data
subclass of: Personal Data
term status: accepted
broader: Collected Data
broader: Personal Data
definition: Personal Data that has been collected from another source such as the Data Subject
in scheme: personal-data-classes
scope note: To indicate the source of data, use the DataSource concept with the hasDataSource relation

Combat Climate Change
type: Class
type: Concept
type: Purpose
contributor: Beatriz Esteves
contributor: Harshvardhan J. Pandit
created: 2024-02-14
source: DGA 2.16
term status: accepted
broader: Public Benefit
definition: Purposes associated with combating the causes and consequences of climate change, including reducing gas emissions and fighting emergencies such as floods or wildfires
in scheme: purposes-classes

Combine
type: Class
type: Concept
type: Processing
created: 2019-05-07
source: GDPR Art.4-2
term status: accepted
broader: Transform
definition: to join or merge data
in scheme: processing-classes
related: Aggregate

Commercial Purpose
type: Class
type: Concept
type: Purpose
contributor: Beatriz Esteves
contributor: Harshvardhan J. Pandit
created: 2024-02-14
source: DGA 4.4
term status: accepted
broader: Purpose
definition: Purposes associated with processing activities performed in a commercial setting or with intention to commercialise
in scheme: purposes-classes

Commercial Research
type: Class
type: Concept
type: Purpose
contributor: Axel Polleres
contributor: Elmar Kiesling
contributor: Fajar Ekaputra
contributor: Harshvardhan J. Pandit
contributor: Javier Fernández
contributor: Simon Steyskal
created: 2019-04-05
modified: 2024-04-14
term status: accepted
broader: Commercial Purpose
broader: Research and Development
definition: Purposes associated with conducting research in a commercial setting or with intention to commercialise e.g. in a company or sponsored by a company
in scheme: purposes-classes
related: Develop

Commercially Confidential Data
type: Class
type: Concept
contributor: Beatriz Esteves
contributor: Danielle Welter
contributor: Harshvardhan J. Pandit
created: 2024-02-14
modified: 2025-05-30
source: DGA 6.5(c)
subclass of: Confidential Data
term status: modified
broader: Confidential Data
definition: Data that is considered confidential due to business/trade secrets, confidentiality agreements, or company secrets
in scheme: personal-data-classes

Communication for Customer Care
type: Class
type: Concept
type: Purpose
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2020-11-04
term status: accepted
broader: Communication Management
broader: Customer Care
definition: Customer Care Communication refers to purposes associated with communicating with customers for assisting them, resolving issues, ensuring satisfaction, etc. in relation to services provided
in scheme: purposes-classes

Communication Management
type: Class
type: Concept
type: Purpose
contributor: David Hickey
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2021-09-01
term status: accepted
broader: Purpose
definition: Communication Management refers to purposes associated with providing or managing communication activities e.g. to send an email for notifying some information
in scheme: purposes-classes
scope note: This purpose by itself does not sufficiently and clearly indicate what the communication is about. As such, it is recommended to combine it with another purpose to indicate the application. For example, Communication of Payment.

Compatibility Unknown
type: Class
type: Concept
type: ReuseCompatibility
contributor: Arthit Suriyawongkul
contributor: Beatriz Esteves
contributor: Delaram Golpayegani
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-06-19
term status: accepted
broader: ReuseCompatibility
definition: Concept indicating the compatibility of the context with an earlier context is currently unknown
in scheme: status-classes

Compliance Assessment
type: Class
type: Concept
type: Organisational Measure
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2024-04-14
term status: accepted
broader: Assessment
definition: Assessment regarding compliance (e.g. internal policy, regulations)
in scheme: organisational-measures-classes

Compliance Indeterminate
type: Class
type: Concept
type: Compliance Status
contributor: Harshvardhan J. Pandit
created: 2022-09-07
term status: accepted
broader: Compliance Status
definition: State where the status of compliance has not been fully assessed, evaluated, or determined
in scheme: status-classes

Compliance Monitoring
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA 5G Cybersecurity Standards
term status: accepted
broader: Governance Procedures
definition: Monitoring of compliance (e.g. internal policy, regulations)
in scheme: organisational-measures-classes

Compliance Status
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-05-18
example: E0055
subclass of: Status
term status: accepted
broader: Status
definition: Status associated with Compliance with some norms, objectives, or requirements
in scheme: status-classes

Compliance Unknown
type: Class
type: Concept
type: Compliance Status
contributor: Harshvardhan J. Pandit
created: 2022-09-07
term status: accepted
broader: Compliance Status
definition: State where the status of compliance is unknown
in scheme: status-classes

Compliance Violation
type: Class
type: Concept
type: Compliance Status
contributor: Harshvardhan J. Pandit
created: 2022-05-18
modified: 2022-09-07
term status: accepted
broader: Compliance Status
definition: State where compliance cannot be achieved due to requirements being violated
in scheme: status-classes
scope note: Changed from "violation of compliance" for consistency with other terms

Compliant
type: Class
type: Concept
type: Compliance Status
contributor: Harshvardhan J. Pandit
created: 2022-05-18
term status: accepted
broader: Compliance Status
definition: State of being fully compliant
in scheme: status-classes

Conditional Automation
type: Class
type: Concept
type: Automation Level
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
created: 2023-12-10
modified: 2024-04-20
source: ISO/IEC 22989:2022 Artificial intelligence concepts and terminology
term status: accepted
broader: Automation Level
definition: Level of automation corresponding to Level 3 in ISO/IEC 22989:2022 where the automation is sufficient to perform most tasks of the system with the human present to take over where necessary
in scheme: processing-context-classes
scope note: Human Involvement is implied here, e.g. for intervention, input, decisions

Confidential Data
type: Class
type: Concept
contributor: Beatriz Esteves
contributor: Harshvardhan J. Pandit
created: 2024-02-14
source: DGA 5.10
subclass of: Data
term status: accepted
broader: Data
definition: Data deemed confidential
in scheme: personal-data-classes

Confidentiality Agreement
type: Class
type: Concept
type: Legal Measure
created: 2022-02-09
modified: 2024-08-27
source: DGA 3.1.a
term status: accepted
broader: Legal Agreement
definition: Agreements that enforce confidentiality for e.g. to protect business, professional, or company secrets
in scheme: legal-measures-classes

Conformance Assessment
type: Class
type: Concept
type: Organisational Measure
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2024-04-14
term status: accepted
broader: Assessment
definition: Assessment regarding conformance with standards or norms or guidelines or similar instruments
in scheme: organisational-measures-classes

Conformance Status
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-10-22
subclass of: Status
term status: accepted
broader: Status
definition: Status associated with conformance to a standard, guideline, code, or recommendation
in scheme: status-classes

Conformant
type: Class
type: Concept
type: Conformance Status
contributor: Harshvardhan J. Pandit
created: 2022-10-22
term status: accepted
broader: Conformance Status
definition: State of being conformant
in scheme: status-classes

Consent
type: Class
type: Concept
type: Legal Basis
contributor: Harshvardhan J. Pandit
created: 2021-04-07
example: E0015
example: E0018
term status: accepted
broader: Legal Basis
definition: Consent of the Data Subject for specified process or activity
in scheme: legal-basis-classes

Consent Control
type: Class
type: Concept
created: 2024-05-11
subclass of: Entity Involvement
term status: accepted
broader: Entity Involvement
definition: The control or activity associated with obtaining, providing, withdrawing, or reaffirming consent
in scheme: consent-controls-classes

Consent Expired
type: Class
type: Concept
type: Consent Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-06-22
source: GConsent
term status: accepted
broader: Consent Status Invalid for Processing
definition: The state where the temporal or contextual validity of consent has 'expired'
in scheme: consent-status-classes
scope note: An example of this state is when the obtained consent has been assigned a duration - which has lapsed or 'expired', making it invalid to be used further for processing data

Consent Given
type: Class
type: Concept
type: Consent Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-06-22
source: GConsent
term status: accepted
broader: Consent Status Valid for Processing
definition: The state where consent has been given
in scheme: consent-status-classes
scope note: An example of this state is when the individual clicks on a button, ticks a checkbox, verbally agrees - or any other form that communicates their decision agreeing to the processing of data

Consent Invalidated
type: Class
type: Concept
type: Consent Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-06-22
source: GConsent
term status: accepted
broader: Consent Status Invalid for Processing
definition: The state where consent has been deemed to be invalid
in scheme: consent-status-classes
scope note: An example of this state is where an investigating authority or a court finds the collected consent did not meet requirements, and 'invalidates' both prior and future uses of it to carry out processing

Consent Management
type: Class
type: Concept
type: Organisational Measure
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2024-04-14
source: DGA 12.n
term status: accepted
broader: Permission Management
definition: Methods to obtain, provide, modify, and withdraw consent along with maintaining a record of consent, retrieving records, and processing changes in consent states
in scheme: organisational-measures-classes

Consent Notice
type: Class
type: Concept
type: Organisational Measure
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-06-21
example: E0072
term status: accepted
broader: Privacy Notice
definition: A Notice for information provision associated with Consent
in scheme: notice-classes
in scheme: organisational-measures-classes

Consent Receipt
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2022-06-22
term status: accepted
broader: Consent Record
definition: A record of consent or consent related activities that is provided to another entity
in scheme: organisational-measures-classes

Consent Record
type: Class
type: Concept
type: Organisational Measure
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-06-22
example: E0016
example: E0023
term status: accepted
broader: Data Processing Record
definition: A Record of Consent or Consent related activities
in scheme: organisational-measures-classes

Consent Refused
type: Class
type: Concept
type: Consent Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-06-22
source: GConsent
term status: accepted
broader: Consent Status Invalid for Processing
definition: The state where consent has been refused
in scheme: consent-status-classes
scope note: An example of this state is when the individual clicks on a 'disagree' or 'reject' or 'refuse' button, or leaves a checkbox unticked

Consent Request Deferred
type: Class
type: Concept
type: Consent Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-06-22
source: GConsent
term status: accepted
broader: Consent Status Invalid for Processing
definition: State where a request for consent has been deferred without a decision
in scheme: consent-status-classes
scope note: An example of this state is when the individual closes or dismisses a notice without making a decision. This state is intended for making the distinction between a notice being provided (as a consent request) and the individual interacting with the notice without making a decision - where the 'ignoring of a notice' is taken as consent being neither given nor refused

Consent Requested
type: Class
type: Concept
type: Consent Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-06-22
source: GConsent
term status: accepted
broader: Consent Status Invalid for Processing
definition: State where a request for consent has been made and is awaiting a decision
in scheme: consent-status-classes
scope note: An example of this state is when a notice has been presented to the individual but they have not made a decision

Consent Revoked
type: Class
type: Concept
type: Consent Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-06-22
source: GConsent
term status: accepted
broader: Consent Status Invalid for Processing
definition: The state where the consent is revoked by an entity other than the data subject and which prevents it from being further used as a valid state
in scheme: consent-status-classes
scope note: An example of this state is when a Data Controller stops utilising previously obtaining consent, such as when that service no longer exists

Consent Status
type: Class
type: Concept
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-06-22
source: GConsent
subclass of: Status
term status: accepted
broader: Status
definition: The state or status of 'consent' that provides information reflecting its operational status and validity for processing data
in scheme: consent-status-classes
scope note: States are useful as information artefacts to implement them in controlling processing, and to reflect the process and flow of obtaining and maintaining consent. For example, a database table that stores consent states for specific processing and can be queried to obtain them in an efficient manner. States are also useful in investigations to determine the use and validity of consenting practices

Consent Status Invalid for Processing
type: Class
type: Concept
type: Consent Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-06-22
source: GConsent
term status: accepted
broader: Consent Status
definition: States of consent that cannot be used as valid justifications for processing data
in scheme: consent-status-classes
scope note: This identifies the stages associated with consent that should not be used to process data

Consent Status Valid for Processing
type: Class
type: Concept
type: Consent Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-06-22
source: GConsent
term status: accepted
broader: Consent Status
definition: States of consent that can be used as valid justifications for processing data
in scheme: consent-status-classes
scope note: Practically, given consent is the only valid state for processing

Consent Unknown
type: Class
type: Concept
type: Consent Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-06-22
source: GConsent
term status: accepted
broader: Consent Status Invalid for Processing
definition: State where information about consent is not available or is unknown
in scheme: consent-status-classes
scope note: Consent states can be unknown, for example, when information is not available, or cannot be trusted, or is known to be inaccurate

Consent Withdrawn
type: Class
type: Concept
type: Consent Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-06-22
source: GConsent
term status: accepted
broader: Consent Status Invalid for Processing
definition: The state where the consent is withdrawn or revoked specifically by the data subject and which prevents it from being further used as a valid state
in scheme: consent-status-classes
scope note: This state can be considered a form of 'revocation' of consent, where the revocation can only be performed by the data subject. Therefore we suggest using ConsentRevoked when it is a non-data-subject entity, and ConsentWithdrawn when it is the data subject

Consequence
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-01-26
modified: 2024-08-16
example: E0027
example: E0068
example: E0071
subclass of: Risk Concept
term status: accepted
broader: Risk Concept
definition: The consequence(s) possible or arising from specified context
in scheme: risk-classes

Consequence as Side-Effect
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-03-30
subclass of: Consequence
term status: accepted
broader: Consequence
definition: The consequence(s) possible or arising as a side-effect of specified context
in scheme: risk-classes

Consequence of Failure
type: Class
type: Concept
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2022-03-23
subclass of: Consequence
term status: accepted
broader: Consequence
definition: The consequence(s) possible or arising from failure of specified context
in scheme: risk-classes

Consequence of Success
type: Class
type: Concept
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2022-03-23
subclass of: Consequence
term status: accepted
broader: Consequence
definition: The consequence(s) possible or arising from success of specified context
in scheme: risk-classes

Consult
type: Class
type: Concept
type: Processing
created: 2019-05-07
source: GDPR Art.4-2
term status: accepted
broader: Use
definition: to consult or query data
in scheme: processing-classes
related: Query

Consultation
type: Class
type: Concept
type: Organisational Measure
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2020-11-04
term status: accepted
broader: Organisational Measure
definition: Consultation is a process of receiving feedback, advice, or opinion from an external agency
in scheme: organisational-measures-classes

Consultation with Authority
type: Class
type: Concept
type: Organisational Measure
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2020-11-04
term status: accepted
broader: Consultation
definition: Consultation with an authority or authoritative entity
in scheme: organisational-measures-classes

Consultation with DPO
type: Class
type: Concept
type: Organisational Measure
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2022-06-15
term status: accepted
broader: Consultation
definition: Consultation with Data Protection Officer(s)
in scheme: organisational-measures-classes

Consultation with Data Subject
type: Class
type: Concept
type: Organisational Measure
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2022-06-15
term status: accepted
broader: Consultation
definition: Consultation with data subject(s) or their representative(s)
in scheme: organisational-measures-classes

Consultation with Data Subject Representative
type: Class
type: Concept
type: Organisational Measure
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2022-10-22
term status: accepted
broader: Consultation with Data Subject
definition: Consultation with representative of data subject(s)
in scheme: organisational-measures-classes

Consumer
type: Class
type: Concept
type: Human Subject
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-04-06
modified: 2024-12-17
term status: modified
broader: Human Subject
definition: Humans that consume goods or services for direct use
in scheme: entities-datasubject-classes

Consumer Standard Form Contract
type: Class
type: Concept
type: Legal Basis
created: 2024-08-27
term status: accepted
broader: Standard Form Contract
definition: A contract where the terms and conditions are determined by parties in the role of a 'consumer' - whether an entity or an individual, and the other parties have negligible or no ability to negotiate the terms and conditions
in scheme: contract-types-classes

Context
type: Class
type: Concept
contributor: Axel Polleres
contributor: Elmar Kiesling
contributor: Fajar Ekaputra
contributor: Harshvardhan J. Pandit
contributor: Javier Fernández
contributor: Simon Steyskal
created: 2019-04-05
modified: 2022-06-15
term status: accepted
definition: Contextually relevant information
in scheme: context-classes
scope note: Context is a catch-all concept for information of relevance not possible to represent through other core concepts. DPV offers specific contextual concepts such as Necessity, Frequency, and Duration. More can be created by extending Context within use-cases.

Contextually Anonymised Data
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2024-06-11
subclass of: Pseudonymised Data
term status: accepted
broader: Pseudonymised Data
definition: Data that can be considered as being fully anonymised within the context but in actuality is not fully anonymised and is still personal data as it can be de-anonymised outside that context
in scheme: personal-data-classes
scope note: To distinguish between partially anonymised data that can be effectively treated as anonymised data (e.g. in processing) within a context (e.g. an organisation), the concept ContextuallyAnonymisedData should be used instead of AnonymisedData. Transfer of this data outside of the context should consider that it is not fully anonymised and that it is still personal data

Continuous Frequency
type: Class
type: Concept
type: Frequency
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
term status: accepted
broader: Frequency
definition: Frequency where occurrences are continuous
in scheme: context-classes

Contract
type: Class
type: Concept
type: Legal Basis
contributor: Harshvardhan J. Pandit
created: 2021-04-07
modified: 2024-12-17
example: E0076
example: E0077
term status: modified
broader: Legal Basis
definition: Creation, completion, fulfilment, or performance of a contract involving specified processing of data or technologies
in scheme: legal-basis-classes

Contract Activation Status
type: Class
type: Concept
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-01-09
subclass of: Contract Status
term status: accepted
broader: Contract Status
definition: Status associated with activation of a contract i.e. whether its terms are active and are required to be performed
in scheme: contract-status-classes

Contract Active
type: Class
type: Concept
type: Contract Activation Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-01-09
term status: accepted
broader: Contract Activation Status
definition: Status representing contract that has been fully executed and whose terms are considered active i.e. they are applicable and are required to be performed
in scheme: contract-status-classes
scope note: A contract being active only refers to its terms now being required to be fulfilled, while dpv:ContractBeingPerformed states that they are being performed

Contract Amended
type: Class
type: Concept
type: Contract Performance Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-01-09
term status: accepted
broader: Contract Performance Status
definition: Status representing contract that has been fully executed and whose terms have been amended through mutual agreement or other means such that the contract is still required to be performed
in scheme: contract-status-classes

Contract Amendment Clause
type: Class
type: Concept
type: Contractual Clause
created: 2024-08-27
term status: accepted
broader: Contractual Clause
definition: A provision describing how changes or modifications to the contract can be made and the process for implementing them
in scheme: contract-clause-classes

Contract Approved
type: Class
type: Concept
type: Contract Preparation Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-01-09
term status: accepted
broader: Contract Preparation Status
definition: Status representing contract has been approved and can be used for signing
in scheme: contract-status-classes

Contract Being Performed
type: Class
type: Concept
type: Contract Performance Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-01-09
term status: accepted
broader: Contract Performance Status
definition: Status representing contract that has been fully executed and whose terms are being carried out i.e. the contract is being performed
in scheme: contract-status-classes

Contract Breached
type: Class
type: Concept
type: Contract Termination Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-01-09
term status: accepted
broader: Contract Termination Status
definition: Status representing contract being breached where its terms are not fulfilled or are violated with legal consequences
in scheme: contract-status-classes

Contract by Domain
type: Class
type: Concept
type: Legal Basis
created: 2024-12-17
term status: accepted
broader: Contract
definition: A generic concept representing contracts categorised by specific domains which dictate the drafting and interpretation of contracts
in scheme: contract-types-classes

Contract by Entity Type
type: Class
type: Concept
type: Legal Basis
created: 2024-12-17
term status: accepted
broader: Contract
definition: A generic concept representing contracts categorised by the type of entities involved - such as Businesses (B), Consumers (C), and Governments (G)
in scheme: contract-types-classes

Contract by Negotiation Type
type: Class
type: Concept
type: Legal Basis
created: 2024-12-17
term status: accepted
broader: Contract
definition: A generic concept representing contracts categorised based on their use or absence of negotiation in the contract forming process
in scheme: contract-types-classes

Contract Confidentiality Clause
type: Class
type: Concept
type: Contractual Clause
created: 2024-08-27
term status: accepted
broader: Contractual Clause
definition: A provision requiring parties to keep certain information confidential and not disclose it to third parties
in scheme: contract-clause-classes

Contract Control
type: Class
type: Concept
created: 2024-08-27
subclass of: Entity Involvement
term status: accepted
broader: Entity Involvement
definition: The control or activity associated with accepting, refusing, and other actions associated with a contract
in scheme: contract-control-classes

Contract Definitions
type: Class
type: Concept
type: Contractual Clause
created: 2024-08-27
term status: accepted
broader: Contractual Clause
definition: A section specifying the meanings of key terms and phrases used throughout the contract
in scheme: contract-clause-classes

Contract DisputeResolution Clause
type: Class
type: Concept
type: Contractual Clause
created: 2024-08-27
term status: accepted
broader: Contractual Clause
definition: A provision detailing the methods and procedures for resolving disagreements or conflicts arising from the contract
in scheme: contract-clause-classes

Contract Disputed
type: Class
type: Concept
type: Contract Termination Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-01-09
term status: accepted
broader: Contract Termination Status
definition: Status representing contract being disputed where one or more parties have an issue regarding the interpretation and performance of the contract
in scheme: contract-status-classes

Contract Drafted
type: Class
type: Concept
type: Contract Preparation Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-01-09
term status: accepted
broader: Contract Preparation Status
definition: Status representing the drafting of contract text has been completed and it can now be offered for signing
in scheme: contract-status-classes

Contract Execution Status
type: Class
type: Concept
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-01-09
subclass of: Contract Status
term status: accepted
broader: Contract Status
definition: Status associated with execution of a contract (i.e. signing and procedural aspects before the contract terms come in to effect)
in scheme: contract-status-classes

Contract Expired
type: Class
type: Concept
type: Contract Termination Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-01-09
term status: accepted
broader: Contract Termination Status
definition: Status representing reaching the expiry defined in the contract, such as when the stated duration or the stated obligations have been completed
in scheme: contract-status-classes

Contract Extended
type: Class
type: Concept
type: Contract Termination Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-01-09
term status: accepted
broader: Contract Termination Status
definition: Status representing the duration associated with a contract being extended through mutual agreement or by a party
in scheme: contract-status-classes

Contract Fulfilled
type: Class
type: Concept
type: Contract Fulfilment Status
contributor: Arthit Suriyawongkul
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-01-09
modified: 2025-08-06
term status: modified
broader: Contract Fulfilment Status
definition: Status representing contract where all its terms have been fulfilled in a manner that does not constitute a violation or breach of the contract
in scheme: contract-status-classes

Contract Fulfilment Status
type: Class
type: Concept
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-01-09
example: E0077
example: E0078
subclass of: Contract Status
term status: accepted
broader: Contract Status
definition: Status associated with fulfilment of a contract
in scheme: contract-status-classes

Contract Fully Executed
type: Class
type: Concept
type: Contract Execution Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-01-09
term status: accepted
broader: Contract Execution Status
definition: Status representing contract has been fully executed i.e. it has been signed by all parties and all other procedural aspects such as exchange of signed contract copies have been completed
in scheme: contract-status-classes

Contract Fully Signed
type: Class
type: Concept
type: Contract Execution Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-01-09
term status: accepted
broader: Contract Execution Status
definition: Status representing contract has been signed by all concerned parties
in scheme: contract-status-classes

Contract Inactive
type: Class
type: Concept
type: Contract Activation Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-01-09
term status: accepted
broader: Contract Activation Status
definition: Status representing contract that has been fully executed and whose terms are not yet active i.e. they need to be performed at a later time
in scheme: contract-status-classes
scope note: An example of an inactive contract is where its terms need to be fulfilled at a later date, at which point the contract will become active

Contract Jurisdiction Clause
type: Class
type: Concept
type: Contractual Clause
created: 2024-08-27
term status: accepted
broader: Contractual Clause
definition: A provision specifying the legal jurisdiction or court where disputes related to the contract will be resolved
in scheme: contract-clause-classes

Contract Negotiated
type: Class
type: Concept
type: Contract Preparation Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-01-09
term status: accepted
broader: Contract Preparation Status
definition: Status representing contract has been successfully negotiated by involved parties
in scheme: contract-status-classes

Contract Not Fulfilled
type: Class
type: Concept
type: Contract Fulfilment Status
contributor: Arthit Suriyawongkul
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-01-09
modified: 2025-08-06
term status: modified
broader: Contract Fulfilment Status
definition: Status representing contract where none of its terms have been fulfilled in a manner that does not constitute a violation or breach of the contract i.e. there is still time and opportunity to complete the terms
in scheme: contract-status-classes

Contract Offered
type: Class
type: Concept
type: Contract Preparation Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-01-09
term status: accepted
broader: Contract Preparation Status
definition: Status representing contract has been offered to a party or to parties for reviewing and signing
in scheme: contract-status-classes

Contract Partially Fulfilled
type: Class
type: Concept
type: Contract Fulfilment Status
contributor: Arthit Suriyawongkul
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-01-09
modified: 2025-08-06
term status: modified
broader: Contract Fulfilment Status
definition: Status representing contract where some of its terms have been fulfilled, and others are yet to be fulfilled in a manner that does not constitute a violation or breach of the contract i.e. there is still time and opportunity to complete the terms
in scheme: contract-status-classes

Contract Partially Signed
type: Class
type: Concept
type: Contract Execution Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-01-09
term status: accepted
broader: Contract Execution Status
definition: Status representing contract has been partially signed by parties i.e. some parties have signed the contract and others are yet to make a decision to sign it
in scheme: contract-status-classes

Contract Performance
type: Class
type: Concept
type: Legal Basis
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2021-04-07
term status: accepted
broader: Contract
definition: Fulfilment or performance of a contract involving specified processing of data or technologies
in scheme: legal-basis-classes

Contract Performance Status
type: Class
type: Concept
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-01-09
subclass of: Contract Status
term status: accepted
broader: Contract Status
definition: Status associated with performance of a contract
in scheme: contract-status-classes

Contract Preamble
type: Class
type: Concept
type: Contractual Clause
created: 2024-08-27
term status: accepted
broader: Contractual Clause
definition: An introductory section outlining the background, context, and purpose of the contract
in scheme: contract-clause-classes

Contract Preparation Status
type: Class
type: Concept
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-01-09
subclass of: Contract Status
term status: accepted
broader: Contract Status
definition: Status associated with preparation of contracts before they are signed or accepted or executed
in scheme: contract-status-classes

Contract Rejected
type: Class
type: Concept
type: Contract Preparation Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-01-09
term status: accepted
broader: Contract Preparation Status
definition: Status representing contract has been rejected and cannot be used for signing
in scheme: contract-status-classes

Contract Renewed
type: Class
type: Concept
type: Contract Performance Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-01-09
term status: accepted
broader: Contract Performance Status
definition: Status representing contract being renewed with new duration and/or applicability where the contract has been fully executed in the past
in scheme: contract-status-classes

Contract Signed By Party
type: Class
type: Concept
type: Contract Execution Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-01-09
term status: accepted
broader: Contract Execution Status
definition: Status representing contract has been signed by the indicated signing party
in scheme: contract-status-classes
scope note: The signing party can be expressed using dpv:hasParty with the status along with metadata such as a timestamp, or the status can be used to list whether each party in the contract has signed or not e.g. it is reviewing the contract

Contract Status
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2024-08-27
example: E0077
subclass of: Status
term status: accepted
broader: Status
definition: Status associated with a contract
in scheme: contract-status-classes

Contract Temporarily Suspended
type: Class
type: Concept
type: Contract Performance Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-01-09
term status: accepted
broader: Contract Performance Status
definition: Status representing contract that has been temporarily suspended through mutual agreement or by some parties
in scheme: contract-status-classes

Contract Terminated
type: Class
type: Concept
type: Contract Termination Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-01-09
term status: accepted
broader: Contract Termination Status
definition: Status representing contract being terminated by one or more parties
in scheme: contract-status-classes

Contract Termination Clause
type: Class
type: Concept
type: Contractual Clause
created: 2024-08-27
term status: accepted
broader: Contractual Clause
definition: A provision outlining the conditions under which the contract can be terminated before its completion, including any penalties or obligations
in scheme: contract-clause-classes

Contract Termination Status
type: Class
type: Concept
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-01-09
subclass of: Contract Status
term status: accepted
broader: Contract Status
definition: Status associated with termination of a contract
in scheme: contract-status-classes

Contract Under Negotiation
type: Class
type: Concept
type: Contract Preparation Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-01-09
term status: accepted
broader: Contract Preparation Status
definition: Status representing contract is under negotiation between parties
in scheme: contract-status-classes

Contract Under Review
type: Class
type: Concept
type: Contract Preparation Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-01-09
term status: accepted
broader: Contract Preparation Status
definition: Status representing contract is under review and is being considered for signing
in scheme: contract-status-classes

Contract Violated
type: Class
type: Concept
type: Contract Fulfilment Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-01-09
term status: accepted
broader: Contract Fulfilment Status
definition: Status representing contract where one or more terms have not been fulfilled or have been fulfilled, where either is considered a violation of the terms
in scheme: contract-status-classes

Contractual Clause
type: Class
type: Concept
created: 2024-08-27
example: E0078
term status: accepted
definition: A part or component within a contract that outlines its specifics
in scheme: contract-clause-classes

Contractual Clause Fulfilled
type: Class
type: Concept
type: Contractual Clause Fulfilment Status
contributor: Arthit Suriyawongkul
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2024-08-27
modified: 2025-08-06
term status: modified
broader: Contractual Clause Fulfilment Status
definition: Status indicating the terms of the contractual clause are fulfilled i.e. they have been successfully completed without violation
in scheme: contract-clause-classes

Contractual Clause Fulfilment Status
type: Class
type: Concept
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2024-08-27
subclass of: Contract Status
term status: accepted
broader: Contract Status
definition: Status associated with fulfilment of a contractual clause
in scheme: contract-clause-classes

Contractual Clause Unfulfilled
type: Class
type: Concept
type: Contractual Clause Fulfilment Status
contributor: Arthit Suriyawongkul
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2024-08-27
modified: 2025-08-06
term status: modified
broader: Contractual Clause Fulfilment Status
definition: Status indicating the terms of the contractual clause have not yet been fulfilled in a manner that does not constitute a violation i.e. there is still an opportunity to complete them
in scheme: contract-clause-classes

Contractual Clause Partially Fulfilled
type: Class
type: Concept
type: Contractual Clause Fulfilment Status
contributor: Arthit Suriyawongkul
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2024-08-27
modified: 2025-08-06
term status: modified
broader: Contractual Clause Fulfilment Status
definition: Status indicating some of the terms of the contractual clause have been fulfilled, and others have not yet been fulfilled in a manner that does not constitute a violation i.e. there is still an opportunity to complete them
in scheme: contract-clause-classes

Contractual Clause Breached
type: Class
type: Concept
type: Contractual Clause Fulfilment Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2024-08-27
term status: accepted
broader: Contractual Clause Fulfilment Status
definition: Status indicating the terms of the contractual clause have been violated
in scheme: contract-clause-classes

Contractual Terms
type: Class
type: Concept
type: Legal Measure
contributor: Axel Polleres
contributor: Harshvardhan J. Pandit
contributor: Mark Lizar
contributor: Rob Brennan
created: 2019-04-05
modified: 2024-08-27
term status: sunset
broader: Legal Measure
definition: Contractual terms governing data handling within or with an entity
in scheme: legal-measures-classes

Controller-Data Subject Agreement
type: Class
type: Concept
type: Legal Basis
type: Legal Measure
created: 2024-08-27
modified: 2024-08-27
term status: modified
broader: Data Subject Contract
definition: An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of data between a Data Controller and a Data Subject
in scheme: contract-types-classes

Controller Informed
type: Class
type: Concept
type: Entity Informed Status
contributor: Delaram Golpayegani
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2024-05-10
term status: accepted
broader: Entity Informed
definition: Status indicating Controller has been informed about the specified context
in scheme: status-classes

Controller-Processor Agreement
type: Class
type: Concept
type: Legal Basis
type: Legal Measure
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-01-26
modified: 2024-08-27
example: E0024
term status: modified
broader: Data Processor Contract
definition: An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of data between a Data Controller and a Data Processor
in scheme: contract-types-classes

Controller Uninformed
type: Class
type: Concept
type: Entity Informed Status
contributor: Delaram Golpayegani
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2024-05-10
term status: accepted
broader: Entity Uninformed
definition: Status indicating Controller is uninformed i.e. has not been informed about the specified context
in scheme: status-classes

Copy
type: Class
type: Concept
type: Processing
created: 2019-05-07
source: SPECIAL Project
term status: accepted
broader: Processing
definition: to produce an exact reproduction of the data
in scheme: processing-classes
related: Copy

Correcting Process
type: Class
type: Concept
type: Entity Permissive Involvement
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
contributor: Steve Hickman
created: 2024-05-11
term status: accepted
broader: Entity Permissive Involvement
definition: Involvement where entity can correct the process of specified context
in scheme: processing-context-classes
scope note: Correction of process refers to the ability to change how the process takes place

Correcting Process Input
type: Class
type: Concept
type: Entity Permissive Involvement
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
contributor: Steve Hickman
created: 2024-05-11
term status: accepted
broader: Entity Permissive Involvement
definition: Involvement where entity can correct input of specified context
in scheme: processing-context-classes

Correcting Process Output
type: Class
type: Concept
type: Entity Permissive Involvement
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
contributor: Steve Hickman
created: 2024-05-11
term status: accepted
broader: Entity Permissive Involvement
definition: Involvement where entity can correct the output of specified context
in scheme: processing-context-classes
scope note: Correction of outputs allows modification of the output - implying continuation of the process. This is distinct from reversing of outputs which revert the output back to its previous value and possibly imply not continuing with the process

Counter Money Laundering
type: Class
type: Concept
type: Purpose
contributor: Harshvardhan J. Pandit
created: 2022-04-20
term status: accepted
broader: Fraud Prevention and Detection
definition: Purposes associated with detection, prevention, and mitigation of mitigate money laundering
in scheme: purposes-classes

Counterterrorism
type: Class
type: Concept
type: Purpose
contributor: Harshvardhan J. Pandit
created: 2022-04-20
modified: 2024-04-14
term status: accepted
broader: Public Benefit
definition: Purposes associated with activities that detect, prevent, mitigate, or otherwise perform activities to combat or eliminate terrorism (also referred to as anti-terrorism)
in scheme: purposes-classes

Country
type: Class
type: Concept
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2022-01-19
modified: 2025-05-04
subclass of: Jurisdiction
term status: modified
broader: Jurisdiction
definition: A political entity indicative of a sovereign or non-sovereign territorial state comprising of distinct geographical areas
in scheme: jurisdiction-classes
scope note: The definition of country is not intended for political interpretation. DPVCG welcomes alternate definitions based in existing sources with global scope, such as UN or ISO.

Credential Management
type: Class
type: Concept
type: Organisational Measure
contributor: Georg P. Krog
created: 2022-06-15
term status: accepted
broader: Authorisation Procedure
definition: Management of credentials and their use in authorisations
in scheme: organisational-measures-classes

Cross-Border Transfer
type: Class
type: Concept
type: Processing
contributor: Harshvardhan J. Pandit
created: 2024-04-14
term status: accepted
broader: Transfer
definition: to move data from one jurisdiction (border) to another
in scheme: processing-classes

Cryptographic Authentication
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Authentication Protocols
broader: Cryptographic Methods
definition: Use of cryptography for authentication
in scheme: technical-measures-classes

Cryptographic Key Management
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Cryptographic Methods
definition: Management of cryptographic keys, including their generation, storage, assessment, and safekeeping
in scheme: technical-measures-classes

Cryptographic Methods
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Technical Measure
definition: Use of cryptographic methods to perform tasks
in scheme: technical-measures-classes

Customer
type: Class
type: Concept
type: Human Subject
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-04-06
modified: 2024-12-17
term status: modified
broader: Human Subject
definition: Humans that purchase goods or services
in scheme: entities-datasubject-classes
scope note: note: for B2B relations where customers are organisations, this concept only applies for data subjects

Customer Care
type: Class
type: Concept
type: Purpose
contributor: Axel Polleres
contributor: Elmar Kiesling
contributor: Fajar Ekaputra
contributor: Harshvardhan J. Pandit
contributor: Javier Fernández
contributor: Simon Steyskal
created: 2019-04-05
term status: accepted
broader: Customer Management
definition: Customer Care refers to purposes associated with purposes for providing assistance, resolving issues, ensuring satisfaction, etc. in relation to services provided
in scheme: purposes-classes
related: Feedback

Customer Claims Management
type: Class
type: Concept
type: Purpose
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2021-09-08
source: Belgian DPA ROPA Template
term status: accepted
broader: Customer Management
definition: Customer Claims Management refers to purposes associated with managing claims, including repayment of monies owed
in scheme: purposes-classes

Customer Management
type: Class
type: Concept
type: Purpose
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2021-09-08
term status: accepted
broader: Purpose
definition: Customer Management refers to purposes associated with managing activities related with past, current, and future customers
in scheme: purposes-classes

Customer Order Management
type: Class
type: Concept
type: Purpose
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2021-09-08
source: Belgian DPA ROPA Template
term status: accepted
broader: Customer Management
definition: Customer Order Management refers to purposes associated with managing customer orders i.e. processing of an order related to customer's purchase of good or services
in scheme: purposes-classes

Customer Relationship Management
type: Class
type: Concept
type: Purpose
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2021-09-08
term status: accepted
broader: Customer Management
definition: Customer Relationship Management refers to purposes associated with managing and analysing interactions with past, current, and potential customers
in scheme: purposes-classes

Customer Solvency Monitoring
type: Class
type: Concept
type: Purpose
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2021-09-08
source: Belgian DPA ROPA Template
term status: accepted
broader: Customer Management
definition: Customer Solvency Monitoring refers to purposes associated with monitor solvency of customers for financial diligence
in scheme: purposes-classes

Cybersecurity Assessment
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA 5G Cybersecurity Standards
term status: accepted
broader: Security Assessment
definition: Assessment of cybersecurity capabilities in terms of vulnerabilities and effectiveness of controls
in scheme: risk-classes

Cybersecurity Training
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Staff Training
definition: Training methods related to cybersecurity
in scheme: organisational-measures-classes

Data Protection Impact Assessment (DPIA)
type: Class
type: Concept
type: Organisational Measure
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2020-11-04
modified: 2024-04-14
source: GDPR Art. 35
example: E0056
term status: accepted
broader: Rights Impact Assessment
definition: Impact assessment determining the potential and actual impact of processing activities on individuals or groups of individuals and taking into account the impacts of activities on their rights and freedoms
in scheme: risk-classes
scope note: Specific requirements and procedures for DPIA are defined in GDPR Art.35

Dashboard Notice
type: Class
type: Concept
type: Organisational Measure
created: 2024-08-17
source: ICO - What methods can we use to provide privacy information?
term status: accepted
broader: Notice
definition: A notice that is provided within a dashboard also used for other purposes
in scheme: notice-classes

Data
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-01-19
term status: accepted
definition: A broad concept representing 'data' or 'information'
in scheme: personal-data-classes

Data Altruism
type: Class
type: Concept
type: Purpose
contributor: Beatriz Esteves
contributor: Harshvardhan J. Pandit
created: 2024-02-14
source: DGA 2.16
term status: accepted
broader: Public Benefit
definition: Purposes associated with the voluntary sharing of data for the general interest of the public, such as healthcare or combating climate change
in scheme: purposes-classes
scope note: Data Altruism as a purpose should be combined with other purposes to indicate their altruistic interpretation or application. E.g. improving healthcare and data altruism in combination.

Data Backup Protocols
type: Class
type: Concept
type: Technical Measure
contributor: Georg P. Krog
created: 2022-06-15
term status: accepted
broader: Technical Measure
definition: Protocols or plans for backing up of data
in scheme: technical-measures-classes

Data Breach Impact Assessment (DBIA)
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2024-04-15
term status: accepted
broader: Rights Impact Assessment
definition: Impact Assessment concerning the consequences and impacts of a data breach
in scheme: risk-classes
scope note: Data Breach assessments can require additional non-security related assessments such as GDPR Art.34 Rights Impact Assessment

Data Breach Notice
type: Class
type: Concept
type: Organisational Measure
contributor: Beatriz Esteves
contributor: David Hickey
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2024-04-14
source: DGA 21.5 GDPR 33
source: GDPR 34
source: DGA 12.k
term status: accepted
broader: Security Incident Notice
definition: A notice providing information about data breach(es) i.e. unauthorised transfer, access, use, or modification of data
in scheme: notice-classes
in scheme: organisational-measures-classes

Data Breach Notification
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2024-04-14
source: DGA 21.5 GDPR 33
source: GDPR 34
source: DGA 12.k
term status: accepted
broader: Security Incident Notification
definition: Notification of information about data breach(es) i.e. unauthorised transfer, access, use, or modification of data
in scheme: organisational-measures-classes

Data Breach Record
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2024-04-14
term status: accepted
broader: Records of Activities
definition: Record of a data breach incident
in scheme: organisational-measures-classes

Data Controller
type: Class
type: Concept
contributor: Axel Polleres
contributor: Javier Fernández
created: 2019-04-05
modified: 2020-11-04
source: GDPR Art.4-7g
example: E0032
example: E0033
subclass of: Legal Entity
term status: accepted
broader: Legal Entity
definition: The individual or organisation that decides (or controls) the purpose(s) of processing personal data.
in scheme: entities-legalrole-classes
scope note: The terms 'Controller', 'Data Controller', and 'PII Controller' refer to the same concept

Data Controller Contract
type: Class
type: Concept
type: Legal Basis
created: 2023-12-10
modified: 2024-08-27
term status: sunset
broader: Data Processing Agreement
definition: Creation, completion, fulfilment, or performance of a contract, with Data Controllers as parties being Joint Data Controllers, and involving specified processing of data or technologies. NOTE: This concept is being deprecated - use dpv:JointDataControllersAgreement which has a more explicit definition of the entities involved and the intent of the contract
in scheme: contract-types-classes

Data Controller as Data Source
type: Class
type: Concept
type: Data Source
created: 2023-10-12
term status: accepted
broader: Data Source
definition: Data Sourced from Data Controller(s), e.g. a Controller inferring data or generating data
in scheme: processing-context-classes

Data Deletion Policy
type: Class
type: Concept
type: Organisational Measure
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2024-04-14
term status: accepted
broader: Data Processing Policy
definition: Policy regarding deletion of data
in scheme: organisational-measures-classes
scope note: Deletion and Erasure are distinct activities where deletion refers to logical removal of data with the possibility of retrieval whereas erasure refers to destruction of data such that it cannot be retrieved. See dpv:DataErasurePolicy

Data Erasure Policy
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2024-04-14
term status: accepted
broader: Data Processing Policy
definition: Policy regarding erasure of data
in scheme: organisational-measures-classes
scope note: Erasure or data destruction or secure removal of data refers to irreversible erasure of data. See dpv:DataDeletion for reversible or logical deletion of data

Data Exporter
type: Class
type: Concept
contributor: David Hickey
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2021-09-08
source: EDPB Recommendations 01/2020 on Data Transfers
example: E0035
subclass of: Legal Entity
term status: accepted
broader: Legal Entity
definition: An entity that 'exports' data where exporting is considered a form of data transfer
in scheme: entities-legalrole-classes
scope note: The term 'Data Exporter' is used by the EU-EDPB as the entity that transfer data across borders. While the EDPB refers to the jurisdictional border of EU, the term within DPV can be used to denote any 'export' or transfer or transmission of data and is thus a broader concept than the EDPB's definition.

Data Governance
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2024-04-14
term status: accepted
broader: Organisation Governance
definition: Measures associated with topics typically considered to be part of 'Data Governance'
in scheme: organisational-measures-classes

Data Handling Clause
type: Class
type: Concept
type: Legal Measure
created: 2024-08-27
term status: accepted
broader: Contractual Terms
definition: Contractual clauses governing handling of data within or by an entity
in scheme: legal-measures-classes

Data Importer
type: Class
type: Concept
contributor: David Hickey
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2021-09-08
source: EDPB Recommendations 01/2020 on Data Transfers
example: E0035
subclass of: Recipient
term status: accepted
broader: Recipient
definition: An entity that 'imports' data where importing is considered a form of data transfer
in scheme: entities-legalrole-classes
scope note: The term 'Data Importer' is used by the EU-EDPB as the entity that receives transferred data across borders. While the EDPB refers to the jurisdictional border of EU, the term within DPV can be used to denote any 'import' or reception of transfer or transmission of data and is thus a broader concept than the EDPB's definition.

Data Interoperability Assessment
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2024-04-14
term status: accepted
broader: Assessment
broader: Data Interoperability Management
definition: Measures associated with assessment of data interoperability
in scheme: organisational-measures-classes

Data Interoperability Improvement
type: Class
type: Concept
type: Organisational Measure
contributor: Beatriz Esteves
contributor: Harshvardhan J. Pandit
created: 2024-04-14
source: DGA 12.d
term status: accepted
broader: Data Interoperability Management
definition: Measures associated with improvement of data interoperability
in scheme: organisational-measures-classes

Data Interoperability Management
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2024-04-14
term status: accepted
broader: Data Governance
definition: Measures associated with management of data interoperability
in scheme: organisational-measures-classes

Data Inventory Management
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2024-04-14
term status: accepted
broader: Data Governance
definition: Measures associated with management of data inventory or a data asset list
in scheme: organisational-measures-classes

Data Jurisdiction Policy
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2024-04-14
term status: accepted
broader: Data Processing Policy
definition: Policy specifying jurisdictional requirements for data processing
in scheme: organisational-measures-classes
scope note: Jurisdictional requirements can refer to data being stored within specific jurisdictions, or that data must be in line with jurisdictional laws and norms

Data Literacy
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2024-05-17
term status: accepted
broader: Digital Literacy
definition: Providing skills, knowledge, and understanding to enable reading, writing, analysing, reasoning, and communicating regarding data
in scheme: organisational-measures-classes

Data Processing Agreement
type: Class
type: Concept
type: Legal Basis
type: Legal Measure
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-01-26
modified: 2024-12-17
term status: modified
broader: Contract
definition: An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of data
in scheme: contract-types-classes
scope note: For specific role-based data processing agreements, see concepts for Processors and JointDataController agreements.

Data Processing Policy
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2024-04-14
term status: accepted
broader: Policy
definition: Policy regarding data processing activities
in scheme: organisational-measures-classes
scope note: This only refers to the policy or plan or procedure describing how the data processing should be conducted. To represent the granular details, see further concepts e.g. dpv:DataStoragePolicy to describe policy regarding storage, or dpv:DataStorageCondition to represent information within the policy for how information should be stored

Data Processing Record
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2021-09-08
term status: accepted
broader: Records of Activities
definition: Record of data processing, whether ex-ante or ex-post
in scheme: organisational-measures-classes

Data Processor
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2019-06-04
source: GDPR Art.4-8
example: E0033
subclass of: Recipient
term status: accepted
broader: Recipient
definition: A ‘processor’ means a natural or legal person, public authority, agency or other body which processes data on behalf of the controller.
in scheme: entities-legalrole-classes

Data Processor Contract
type: Class
type: Concept
type: Legal Basis
created: 2023-12-10
modified: 2024-08-27
term status: sunset
broader: Data Processing Agreement
definition: Creation, completion, fulfilment, or performance of a contract, with the Data Controller and Data Processor as parties, and involving specified processing of data or technologies. NOTE: This concept is being deprecated - use dpv:ControllerProcessorAgreement which has a more explicit definition of the entities involved and the intent of the contract
in scheme: contract-types-classes

Data Protection Authority
type: Class
type: Concept
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2020-11-04
example: E0036
subclass of: Authority
term status: accepted
broader: Authority
definition: An authority tasked with overseeing legal compliance regarding privacy and data protection laws.
in scheme: entities-authority-classes

Data Protection Officer
type: Class
type: Concept
contributor: Georg P. Krog
contributor: Paul Ryan
created: 2020-11-04
modified: 2021-12-08
source: GDPR Art.37
subclass of: Representative
term status: accepted
broader: Representative
definition: An entity within or authorised by an organisation to monitor internal compliance, inform and advise on data protection obligations and act as a contact point for data subjects and the supervisory authority.
in scheme: entities-legalrole-classes

Data Protection Training
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA 5G Cybersecurity Standards
term status: accepted
broader: Staff Training
definition: Training intended to increase knowledge regarding data protection
in scheme: organisational-measures-classes

Data published by Data Subject
type: Class
type: Concept
type: Data Subject as Data Source
contributor: Julian Flake
created: 2022-08-24
modified: 2023-12-10
term status: accepted
broader: Data Subject as Data Source
definition: Data is published by the data subject
in scheme: processing-context-classes
scope note: This refers to where that data was made publicly available by the data subject. An example of this would be a social media profile that the data subject has made publicly accessible.

Data Quality Assessment
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2024-04-14
term status: accepted
broader: Assessment
broader: Data Quality Management
definition: Measures associated with assessment of data quality
in scheme: organisational-measures-classes

Data Quality Improvement
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2024-04-14
term status: accepted
broader: Data Quality Management
definition: Measures associated with improvement of data quality
in scheme: organisational-measures-classes

Data Quality Management
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2024-04-14
term status: accepted
broader: Data Governance
definition: Measures associated with management of data quality
in scheme: organisational-measures-classes

Data Redaction
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2020-10-01
term status: accepted
broader: Data Sanitisation Technique
definition: Removal of sensitive information from a data or document
in scheme: technical-measures-classes

Data Restoration Policy
type: Class
type: Concept
type: Organisational Measure
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2024-04-14
term status: accepted
broader: Data Processing Policy
definition: Policy regarding restoration of data
in scheme: organisational-measures-classes
scope note: Restoration can refer to how data is restored from a backup

Data Reuse Policy
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2024-04-14
term status: accepted
broader: Data Processing Policy
definition: Policy regarding reuse of data i.e. using data for purposes other than its initial purpose
in scheme: organisational-measures-classes
scope note: This policy can be used to describe the procedures associated with undertaking such reuse of data, for example to assess its legality and the compatibility of the initial and subsequent purposes

Data Sanitisation Technique
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Technical Measure
definition: Cleaning or any removal or re-organisation of elements in data based on selective criteria
in scheme: technical-measures-classes

Data Security Management
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2024-04-14
term status: accepted
broader: Data Governance
broader: Security Procedure
definition: Measures associated with management of data security
in scheme: organisational-measures-classes
scope note: Examples of data security management are assessing the appropriate security controls such as encryption, testing the implemented security controls, and ensuring it is protected and safeguarded from unintended actions

Data Source
type: Class
type: Concept
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2020-11-04
example: E0012
subclass of: Processing Context
term status: accepted
broader: Processing Context
definition: The source or origin of data
in scheme: processing-context-classes
scope note: Source' is the direct point of data collection; 'origin' would indicate the original/others points of where the data originates from.

Data Storage Policy
type: Class
type: Concept
type: Organisational Measure
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2024-04-14
term status: accepted
broader: Data Processing Policy
definition: Policy regarding storage of data, including the manner, duration, location, and conditions for storage
in scheme: organisational-measures-classes

Data Sub-Processor
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2020-11-25
subclass of: Data Processor
term status: accepted
broader: Data Processor
definition: A 'sub-processor' is a processor engaged by another processor
in scheme: entities-legalrole-classes
scope note: A 'Sub-Processor' is always a 'Processor' with the distinction of not directly being appointed by the 'Controller'

Data Subject
type: Class
type: Concept
contributor: Axel Polleres
contributor: Javier Fernández
created: 2019-04-05
modified: 2024-12-17
source: GDPR Art.4-1g
example: E0039
example: E0074
subclass of: Human Subject
term status: modified
broader: Human Subject
definition: The individual (or category of individuals) whose personal data is being processed
in scheme: entities-datasubject-classes
scope note: The term 'data subject' is specific to the GDPR, but is functionally equivalent to the term 'individual associated with data' and the ISO/IEC term 'PII Principle'

Data Subject Contract
type: Class
type: Concept
type: Legal Basis
created: 2023-12-10
modified: 2024-08-27
term status: sunset
broader: Data Processing Agreement
definition: Creation, completion, fulfilment, or performance of a contract, with the Data Controller and Data Subject as parties, and involving specified processing of data or technologies. NOTE: This concept is being deprecated - use dpv:ControllerDataSubjectAgreement which has a more explicit definition of the entities involved and the intent of the contract
in scheme: contract-types-classes

Data Subject as Data Source
type: Class
type: Concept
type: Data Source
created: 2023-10-12
term status: accepted
broader: Data Source
definition: Data Sourced from Data Subject(s), e.g. when data is collected via a form or observed from their activities
in scheme: processing-context-classes

Data Subject Informed
type: Class
type: Concept
type: Entity Informed Status
contributor: Delaram Golpayegani
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2024-05-10
term status: accepted
broader: Entity Informed
definition: Status indicating DataSubject has been informed about the specified context
in scheme: status-classes

Data Subject Right
type: Class
type: Concept
type: Right
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2020-11-18
term status: accepted
broader: Right
definition: The rights applicable or provided to a Data Subject
in scheme: rights-classes
scope note: Based on use of definitions, the notion of 'Data Subject Right' can be equivalent to 'Individual Right' or 'Right of a Person'

Data Subject Rights Management
type: Class
type: Concept
type: Organisational Measure
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2024-04-14
source: DGA 12.m
term status: accepted
broader: Rights Management
definition: Methods to provide, implement, and exercise data subjects' rights
in scheme: organisational-measures-classes
scope note: This concept only concerns the organisational management of rights, and does not represent the rights themselves - especially where such 'rights' are legally recognised or defined for the data subject or individual. The concept dpv:DataSubjectRight is provided to represent such legal rights.

Data Subject Scale
type: Class
type: Concept
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Rana Saniei
created: 2022-06-15
example: E0049
subclass of: Scale
term status: accepted
broader: Scale
definition: Scale of Data Subject(s)
in scheme: processing-scale-classes

Data Subject Uninformed
type: Class
type: Concept
type: Entity Informed Status
contributor: Delaram Golpayegani
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2024-05-10
term status: accepted
broader: Entity Uninformed
definition: Status indicating DataSubject is uninformed i.e. has not been informed about the specified context
in scheme: status-classes

Data Transfer Impact Assessment
type: Class
type: Concept
type: Organisational Measure
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2021-09-08
term status: accepted
broader: Impact Assessment
definition: Impact Assessment for conducting data transfers
in scheme: risk-classes

Data Transfer Legal Basis
type: Class
type: Concept
type: Legal Basis
contributor: David Hickey
contributor: Georg P. Krog
created: 2021-09-08
term status: accepted
broader: Legal Basis
definition: Specific or special categories and instances of legal basis intended for justifying data transfers
in scheme: legal-basis-classes

Data Transfer Notice
type: Class
type: Concept
type: Organisational Measure
contributor: Beatriz Esteves
contributor: David Hickey
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2024-04-14
source: DGA 5.9
term status: accepted
broader: Notice
definition: Notice for the legal entity for the transfer of its data
in scheme: notice-classes
in scheme: organisational-measures-classes

Data Transfer Record
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2024-04-14
term status: accepted
broader: Data Processing Record
definition: Record of data transfer activities
in scheme: organisational-measures-classes

Data Volume
type: Class
type: Concept
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Rana Saniei
created: 2022-06-15
example: E0049
subclass of: Scale
term status: accepted
broader: Scale
definition: Volume or Scale of Data
in scheme: processing-scale-classes

Decentralised Locations
type: Class
type: Concept
type: Location Fixture
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
term status: accepted
broader: Location Fixture
definition: Location that is spread across multiple separate areas with no distinction between their importance
in scheme: jurisdiction-classes

Decision Making
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-09-07
subclass of: Processing Context
term status: accepted
broader: Processing Context
definition: Processing that involves decision making
in scheme: processing-context-classes

De-Identification
type: Class
type: Concept
type: Technical Measure
contributor: Axel Polleres
contributor: Harshvardhan J. Pandit
contributor: Mark Lizar
contributor: Rob Brennan
created: 2019-04-05
modified: 2022-11-24
source: NISTIR 8053
term status: accepted
broader: Data Sanitisation Technique
definition: Removal of identity or information to reduce identifiability
in scheme: technical-measures-classes

Delete
type: Class
type: Concept
type: Processing
contributor: Harshvardhan J. Pandit
created: 2024-04-14
term status: accepted
broader: Remove
definition: to remove data in a logical fashion i.e. with the possibility of retrieval
in scheme: processing-classes

Delivery of Goods
type: Class
type: Concept
type: Purpose
contributor: Axel Polleres
contributor: Elmar Kiesling
contributor: Fajar Ekaputra
contributor: Harshvardhan J. Pandit
contributor: Javier Fernández
contributor: Simon Steyskal
created: 2019-04-05
term status: accepted
broader: Requested Service Provision
definition: Purposes associated with delivering goods and services requested or asked by consumer
in scheme: purposes-classes
related: Delivery

Derive
type: Class
type: Concept
type: Processing
created: 2019-05-07
source: SPECIAL Project
example: E0009
term status: accepted
broader: Obtain
definition: to create new derivative data from the original data
in scheme: processing-classes
related: Derive
scope note: Derive indicates data is present or obtainable from existing data. For data that is created without such existence, see Infer.

Derived Data
type: Class
type: Concept
created: 2023-12-10
subclass of: Data
term status: accepted
broader: Data
definition: Data that has been obtained through derivations of other data
in scheme: personal-data-classes

Derived Personal Data
type: Class
type: Concept
contributor: Elmar Kiesling
contributor: Fajar Ekaputra
contributor: Harshvardhan J. Pandit
created: 2019-05-07
modified: 2023-12-10
source: DPVCG
example: E0009
example: E0046
subclass of: Derived Data
subclass of: Personal Data
term status: accepted
broader: Derived Data
broader: Personal Data
definition: Personal Data that is obtained or derived from other data
in scheme: personal-data-classes
related: Derived
scope note: Derived Data is data that is obtained through processing of existing data, e.g. deriving first name from full name. To indicate data that is derived but which was not present or evident within the source data, InferredPersonalData should be used.

Design Standard
type: Class
type: Concept
type: Organisational Measure
contributor: Axel Polleres
contributor: Harshvardhan J. Pandit
contributor: Mark Lizar
contributor: Rob Brennan
created: 2019-04-05
term status: accepted
broader: Standard
definition: A set of rules or guidelines outlining criterias for design
in scheme: organisational-measures-classes

Destruct
type: Class
type: Concept
type: Processing
created: 2019-05-07
source: GDPR Art.4-2
term status: accepted
broader: Remove
definition: to process data in a way it no longer exists or cannot be repaired
in scheme: processing-classes

Deterministic Pseudonymisation
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Data Pseudonymisation: Advanced Techniques and Use Cases
term status: accepted
broader: Pseudonymisation
definition: Pseudonymisation achieved through a deterministic function
in scheme: technical-measures-classes

Deterrence
type: Class
type: Concept
type: Rule
contributor: Arthit Suriyawongkul
contributor: Beatriz Esteves
contributor: Delaram Golpayegani
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2025-06-19
term status: accepted
broader: Unacceptable Rule
definition: A rule describing a deterrence for performing an activity
in scheme: rules-classes
scope note: Deterrences are aligned with the term SHOULD NOT in RFC2119 where specified activities should be avoided from being carried out but are not prohibitions

Deterrence Followed
type: Class
type: Concept
type: Rule Fulfilment Status
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-08-06
term status: accepted
broader: Rule Fulfilled
definition: Status indicating a deterrence has been followed i.e. the activity stated as being deterred has not been carried out
in scheme: rules-classes

Deterrence Not Followed
type: Class
type: Concept
type: Rule Fulfilment Status
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-08-06
term status: accepted
broader: Rule Unfulfilled
definition: Status indicating a deterrence has not been followed i.e. the activity stated as being deterred has been carried out
in scheme: rules-classes

Device Notice
type: Class
type: Concept
type: Organisational Measure
created: 2024-08-17
source: ICO - What methods can we use to provide privacy information?
term status: accepted
broader: Notice
definition: A notice provided using the functionality provided by a device e.g. using the popup or alert feature
in scheme: notice-classes

Differential Privacy
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Data Protection Engineering
term status: accepted
broader: Cryptographic Methods
definition: Utilisation of differential privacy where information is shared as patterns or groups to withhold individual elements
in scheme: technical-measures-classes

Digital Literacy
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2024-05-17
term status: accepted
broader: Organisational Measure
definition: Providing skills, knowledge, and understanding to enable reading, writing, analysing, reasoning, and communicating regarding digital technologies and their implications
in scheme: organisational-measures-classes

Digital Rights Management
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Technical Measure
definition: Management of access, use, and other operations associated with digital content
in scheme: technical-measures-classes

Digital Signatures
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Cryptographic Methods
definition: Expression and authentication of identity through digital information containing cryptographic signatures
in scheme: technical-measures-classes

Direct Marketing
type: Class
type: Concept
type: Purpose
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2020-11-04
term status: accepted
broader: Marketing
definition: Purposes associated with conducting direct marketing i.e. marketing communicated directly to the individual
in scheme: purposes-classes

Disaster Recovery Procedures
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA 5G Cybersecurity Standards
term status: accepted
broader: Governance Procedures
definition: Procedures related to management of disasters and recovery
in scheme: organisational-measures-classes

Disclose
type: Class
type: Concept
type: Processing
created: 2019-05-07
source: GDPR Art.4-2
term status: accepted
broader: Processing
definition: to make data known
in scheme: processing-classes

Disclose by Transmission
type: Class
type: Concept
type: Processing
created: 2019-05-07
source: GDPR Art.4-2
term status: accepted
broader: Disclose
definition: to disclose data by means of transmission
in scheme: processing-classes

Display
type: Class
type: Concept
type: Processing
contributor: Beatriz Esteves
created: 2024-04-14
source: DGA 2.20
term status: accepted
broader: Disclose
definition: to present or show data
in scheme: processing-classes

Dispute Management
type: Class
type: Concept
type: Purpose
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2021-09-08
source: Belgian DPA ROPA Template
term status: accepted
broader: Organisation Governance
definition: Purposes associated with activities that manage disputes by natural persons, private bodies, or public authorities relevant to organisation
in scheme: purposes-classes

Disseminate
type: Class
type: Concept
type: Processing
created: 2019-05-07
source: GDPR Art.4-2
term status: accepted
broader: Disclose
definition: to spread data throughout
in scheme: processing-classes

Distributed System Security
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Security Method
definition: Security implementations provided using or over a distributed system
in scheme: technical-measures-classes

Distribution Agreement
type: Class
type: Concept
type: Legal Basis
created: 2024-08-27
term status: accepted
broader: Contract by Domain
definition: A contract regarding supply of data or technologies between a distributor and a supplier
in scheme: contract-types-classes

Document Randomised Pseudonymisation
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Data Pseudonymisation: Advanced Techniques and Use Cases
term status: accepted
broader: Pseudonymisation
definition: Use of randomised pseudonymisation where the same elements are assigned different values in the same document or database
in scheme: technical-measures-classes

Document Security
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Security Method
definition: Security measures enacted over documents to protect against tampering or restrict access
in scheme: technical-measures-classes

Download
type: Class
type: Concept
type: Processing
contributor: Beatriz Esteves
created: 2024-04-14
source: 2.20
source: DGA 2.13
term status: accepted
broader: Disclose
definition: to provide a copy or to receive a copy of data over a network or internet
in scheme: processing-classes

Duration
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-02-09
example: E0050
example: E0070
subclass of: Context
term status: accepted
broader: Context
definition: The duration or temporal limitation
in scheme: context-classes

End User License Agreement (EULA)
type: Class
type: Concept
type: Legal Basis
created: 2024-08-27
term status: accepted
broader: License Agreement
definition: End User License Agreement is a contract entered into between a software (or service) developer or provider with the (end-)user
in scheme: contract-types-classes

Economic Union
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-01-19
modified: 2025-05-04
subclass of: Jurisdiction
term status: modified
broader: Jurisdiction
definition: A political union of two or more countries based on economic or trade agreements
in scheme: jurisdiction-classes

Educational Organisation
type: Class
type: Concept
contributor: Delaram Golpayegani
created: 2024-12-01
subclass of: Organisation
term status: accepted
broader: Organisation
definition: An organisation focused on delivering formal or informal education, training, or research
in scheme: entities-organisation-classes

Educational Training
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Staff Training
definition: Training methods that are intended to provide education on topic(s)
in scheme: organisational-measures-classes

Effectiveness Determination Procedures
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA 5G Cybersecurity Standards
term status: accepted
broader: Assessment
definition: Procedures intended to determine effectiveness of other measures
in scheme: organisational-measures-classes

Elderly Data Subject
type: Class
type: Concept
type: Human Subject
contributor: Georg P. Krog
created: 2022-06-15
modified: 2024-12-17
term status: modified
broader: Vulnerable Data Subject
definition: Data subjects that are considered elderly (i.e. based on age)
in scheme: entities-datasubject-classes

Elderly Human
type: Class
type: Concept
type: Human Subject
contributor: Harshvardhan J. Pandit
created: 2024-12-17
term status: accepted
broader: Vulnerable Human
definition: Humans that are considered elderly (i.e. based on age)
in scheme: entities-datasubject-classes

Emergency Healthcare Provider
type: Class
type: Concept
contributor: Delaram Golpayegani
created: 2024-12-01
subclass of: Emergency Service Provider
term status: accepted
broader: Emergency Service Provider
definition: An organisation that is an emergency service provider focused on delivering immediate medical care to patients in critical or life-threatening situations
in scheme: entities-organisation-classes

Emergency Service Provider
type: Class
type: Concept
contributor: Delaram Golpayegani
created: 2024-12-01
subclass of: Organisation
term status: accepted
broader: Organisation
definition: An organisation tasked with providing emergency services such as by responding rapidly to urgent situations to protect lives, property, and the environment
in scheme: entities-organisation-classes

Employee
type: Class
type: Concept
type: Human Subject
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-04-06
modified: 2024-12-17
term status: modified
broader: Human Subject
definition: Humans that are employees
in scheme: entities-datasubject-classes

Employment Contract
type: Class
type: Concept
type: Legal Basis
created: 2024-08-27
term status: accepted
broader: Contract by Domain
definition: A contract regarding employment between an employer and an employee
in scheme: contract-types-classes

Encryption
type: Class
type: Concept
type: Technical Measure
contributor: Axel Polleres
contributor: Harshvardhan J. Pandit
contributor: Mark Lizar
contributor: Rob Brennan
created: 2019-04-05
example: E0020
term status: accepted
broader: Technical Measure
definition: Technical measures consisting of encryption
in scheme: technical-measures-classes

Encryption at Rest
type: Class
type: Concept
type: Technical Measure
contributor: Axel Polleres
contributor: Harshvardhan J. Pandit
contributor: Mark Lizar
contributor: Rob Brennan
created: 2019-04-05
term status: accepted
broader: Encryption
definition: Encryption of data when being stored (persistent encryption)
in scheme: technical-measures-classes

Encryption in Transfer
type: Class
type: Concept
type: Technical Measure
contributor: Axel Polleres
contributor: Harshvardhan J. Pandit
contributor: Mark Lizar
contributor: Rob Brennan
created: 2019-04-05
term status: accepted
broader: Encryption
definition: Encryption of data in transit e.g. when being transferred from one location to another, including sharing
in scheme: technical-measures-classes

Encryption in Use
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-10-22
term status: accepted
broader: Encryption
definition: Encryption of data when it is being used
in scheme: technical-measures-classes

End-to-End Encryption (E2EE)
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Data Protection Engineering
term status: accepted
broader: Encryption
definition: Encrypted communications where data is encrypted by the sender and decrypted by the intended receiver to prevent access to any third party
in scheme: technical-measures-classes

Endless Duration
type: Class
type: Concept
type: Duration
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
term status: accepted
broader: Duration
definition: Duration that is (known or intended to be) open ended or without an end
in scheme: context-classes

Enforce Access Control
type: Class
type: Concept
type: Purpose
contributor: Axel Polleres
contributor: Elmar Kiesling
contributor: Fajar Ekaputra
contributor: Harshvardhan J. Pandit
contributor: Javier Fernández
contributor: Simon Steyskal
created: 2019-04-05
term status: accepted
broader: Enforce Security
definition: Purposes associated with conducting or enforcing access control as a form of security
in scheme: purposes-classes
related: Login
scope note: Was previously "Access Control". Prefixed to distinguish from Technical Measure.

Enforce Security
type: Class
type: Concept
type: Purpose
contributor: Axel Polleres
contributor: Elmar Kiesling
contributor: Fajar Ekaputra
contributor: Harshvardhan J. Pandit
contributor: Javier Fernández
contributor: Simon Steyskal
created: 2019-04-05
term status: accepted
broader: Purpose
definition: Purposes associated with ensuring and enforcing security for data, personnel, or other related matters
in scheme: purposes-classes
scope note: Was previous "Security". Prefixed to distinguish from TechOrg measures.

Enter Into Contract
type: Class
type: Concept
type: Legal Basis
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2021-04-07
term status: accepted
broader: Contract
definition: Processing necessary to enter into contract
in scheme: legal-basis-classes

Entity
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-02-02
term status: accepted
definition: A human or non-human 'thing' that constitutes as an entity
in scheme: entities-classes

Entity Active Involvement
type: Class
type: Concept
contributor: Delaram Golpayegani
created: 2024-05-11
subclass of: Entity Involvement
term status: accepted
broader: Entity Involvement
definition: Involvement where entity is 'actively' involved
in scheme: processing-context-classes

Entity Informed
type: Class
type: Concept
type: Entity Informed Status
contributor: Delaram Golpayegani
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2024-05-10
term status: accepted
broader: Entity Informed Status
definition: Status indicating entity has been informed about specified context
in scheme: status-classes

Entity Informed Status
type: Class
type: Concept
contributor: Delaram Golpayegani
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2024-05-10
subclass of: Status
term status: accepted
broader: Status
definition: Status indicating whether an entity is informed or uninformed about specified context
in scheme: status-classes

Entity Intended Involvement
type: Class
type: Concept
type: Entity Involvement Status
contributor: Delaram Golpayegani
created: 2024-12-01
term status: accepted
broader: Entity Involvement
broader: Intended
definition: Status indicating the involvement of the entity is intended
in scheme: processing-context-classes

Entity Involved
type: Class
type: Concept
type: Entity Involvement Status
contributor: Delaram Golpayegani
created: 2024-12-01
term status: accepted
broader: Entity Involvement Status
definition: Status indicating the entity is involved
in scheme: processing-context-classes

Entity Involvement
type: Class
type: Concept
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
created: 2024-05-11
subclass of: Processing Context
term status: accepted
broader: Processing Context
definition: Involvement of an entity in specific context
in scheme: processing-context-classes

Entity Involvement Status
type: Class
type: Concept
contributor: Delaram Golpayegani
created: 2024-12-01
subclass of: Entity Involvement
subclass of: Status
term status: accepted
broader: Entity Involvement
broader: Status
definition: Status indicating whether an entity is involved
in scheme: processing-context-classes

Entity Non-Involvement
type: Class
type: Concept
contributor: Delaram Golpayegani
created: 2024-05-11
subclass of: Entity Involvement
term status: accepted
broader: Entity Involvement
definition: Indicating entity is not involved
in scheme: processing-context-classes

Entity Non-Permissive Involvement
type: Class
type: Concept
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
created: 2024-05-11
subclass of: Entity Involvement
term status: accepted
broader: Entity Involvement
definition: Involvement of an entity in specific context where it is not permitted or able to do something
in scheme: processing-context-classes

Entity Not Involved
type: Class
type: Concept
type: Entity Involvement Status
contributor: Delaram Golpayegani
created: 2024-12-01
term status: accepted
broader: Entity Involvement Status
definition: Status indicating the entity is not involved
in scheme: processing-context-classes

Entity Passive Involvement
type: Class
type: Concept
contributor: Delaram Golpayegani
created: 2024-05-11
subclass of: Entity Involvement
term status: accepted
broader: Entity Involvement
definition: Involvement where entity is 'passively' or 'not actively' involved
in scheme: processing-context-classes

Entity Permissive Involvement
type: Class
type: Concept
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
created: 2024-05-11
subclass of: Entity Involvement
term status: accepted
broader: Entity Involvement
definition: Involvement of an entity in specific context where it is permitted or able to do something
in scheme: processing-context-classes

Entity Uninformed
type: Class
type: Concept
contributor: Delaram Golpayegani
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2024-05-10
subclass of: Entity Informed Status
term status: accepted
broader: Entity Informed Status
definition: Status indicating entity is uninformed i.e. has been not been informed about specified context
in scheme: status-classes

Entity Unintended Involvement
type: Class
type: Concept
type: Entity Involvement Status
contributor: Delaram Golpayegani
created: 2024-12-01
term status: accepted
broader: Entity Involvement
broader: Unintended
definition: Status indicating the involvement of the entity is not intended
in scheme: processing-context-classes

Environmental Protection
type: Class
type: Concept
type: Physical Measure
contributor: Harshvardhan J. Pandit
created: 2024-04-14
source: NIST SP 800-13
term status: accepted
broader: Physical Measure
definition: Physical protection against environmental threats such as fire, floods, storms, etc.
in scheme: physical-measures-classes

Erase
type: Class
type: Concept
type: Processing
created: 2019-05-07
source: GDPR Art.4-2
term status: accepted
broader: Remove
definition: to remove data from existence i.e. without the possibility of retrieval
in scheme: processing-classes

Establish Contractual Agreement
type: Class
type: Concept
type: Purpose
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2022-11-09
term status: accepted
broader: Purpose
definition: Purposes associated with carrying out data processing to establish an agreement, such as for entering into a contract
in scheme: purposes-classes

Evaluation of Individuals
type: Class
type: Concept
type: Evaluation and Scoring
contributor: Harshvardhan J. Pandit
created: 2022-10-22
modified: 2022-11-30
source: GDPR Art.4-2
term status: accepted
broader: Evaluation and Scoring
definition: Processing that involves evaluation of individuals
in scheme: processing-context-classes

Evaluation and Scoring
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
contributor: Piero Bonatti
created: 2020-11-04
source: GDPR Art.4-2
subclass of: Processing Context
term status: accepted
broader: Processing Context
definition: Processing that involves evaluation and scoring of individuals
in scheme: processing-context-classes

Expectation Status
type: Class
type: Concept
contributor: Delaram Golpayegani
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2024-05-10
term status: accepted
definition: Status indicating whether the specified context was intended or unintended
in scheme: status-classes
scope note: Expectation is associated with the outcome of a goal or purpose for what is expected to happen i.e. an ex-post indication of what was expected to happen in the specified context. Intention and Expectation are closely related terms. We recommend using Intention when the entity has the ability to control the implementation and Expectation for when the entity does not have control or for what happens after or beyond the exercise of control.

Expected
type: Class
type: Concept
type: Expectation Status
contributor: Delaram Golpayegani
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2024-05-10
term status: accepted
broader: Expectation Status
definition: Status indicating the specified context was expected
in scheme: status-classes

Explicitly Expressed Consent
type: Class
type: Concept
type: Legal Basis
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-06-21
example: E0018
term status: accepted
broader: Expressed Consent
definition: Consent that is expressed through an explicit action solely conveying a consenting decision
in scheme: consent-types-classes
scope note: Explicitly expressed consent is a more specific form of Expressed consent where the action taken must 'explicitly' relate to only the consent decision. Expressed consent where the consenting is part of other matters therefore cannot satisfy the requirements of explicitly expressed consent. An example of explicit action expressing the consenting decision is a button on a web form where the form only relates to consent, or it is accompanied with suitable text that reiterates what the consenting decision is about

Export
type: Class
type: Concept
type: Processing
contributor: Beatriz Esteves
created: 2024-04-14
source: DGA 2.20
term status: accepted
broader: Disclose
definition: to provide a copy of data from one system to another
in scheme: processing-classes

Expressed Consent
type: Class
type: Concept
type: Legal Basis
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-06-21
example: E0018
term status: accepted
broader: Informed Consent
definition: Consent that is expressed through an action intended to convey a consenting decision
in scheme: consent-types-classes
scope note: Expressed consent requires the individual take a specific and unambiguous action that directly indicates their consent. This action may be a part of other processes such as setting preferences, or agreeing to a contract, or other matters not relating to consent. An example of expressed consent is interacting with a checkbox within a dashboard or clicking a button on a web form

Fundamental Rights Impact Assessment (FRIA)
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2024-04-14
source: AI Act Art.27
term status: accepted
broader: Rights Impact Assessment
definition: Impact assessment which assesses the potential and actual impact on fundamental rights occurring due to processing activities
in scheme: risk-classes
scope note: The fundamental rights and freedoms may be those defined in law or other norms, and may be bound to a jurisdiction - for example see EU Charter of Fundamental Rights

Federated Locations
type: Class
type: Concept
type: Location Fixture
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
term status: accepted
broader: Location Fixture
definition: Location that is federated across multiple separate areas with designation of a primary or central location
in scheme: jurisdiction-classes

Fee Not Required
type: Class
type: Concept
type: Fee Requirement
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2024-08-27
term status: accepted
broader: Fee Requirement
definition: Concept indicating a fee is not required. This is distinct from a Fee of zero as it indicates a fee is not applicable in the context
in scheme: context-classes

Fee Required
type: Class
type: Concept
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2024-08-27
subclass of: Fee Requirement
term status: accepted
broader: Fee Requirement
definition: Concept indicating a fee is required. The value of the fee should be specified using rdf:value or an another relevant means
in scheme: context-classes

Fee Requirement
type: Class
type: Concept
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2024-08-27
subclass of: Context
term status: accepted
broader: Context
definition: Concept indicating whether a fee is required
in scheme: context-classes

File System Security
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Security Method
definition: Security implemented over a file system
in scheme: technical-measures-classes

Filter
type: Class
type: Concept
type: Processing
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2022-06-15
term status: accepted
broader: Transform
definition: to filter or keep data for some criteria
in scheme: processing-classes

Fire Department
type: Class
type: Concept
contributor: Delaram Golpayegani
created: 2024-12-01
subclass of: Emergency Service Provider
term status: accepted
broader: Emergency Service Provider
definition: An organisation that is an emergency service provider for fire prevention, firefighting, and rescue services
in scheme: entities-organisation-classes

Fixed Location
type: Class
type: Concept
type: Location Fixture
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
term status: accepted
broader: Location Fixture
definition: Location that is fixed i.e. known to occur at a specific place
in scheme: jurisdiction-classes

Fixed Multiple Locations
type: Class
type: Concept
type: Location Fixture
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
term status: accepted
broader: Fixed Location
definition: Location that is fixed with multiple places e.g. multiple cities
in scheme: jurisdiction-classes

Fixed Occurrences Duration
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
subclass of: Duration
term status: accepted
broader: Duration
definition: Duration that takes place a fixed number of times e.g. 3 times
in scheme: context-classes

Fixed Singular Location
type: Class
type: Concept
type: Location Fixture
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
term status: accepted
broader: Fixed Location
definition: Location that is fixed at a specific place e.g. a city
in scheme: jurisdiction-classes

For-Profit Organisation
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-02-02
modified: 2020-10-05
subclass of: Organisation
term status: accepted
broader: Organisation
definition: An organisation that aims to achieve profit as its primary goal
in scheme: entities-organisation-classes

Format
type: Class
type: Concept
type: Processing
contributor: Beatriz Esteves
created: 2024-04-14
source: DGA 12.d
term status: accepted
broader: Structure
definition: to arrange or structure data in a specific form
in scheme: processing-classes

Fraud Prevention and Detection
type: Class
type: Concept
type: Purpose
contributor: Axel Polleres
contributor: Elmar Kiesling
contributor: Fajar Ekaputra
contributor: Harshvardhan J. Pandit
contributor: Javier Fernández
contributor: Simon Steyskal
created: 2019-04-05
term status: accepted
broader: Misuse, Prevention and Detection
definition: Purposes associated with fraud detection, prevention, and mitigation
in scheme: purposes-classes
related: Government

Frequency
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-02-16
example: E0051
subclass of: Context
term status: accepted
broader: Context
definition: The frequency or information about periods and repetitions in terms of recurrence.
in scheme: context-classes

Fulfilment of Contractual Obligation
type: Class
type: Concept
type: Purpose
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2022-11-09
term status: accepted
broader: Fulfilment of Obligation
definition: Purposes associated with carrying out data processing to fulfill a contractual obligation
in scheme: purposes-classes

Fulfilment of Obligation
type: Class
type: Concept
type: Purpose
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2022-11-09
term status: accepted
broader: Purpose
definition: Purposes associated with carrying out data processing to fulfill an obligation
in scheme: purposes-classes

Full Automation
type: Class
type: Concept
type: Automation Level
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
created: 2023-12-10
modified: 2024-04-20
source: ISO/IEC 22989:2022 Artificial intelligence concepts and terminology
term status: accepted
broader: Automation Level
definition: Level of automation corresponding to Level 5 in ISO/IEC 22989:2022 where the automation in system is capable of performing all its tasks regardless of the conditions without human involvement
in scheme: processing-context-classes
scope note: Though Fully Automated such operations can still be associated with dpv:HumanInvolved e.g. for inputs, oversight or verification

Fully Randomised Pseudonymisation
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Data Pseudonymisation: Advanced Techniques and Use Cases
term status: accepted
broader: Pseudonymisation
definition: Use of randomised pseudonymisation where the same elements are assigned different values each time they occur
in scheme: technical-measures-classes

Government-to-Business Contract
type: Class
type: Concept
type: Legal Basis
created: 2024-08-27
term status: accepted
broader: Contract by Entity Type
definition: A contract between a government and a business
in scheme: contract-types-classes

Government-to-Consumer Contract
type: Class
type: Concept
type: Legal Basis
created: 2024-08-27
term status: accepted
broader: Contract by Entity Type
definition: A contract between a government and consumers
in scheme: contract-types-classes

Government-to-Government Contract
type: Class
type: Concept
type: Legal Basis
created: 2024-08-27
term status: accepted
broader: Contract by Entity Type
definition: A contract between two governments or government departments or units
in scheme: contract-types-classes

Generate
type: Class
type: Concept
type: Processing
contributor: Harshvardhan J. Pandit
created: 2022-04-20
term status: accepted
broader: Obtain
definition: to generate or create data
in scheme: processing-classes

Generated Data
type: Class
type: Concept
created: 2023-12-10
subclass of: Data
term status: accepted
broader: Data
definition: Data that is generated or brought into existence without relation to existing data i.e. it is not derived or inferred from other data
in scheme: personal-data-classes

Generated Personal Data
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-03-30
modified: 2023-12-10
subclass of: Personal Data
term status: accepted
broader: Personal Data
definition: Personal Data that is generated or brought into existence without relation to existing data i.e. it is not derived or inferred from other data
in scheme: personal-data-classes
scope note: Generated Data is used to indicate data that is produced and is not derived or inferred from other data

Geographic Coverage
type: Class
type: Concept
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2022-06-15
example: E0049
subclass of: Scale
term status: accepted
broader: Scale
definition: Indicate of scale in terms of geographic coverage
in scheme: processing-scale-classes

Global Scale
type: Class
type: Concept
type: Geographic Coverage
contributor: Harshvardhan J. Pandit
created: 2022-06-15
term status: accepted
broader: Geographic Coverage
definition: Geographic coverage spanning the entire globe
in scheme: processing-scale-classes

Governance Procedures
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA 5G Cybersecurity Standards
term status: accepted
broader: Organisational Measure
definition: Procedures related to governance (e.g. organisation, unit, team, process, system)
in scheme: organisational-measures-classes

Governmental Organisation
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-02-02
modified: 2020-10-05
subclass of: Organisation
term status: accepted
broader: Organisation
definition: An organisation managed or part of government
in scheme: entities-organisation-classes

Graphical Notice
type: Class
type: Concept
type: Organisational Measure
created: 2024-08-17
source: ICO - What methods can we use to provide privacy information?
term status: accepted
broader: Notice
definition: A notice that uses graphical elements such as visualisations and icons
in scheme: notice-classes

Guardian(s) of Data Subject
type: Class
type: Concept
type: Human Subject
contributor: Georg P. Krog
created: 2022-08-03
modified: 2024-12-17
term status: modified
broader: Guardian(s) of Human
definition: Guardian(s) of data subjects such as children
in scheme: entities-datasubject-classes

Guardian(s) of Human
type: Class
type: Concept
type: Human Subject
contributor: Harshvardhan J. Pandit
created: 2024-12-17
term status: accepted
broader: Human Subject
definition: Guardian(s) of humans
in scheme: entities-datasubject-classes

Guideline
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2024-05-12
term status: accepted
broader: Guidelines Principle
definition: Practices that specify how activities must be conducted
in scheme: organisational-measures-classes

Guidelines Principle
type: Class
type: Concept
type: Organisational Measure
contributor: Axel Polleres
contributor: Harshvardhan J. Pandit
contributor: Mark Lizar
contributor: Rob Brennan
created: 2019-04-05
term status: accepted
broader: Organisational Measure
definition: Guidelines or Principles regarding processing and operational measures
in scheme: organisational-measures-classes

Hardware Security Protocols
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Security Method
definition: Security protocols implemented at or within hardware
in scheme: technical-measures-classes

Hash Functions
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Cryptographic Methods
definition: Use of hash functions to map information or to retrieve a prior categorisation
in scheme: technical-measures-classes

Hash-based Message Authentication Code (HMAC)
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA 5G Cybersecurity Standards
term status: accepted
broader: Cryptographic Authentication
definition: Use of HMAC where message authentication code (MAC) utilise a cryptographic hash function and a secret cryptographic key
in scheme: technical-measures-classes

Healthcare Organisation
type: Class
type: Concept
contributor: Delaram Golpayegani
created: 2024-12-01
subclass of: Organisation
term status: accepted
broader: Organisation
definition: An organisation that delivers medical services, promotes health, and provides care for individuals and communities
in scheme: entities-organisation-classes

High Automation
type: Class
type: Concept
type: Automation Level
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
created: 2023-12-10
modified: 2024-04-20
source: ISO/IEC 22989:2022 Artificial intelligence concepts and terminology
term status: accepted
broader: Automation Level
definition: Level of automation corresponding to Level 4 in ISO/IEC 22989:2022 where the automation in system is capable of performing all its tasks within specific controlled conditions without human involvement
in scheme: processing-context-classes
scope note: Human Involvement is implied here, e.g. for intervention, input, decisions

Homomorphic Encryption
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Cryptographic Methods
definition: Use of Homomorphic encryption that permits computations on encrypted data without decrypting it
in scheme: technical-measures-classes

Hospital
type: Class
type: Concept
contributor: Delaram Golpayegani
created: 2024-12-01
subclass of: Organisation
term status: accepted
broader: Organisation
definition: An organisation that provides comprehensive medical treatment, including emergency care, surgeries, and inpatient services
in scheme: entities-organisation-classes

Huge Data Volume
type: Class
type: Concept
type: Data Volume
contributor: Harshvardhan J. Pandit
created: 2022-06-15
term status: accepted
broader: Data Volume
definition: Data volume that is considered huge or more than large within the context
in scheme: processing-scale-classes

Huge Scale Of Data Subjects
type: Class
type: Concept
type: Data Subject Scale
contributor: Harshvardhan J. Pandit
created: 2022-06-15
term status: accepted
broader: Data Subject Scale
definition: Scale of data subjects considered huge or more than large within the context
in scheme: processing-scale-classes

Human involved
type: Class
type: Concept
type: Human Involvement
created: 2022-09-03
modified: 2023-12-10
term status: accepted
broader: Human Involvement
definition: Humans are involved in the specified context
in scheme: processing-context-classes
scope note: This concept only indicates that humans are involved. For specific involvement, see specialised concepts e.g. involved for input, oversight.

Human Involvement
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-01-26
modified: 2024-04-20
example: E0013
example: E0074
subclass of: Entity Involvement
term status: accepted
broader: Entity Involvement
definition: The involvement of humans in specified context
in scheme: processing-context-classes
scope note: Human Involvement here broadly refers to any involvement by a human in the context of carrying out processing. This may include verification of outcomes, providing input data for making decisions, or overseeing activities. To indicate whether humans are involved or not, see relevant concepts of dpv:HumanInvolved and dpv:HumanNotInvolved. The term 'Human in the loop' and its varieties are absent from DPV due to their contradictory and non-compatible use across different sources.

Human Involvement for control
type: Class
type: Concept
type: Human Involvement
created: 2022-09-04
modified: 2023-12-10
term status: accepted
broader: Human Involvement
definition: Human involvement for the purposes of exercising control over the specified operations in context
in scheme: processing-context-classes
scope note: Control is a broad term that can be applied to various stages and operations. It maps to None, Assistive, and Partial automation models.

Human Involvement for decision
type: Class
type: Concept
type: Human Involvement
created: 2022-09-06
modified: 2023-12-10
term status: accepted
broader: Human Involvement
definition: Human involvement for the purposes of exercising decisions over the specified operations in context
in scheme: processing-context-classes
scope note: Decisions are about exercising control over the operation, and are distinct from input (data or parameters).

Human Involvement for Input
type: Class
type: Concept
type: Human Involvement
contributor: Harshvardhan J. Pandit
created: 2022-09-07
modified: 2023-12-10
term status: accepted
broader: Human Involvement
definition: Human involvement for the purposes of providing inputs to the specified context
in scheme: processing-context-classes
scope note: Inputs can be in the form of data or other resources.

Human Involvement for intervention
type: Class
type: Concept
type: Human Involvement
created: 2022-09-05
modified: 2023-12-10
term status: accepted
broader: Human Involvement
definition: Human involvement for the purposes of exercising interventions over the specified operations in context
in scheme: processing-context-classes
scope note: Intervention indicates the ability to intervene in operations, which can be at various stages. It maps to Conditional and High automation models.

Human Involvement for Oversight
type: Class
type: Concept
type: Human Involvement
contributor: Harshvardhan J. Pandit
created: 2022-09-07
modified: 2023-12-10
term status: accepted
broader: Human Involvement
definition: Human involvement for the purposes of having oversight over the specified context regarding its operations, inputs, or outputs
in scheme: processing-context-classes
scope note: Oversight by itself does not indicate the ability to intervene or control the operations.

Human Involvement for Verification
type: Class
type: Concept
type: Human Involvement
contributor: Harshvardhan J. Pandit
created: 2022-09-07
modified: 2023-12-10
term status: accepted
broader: Human Involvement
definition: Human involvement for the purposes of verification of specified context to ensure its operations, inputs, or outputs are correct or are acceptable.
in scheme: processing-context-classes
scope note: Verification by itself does not imply ability to Control, Intervene, or having Oversight.

Human not involved
type: Class
type: Concept
type: Human Involvement
created: 2023-12-10
term status: accepted
broader: Human Involvement
definition: Humans are not involved in the specified context
in scheme: processing-context-classes
scope note: This maps to Autonomous and Full Automation models if no humans are involved.

Human Resource Management
type: Class
type: Concept
type: Purpose
contributor: Beatriz Esteves
contributor: David Hickey
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2021-09-01
source: Belgian DPA ROPA Template
term status: accepted
broader: Purpose
definition: Purposes associated with managing humans and 'human resources' within the organisation for effective and efficient operations.
in scheme: purposes-classes
scope note: HR is a broad concept. Its management includes, amongst others - recruiting employees and intermediaries e.g. brokers, independent representatives; payroll administration, remunerations, commissions, and wages; and application of social legislation.

Human Subject
type: Class
type: Concept
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
created: 2024-12-17
example: E0074
subclass of: Legal Entity
term status: accepted
broader: Legal Entity
definition: The individual (or category of individuals) that is the subject within some context such as personal data (dpv:DataSubject) or technology (tech:Subject)
in scheme: entities-datasubject-classes

Hybrid Public Private Space
type: Class
type: Concept
type: Location
contributor: Arthit Suriyawongkul
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-04-07
term status: accepted
broader: Private Space
broader: Public Space
definition: A space that is a hybrid space i.e it has both public and private components - such as by having part of it be a private space or which is operated privately
in scheme: jurisdiction-classes

Intellectual Property Rights Management
type: Class
type: Concept
type: Organisational Measure
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2024-04-14
source: DGA 3.1.c
term status: accepted
broader: Rights Management
definition: Management of Intellectual Property Rights with a view to identify and safeguard and enforce them
in scheme: organisational-measures-classes

Identifying Personal Data
type: Class
type: Concept
created: 2024-02-14
subclass of: Personal Data
term status: accepted
broader: Personal Data
definition: Personal Data that explicitly and by itself is sufficient to identify a person
in scheme: personal-data-classes
scope note: DPV does not use PII ('Personally Identifiable Information') as it has varying and conflicting definitions across sources. Instead the concept 'identifying personal data' is intended to provide a clear categorisation of its interpretation. Where multiple data categories can be combined to create an 'identifying' category e.g. fingerprinting, this concept represents the combined category.

Identity Authentication
type: Class
type: Concept
type: Purpose
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2024-04-14
term status: accepted
broader: Enforce Security
definition: Purposes associated with performing authentication based on identity as a form of security
in scheme: purposes-classes

Identity Management Method
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Authorisation Procedure
definition: Management of identity and identity-based processes
in scheme: organisational-measures-classes

Identity Verification
type: Class
type: Concept
type: Purpose
contributor: Axel Polleres
contributor: Elmar Kiesling
contributor: Fajar Ekaputra
contributor: Harshvardhan J. Pandit
contributor: Javier Fernández
contributor: Simon Steyskal
created: 2019-04-05
term status: accepted
broader: Verification
definition: Purposes associated with verifying or authenticating identity as a form of security
in scheme: purposes-classes

Immigrant
type: Class
type: Concept
type: Human Subject
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-04-06
modified: 2024-12-17
term status: modified
broader: Human Subject
definition: Humans that are immigrants (for a jurisdiction)
in scheme: entities-datasubject-classes

Impact
type: Class
type: Concept
contributor: Beatriz Esteves
contributor: Fajar Ekaputra
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2022-03-23
modified: 2024-08-16
example: E0027
example: E0068
example: E0069
subclass of: Consequence
term status: accepted
broader: Consequence
definition: The impact(s) possible or arising as a consequence from specified context
in scheme: risk-classes
scope note: Impact is a stronger notion of consequence in terms of influence, change, or effect on something e.g. for impact assessments

Impact Assessment
type: Class
type: Concept
type: Organisational Measure
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2020-11-04
term status: accepted
broader: Risk Assessment
definition: Calculating or determining the likelihood of impact of an existing or proposed process, which can involve risks or detriments.
in scheme: risk-classes

Implied Consent
type: Class
type: Concept
type: Legal Basis
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-06-21
term status: accepted
broader: Informed Consent
definition: Consent that is implied indirectly through an action not associated solely with conveying a consenting decision
in scheme: consent-types-classes
scope note: Implied consent is expected to also be Informed Consent. An example is a CCTV notice outside a monitored area that informs the individuals that by walking in they would be consenting to the use of camera for surveillance.

Importance
type: Class
type: Concept
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-02-09
subclass of: Context
term status: accepted
broader: Context
definition: An indication of 'importance' within a context
in scheme: context-classes
scope note: Importance can be used to express importance, desirability, relevance, or significance as a context.

Improve Existing Products and Services
type: Class
type: Concept
type: Purpose
contributor: Axel Polleres
contributor: Elmar Kiesling
contributor: Fajar Ekaputra
contributor: Harshvardhan J. Pandit
contributor: Javier Fernández
contributor: Simon Steyskal
created: 2019-04-05
term status: accepted
broader: Optimisation for Controller
definition: Purposes associated with improving existing products and services
in scheme: purposes-classes

Improve Healthcare
type: Class
type: Concept
type: Purpose
contributor: Beatriz Esteves
contributor: Harshvardhan J. Pandit
created: 2024-02-14
source: DGA 2.16
term status: accepted
broader: Public Benefit
definition: Purposes associated with improving healthcare systems such as for personalised treatments and curing chronic diseases
in scheme: purposes-classes

Improve Internal CRM Processes
type: Class
type: Concept
type: Purpose
contributor: Axel Polleres
contributor: Elmar Kiesling
contributor: Fajar Ekaputra
contributor: Harshvardhan J. Pandit
contributor: Javier Fernández
contributor: Simon Steyskal
created: 2019-04-05
term status: accepted
broader: Customer Relationship Management
broader: Optimisation for Controller
definition: Purposes associated with improving customer-relationship management (CRM) processes
in scheme: purposes-classes

Improve Public Services
type: Class
type: Concept
type: Purpose
contributor: Beatriz Esteves
contributor: Harshvardhan J. Pandit
created: 2024-02-14
source: DGA 2.16
term status: accepted
broader: Public Benefit
definition: Purposes associated with improving the provision of public services, such as public safety, education or law enforcement
in scheme: purposes-classes

Improve Transport and Mobility
type: Class
type: Concept
type: Purpose
contributor: Beatriz Esteves
contributor: Harshvardhan J. Pandit
created: 2024-02-14
source: DGA 2.16
term status: accepted
broader: Public Benefit
definition: Purposes associated with improving traffic, public transport systems or costs for drivers
in scheme: purposes-classes

Incident Management Procedures
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA 5G Cybersecurity Standards
term status: accepted
broader: Governance Procedures
definition: Procedures related to management of incidents
in scheme: organisational-measures-classes

Incident Reporting Communication
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA 5G Cybersecurity Standards
term status: accepted
broader: Governance Procedures
definition: Procedures related to management of incident reporting
in scheme: organisational-measures-classes

Incorrect Data
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-11-02
subclass of: Data
term status: accepted
broader: Data
definition: Data that is known to be incorrect or inconsistent with some requirements
in scheme: personal-data-classes

Increase Service Robustness
type: Class
type: Concept
type: Purpose
contributor: Axel Polleres
contributor: Elmar Kiesling
contributor: Fajar Ekaputra
contributor: Harshvardhan J. Pandit
contributor: Javier Fernández
contributor: Simon Steyskal
created: 2019-04-05
term status: accepted
broader: Optimisation for Controller
definition: Purposes associated with improving robustness and resilience of services
in scheme: purposes-classes

Indeterminate Duration
type: Class
type: Concept
type: Duration
contributor: Harshvardhan J. Pandit
created: 2022-11-30
term status: accepted
broader: Duration
definition: Duration that is indeterminate or cannot be determined
in scheme: context-classes
scope note: Indeterminate means (exact or otherwise) information about the duration cannot be determined, which is distinct from 'EndlessDuration' where it is known (or decided) that the duration is open-ended or without an end.

Industry Consortium
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-02-02
modified: 2020-10-05
source: ADMS controlled vocabulary
subclass of: Organisation
term status: accepted
broader: Organisation
definition: A consortium established and comprising on industry organisations
in scheme: entities-organisation-classes

Infer
type: Class
type: Concept
type: Processing
contributor: Harshvardhan J. Pandit
created: 2022-04-20
modified: 2022-10-14
example: E0009
term status: accepted
broader: Derive
definition: to infer data from existing data
in scheme: processing-classes
scope note: Infer indicates data that is derived without it being present or obtainable from existing data. For data that is presented, and is 'extracted' or 'obtained' from existing data, see Derive.

Inferred Data
type: Class
type: Concept
created: 2023-12-10
subclass of: Derived Data
term status: accepted
broader: Derived Data
definition: Data that has been obtained through inferences of other data
in scheme: personal-data-classes

Inferred Personal Data
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-01-19
modified: 2023-12-10
example: E0009
subclass of: Derived Personal Data
subclass of: Inferred Data
term status: accepted
broader: Derived Personal Data
broader: Inferred Data
definition: Personal Data that is obtained through inference from other data
in scheme: personal-data-classes
scope note: Inferred Data is derived data generated from existing data, but which did not originally exist within it, e.g. inferring demographics from browsing history.

Information Audit
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2024-12-17
term status: accepted
broader: Audit
definition: An audit that systematically examines the existence and use of information along with its associated resources (e.g. where it is stored) and flows (e.g. where it originates and with whom it is being shared)
in scheme: organisational-measures-classes

Information Flow Control
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Technical Measure
definition: Use of measures to control information flows
in scheme: technical-measures-classes

Information Security Policy
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
modified: 2024-04-14
source: ENISA 5G Cybersecurity Standards
term status: accepted
broader: Policy
definition: Policy regarding security of information
in scheme: organisational-measures-classes

Informed Consent
type: Class
type: Concept
type: Legal Basis
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-06-21
term status: accepted
broader: Consent
definition: Consent that is informed i.e. with the requirement to provide sufficient information to make a consenting decision
in scheme: consent-types-classes
scope note: The specifics for what information should be provided or made available will depend on the context, use-case, or relevant legal requirements

Innovative Use of Existing Technologies
type: Class
type: Concept
type: Innovative use of Technology
created: 2023-12-10
term status: accepted
broader: Innovative use of Technology
definition: Involvement of existing technologies used in an innovative manner
in scheme: processing-context-classes

Innovative Use of New Technologies
type: Class
type: Concept
type: Innovative use of Technology
contributor: Harshvardhan J. Pandit
contributor: Piero Bonatti
created: 2020-11-04
modified: 2023-12-10
source: GDPR Art.4-2
term status: accepted
broader: Innovative use of Technology
definition: Involvement of a new (innovative) technologies
in scheme: processing-context-classes
scope note: New technologies are by definition considered innovative

Innovative use of Technology
type: Class
type: Concept
created: 2023-12-10
subclass of: Processing Context
term status: accepted
broader: Processing Context
definition: Indicates that technology is being used in an innovative manner
in scheme: processing-context-classes
scope note: Innovative here refers to 'state of the art' rather than the implementing entity, and can be for either new technology or new uses of existing technology

Intellectual Property Data
type: Class
type: Concept
created: 2024-02-14
source: DGA 5.10
subclass of: Confidential Data
term status: accepted
broader: Confidential Data
definition: Data protected by Intellectual Property rights and regulations
in scheme: personal-data-classes

Intended
type: Class
type: Concept
type: Intention Status
contributor: Delaram Golpayegani
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2024-05-10
term status: accepted
broader: Intention Status
definition: Status indicating the specified context was intended
in scheme: status-classes

Intention Status
type: Class
type: Concept
contributor: Delaram Golpayegani
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2024-05-10
subclass of: Status
term status: accepted
broader: Status
definition: Status indicating whether the specified context was intended or unintended
in scheme: status-classes
scope note: Intention is associated with the goal or purpose for what is about to happen i.e. an ex-ante indication of whether the specified context is/was planned or intended. Intention and Expectation are closely related terms. We recommend using Intention when the entity has the ability to control the implementation and Expectation for when the entity does not have control or for what happens after or beyond the exercise of control.

Internal Resource Optimisation
type: Class
type: Concept
type: Purpose
contributor: Axel Polleres
contributor: Elmar Kiesling
contributor: Fajar Ekaputra
contributor: Harshvardhan J. Pandit
contributor: Javier Fernández
contributor: Simon Steyskal
created: 2019-04-05
term status: accepted
broader: Optimisation for Controller
definition: Purposes associated with optimisation of internal resource availability and usage for organisation
in scheme: purposes-classes

International Organisation
type: Class
type: Concept
contributor: Georg P. Krog
contributor: Julian Flake
created: 2022-03-23
modified: 2020-10-05
source: GDPR Art.4-26
subclass of: Organisation
term status: accepted
broader: Organisation
definition: An organisation and its subordinate bodies governed by public international law, or any other body which is set up by, or on the basis of, an agreement between two or more countries
in scheme: entities-organisation-classes

Intrusion Detection System
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Security Method
definition: Use of measures to detect intrusions and other unauthorised attempts to gain access to a system
in scheme: technical-measures-classes

Inverse Jurisdiction
type: Class
type: Concept
type: Jurisdiction
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-05-04
term status: accepted
broader: Jurisdiction
definition: An inverse jurisdiction for a specific jurisdiction is the set of all other jurisdictions that are not part of the specific jurisdiction
in scheme: jurisdiction-classes
scope note: Inverse Jurisdictions are helpful when asserting and checking rules that involve a concept representing jurisdictions outside of a given jurisdiction. An inverse jurisdiction of an inverse jurisdiction should give back the same original jurisdiction but this is undefined and strongly dissuaded as it could lead to recursive definitions in some use-cases

Involvement Status
type: Class
type: Concept
contributor: Delaram Golpayegani
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2024-05-10
subclass of: Status
term status: accepted
broader: Status
definition: Status indicating whether the involvement of specified context
in scheme: status-classes

Just-in-time Notice
type: Class
type: Concept
type: Organisational Measure
created: 2024-08-17
source: ICO - What methods can we use to provide privacy information?
term status: accepted
broader: Notice
definition: A notice that is provided "just in time" when collecting information or performing an activity
in scheme: notice-classes

Job Applicant
type: Class
type: Concept
type: Human Subject
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-04-06
modified: 2024-12-17
term status: modified
broader: Human Subject
definition: Humans that apply for jobs or employments
in scheme: entities-datasubject-classes

Joint Data Controllers
type: Class
type: Concept
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2022-02-02
subclass of: Data Controller
term status: accepted
broader: Data Controller
definition: A group of Data Controllers that jointly determine the purposes and means of processing
in scheme: entities-legalrole-classes
scope note: While Joint Data Controllers operate together, they are made up of individually distinct legal entities. To indicate the membership of this group, hasDataController should be used to denote each Data Controller. The concept of Joint Data Controllers also allows specifying a single group as the 'Controller' and to specify role and responsibilities within that group for each entity using DPV's concepts (e.g. isImplementedByEntity)

Joint Data Controllers Agreement
type: Class
type: Concept
type: Legal Basis
type: Legal Measure
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-01-26
modified: 2024-08-27
term status: modified
broader: Data Controller Contract
definition: An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of data between Controllers within a Joint Controllers relationship
in scheme: contract-types-classes

Judicial Organisation
type: Class
type: Concept
contributor: Delaram Golpayegani
created: 2024-12-01
subclass of: Organisation
term status: accepted
broader: Organisation
definition: An organisation involved in interpreting and applying the law, resolving disputes, and administering justice as part of the judicial system
in scheme: entities-organisation-classes

Jurisdiction
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2025-05-04
subclass of: Location
term status: accepted
broader: Location
definition: A jurisdiction represents the locations that define the extent of authority (or control) claimed, granted, or asserted by a legal entity (in particular a legal authority) to govern or enforce rules
in scheme: jurisdiction-classes

Justification
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-06-15
example: E0057
example: E0058
example: E0059
example: E0061
example: E0062
example: E0063
subclass of: Context
term status: accepted
broader: Context
definition: A form of documentation providing reasons, explanations, or justifications
in scheme: context-classes

Large Data Volume
type: Class
type: Concept
type: Data Volume
contributor: Harshvardhan J. Pandit
created: 2022-06-15
term status: accepted
broader: Data Volume
definition: Data volume that is considered large within the context
in scheme: processing-scale-classes

Large Scale Of Data Subjects
type: Class
type: Concept
type: Data Subject Scale
contributor: Harshvardhan J. Pandit
created: 2022-06-15
term status: accepted
broader: Data Subject Scale
definition: Scale of data subjects considered large within the context
in scheme: processing-scale-classes

Large Scale Processing
type: Class
type: Concept
type: Processing Scale
contributor: Harshvardhan J. Pandit
contributor: Piero Bonatti
created: 2020-11-04
modified: 2022-09-07
source: GDPR Art.4-2
term status: accepted
broader: Processing Scale
definition: Processing that takes place at large scales (as specified by some criteria)
in scheme: processing-scale-classes
scope note: The exact definition of what constitutes "large scale" depends on use of jurisdictional, domain-specific, or other forms of externally defined criteria. Where possible, this should be reflected by extending this term with the appropriate context.

Law
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-01-19
subclass of: Class
term status: accepted
definition: A law is a set of rules created by government or authorities
in scheme: jurisdiction-classes

Law Enforcement Organisation
type: Class
type: Concept
contributor: Delaram Golpayegani
created: 2024-12-01
subclass of: Organisation
term status: accepted
broader: Organisation
definition: An organisation that is an agency responsible for enforcing laws, maintaining public order, and ensuring public safety
in scheme: entities-organisation-classes

Lawful
type: Class
type: Concept
type: Lawfulness
contributor: Harshvardhan J. Pandit
created: 2022-10-19
term status: accepted
broader: Lawfulness
definition: State of being lawful or legally compliant
in scheme: status-classes

Lawfulness
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-10-19
subclass of: Compliance Status
term status: accepted
broader: Compliance Status
definition: Status associated with expressing lawfulness or legal compliance
in scheme: status-classes

Lawfulness Unknown
type: Class
type: Concept
type: Lawfulness
contributor: Arthit Suriyawongkul
contributor: Harshvardhan J. Pandit
created: 2022-10-19
modified: 2025-08-06
term status: modified
broader: Lawfulness
definition: State of the lawfulness not being known
in scheme: status-classes

Layered Notice
type: Class
type: Concept
type: Organisational Measure
created: 2024-08-17
source: ICO - What methods can we use to provide privacy information?
term status: accepted
broader: Notice
definition: A notice that contains layered elements
in scheme: notice-classes

Legal Agreement
type: Class
type: Concept
type: Legal Measure
contributor: Axel Polleres
contributor: Harshvardhan J. Pandit
contributor: Mark Lizar
contributor: Rob Brennan
created: 2019-04-05
modified: 2024-08-27
term status: sunset
broader: Legal Measure
definition: A legally binding agreement
in scheme: legal-measures-classes

Legal Basis
type: Class
type: Concept
created: 2019-04-05
modified: 2020-11-04
example: E0014
term status: accepted
definition: Legal basis used to justify processing of data or use of technology in accordance with a law
in scheme: legal-basis-classes
scope note: Legal basis (plural: legal bases) are defined by legislations and regulations, whose applicability is usually restricted to specific jurisdictions which can be represented using dpv:hasJurisdiction or dpv:hasLaw. Legal basis can be used without such declarations, e.g. 'Consent', however their interpretation will require association with a law, e.g. 'EU GDPR'.

Legal Compliance
type: Class
type: Concept
type: Purpose
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2020-11-04
modified: 2022-11-09
term status: accepted
broader: Fulfilment of Obligation
definition: Purposes associated with carrying out data processing to fulfill a legal or statutory obligation
in scheme: purposes-classes
scope note: This purpose only refers to processing that is additionally required in order to fulfill the obligations and requirements associated with a law. For example, the use of consent would have its own separate purposes, with this purpose addressing a legal requirement for maintaining consent record (along with RecordManagement). This purpose will typically be used with Legal Obligation as the legal basis.

Legal Compliance Assessment
type: Class
type: Concept
type: Organisational Measure
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2024-04-14
term status: accepted
broader: Compliance Assessment
definition: Assessment regarding legal compliance
in scheme: organisational-measures-classes

Legal Compliance Audit
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2024-12-17
term status: accepted
broader: Audit
definition: An audit that systematically examines the state of legal compliance by reviewing policies and procedures related to obligations and compliance requirements for specific laws and regulations
in scheme: organisational-measures-classes

Legal Entity
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2019-04-05
subclass of: Entity
term status: accepted
broader: Entity
definition: A human or non-human 'thing' that constitutes as an entity and which is recognised and defined in law
in scheme: entities-classes

Legal Measure
type: Class
type: Concept
created: 2023-12-10
modified: 2023-12-10
source: DGA 12.j
subclass of: Technical and Organisational Measure
term status: accepted
broader: Technical and Organisational Measure
definition: Legal measures used to safeguard and ensure good practices in connection with data and technologies
in scheme: TOM-classes

Legal Obligation
type: Class
type: Concept
type: Legal Basis
contributor: Harshvardhan J. Pandit
created: 2021-04-07
example: E0042
example: E0079
term status: accepted
broader: Legal Basis
definition: Legal Obligation to conduct the specified activities
in scheme: legal-basis-classes

Legal ObligationCompleted
type: Class
type: Concept
type: Legal ObligationStatus
created: 2024-08-27
term status: accepted
broader: Legal ObligationStatus
definition: Status where the legal obligation has been completed
in scheme: legal-basis-status-classes

Legal ObligationOngoing
type: Class
type: Concept
type: Legal ObligationStatus
created: 2024-08-27
term status: accepted
broader: Legal ObligationStatus
definition: Status where the legal obligation is being fulfilled
in scheme: legal-basis-status-classes

Legal ObligationPending
type: Class
type: Concept
type: Legal ObligationStatus
created: 2024-08-27
term status: accepted
broader: Legal ObligationStatus
definition: Status where the legal obligation has not been started
in scheme: legal-basis-status-classes

Legal ObligationStatus
type: Class
type: Concept
created: 2024-08-27
example: E0079
subclass of: Status
term status: accepted
broader: Status
definition: Status associated with use of Legal Obligation as a legal basis
in scheme: legal-basis-status-classes

Legitimate Interest
type: Class
type: Concept
type: Legal Basis
contributor: Harshvardhan J. Pandit
created: 2021-05-19
example: E0065
example: E0080
term status: accepted
broader: Legal Basis
definition: Legitimate Interests of a Party as justification for specified activities
in scheme: legal-basis-classes

Legitimate Interest Assessment
type: Class
type: Concept
type: Organisational Measure
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2021-09-08
term status: accepted
broader: Assessment
definition: Indicates an assessment regarding the use of legitimate interest as a lawful basis by the data controller
in scheme: organisational-measures-classes

Legitimate InterestInformed
type: Class
type: Concept
type: Legitimate InterestStatus
created: 2024-08-27
term status: accepted
broader: Legitimate InterestStatus
definition: Status where the Legitimate Interest was informed to the data subject or other relevant entities
in scheme: legal-basis-status-classes

Legitimate InterestNotObjected
type: Class
type: Concept
type: Legitimate InterestStatus
created: 2024-08-27
term status: accepted
broader: Legitimate InterestStatus
definition: Status where the use of Legitimate Interest was not objected to
in scheme: legal-basis-status-classes

Legitimate InterestObjected
type: Class
type: Concept
type: Legitimate InterestStatus
created: 2024-08-27
term status: accepted
broader: Legitimate InterestStatus
definition: Status where the use of Legitimate Interest was objected to
in scheme: legal-basis-status-classes

Legitimate Interest of Controller
type: Class
type: Concept
type: Legal Basis
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2021-05-19
example: E0065
term status: accepted
broader: Legitimate Interest
definition: Legitimate Interests of a Data Controller in conducting specified activities
in scheme: legal-basis-classes

Legitimate Interest of Data Subject
type: Class
type: Concept
type: Legal Basis
contributor: Georg P. Krog
created: 2022-10-22
term status: accepted
broader: Legitimate Interest
definition: Legitimate Interests of the Data Subject in conducting specified activities
in scheme: legal-basis-classes

Legitimate Interest of Third Party
type: Class
type: Concept
type: Legal Basis
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2021-05-19
term status: accepted
broader: Legitimate Interest
definition: Legitimate Interests of a Third Party in conducting specified activities
in scheme: legal-basis-classes

Legitimate InterestStatus
type: Class
type: Concept
created: 2024-08-27
example: E0080
subclass of: Status
term status: accepted
broader: Status
definition: Status associated with use of Legitimate Interest as a legal basis
in scheme: legal-basis-status-classes

Legitimate InterestUninformed
type: Class
type: Concept
type: Legitimate InterestStatus
created: 2024-08-27
term status: accepted
broader: Legitimate InterestStatus
definition: Status where the Legitimate Interest was not informed to the data subject or other relevant entities
in scheme: legal-basis-status-classes

License Agreement
type: Class
type: Concept
type: Legal Basis
created: 2024-08-27
term status: accepted
broader: Contract by Domain
definition: A Legal Document providing permission to utilise data or resource and outlining the conditions under which such use is considered valid
in scheme: contract-types-classes

Likelihood
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-07-22
example: E0068
term status: accepted
definition: The likelihood or probability or chance of something taking place or occurring
in scheme: risk-classes
scope note: Likelihood can be expressed in a subjective manner, such as 'Unlikely', or in a quantitative manner such as "Twice in a Day" (frequency per period). The suggestion is to use quantitative values, or to associate them with subjective terms used so as to enable accurate interpretations and interoperability. See the concepts related to Frequency and Duration for possible uses as a combination to express Likelihood.

Local Environment Scale
type: Class
type: Concept
type: Geographic Coverage
contributor: Harshvardhan J. Pandit
created: 2022-06-15
term status: accepted
broader: Geographic Coverage
definition: Geographic coverage spanning a specific environment within the locality
in scheme: processing-scale-classes
scope note: For example, geographic scale of an event take place in a specific building or room

Local Location
type: Class
type: Concept
type: Location
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
term status: accepted
broader: Location Locality
definition: Location is local
in scheme: jurisdiction-classes

Locality Scale
type: Class
type: Concept
type: Geographic Coverage
contributor: Harshvardhan J. Pandit
created: 2022-06-15
term status: accepted
broader: Geographic Coverage
definition: Geographic coverage spanning a specific locality
in scheme: processing-scale-classes
scope note: For example, geographic scale of a city or an area within a city

Location
type: Class
type: Concept
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2022-01-19
example: E0060
subclass of: Class
term status: accepted
definition: A location is a position, site, or area where something is located
in scheme: jurisdiction-classes
scope note: Location may be geographic, physical, or virtual.

Location Fixture
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-06-15
example: E0060
subclass of: Class
term status: accepted
definition: The fixture of location refers to whether the location is fixed
in scheme: jurisdiction-classes

Location Locality
type: Class
type: Concept
type: Location
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2022-10-04
example: E0060
term status: accepted
broader: Location
definition: Locality refers to whether the specified location is local within some context, e.g. for the user
in scheme: jurisdiction-classes

Logging Policy
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
modified: 2024-04-14
source: ENISA 5G Cybersecurity Standards
term status: accepted
broader: Policy
definition: Policy for logging of information
in scheme: organisational-measures-classes

Maintain Fraud Database
type: Class
type: Concept
type: Purpose
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2022-06-15
term status: accepted
broader: Fraud Prevention and Detection
definition: Purposes associated with maintaining a database related to identifying and identified fraud risks and fraud incidents
in scheme: purposes-classes

Make Available
type: Class
type: Concept
type: Processing
created: 2019-05-07
source: GDPR Art.4-2
term status: accepted
broader: Disclose
definition: to transform or publish data to be used
in scheme: processing-classes

Manage Consent
type: Class
type: Concept
created: 2024-12-17
subclass of: Provide Consent
subclass of: Reaffirm Consent
subclass of: Withdraw Consent
term status: accepted
broader: Provide Consent
broader: Reaffirm Consent
broader: Withdraw Consent
definition: Control for managing a given consent in terms of providing, reaffirming, or withdrawing it
in scheme: consent-controls-classes
scope note: Indicates how the data subject can manage their consent in terms of providing it, or reaffirming or withdrawing a given consent. This concept is useful to represent a single location or interface where multiple controls are provided for consent

Management Standard
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2024-12-01
term status: accepted
broader: Standard
definition: A management standard is a standard that establishes norms or requirements regarding the management operations and processes e.g. in an organisation
in scheme: organisational-measures-classes

Marketing
type: Class
type: Concept
type: Purpose
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2020-11-04
term status: accepted
broader: Purpose
definition: Purposes associated with conducting marketing in relation to organisation or products or services e.g. promoting, selling, and distributing
in scheme: purposes-classes
scope note: Was commercial interest, changed to consider Marketing a separate Purpose category by itself

Match
type: Class
type: Concept
type: Processing
contributor: Harshvardhan J. Pandit
created: 2022-04-20
source: A29WP WP 248 rev.01 Guidelines on DPIA
term status: accepted
broader: Use
definition: to combine, compare, or match data from different sources
in scheme: processing-classes

Medium Data Volume
type: Class
type: Concept
type: Data Volume
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2022-06-15
term status: accepted
broader: Data Volume
definition: Data volume that is considered medium i.e. neither large nor small within the context
in scheme: processing-scale-classes

Medium Scale Of Data Subjects
type: Class
type: Concept
type: Data Subject Scale
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2022-06-15
term status: accepted
broader: Data Subject Scale
definition: Scale of data subjects considered medium i.e. neither large nor small within the context
in scheme: processing-scale-classes

Medium Scale Processing
type: Class
type: Concept
type: Processing Scale
contributor: Harshvardhan J. Pandit
created: 2022-09-07
term status: accepted
broader: Processing Scale
definition: Processing that takes place at medium scales (as specified by some criteria)
in scheme: processing-scale-classes

Member
type: Class
type: Concept
type: Human Subject
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-04-06
modified: 2024-12-17
term status: modified
broader: Human Subject
definition: Humans that are members of a group, organisation, or other collectives
in scheme: entities-datasubject-classes

Members and Partners Management
type: Class
type: Concept
type: Purpose
contributor: David Hickey
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2021-09-01
source: Belgian DPA ROPA Template
term status: accepted
broader: Organisation Governance
definition: Purposes associated with maintaining a registry of shareholders, members, or partners for governance, administration, and management functions
in scheme: purposes-classes

Mentally Vulnerable Data Subject
type: Class
type: Concept
type: Human Subject
contributor: Georg P. Krog
created: 2022-06-15
modified: 2024-12-17
term status: modified
broader: Mentally Vulnerable Human
broader: Vulnerable Data Subject
definition: Data subjects that are considered mentally vulnerable
in scheme: entities-datasubject-classes

Mentally Vulnerable Human
type: Class
type: Concept
type: Human Subject
contributor: Harshvardhan J. Pandit
created: 2024-12-17
term status: accepted
broader: Vulnerable Human
definition: Humans that are considered mentally vulnerable within the context
in scheme: entities-datasubject-classes

Message Authentication Codes (MAC)
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Cryptographic Authentication
definition: Use of cryptographic methods to authenticate messages
in scheme: technical-measures-classes

Metadata Management
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2024-04-14
term status: accepted
broader: Data Governance
definition: Measures associated with management of metadata
in scheme: organisational-measures-classes
scope note: Examples of metadata management include assessing which metadata are required or being used by technology, assessing their potential inclusion as personal data, and implementing a metadata based solution to manage data

Misuse, Prevention and Detection
type: Class
type: Concept
type: Purpose
created: 2024-05-09
source: DGA 22.1(a)
term status: accepted
broader: Enforce Security
definition: Prevention and Detection of Misuse or Abuse of services
in scheme: purposes-classes

Mobile Platform Security
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Security Method
definition: Security implemented over a mobile platform
in scheme: technical-measures-classes

Modify
type: Class
type: Concept
type: Processing
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2022-06-15
term status: accepted
broader: Alter
definition: to modify or change data
in scheme: processing-classes

Monitor
type: Class
type: Concept
type: Processing
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2022-06-15
term status: accepted
broader: Consult
definition: to monitor data for some criteria
in scheme: processing-classes

Monitoring Policy
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
modified: 2024-04-14
source: ENISA 5G Cybersecurity Standards
term status: accepted
broader: Policy
definition: Policy for monitoring (e.g. progress, performance)
in scheme: organisational-measures-classes

Monotonic Counter Pseudonymisation
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
modified: 2022-10-13
source: ENISA Data Pseudonymisation: Advanced Techniques and Use Cases
term status: accepted
broader: Pseudonymisation
definition: A simple pseudonymisation method where identifiers are substituted by a number chosen by a monotonic counter
in scheme: technical-measures-classes

Move
type: Class
type: Concept
type: Processing
created: 2019-05-07
source: SPECIAL Project
term status: accepted
broader: Transfer
definition: to move data from one location to another including deleting the original copy
in scheme: processing-classes
related: Move

Multi-Factor Authentication (MFA)
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Authentication Protocols
definition: An authentication system that uses two or more methods to authenticate
in scheme: technical-measures-classes

Multi National Scale
type: Class
type: Concept
type: Geographic Coverage
contributor: Harshvardhan J. Pandit
created: 2022-06-15
term status: accepted
broader: Geographic Coverage
definition: Geographic coverage spanning multiple nations
in scheme: processing-scale-classes

Non-Disclosure Agreement (NDA)
type: Class
type: Concept
type: Legal Measure
contributor: Axel Polleres
contributor: Harshvardhan J. Pandit
contributor: Mark Lizar
contributor: Rob Brennan
created: 2019-04-05
modified: 2024-08-27
term status: accepted
broader: Legal Agreement
definition: Non-disclosure Agreements e.g. preserving confidentiality of information
in scheme: legal-measures-classes

National Authority
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-02-02
source: ADMS controlled vocabulary
subclass of: Authority
term status: accepted
broader: Authority
definition: An authority tasked with overseeing legal compliance for a nation
in scheme: entities-authority-classes

National Scale
type: Class
type: Concept
type: Geographic Coverage
contributor: Harshvardhan J. Pandit
created: 2022-06-15
term status: accepted
broader: Geographic Coverage
definition: Geographic coverage spanning a nation
in scheme: processing-scale-classes

Natural Person
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-02-09
subclass of: Entity
term status: accepted
broader: Entity
definition: A human
in scheme: entities-classes

Nearly Global Scale
type: Class
type: Concept
type: Geographic Coverage
contributor: Harshvardhan J. Pandit
created: 2022-06-15
term status: accepted
broader: Geographic Coverage
definition: Geographic coverage nearly spanning the entire globe
in scheme: processing-scale-classes

Necessity
type: Class
type: Concept
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-02-12
example: E0026
example: E0052
subclass of: Context
term status: accepted
broader: Context
definition: An indication of 'necessity' within a context
in scheme: context-classes
scope note: Necessity can be used to express need, essentiality, requirement, or compulsion.

Negotiate Contract
type: Class
type: Concept
created: 2024-08-27
subclass of: Contract Control
term status: accepted
broader: Contract Control
definition: Control for negotiating a contract
in scheme: contract-control-classes

Negotiated Contract
type: Class
type: Concept
type: Legal Basis
created: 2024-08-27
term status: accepted
broader: Contract by Negotiation Type
definition: A contract where the terms and conditions are determined with all parties having the ability to negotiate the terms and conditions
in scheme: contract-types-classes
scope note: Negotiation here refers to the opportunity for a party on their own initiative to modify or dictate terms and conditions within a contract. If the party is provided a set of options to choose from or in other ways is dictated which terms and conditions can be present in the contract, neither of these should be considered a negotiation

Network Proxy Routing
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Data Protection Engineering
term status: accepted
broader: Security Method
definition: Use of network routing using proxy
in scheme: technical-measures-classes

Network Security Protocols
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Security Method
definition: Security implemented at or over networks protocols
in scheme: technical-measures-classes

Non-Citizen
type: Class
type: Concept
type: Human Subject
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-04-06
modified: 2024-12-17
term status: modified
broader: Human Subject
definition: Humans that are not citizens (for a jurisdiction)
in scheme: entities-datasubject-classes

Non-commercial Purpose
type: Class
type: Concept
type: Purpose
contributor: Beatriz Esteves
contributor: Harshvardhan J. Pandit
created: 2024-02-14
source: DGA 4.4
term status: accepted
broader: Purpose
definition: Purposes associated with processing activities performed in a non-commercial setting or without intention to commercialise
in scheme: purposes-classes

Non-Commercial Research
type: Class
type: Concept
type: Purpose
contributor: Axel Polleres
contributor: Elmar Kiesling
contributor: Fajar Ekaputra
contributor: Harshvardhan J. Pandit
contributor: Javier Fernández
contributor: Simon Steyskal
created: 2019-04-05
modified: 2024-04-14
term status: accepted
broader: Non-commercial Purpose
broader: Research and Development
definition: Purposes associated with conducting research in a non-commercial setting e.g. for a non-profit-organisation (NGO)
in scheme: purposes-classes

Non Compliant
type: Class
type: Concept
type: Compliance Status
contributor: Harshvardhan J. Pandit
created: 2022-05-18
modified: 2022-09-07
term status: accepted
broader: Compliance Status
definition: State of non-compliance where objectives have not been met, but have not been violated
in scheme: status-classes
scope note: Changed from not compliant for consistency in commonly used terms

NonConformant
type: Class
type: Concept
type: Conformance Status
contributor: Harshvardhan J. Pandit
created: 2022-10-22
term status: accepted
broader: Conformance Status
definition: State of being non-conformant
in scheme: status-classes

Non-Governmental Organisation
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-02-02
modified: 2020-10-05
source: ADMS controlled vocabulary
subclass of: Organisation
term status: accepted
broader: Organisation
definition: An organisation not part of or independent from the government
in scheme: entities-organisation-classes

Non-Personal Data
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-01-19
subclass of: Data
term status: accepted
broader: Data
definition: Data that is not Personal Data
in scheme: personal-data-classes
scope note: The term NonPersonalData is provided to distinguish between PersonalData and other data, e.g. for indicating which data is regulated by privacy laws. To specify personal data that has been anonymised, the concept AnonymisedData should be used as the anonymisation process has a risk of not being fully effective and such anonymous data may be found to be personal data depending on circumstances.

Non-Personal Data Process
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2024-05-09
subclass of: Process
term status: accepted
broader: Process
definition: An action, activity, or method involving non-personal data, and asserting that no personal data is involved
in scheme: process-classes
scope note: Use of personal data within NonPersonalDataProcess should be considered a violation of the explicit constraint that no personal data is involved.

Non-Profit Organisation
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-02-02
modified: 2020-10-05
source: ADMS controlled vocabulary
subclass of: Organisation
term status: accepted
broader: Organisation
definition: An organisation that does not aim to achieve profit as its primary goal
in scheme: entities-organisation-classes

Non-Public Data Source
type: Class
type: Concept
type: Data Source
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-01-26
term status: accepted
broader: Data Source
definition: A source of data that is not publicly accessible or available
in scheme: processing-context-classes

Not Applicable
type: Class
type: Concept
type: Applicability
contributor: Harshvardhan J. Pandit
created: 2023-08-24
term status: accepted
broader: Applicability
definition: Concept indicating the information or context is not applicable
in scheme: context-classes
scope note: This relates to a 'Stop' state as distinct from a 'Halt' state. It makes no comments on whether the Activity can be resumed or continued towards completion.

Not Automated
type: Class
type: Concept
type: Automation Level
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
created: 2023-12-10
modified: 2024-04-20
source: ISO/IEC 22989:2022 Artificial intelligence concepts and terminology
term status: accepted
broader: Automation Level
definition: Level of automation corresponding to Level 0 in ISO/IEC 22989:2022 where there is no automation in the system
in scheme: processing-context-classes
scope note: Human Involvement is necessary here as there is no automation

Not Available
type: Class
type: Concept
type: Applicability
contributor: Harshvardhan J. Pandit
created: 2023-08-24
term status: accepted
broader: Applicability
definition: Concept indicating the information or context is applicable but information is not yet available
in scheme: context-classes
scope note: This concept is useful when describing situations where information is required but is not available (yet). For example, if in a form a field asks about whether a process X was completed, and it is correct to interpret that process X is applicable and must be completed, but the information is not yet available as to whether this was done - then NotAvailable is useful to represent this.

Not Involved
type: Class
type: Concept
type: Involvement Status
contributor: Delaram Golpayegani
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2024-05-10
term status: accepted
broader: Involvement Status
definition: Status indicating the specified context is 'not' involved
in scheme: status-classes

Not Required
type: Class
type: Concept
type: Necessity
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-02-15
term status: accepted
broader: Necessity
definition: Indication of neither being required nor optional i.e. not relevant or needed
in scheme: context-classes

Notice
type: Class
type: Concept
type: Organisational Measure
contributor: David Hickey
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2021-09-08
example: E0017
term status: accepted
broader: Organisational Measure
definition: A notice is an artefact for providing information, choices, or controls
in scheme: notice-classes
in scheme: organisational-measures-classes
scope note: Notice refers to the information whereas Notification refers to the provision of that notice. In several cases, they are used interchangeably - for example Privacy Notice as a measure or control refers to both the information as well as the act of making it available. For 'active' contexts where this distinction is important, e.g. data breach notifications, see Notification concept.

Notice Communicated
type: Class
type: Concept
type: Notice Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2024-12-01
term status: accepted
broader: Notice Status
definition: Status indicating the notice has been communicated
in scheme: notice-classes

Notice Generated
type: Class
type: Concept
type: Notice Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2024-12-01
term status: accepted
broader: Notice Status
definition: Status indicating the notice has been generated
in scheme: notice-classes

Notice Icon
type: Class
type: Concept
created: 2024-08-17
source: ICO - What methods can we use to provide privacy information?
example: E0072
term status: accepted
definition: An icon within a notice associated with specific information or elements
in scheme: notice-classes

Notice Latest
type: Class
type: Concept
type: Notice Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2024-12-01
term status: accepted
broader: Notice Status
definition: Status indicating the notice is currently at its latest iteration
in scheme: notice-classes

Notice Layer
type: Class
type: Concept
created: 2024-08-17
source: ICO - What methods can we use to provide privacy information?
example: E0072
term status: accepted
definition: A layer within a layered notice where the layer can be used for providing specific information or controls
in scheme: notice-classes

Notice Stale
type: Class
type: Concept
type: Notice Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2024-12-01
term status: accepted
broader: Notice Status
definition: Status indicating the notice is stale or not up to date or not the latest version
in scheme: notice-classes

Notice Status
type: Class
type: Concept
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2024-12-01
example: E0073
subclass of: Status
term status: accepted
broader: Status
definition: Status associated with notice provision, use, and management
in scheme: notice-classes

Notice Unused
type: Class
type: Concept
type: Notice Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2024-12-01
term status: accepted
broader: Notice Status
definition: Status indicating the notice has been communicated but has not yet been used e.g. the recipient has not acknowledged it or has not taken the intended action
in scheme: notice-classes

Notice Updated
type: Class
type: Concept
type: Notice Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2024-12-01
term status: accepted
broader: Notice Status
definition: Status indicating the notice has been updated and its contents or implications have changed
in scheme: notice-classes

Notice Used
type: Class
type: Concept
type: Notice Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2024-12-01
term status: accepted
broader: Notice Status
definition: Status indicating the notice has been communicated and has been used e.g. the recipient has acknowledged it or taken the intended action
in scheme: notice-classes

Notification
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2024-04-14
term status: accepted
broader: Organisational Measure
definition: Notification represents the provision of a notice i.e. notifying
in scheme: organisational-measures-classes
scope note: Notice refers to the information whereas Notification refers to the provision of that notice. The distinction is important as there are specific obligations associated with notice and notifications. For example, a data breach notice refers to the information about the breach intended to be provided to another entity, whereas notification refers to the act of providing the entity with the notice

Notification Completed
type: Class
type: Concept
type: Notification Status
contributor: Harshvardhan J. Pandit
created: 2024-05-19
term status: accepted
broader: Notification Status
definition: Status indicating notification(s) are completed
in scheme: status-classes

Notification Failed
type: Class
type: Concept
type: Notification Status
contributor: Harshvardhan J. Pandit
created: 2024-05-19
term status: accepted
broader: Notification Status
definition: Status indicating notification(s) could not be completed due to a failure
in scheme: status-classes

Notification Not Needed
type: Class
type: Concept
type: Notification Status
contributor: Harshvardhan J. Pandit
created: 2024-05-19
term status: accepted
broader: Notification Status
definition: Status indicating notification(s) are not needed
in scheme: status-classes

Notification Ongoing
type: Class
type: Concept
type: Notification Status
contributor: Harshvardhan J. Pandit
created: 2024-05-19
term status: accepted
broader: Notification Status
definition: Status indicating notification(s) are ongoing
in scheme: status-classes

Notification Planned
type: Class
type: Concept
type: Notification Status
contributor: Harshvardhan J. Pandit
created: 2024-05-19
term status: accepted
broader: Notification Status
definition: Status indicating notification(s) are planned
in scheme: status-classes

Notification Status
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2024-05-19
subclass of: Status
term status: accepted
broader: Status
definition: Status indicating whether notification(s) are planned, completed, or failed
in scheme: status-classes

Objecting to Process
type: Class
type: Concept
type: Entity Permissive Involvement
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
contributor: Steve Hickman
created: 2024-05-11
term status: accepted
broader: Entity Permissive Involvement
definition: Involvement where entity can object to process of specified context
in scheme: processing-context-classes

Obligation
type: Class
type: Concept
type: Rule
contributor: Arthit Suriyawongkul
contributor: Beatriz Esteves
contributor: Delaram Golpayegani
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-10-19
modified: 2025-06-19
term status: modified
broader: Acceptable Rule
definition: A rule describing an obligation for performing an activity
in scheme: rules-classes
scope note: Obligations are aligned with the term MUST in RFC2119 where specified activities are mandatory to be carried out

Obligation Fulfilled
type: Class
type: Concept
type: Rule Fulfilment Status
contributor: Harshvardhan J. Pandit
created: 2024-09-10
term status: accepted
broader: Rule Fulfilled
definition: Status indicating an obligation has been fulfilled i.e. the activity stated as being required to be carried out has been successfully completed
in scheme: rules-classes

Obligation Unfulfilled
type: Class
type: Concept
type: Rule Fulfilment Status
contributor: Harshvardhan J. Pandit
created: 2024-09-10
term status: accepted
broader: Rule Unfulfilled
definition: Status indicating an obligation has not been fulfilled i.e. the activity stated as being required to be carried out has not been carried out but this is not considered as a violation e.g. there is still time to conduct the activity
in scheme: rules-classes

Obligation Violated
type: Class
type: Concept
type: Rule Fulfilment Status
contributor: Harshvardhan J. Pandit
created: 2024-09-10
term status: accepted
broader: Rule Violated
definition: Status indicating an obligation has been violated i.e. the activity stated as being required to be carried out has not been carried out and this is considered as a violation i.e. the activity can no longer be carried out to fulfil the obligation
in scheme: rules-classes

Observe
type: Class
type: Concept
type: Processing
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2022-06-15
term status: accepted
broader: Obtain
definition: to obtain data through observation
in scheme: processing-classes

Observed Data
type: Class
type: Concept
created: 2023-12-10
subclass of: Collected Data
term status: accepted
broader: Collected Data
definition: Data that has been obtained through observations of a source
in scheme: personal-data-classes

Observed Personal Data
type: Class
type: Concept
contributor: Georg P. Krog
created: 2022-08-24
modified: 2023-12-10
subclass of: Collected Personal Data
subclass of: Observed Data
term status: accepted
broader: Collected Personal Data
broader: Observed Data
definition: Personal Data that has been collected through observation of the Data Subject(s)
in scheme: personal-data-classes

Obtain
type: Class
type: Concept
type: Processing
created: 2019-05-07
source: GDPR Art.4-2
term status: accepted
broader: Processing
definition: to solicit or gather data from someone
in scheme: processing-classes

Obtain Consent
type: Class
type: Concept
created: 2024-05-11
subclass of: Consent Control
term status: accepted
broader: Consent Control
definition: Control for obtaining consent
in scheme: consent-controls-classes
scope note: Indicates how the controller or entity can obtain consent e.g. used with dpv:isExercisedAt

Offer Contract
type: Class
type: Concept
created: 2024-08-27
subclass of: Contract Control
term status: accepted
broader: Contract Control
definition: Control for offering a contract
in scheme: contract-control-classes

Official Authority Exercise Completed
type: Class
type: Concept
type: Official Authority Exercise Status
created: 2024-08-27
term status: accepted
broader: Official Authority Exercise Status
definition: Status where the official authority has been exercised to completion
in scheme: legal-basis-status-classes

Official Authority Exercise Ongoing
type: Class
type: Concept
type: Official Authority Exercise Status
created: 2024-08-27
term status: accepted
broader: Official Authority Exercise Status
definition: Status where the official authority is being exercised
in scheme: legal-basis-status-classes

Official Authority Exercise Pending
type: Class
type: Concept
type: Official Authority Exercise Status
created: 2024-08-27
term status: accepted
broader: Official Authority Exercise Status
definition: Status where the official authority has not been exercised
in scheme: legal-basis-status-classes

Official Authority Exercise Status
type: Class
type: Concept
created: 2024-08-27
example: E0081
subclass of: Status
term status: accepted
broader: Status
definition: Status associated with use of Official Authority as a legal basis
in scheme: legal-basis-status-classes

Official Authority of Controller
type: Class
type: Concept
type: Legal Basis
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2021-05-05
example: E0081
term status: accepted
broader: Legal Basis
definition: Activities are necessary or authorised through the official authority granted to or vested in the Data Controller
in scheme: legal-basis-classes

Often Frequency
type: Class
type: Concept
type: Frequency
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
term status: accepted
broader: Frequency
definition: Frequency where occurrences are often or frequent, but not continuous
in scheme: context-classes

Operating System Security
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Security Method
definition: Security implemented at or through operating systems
in scheme: technical-measures-classes

Optimisation for Consumer
type: Class
type: Concept
type: Purpose
contributor: Axel Polleres
contributor: Elmar Kiesling
contributor: Fajar Ekaputra
contributor: Harshvardhan J. Pandit
contributor: Javier Fernández
contributor: Simon Steyskal
created: 2019-04-05
term status: accepted
broader: Service Optimisation
definition: Purposes associated with optimisation of activities and services for consumer or user
in scheme: purposes-classes
related: Custom
scope note: The term optimisation here refers to the efficiency of the service in terms of technical provision (or similar means) with benefits for everybody. Personalisation implies making changes that benefit the current user or persona.

Optimisation for Controller
type: Class
type: Concept
type: Purpose
contributor: Axel Polleres
contributor: Elmar Kiesling
contributor: Fajar Ekaputra
contributor: Harshvardhan J. Pandit
contributor: Javier Fernández
contributor: Simon Steyskal
created: 2019-04-05
term status: accepted
broader: Service Optimisation
definition: Purposes associated with optimisation of activities and services for provider or controller
in scheme: purposes-classes

Optimise User Interface
type: Class
type: Concept
type: Purpose
contributor: Axel Polleres
contributor: Elmar Kiesling
contributor: Fajar Ekaputra
contributor: Harshvardhan J. Pandit
contributor: Javier Fernández
contributor: Simon Steyskal
created: 2019-04-05
term status: accepted
broader: Optimisation for Consumer
definition: Purposes associated with optimisation of interfaces presented to the user
in scheme: purposes-classes

Opting in to Process
type: Class
type: Concept
type: Entity Permissive Involvement
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
contributor: Steve Hickman
created: 2024-05-11
term status: accepted
broader: Entity Permissive Involvement
definition: Involvement where entity can opt-in to specified context
in scheme: processing-context-classes

Opting out of Process
type: Class
type: Concept
type: Entity Permissive Involvement
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
contributor: Steve Hickman
created: 2024-05-11
term status: accepted
broader: Entity Permissive Involvement
definition: Involvement where entity can opt-out from specified context
in scheme: processing-context-classes

Optional
type: Class
type: Concept
type: Necessity
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-02-14
term status: accepted
broader: Necessity
definition: Indication of 'optional' or 'voluntary'
in scheme: context-classes

Oral Notice
type: Class
type: Concept
type: Organisational Measure
created: 2024-08-17
source: ICO - What methods can we use to provide privacy information?
term status: accepted
broader: Notice
definition: A notice provided orally or verbally
in scheme: notice-classes

Organisation
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-02-02
subclass of: Legal Entity
term status: accepted
broader: Legal Entity
definition: A general term reflecting a company or a business or a group acting as a unit
in scheme: entities-organisation-classes

Organisation Compliance Management
type: Class
type: Concept
type: Purpose
contributor: David Hickey
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2021-09-01
term status: accepted
broader: Organisation Governance
definition: Purposes associated with managing compliance for organisation in relation to internal policies
in scheme: purposes-classes
scope note: Note that this concept relates to internal organisational compliance. The concept LegalCompliance should be used for external legal or regulatory compliance.

Organisation Governance
type: Class
type: Concept
type: Purpose
contributor: David Hickey
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2021-09-01
source: Belgian DPA ROPA Template
term status: accepted
broader: Purpose
definition: Purposes associated with conducting activities and functions for governance of an organisation
in scheme: purposes-classes

Organisation Risk Management
type: Class
type: Concept
type: Purpose
contributor: David Hickey
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2021-09-01
term status: accepted
broader: Organisation Governance
definition: Purposes associated with managing risk for organisation's activities
in scheme: purposes-classes

Organisational Measure
type: Class
type: Concept
contributor: Axel Polleres
contributor: Harshvardhan J. Pandit
contributor: Mark Lizar
contributor: Rob Brennan
created: 2019-04-05
modified: 2023-12-10
example: E0021
subclass of: Technical and Organisational Measure
term status: accepted
broader: Technical and Organisational Measure
definition: Organisational measures used to safeguard and ensure good practices in connection with data and technologies
in scheme: TOM-classes

Organisational Unit
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2022-03-23
example: E0037
subclass of: Entity
term status: accepted
broader: Entity
definition: Entity within an organisation that does not constitute as a separate legal entity
in scheme: entities-organisation-classes

Organise
type: Class
type: Concept
type: Processing
created: 2019-05-07
source: GDPR Art.4-2
term status: accepted
broader: Processing
definition: to organize data for arranging or classifying
in scheme: processing-classes

Privacy Impact Assessment (PIA)
type: Class
type: Concept
type: Organisational Measure
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2020-11-04
term status: accepted
broader: Impact Assessment
definition: Impact assessment regarding privacy risks
in scheme: risk-classes

Parent Legal Entity
type: Class
type: Concept
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2024-04-14
subclass of: Organisation
term status: accepted
broader: Organisation
definition: A legal entity that has one or more subsidiary entities operating under it
in scheme: entities-classes

Parent(s) of Data Subject
type: Class
type: Concept
type: Human Subject
contributor: Georg P. Krog
created: 2022-08-03
modified: 2024-12-17
term status: modified
broader: Parent of Human
definition: Parent(s) of data subjects such as children
in scheme: entities-datasubject-classes

Parent of Human
type: Class
type: Concept
type: Human Subject
contributor: Harshvardhan J. Pandit
created: 2024-12-17
term status: accepted
broader: Human Subject
definition: Parent(s) of humans
in scheme: entities-datasubject-classes

Partial Automation
type: Class
type: Concept
type: Automation Level
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
created: 2023-12-10
modified: 2024-04-20
source: ISO/IEC 22989:2022 Artificial intelligence concepts and terminology
term status: accepted
broader: Automation Level
definition: Level of automation corresponding to Level 2 in ISO/IEC 22989:2022 where the automation is present in multiple parts of the system or in a manner that does not require the human to control/use these parts while still retaining control over the system
in scheme: processing-context-classes
scope note: Human Involvement is implied here, specifically the ability to Control operations, but also possibly for intervention, oversight, and verification

Partially Compliant
type: Class
type: Concept
type: Compliance Status
contributor: Harshvardhan J. Pandit
created: 2022-05-18
term status: accepted
broader: Compliance Status
definition: State of partially being compliant i.e. only some objectives have been met, and others have not been in violation
in scheme: status-classes

Participant
type: Class
type: Concept
type: Human Subject
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-04-06
modified: 2024-12-17
term status: modified
broader: Human Subject
definition: Humans that participate in some context such as volunteers in a function
in scheme: entities-datasubject-classes

Passive Right
type: Class
type: Concept
type: Right
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2022-10-22
term status: accepted
broader: Right
definition: The right(s) applicable, provided, or expected that are always (passively) applicable
in scheme: rights-classes
scope note: Passive rights do not require the entity to request or exercise them. They are considered to be always applicable. For example, the Right to Privacy (in EU) does not require an exercise for it to be fulfilled.

Passively Involved
type: Class
type: Concept
type: Involvement Status
contributor: Delaram Golpayegani
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2024-05-10
term status: accepted
broader: Involvement Status
definition: Status indicating the specified context is 'passively' involved
in scheme: status-classes
scope note: An example of passive involvement is a person being monitored by a CCTV

Password Authentication
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Authentication Protocols
definition: Use of passwords to perform authentication
in scheme: technical-measures-classes

Patient
type: Class
type: Concept
type: Human Subject
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-04-06
modified: 2024-12-17
term status: modified
broader: Human Subject
definition: Humans that receive medical attention, treatment, care, advice, or other health related services
in scheme: entities-datasubject-classes

Payment Management
type: Class
type: Concept
type: Purpose
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2020-11-04
term status: accepted
broader: Service Provision
definition: Purposes associated with processing and managing payment in relation to service, including invoicing and records
in scheme: purposes-classes

Penetration Testing Methods
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Security Method
definition: Use of penetration testing to identify weaknesses and vulnerabilities through simulations
in scheme: technical-measures-classes

Permission
type: Class
type: Concept
type: Rule
contributor: Arthit Suriyawongkul
contributor: Beatriz Esteves
contributor: Delaram Golpayegani
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-10-19
modified: 2025-06-19
example: E0028
example: E0066
term status: modified
broader: Acceptable Rule
definition: A rule describing a permission to perform an activity
in scheme: rules-classes
scope note: Permissions are aligned with the term MAY in RFC2119 where specified activities may or may not be carried out

Permission Management
type: Class
type: Concept
type: Organisational Measure
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2024-04-14
source: DGA 12.n
term status: accepted
broader: Rights Management
definition: Methods to obtain, provide, modify, and withdraw permissions along with maintaining a record of permissions, retrieving records, and processing changes in permission states
in scheme: organisational-measures-classes
scope note: Permission is a broader concept than '(Informed) Consent' as consent when used as a legal basis has specific requirements to be valid. For management of consent, see the concept dpv:ConsentManagement

Permission Not Utilised
type: Class
type: Concept
type: Rule Fulfilment Status
contributor: Harshvardhan J. Pandit
created: 2024-09-10
term status: accepted
broader: Rule Fulfilled
definition: Status indicating a permission has not been utilised i.e. the activity stated as being permitted has not been carried out
in scheme: rules-classes

Permission Utilised
type: Class
type: Concept
type: Rule Fulfilment Status
contributor: Harshvardhan J. Pandit
created: 2024-09-10
term status: accepted
broader: Rule Fulfilled
definition: Status indicating a permission has been utilised i.e. the activity stated as being permitted has been carried out
in scheme: rules-classes

Personal Data
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2019-04-05
modified: 2022-01-19
source: GDPR Art.4-1g
example: E0044
subclass of: Data
term status: accepted
broader: Data
definition: Data directly or indirectly associated or related to an individual
in scheme: personal-data-classes
related: AnyData
scope note: This definition of personal data encompasses the concepts used in GDPR Art.4-1 for 'personal data' and ISO/IEC 2700 for 'personally identifiable information (PII)'.

Personal Data Audit
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2024-12-17
term status: accepted
broader: Information Audit
definition: An audit that systematically examines the existence and use of personal data along with its associated resources (e.g. where it is stored) and flows (e.g. where it originates and with whom it is being shared)
in scheme: organisational-measures-classes
scope note: This concept is the same as "Data Mapping" and "Data Flow Mapping Exercise" used by the Information Commissioner's Office as "to document the data that flows in, around, and out of information processing systems or services"

Personal Data Handling
type: Class
type: Concept
contributor: Axel Polleres
contributor: Javier Fernández
created: 2019-04-05
modified: 2023-12-10
subclass of: Process
term status: sunset
broader: Process
definition: An abstract concept describing 'personal data handling'
in scheme: process-classes
scope note: This concept will be deprecated in future updates. It is recommended to use dpv:Process as the equivalent alternative which is better aligned with legal and operational terminology.

Personal Data Process
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2024-05-09
subclass of: Process
term status: accepted
broader: Process
definition: An action, activity, or method involving personal data
in scheme: process-classes

Personal Space
type: Class
type: Concept
type: Location
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-04-07
term status: accepted
broader: Private Space
definition: A private space associated with an individual in a personal capacity - such as their home or the space around their physical person e.g. my home or my room
in scheme: jurisdiction-classes

Personalisation
type: Class
type: Concept
type: Purpose
contributor: Harshvardhan J. Pandit
created: 2021-09-01
term status: accepted
broader: Purpose
definition: Purposes associated with creating and providing customisation based on attributes and/or needs of person(s) or context(s).
in scheme: purposes-classes
scope note: This term is a blanket purpose category for indicating personalisation of some other purpose, e.g. by creating a subclass of the other concept and Personalisation

Personalised Advertising
type: Class
type: Concept
type: Purpose
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2020-11-04
term status: accepted
broader: Advertising
broader: Personalisation
definition: Purposes associated with creating and providing personalised advertising
in scheme: purposes-classes

Personalised Benefits
type: Class
type: Concept
type: Purpose
contributor: Axel Polleres
contributor: Elmar Kiesling
contributor: Fajar Ekaputra
contributor: Harshvardhan J. Pandit
contributor: Javier Fernández
contributor: Simon Steyskal
created: 2019-04-05
term status: accepted
broader: Service Personalisation
definition: Purposes associated with creating and providing personalised benefits for a service
in scheme: purposes-classes

Personnel Behaviour Monitoring
type: Class
type: Concept
type: Purpose
created: 2024-12-01
term status: accepted
broader: Personnel Monitoring
definition: Purposes associated with monitoring behaviour of personnel
in scheme: purposes-classes

Personnel Hiring
type: Class
type: Concept
type: Purpose
contributor: Harshvardhan J. Pandit
created: 2022-04-20
term status: accepted
broader: Personnel Management
definition: Purposes associated with management and execution of hiring processes of personnel
in scheme: purposes-classes

Personnel Management
type: Class
type: Concept
type: Purpose
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2022-03-30
source: Belgian DPA ROPA Template
term status: accepted
broader: Human Resource Management
definition: Purposes associated with management of personnel associated with the organisation e.g. evaluation and management of employees and intermediaries
in scheme: purposes-classes

Personnel Monitoring
type: Class
type: Concept
type: Purpose
created: 2024-12-01
term status: accepted
broader: Personnel Management
definition: Purposes associated with monitoring of personnel
in scheme: purposes-classes

Personnel Offboarding
type: Class
type: Concept
type: Purpose
created: 2024-12-01
term status: accepted
broader: Personnel Management
definition: Purposes associated with offboarding of personnel i.e. activities and processes carried out when the person is exiting the company or role
in scheme: purposes-classes

Personnel Onboarding
type: Class
type: Concept
type: Purpose
created: 2024-12-01
term status: accepted
broader: Personnel Hiring
definition: Purposes associated with onboarding and integration of personnel within an organisation
in scheme: purposes-classes

Personnel Payment
type: Class
type: Concept
type: Purpose
contributor: Harshvardhan J. Pandit
created: 2022-04-20
term status: accepted
broader: Personnel Management
definition: Purposes associated with management and execution of payment of personnel
in scheme: purposes-classes

Personnel Performance Evaluation
type: Class
type: Concept
type: Purpose
created: 2024-12-01
term status: accepted
broader: Personnel Performance Management
definition: Purposes associated with evaluation or assessment of performance of employees
in scheme: purposes-classes

Personnel Performance Management
type: Class
type: Concept
type: Purpose
created: 2024-12-01
term status: accepted
broader: Personnel Management
broader: Personnel Monitoring
definition: Purposes associated with management of performance of personnel
in scheme: purposes-classes

Personnel Performance Monitoring
type: Class
type: Concept
type: Purpose
created: 2024-12-01
term status: accepted
broader: Personnel Monitoring
broader: Personnel Performance Management
definition: Purposes associated with monitoring of performance of personnel
in scheme: purposes-classes

Personnel Performance Prediction
type: Class
type: Concept
type: Purpose
created: 2024-12-01
term status: accepted
broader: Personnel Performance Management
definition: Purposes associated with prediction of performance of personnel
in scheme: purposes-classes

Personnel Promotion Management
type: Class
type: Concept
type: Purpose
created: 2024-12-01
term status: accepted
broader: Personnel Management
definition: Purposes associated with determination and management of promotion of personnel
in scheme: purposes-classes

Personnel Termination Management
type: Class
type: Concept
type: Purpose
created: 2024-12-01
term status: accepted
broader: Personnel Management
definition: Purposes associated with determination and management of termination of personnel
in scheme: purposes-classes

Personnel Workload Management
type: Class
type: Concept
type: Purpose
created: 2024-12-01
term status: accepted
broader: Personnel Management
definition: Purposes assocaited with determination, scheduling, planning, and carrying out workload management of personnel
in scheme: purposes-classes

Physical Access Control Method
type: Class
type: Concept
type: Physical Measure
contributor: Georg P. Krog
created: 2022-06-15
source: NIST SP 800-12
term status: accepted
broader: Access Control Method
definition: Access control applied for physical access e.g. premises or equipment
in scheme: physical-measures-classes

Physical Authentication
type: Class
type: Concept
type: Physical Measure
contributor: Harshvardhan J. Pandit
created: 2024-04-14
source: NIST SP 800-15
term status: accepted
broader: Physical Measure
definition: Physical implementation of authentication e.g. by matching the person to their ID card
in scheme: physical-measures-classes

Physical Authorisation
type: Class
type: Concept
type: Physical Measure
contributor: Harshvardhan J. Pandit
created: 2024-04-14
source: NIST SP 800-16
term status: accepted
broader: Physical Measure
definition: Physical implementation of authorisation e.g. by stamping a visitor pass
in scheme: physical-measures-classes

Physical Device Security
type: Class
type: Concept
type: Physical Measure
contributor: Harshvardhan J. Pandit
created: 2024-04-14
source: NIST SP 800-19
term status: accepted
broader: Physical Measure
definition: Physical protection for devices and equipment
in scheme: physical-measures-classes

Physical Interception Protection
type: Class
type: Concept
type: Physical Measure
contributor: Harshvardhan J. Pandit
created: 2024-04-14
source: NIST SP 800-20
term status: accepted
broader: Physical Measure
definition: Physical protection against interception e.g. by posting a guard
in scheme: physical-measures-classes

Physical Interruption Protection
type: Class
type: Concept
type: Physical Measure
contributor: Harshvardhan J. Pandit
created: 2024-04-14
source: NIST SP 800-18
term status: accepted
broader: Physical Measure
definition: Physical protection against interruptions e.g. electrical supply interruption
in scheme: physical-measures-classes

Physical Measure
type: Class
type: Concept
created: 2023-12-10
modified: 2023-12-10
subclass of: Technical and Organisational Measure
term status: accepted
broader: Technical and Organisational Measure
definition: Physical measures used to safeguard and ensure good practices in connection with data and technologies
in scheme: TOM-classes

Physical Network Security
type: Class
type: Concept
type: Physical Measure
contributor: Harshvardhan J. Pandit
created: 2024-04-14
source: NIST SP 800-17
term status: accepted
broader: Physical Measure
definition: Physical protection for networks and networking related infrastructure e.g. by isolating networking equipments
in scheme: physical-measures-classes

Physical Secure Storage
type: Class
type: Concept
type: Physical Measure
contributor: Harshvardhan J. Pandit
created: 2024-04-14
source: NIST SP 800-171
term status: accepted
broader: Physical Measure
definition: Physical protection for storage of information or equipment e.g. secure storage for files
in scheme: physical-measures-classes

Physical Supply Security
type: Class
type: Concept
type: Physical Measure
contributor: Harshvardhan J. Pandit
created: 2024-04-14
source: NIST SP 800-14
term status: accepted
broader: Physical Measure
definition: Physically securing the supply of resources
in scheme: physical-measures-classes

Physical Surveillance
type: Class
type: Concept
type: Physical Measure
contributor: Harshvardhan J. Pandit
created: 2024-04-14
source: NIST SP 800-171
term status: accepted
broader: Physical Measure
definition: Physically monitoring areas via surveillance
in scheme: physical-measures-classes

Policy
type: Class
type: Concept
type: Organisational Measure
contributor: David Hickey
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2021-09-08
term status: accepted
broader: Governance Procedures
definition: A guidance document outlining any of: procedures, plans, principles, decisions, intent, or protocols.
in scheme: organisational-measures-classes

Political Campaign
type: Class
type: Concept
type: Purpose
created: 2024-12-01
term status: accepted
broader: Advertising
broader: Personalisation
definition: Purposes associated with political campaign activities related to promotion and advertisement of positions and candidates in elections at local, state or regional, or national and international levels
in scheme: purposes-classes

Post-Quantum Cryptography
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Cryptographic Methods
definition: Use of algorithms that are intended to be secure against cryptanalytic attack by a quantum computer
in scheme: technical-measures-classes

Posted Notice
type: Class
type: Concept
type: Organisational Measure
created: 2024-08-17
source: ICO - What methods can we use to provide privacy information?
term status: accepted
broader: Notice
definition: A notice that is posted as a sign or banner
in scheme: notice-classes

Primary Importance
type: Class
type: Concept
type: Importance
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-02-10
term status: accepted
broader: Importance
definition: Indication of 'primary' or 'main' or 'core' importance
in scheme: context-classes

Primary Use
type: Class
type: Concept
type: ReuseCompatibility
contributor: Arthit Suriyawongkul
contributor: Beatriz Esteves
contributor: Delaram Golpayegani
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-06-19
term status: accepted
broader: ReuseCompatibility
definition: Concept indicating compatibility based on the use being either the original context or something that is compatible with it
in scheme: status-classes
scope note: Primary Use refers to an assessment where two contexts are found to be compatible, e.g. if purpose is used to test compatibility, then for two activities the second activity is said be the primary use if its purpose is compatible with the first activity's purpose

Principle
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2024-05-12
term status: accepted
broader: Guidelines Principle
definition: A representation of values or norms that must be taken into consideration when conducting activities
in scheme: organisational-measures-classes

Printed Notice
type: Class
type: Concept
type: Organisational Measure
created: 2024-08-17
source: ICO - What methods can we use to provide privacy information?
term status: accepted
broader: Notice
definition: A notice that is provided in a printed form on or along with a device
in scheme: notice-classes

Privacy by Default
type: Class
type: Concept
type: Organisational Measure
contributor: Axel Polleres
contributor: Harshvardhan J. Pandit
contributor: Mark Lizar
contributor: Rob Brennan
created: 2019-04-05
modified: 2024-04-14
term status: accepted
broader: Guidelines Principle
definition: Practices regarding setting the default configurations of information and services to implement data protection and privacy (synonymous with Data Protection by Default)
in scheme: organisational-measures-classes

Privacy by Design
type: Class
type: Concept
type: Organisational Measure
contributor: Axel Polleres
contributor: Harshvardhan J. Pandit
contributor: Mark Lizar
contributor: Rob Brennan
created: 2019-04-05
term status: accepted
broader: Guidelines Principle
definition: Practices regarding incorporating data protection and privacy in the design of information and services (synonymous with Data Protection by Design)
in scheme: organisational-measures-classes

Privacy Notice
type: Class
type: Concept
type: Organisational Measure
contributor: David Hickey
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2021-09-08
example: E0017
example: E0022
term status: accepted
broader: Notice
definition: Represents a notice or document outlining information regarding privacy
in scheme: notice-classes
in scheme: organisational-measures-classes

Privacy Preserving Protocol
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Cryptographic Methods
definition: Use of protocols designed with the intention of provided additional guarantees regarding privacy
in scheme: technical-measures-classes

Private Communal Space
type: Class
type: Concept
type: Location
contributor: Arthit Suriyawongkul
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-04-07
term status: accepted
broader: Private Space
definition: A space that is accessible to a group or a community within a private space and where members of the public do not have access to it e.g. society amenities such as gyms and pools
in scheme: jurisdiction-classes

Private Information Retrieval
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Data Protection Engineering
term status: accepted
broader: Cryptographic Methods
definition: Use of cryptographic methods to retrieve a record from a system without revealing which record is retrieved
in scheme: technical-measures-classes

Private Location (deprecated)
type: Class
type: Concept
type: Location
contributor: Harshvardhan J. Pandit
created: 2022-10-22
modified: 2025-05-04
term status: sunset
broader: Local Location
definition: Location that is not or cannot be accessed by the public and is controlled as a private space
in scheme: jurisdiction-classes
scope note: This concept will be deprecated in a future DPV release, it is suggested to use the better defined and legally aligned dpv:PrivateSpace instead

Private Sector Body
type: Class
type: Concept
contributor: Georg P. Krog
created: 2024-12-01
subclass of: Legal Entity
term status: accepted
broader: Legal Entity
definition: An organisation owned and operated by private individuals or companies
in scheme: entities-organisation-classes

Private Space
type: Class
type: Concept
type: Location
contributor: Arthit Suriyawongkul
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-04-07
term status: accepted
broader: Location
definition: A space that is owned or controlled by a private entity and where access to members of the public is restricted
in scheme: jurisdiction-classes

Privately Operated Public Space
type: Class
type: Concept
type: Location
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-04-07
term status: accepted
broader: Hybrid Public Private Space
broader: Publicly Accessible Space
definition: A space that is operated or managed by a private entity but which is accessible to the public e.g. a public bus station operated by a specific company
in scheme: jurisdiction-classes

Privately Owned Public Space
type: Class
type: Concept
type: Location
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-04-07
term status: accepted
broader: Hybrid Public Private Space
broader: Privately Owned Space
definition: A space that is privately owned but which is accessible and usable by the public - whether freely or through a process which is open to all members of the public e.g. hotel lobby, shopping mall atriums
in scheme: jurisdiction-classes

Privately Owned Space
type: Class
type: Concept
type: Location
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-04-07
term status: accepted
broader: Private Space
definition: A place that is privately owned e.g. offices, malls
in scheme: jurisdiction-classes

Process
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2024-05-09
example: E0005
example: E0006
example: E0031
example: E0041
term status: accepted
definition: An action, activity, or method
in scheme: process-classes

Processing
type: Class
type: Concept
contributor: Axel Polleres
contributor: Javier Fernández
created: 2019-04-05
modified: 2020-11-04
source: SPECIAL Project
example: E0085
term status: accepted
definition: Operations or 'processing' performed on data
in scheme: processing-classes
related: AnyProcessing

Processing Condition
type: Class
type: Concept
created: 2023-12-10
example: E0047
subclass of: Processing Context
term status: accepted
broader: Processing Context
definition: Conditions required or followed regarding processing of data or use of technologies
in scheme: processing-context-classes

Processing Context
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-02-09
subclass of: Context
term status: accepted
broader: Context
definition: Context or conditions within which processing takes place
in scheme: processing-context-classes

Processing Duration
type: Class
type: Concept
created: 2023-12-10
modified: 2024-05-11
example: E0047
subclass of: Duration
subclass of: Processing Condition
term status: accepted
broader: Duration
broader: Processing Condition
definition: Conditions regarding duration or temporal limitation for processing
in scheme: processing-context-classes

Processing Location
type: Class
type: Concept
created: 2023-12-10
modified: 2024-05-11
example: E0047
subclass of: Location
subclass of: Processing Condition
term status: accepted
broader: Location
broader: Processing Condition
definition: Conditions regarding location or geospatial scope where processing takes places
in scheme: processing-context-classes

Processing Scale
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
contributor: Piero Bonatti
created: 2022-09-07
example: E0049
subclass of: Scale
term status: accepted
broader: Scale
definition: Scale of Processing
in scheme: processing-scale-classes
scope note: The exact definition of what constitutes "scale" depends on use of jurisdictional, domain-specific, or other forms of externally defined criteria. Where possible, this should be reflected by extending the scales provided with the appropriate context.

Professional Confidential Data
type: Class
type: Concept
contributor: Danielle Welter
created: 2025-05-30
subclass of: Confidential Data
term status: accepted
broader: Confidential Data
definition: Data protected by professional secrecy or confidentiality, including but not limited to data covered by professional privilege or secrecy obligations such as that covered by lawyer or doctor-patient confidentiality and other forms of recognised professional confidentiality obligations
in scheme: personal-data-classes

Professional Training
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Staff Training
definition: Training methods that are intended to provide professional knowledge and expertise
in scheme: organisational-measures-classes

Profiling
type: Class
type: Concept
type: Processing
created: 2019-05-07
source: GDPR Art.4-2
example: E0075
term status: accepted
broader: Use
definition: to create a profile that describes or represents a person
in scheme: processing-classes

Prohibition
type: Class
type: Concept
type: Rule
contributor: Arthit Suriyawongkul
contributor: Beatriz Esteves
contributor: Delaram Golpayegani
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-10-19
modified: 2025-06-19
example: E0029
example: E0066
term status: modified
broader: Unacceptable Rule
definition: A rule describing a prohibition to perform an activity
in scheme: rules-classes
scope note: Prohibitions are aligned with the term MUST NOT in RFC2119 where specified activities are prohibited from being carried out

Prohibition Unviolated
type: Class
type: Concept
type: Rule Fulfilment Status
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2024-09-10
modified: 2025-08-06
term status: modified
broader: Rule Fulfilled
definition: Status indicating a prohibition has not been violated i.e. the activity stated as being prohibited has not been carried out
in scheme: rules-classes

Prohibition Violated
type: Class
type: Concept
type: Rule Fulfilment Status
contributor: Harshvardhan J. Pandit
created: 2024-09-10
term status: accepted
broader: Rule Violated
definition: Status indicating a prohibition has been violated i.e. the activity stated as being prohibited has been carried out
in scheme: rules-classes

Protection of Intellectual Property Rights
type: Class
type: Concept
type: Purpose
contributor: Beatriz Esteves
contributor: Harshvardhan J. Pandit
created: 2024-02-14
source: DGA 3.1(c)
term status: accepted
broader: Fulfilment of Obligation
definition: Purposes associated with the protection of intellectual property rights
in scheme: purposes-classes

Protection of National Security
type: Class
type: Concept
type: Purpose
contributor: Beatriz Esteves
contributor: Harshvardhan J. Pandit
created: 2024-02-14
source: DGA 1.5
term status: accepted
broader: Public Benefit
definition: Purposes associated with the protection of national security
in scheme: purposes-classes

Protection of Public Security
type: Class
type: Concept
type: Purpose
contributor: Beatriz Esteves
contributor: Harshvardhan J. Pandit
created: 2024-02-14
source: DGA 3.2(d)
term status: accepted
broader: Public Benefit
definition: Purposes associated with the protection of public security
in scheme: purposes-classes

Provide Consent
type: Class
type: Concept
created: 2024-05-11
subclass of: Consent Control
subclass of: Opting in to Process
term status: accepted
broader: Consent Control
broader: Opting in to Process
definition: Control for providing consent
in scheme: consent-controls-classes
scope note: Indicates how the data subject can provide consent e.g. used with dpv:isExercisedAt

Provide Event Recommendations
type: Class
type: Concept
type: Purpose
contributor: Harshvardhan J. Pandit
contributor: Rudy Jacob
created: 2019-11-26
modified: 2022-10-14
source: SPECIAL Project
term status: accepted
broader: Provide Personalised Recommendations
definition: Purposes associated with creating and providing personalised recommendations for events
in scheme: purposes-classes

Provide Official Statistics
type: Class
type: Concept
type: Purpose
contributor: Beatriz Esteves
contributor: Harshvardhan J. Pandit
created: 2024-02-14
source: DGA 2.16
term status: accepted
broader: Public Benefit
definition: Purposes associated with facilitating the development, production and dissemination of reliable official statistics
in scheme: purposes-classes

Provide Personalised Recommendations
type: Class
type: Concept
type: Purpose
contributor: Harshvardhan J. Pandit
contributor: Rudy Jacob
created: 2019-11-26
modified: 2022-10-14
source: SPECIAL Project
term status: accepted
broader: Service Personalisation
definition: Purposes associated with creating and providing personalised recommendations
in scheme: purposes-classes

Provide Product Recommendations
type: Class
type: Concept
type: Purpose
contributor: Axel Polleres
contributor: Elmar Kiesling
contributor: Fajar Ekaputra
contributor: Harshvardhan J. Pandit
contributor: Javier Fernández
contributor: Simon Steyskal
created: 2019-04-05
modified: 2022-10-14
term status: accepted
broader: Provide Personalised Recommendations
definition: Purposes associated with creating and providing product recommendations e.g. suggest similar products
in scheme: purposes-classes
related: Marketing

Provided Data
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2024-04-20
subclass of: Collected Data
term status: accepted
broader: Collected Data
definition: Data that has been provided by an entity
in scheme: personal-data-classes
scope note: Provided data involves one entity explicitly providing the data, which the other entity then collects

Provided Personal Data
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2024-04-20
example: E0046
subclass of: Collected Personal Data
subclass of: Provided Data
term status: accepted
broader: Collected Personal Data
broader: Provided Data
definition: Personal Data that has been provided by an entity such as the Data Subject
in scheme: personal-data-classes
scope note: Provided personal data involves one entity (e.g. data subject) explicitly providing the data, which the other entity (e.g. data controller) then collects

Provider Standard Form Contract
type: Class
type: Concept
type: Legal Basis
created: 2024-08-27
term status: accepted
broader: Standard Form Contract
definition: A contract where the terms and conditions are determined by parties in the role of a 'provider', and the other parties have negligible or no ability to negotiate the terms and conditions
in scheme: contract-types-classes

Pseudonymisation
type: Class
type: Concept
type: Technical Measure
contributor: Axel Polleres
contributor: Damien Desfontaines
contributor: Harshvardhan J. Pandit
contributor: Mark Lizar
contributor: Maya Borges
contributor: Rob Brennan
created: 2019-04-05
modified: 2022-11-24
source: GDPR Art.4-5
term status: accepted
broader: De-Identification
definition: Pseudonymisation means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person;
in scheme: technical-measures-classes

Pseudonymise
type: Class
type: Concept
type: Processing
created: 2019-05-07
modified: 2022-10-14
source: GDPR Art.4-2
term status: accepted
broader: Transform
definition: to replace personal identifiable information by artificial identifiers
in scheme: processing-classes

Pseudonymised Data
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-01-19
subclass of: Personal Data
term status: accepted
broader: Personal Data
definition: Pseudonymised Data is data that has gone a partial or incomplete anonymisation process by replacing the identifiable information with artificial identifiers or 'pseudonyms', and is still considered as personal data
in scheme: personal-data-classes

Public Benefit
type: Class
type: Concept
type: Purpose
contributor: Harshvardhan J. Pandit
created: 2024-02-14
term status: accepted
broader: Purpose
definition: Purposes undertaken and intended to provide benefit to public or society
in scheme: purposes-classes

Public Data Source
type: Class
type: Concept
type: Data Source
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-01-26
term status: accepted
broader: Data Source
definition: A source of data that is publicly accessible or available
in scheme: processing-context-classes
scope note: The term 'Public' is used here in a broad sense. Actual consideration of what is 'Public Data' can vary based on several contextual or jurisdictional factors such as definition of open, methods of access, permissions and licenses.

Public Interest
type: Class
type: Concept
type: Legal Basis
contributor: Harshvardhan J. Pandit
created: 2021-04-21
example: E0082
term status: accepted
broader: Legal Basis
definition: Activities are necessary or beneficial for interest of the public or society at large
in scheme: legal-basis-classes

Public Interest Completed
type: Class
type: Concept
type: Public Interest Status
created: 2024-08-27
term status: accepted
broader: Public Interest Status
definition: Status where the public interest activity has been completed
in scheme: legal-basis-status-classes

Public Interest Objected
type: Class
type: Concept
type: Public Interest Status
created: 2024-08-27
term status: accepted
broader: Public Interest Status
definition: Status where the public interest activity was objected to by the Data Subject or another relevant entity
in scheme: legal-basis-status-classes

Public Interest Ongoing
type: Class
type: Concept
type: Public Interest Status
created: 2024-08-27
term status: accepted
broader: Public Interest Status
definition: Status where the public interest activity is ongoing
in scheme: legal-basis-status-classes

Public Interest Pending
type: Class
type: Concept
type: Public Interest Status
created: 2024-08-27
term status: accepted
broader: Public Interest Status
definition: Status where the public interest activity has not started
in scheme: legal-basis-status-classes

Public Interest Status
type: Class
type: Concept
created: 2024-08-27
example: E0082
subclass of: Status
term status: accepted
broader: Status
definition: Status associated with use of Public Interest as a legal basis
in scheme: legal-basis-status-classes

Public Location (deprecated)
type: Class
type: Concept
type: Location
contributor: Georg P. Krog
created: 2022-10-22
modified: 2025-05-04
term status: sunset
broader: Local Location
definition: Location that is or can be accessed by the public
in scheme: jurisdiction-classes
scope note: This concept will be deprecated in a future DPV release, it is suggested to use the better defined and legally aligned dpv:PublicSpace instead

Public Policy Making
type: Class
type: Concept
type: Purpose
contributor: Beatriz Esteves
contributor: Harshvardhan J. Pandit
created: 2024-02-14
source: DGA 2.16
term status: accepted
broader: Public Benefit
definition: Purposes associated with public policy making, such as the development of new laws
in scheme: purposes-classes

Public Register of Entities
type: Class
type: Concept
contributor: Beatriz Esteves
created: 2024-06-11
subclass of: Class
term status: accepted
definition: A publicly available list of entities e.g. to indicate which entities perform a certain activity within a certain location or jurisdiction
in scheme: entities-classes

Public Relations
type: Class
type: Concept
type: Purpose
contributor: David Hickey
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2021-09-01
source: Belgian DPA ROPA Template
term status: accepted
broader: Marketing
definition: Purposes associated with managing and conducting public relations processes, including creating goodwill for the organisation
in scheme: purposes-classes

Public Sector Body
type: Class
type: Concept
contributor: Georg P. Krog
created: 2024-12-01
subclass of: Legal Entity
term status: accepted
broader: Legal Entity
definition: A government-controlled organisation that provides services or goods to the public
in scheme: entities-organisation-classes

Public Space
type: Class
type: Concept
type: Location
contributor: Arthit Suriyawongkul
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-04-07
term status: accepted
broader: Location
definition: Any space that is accessible to the public or is owned by the public
in scheme: jurisdiction-classes
scope note: Public space is distinct from places under (public) government ownership as such places can exclude public from accessing the place e.g. government military installations or reserved land

Publicly Accessible Space
type: Class
type: Concept
type: Location
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-04-07
term status: accepted
broader: Public Space
definition: A space that is accessible to all members of the public e.g. parks, malls, train stations
in scheme: jurisdiction-classes

Publicly Owned Space
type: Class
type: Concept
type: Location
contributor: Arthit Suriyawongkul
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-04-07
term status: accepted
broader: Public Space
definition: A space that is owned by the public e.g. national parks, forests
in scheme: jurisdiction-classes

Purpose
type: Class
type: Concept
contributor: Axel Polleres
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
contributor: Javier Fernández
created: 2019-04-05
modified: 2024-04-14
source: SPECIAL Project
example: E0003
example: E0004
example: E0007
example: E0008
example: E0040
example: E0041
example: E0042
example: E0043
term status: accepted
definition: Purpose or (broader) Goal associated with data or technology
in scheme: purposes-classes
related: AnyPurpose
scope note: The purpose or goal here is intended to sufficiently describe the intention or objective of why the data or technology is being used, and should be broader than mere technical descriptions of achieving a capability. For example, "Analyse Data" is an abstract purpose with no indication of what the analyses is for as compared to a purpose such as "Marketing" or "Service Provision" which provide clarity and comprehension of the 'purpose' and can be enhanced with additional descriptions. Such modelling is in line with regulatory requirements regarding the specificity of purposes, for example in GDPR

Quantum Cryptography
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Cryptographic Methods
definition: Cryptographic methods that utilise quantum mechanical properties to perform cryptographic tasks
in scheme: technical-measures-classes

Query
type: Class
type: Concept
type: Processing
contributor: Harshvardhan J. Pandit
created: 2022-06-15
term status: accepted
broader: Consult
definition: to query or make enquiries over data
in scheme: processing-classes

RNG Pseudonymisation
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
modified: 2022-10-13
source: ENISA Data Pseudonymisation: Advanced Techniques and Use Cases
term status: accepted
broader: Pseudonymisation
definition: A pseudonymisation method where identifiers are substituted by a number chosen by a Random Number Generator (RNG)
in scheme: technical-measures-classes

Records of Processing Activities
type: Class
type: Concept
type: Organisational Measure
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2021-09-08
modified: 2024-04-14
term status: accepted
broader: Data Processing Record
definition: A Record of Processing Activities (ROPA) is a document detailing processing activities
in scheme: organisational-measures-classes
scope note: ROPA under GDPR Art.30 has specific requirements regarding the information to be maintained. Additionally, Data Protection Authorities also provide additional information guidelines for information to be maintained in a ROPA. For more information see https://w3id.org/dpcat

Random Location
type: Class
type: Concept
type: Location Fixture
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
term status: accepted
broader: Location Fixture
definition: Location that is random or unknown
in scheme: jurisdiction-classes

Reaffirm Consent
type: Class
type: Concept
created: 2024-05-11
subclass of: Consent Control
term status: accepted
broader: Consent Control
definition: Control for affirming consent
in scheme: consent-controls-classes
scope note: Indicates how the controller (with dpv:ObtainConsent) or data subject (with dpv:ProvideConsent) can reaffirm consent e.g. used with dpv:isExercisedAt

Recertification Policy
type: Class
type: Concept
type: Organisational Measure
created: 2019-04-05
modified: 2024-04-14
term status: accepted
broader: Policy
definition: Policy regarding repetition or renewal of existing certification(s)
in scheme: organisational-measures-classes

Recipient
type: Class
type: Concept
contributor: Axel Polleres
contributor: Javier Fernández
created: 2019-04-05
modified: 2024-05-21
source: GDPR Art.4-9g
subclass of: Legal Entity
term status: accepted
broader: Legal Entity
definition: Entities that receive data or technologies
in scheme: entities-legalrole-classes
related: AnyRecipient
scope note: Recipients that receive personal data can be a Third Party, Data Controller, or Data Processor.

Recipient Informed
type: Class
type: Concept
type: Entity Informed Status
contributor: Delaram Golpayegani
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2024-05-10
term status: accepted
broader: Entity Informed
definition: Status indicating Recipient has been informed about the specified context
in scheme: status-classes

Recipient Uninformed
type: Class
type: Concept
type: Entity Informed Status
contributor: Delaram Golpayegani
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2024-05-10
term status: accepted
broader: Entity Uninformed
definition: Status indicating Recipient is uninformed i.e. has not been informed about the specified context
in scheme: status-classes

Recommendation
type: Class
type: Concept
type: Rule
contributor: Arthit Suriyawongkul
contributor: Beatriz Esteves
contributor: Delaram Golpayegani
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2025-06-19
term status: accepted
broader: Acceptable Rule
definition: A rule describing a recommendation for performing an activity
in scheme: rules-classes
scope note: Recommendations are aligned with the term SHOULD in RFC2119 where specified activities should be carried out but are not obligations

Recommendation Followed
type: Class
type: Concept
type: Rule Fulfilment Status
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-08-06
term status: accepted
broader: Rule Fulfilled
definition: Status indicating a recommendation has been followed i.e. the activity stated as being recommended has been carried out
in scheme: rules-classes

Recommendation Not Followed
type: Class
type: Concept
type: Rule Fulfilment Status
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-08-06
term status: accepted
broader: Rule Unfulfilled
definition: Status indicating a recommendation has not been followed i.e. the activity stated as being recommended has not been carried out
in scheme: rules-classes

Record
type: Class
type: Concept
type: Processing
created: 2019-05-07
source: GDPR Art.4-2
term status: accepted
broader: Obtain
definition: to make a record (especially media)
in scheme: processing-classes

Record Management
type: Class
type: Concept
type: Purpose
contributor: David Hickey
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2021-09-01
term status: accepted
broader: Purpose
definition: Purposes associated with manage creation, storage, and use of records relevant to operations, events, and processes e.g. to store logs or access requests
in scheme: purposes-classes
scope note: This purpose relates specifically for record creation and management. This can be combined or used along with other purposes to express intentions such as records for legal compliance or vendor payments.

Records of Activities
type: Class
type: Concept
type: Organisational Measure
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2021-09-08
modified: 2024-05-05
term status: accepted
broader: Organisational Measure
definition: Records of activities within some context such as maintenance tasks or governance functions
in scheme: organisational-measures-classes
scope note: Records can be any information associated with the activity e.g. logs, summaries.

Recruitment Advertising
type: Class
type: Concept
type: Purpose
created: 2024-12-01
term status: accepted
broader: Advertising
broader: Personnel Hiring
definition: Purposes associated with advertisement for Recruitments and personnel hiring
in scheme: purposes-classes

Recruitment Applicant Background Check
type: Class
type: Concept
type: Purpose
created: 2024-12-01
term status: accepted
broader: Recruitment Management
definition: Purposes assocaited with conducting background checks for prospective and current job applicants for recruitment
in scheme: purposes-classes

Recruitment Applicant Criminal Background Check
type: Class
type: Concept
type: Purpose
created: 2024-12-01
term status: accepted
broader: Recruitment Management
definition: Purposes associated with conducting criminal background assessment for prospective and current job applicants for recruitment
in scheme: purposes-classes

Recruitment Applicant Information Authentication
type: Class
type: Concept
type: Purpose
created: 2024-12-01
term status: accepted
broader: Recruitment Management
definition: Purposes associated with authentication and verification of information as part of recruitment
in scheme: purposes-classes

Recruitment Applicant Selection
type: Class
type: Concept
type: Purpose
created: 2024-12-01
term status: accepted
broader: Recruitment Management
definition: Purposes associated with determination or selection of candidates, whether for a specific job or job pool, or for a specific stage as part of recruitment
in scheme: purposes-classes

Recruitment Application Analysis
type: Class
type: Concept
type: Purpose
created: 2024-12-01
term status: accepted
broader: Recruitment Application Management
definition: Purposes assocaited with analysis of job applications or job candidates for recruitment
in scheme: purposes-classes

Recruitment Application Management
type: Class
type: Concept
type: Purpose
created: 2024-12-01
term status: accepted
broader: Recruitment Management
definition: Purposes associated with managing job applications for recruitment
in scheme: purposes-classes

Recruitment Application Screening
type: Class
type: Concept
type: Purpose
created: 2024-12-01
term status: accepted
broader: Recruitment Application Management
definition: Purposes associated with screening and filtering of job applications or job candidates for recruitment
in scheme: purposes-classes

Recruitment Interview Analysis
type: Class
type: Concept
type: Purpose
created: 2024-12-01
term status: accepted
broader: Recruitment Interview Management
definition: Purposes associated with analysis of interviews, including the people and involved, for recruitment
in scheme: purposes-classes

Recruitment Interview Assessment
type: Class
type: Concept
type: Purpose
created: 2024-12-01
term status: accepted
broader: Recruitment Interview Management
definition: Purposes associated with assessment of interviews, including assessment of people and information, for recruitment
in scheme: purposes-classes

Recruitment Interview Management
type: Class
type: Concept
type: Purpose
created: 2024-12-01
term status: accepted
broader: Recruitment Management
definition: Purposes associated conducting and managing interviews for recruitment
in scheme: purposes-classes

Recruitment Interview Scheduling
type: Class
type: Concept
type: Purpose
created: 2024-12-01
term status: accepted
broader: Recruitment Interview Management
definition: Purposes associated with scheduling interviews for recruitment
in scheme: purposes-classes

Recruitment Management
type: Class
type: Concept
type: Purpose
created: 2024-12-01
term status: accepted
broader: Personnel Hiring
definition: Purposes assocaited with recruitment of personnel, which includes identifying, sourcing, screening, filtering, shortlisting, and interviewing candidates
in scheme: purposes-classes

Targeted Recruitment Advertising
type: Class
type: Concept
type: Purpose
created: 2024-12-01
term status: accepted
broader: Recruitment Advertising
broader: Targeted Advertising
definition: Purposes associated with targeted advertisement for Recruitments and personnel hiring
in scheme: purposes-classes

Reformat
type: Class
type: Concept
type: Processing
contributor: Beatriz Esteves
created: 2024-04-14
source: DGA 12.d
term status: accepted
broader: Format
definition: to rearrange or restructure data to change its form
in scheme: processing-classes

Refuse Consent
type: Class
type: Concept
created: 2024-12-17
subclass of: Consent Control
term status: accepted
broader: Consent Control
definition: Control for refusing consent
in scheme: consent-controls-classes
scope note: Indicates how the controller (with dpv:ObtainConsent) or data subject (with dpv:ProvideConsent) can reaffirm consent e.g. used with dpv:isExercisedAt

Refuse Contract
type: Class
type: Concept
created: 2024-08-27
subclass of: Contract Control
term status: accepted
broader: Contract Control
definition: Control for refusing a contract
in scheme: contract-control-classes

Region
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-01-19
modified: 2025-05-04
subclass of: Country
term status: modified
broader: Country
definition: A region is an area or site that is considered a location
in scheme: jurisdiction-classes

Regional Authority
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-02-02
source: ADMS controlled vocabulary
subclass of: Authority
term status: accepted
broader: Authority
definition: An authority tasked with overseeing legal compliance for a region
in scheme: entities-authority-classes

Regional Scale
type: Class
type: Concept
type: Geographic Coverage
contributor: Harshvardhan J. Pandit
created: 2022-06-15
term status: accepted
broader: Geographic Coverage
definition: Geographic coverage spanning a specific region or regions
in scheme: processing-scale-classes

Regulatory Sandbox
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2024-05-17
source: EU Council Regulatory sandboxes and experimentation clauses as tools for better regulation
term status: accepted
broader: Safeguard
definition: Mechanism used by regulators and businesses for gauging the compatibility of regulations and innovative products, particularly in the context of digitalisation, in a controlled real-world environment with appropriate safeguards in place
in scheme: organisational-measures-classes

Religious Associations
type: Class
type: Concept
contributor: Georg P. Krog
created: 2024-12-01
subclass of: Organisation
term status: accepted
broader: Organisation
definition: An organisations that supports the practice, promotion, and management of religious activities and beliefs
in scheme: entities-organisation-classes

Remote Location
type: Class
type: Concept
type: Location
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
term status: accepted
broader: Location Locality
definition: Location is remote i.e. not local
in scheme: jurisdiction-classes

Remove
type: Class
type: Concept
type: Processing
created: 2019-05-07
source: GDPR Art.4-2
term status: accepted
broader: Processing
definition: to destruct or erase data
in scheme: processing-classes

Renewed Consent Given
type: Class
type: Concept
type: Consent Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-06-22
source: GConsent
term status: accepted
broader: Consent Status Valid for Processing
definition: The state where a previously given consent has been 'renewed' or 'refreshed' or 'reaffirmed' to form a new instance of given consent
in scheme: consent-status-classes
scope note: An example of this state is when a previously given consent has expired, and the individual is presented a notice regarding continuing associated processing operations - to which they agree. This state can be useful to keep track of 'reconfirmed' or 'refreshed' consent within consent records, assist notices and contextual agents to create better consenting dialogues, and assist with specific legal obligations related to subsequent consenting

Repair Impairments
type: Class
type: Concept
type: Purpose
contributor: Harshvardhan J. Pandit
created: 2022-08-24
term status: accepted
broader: Service Provision
definition: Purposes associated with identifying, rectifying, or otherwise undertaking activities intended to fix or repair impairments to existing functionalities
in scheme: purposes-classes
scope note: An example of identifying and rectifying impairments is the process of finding and fixing errors in products, commonly referred to as debugging

Representative
type: Class
type: Concept
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2020-11-04
source: GDPR Art.27
example: E0019
example: E0032
subclass of: Legal Entity
term status: accepted
broader: Legal Entity
definition: A representative of a legal entity
in scheme: entities-classes

Request Accepted
type: Class
type: Concept
type: Request Status
contributor: Harshvardhan J. Pandit
created: 2022-11-30
term status: accepted
broader: Request Status
definition: State of a request being accepted towards fulfilment
in scheme: status-classes

Request Acknowledged
type: Class
type: Concept
type: Request Status
contributor: Harshvardhan J. Pandit
created: 2022-11-30
term status: accepted
broader: Request Status
definition: State of a request being acknowledged
in scheme: status-classes

Request Action Delayed
type: Class
type: Concept
type: Request Status
contributor: Harshvardhan J. Pandit
created: 2022-11-30
example: E0058
term status: accepted
broader: Request Status
definition: State of a request being delayed towards fulfilment
in scheme: status-classes

Request Fulfilled
type: Class
type: Concept
type: Request Status
contributor: Harshvardhan J. Pandit
created: 2022-11-30
term status: accepted
broader: Request Status
definition: State of a request being fulfilled
in scheme: status-classes

Request Initiated
type: Class
type: Concept
type: Request Status
contributor: Harshvardhan J. Pandit
created: 2022-11-30
term status: accepted
broader: Request Status
definition: State of a request being initiated
in scheme: status-classes

Request Rejected
type: Class
type: Concept
type: Request Status
contributor: Harshvardhan J. Pandit
created: 2022-11-30
term status: accepted
broader: Request Status
definition: State of a request being rejected towards non-fulfilment
in scheme: status-classes

Request Required Action Performed
type: Class
type: Concept
type: Request Status
contributor: Harshvardhan J. Pandit
created: 2022-11-30
term status: accepted
broader: Request Status
definition: State of a request's required action having been performed by the other party
in scheme: status-classes

Request Requires Action
type: Class
type: Concept
type: Request Status
contributor: Harshvardhan J. Pandit
created: 2022-11-30
term status: accepted
broader: Request Status
definition: State of a request requiring an action to be performed from another party
in scheme: status-classes

Request Status
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-11-30
subclass of: Status
term status: accepted
broader: Status
definition: Status associated with requests
in scheme: status-classes

Request Status Query
type: Class
type: Concept
type: Request Status
contributor: Harshvardhan J. Pandit
created: 2022-11-30
term status: accepted
broader: Request Status
definition: State of a request's status being queried
in scheme: status-classes

Request Unfulfilled
type: Class
type: Concept
type: Request Status
contributor: Harshvardhan J. Pandit
created: 2022-11-30
term status: accepted
broader: Request Status
definition: State of a request being unfulfilled
in scheme: status-classes

Requested Service Provision
type: Class
type: Concept
type: Purpose
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2021-09-08
term status: accepted
broader: Service Provision
definition: Purposes associated with delivering services as requested by user or consumer
in scheme: purposes-classes
scope note: The use of 'request' here includes where an user explicitly asks for the service and also when an established contract requires the provision of the service

Required
type: Class
type: Concept
type: Necessity
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-02-13
term status: accepted
broader: Necessity
definition: Indication of 'required' or 'necessary'
in scheme: context-classes

Research and Development
type: Class
type: Concept
type: Purpose
contributor: Axel Polleres
contributor: Elmar Kiesling
contributor: Fajar Ekaputra
contributor: Harshvardhan J. Pandit
contributor: Javier Fernández
contributor: Simon Steyskal
created: 2019-04-05
term status: accepted
broader: Purpose
definition: Purposes associated with conducting research and development for new methods, products, or services
in scheme: purposes-classes

Residual Risk
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2024-06-16
example: E0068
subclass of: Risk
term status: accepted
broader: Risk
definition: Risk remaining after treatment or mitigation
in scheme: risk-classes

Restrict
type: Class
type: Concept
type: Processing
created: 2019-05-07
source: GDPR Art.4-2
term status: accepted
broader: Transform
definition: to apply a restriction on the processing of specific records
in scheme: processing-classes

Retrieve
type: Class
type: Concept
type: Processing
created: 2019-05-07
source: GDPR Art.4-2
term status: accepted
broader: Use
definition: to retrieve data, often in an automated manner
in scheme: processing-classes

ReuseCompatibility
type: Class
type: Concept
contributor: Arthit Suriyawongkul
contributor: Beatriz Esteves
contributor: Delaram Golpayegani
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-06-19
subclass of: Status
term status: accepted
broader: Status
definition: Concept indicating whether the specified context is compatible with another earlier context
in scheme: status-classes
scope note: Compatibility refers to whether two contexts, such as dpv:Process instances, are compatible with each other based on a criteria which is not defined by the concept. This criteria can be based on requirements from law, such as GDPR's purpose compatibility or can be based on privacy norms such as contextual integrity. To express such interpretations, further concepts should be expanded from this base concept

Reversing Process Effects
type: Class
type: Concept
type: Entity Permissive Involvement
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
contributor: Steve Hickman
created: 2024-05-11
term status: accepted
broader: Entity Permissive Involvement
definition: Involvement where entity can reverse effects of specified context
in scheme: processing-context-classes
scope note: Effects refer to consequences and impacts arising from the process or from the outputs of a process

Reversing Process Input
type: Class
type: Concept
type: Entity Permissive Involvement
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
contributor: Steve Hickman
created: 2024-05-11
term status: accepted
broader: Entity Permissive Involvement
definition: Involvement where entity can reverse input of specified context
in scheme: processing-context-classes
scope note: Reversion can be considered a form of correction in some instances. We welcome inputs to further explore and define this relation between correction and reversion concepts.

Reversing Process Output
type: Class
type: Concept
type: Entity Permissive Involvement
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
contributor: Steve Hickman
created: 2024-05-11
term status: accepted
broader: Entity Permissive Involvement
definition: Involvement where entity can reverse output of specified context
in scheme: processing-context-classes
scope note: Reversing of outputs indicate discarding the output and going back to the previous output. This is different from correction of output which allows modification of the output - implying continuation of the process.

Review Impact Assessment
type: Class
type: Concept
type: Organisational Measure
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2022-10-22
term status: accepted
broader: Impact Assessment
broader: Review Procedure
definition: Procedures to review impact assessments in terms of continued validity, adequacy for intended purposes, and conformance of processes with findings
in scheme: organisational-measures-classes

Review Procedure
type: Class
type: Concept
type: Organisational Measure
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2022-10-22
term status: accepted
broader: Governance Procedures
definition: A procedure or process that reviews the correctness and validity of other procedures and policies e.g. to ensure continued validity, adequacy for intended purposes, and conformance of processes with findings
in scheme: organisational-measures-classes

Right
type: Class
type: Concept
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2020-11-18
example: E0067
term status: accepted
definition: The right(s) applicable, provided, or expected
in scheme: rights-classes
scope note: A 'right' is a legal, social, or ethical principle of freedom or entitlement which dictate the norms regarding what is allowed or owed. Rights as a concept encompass a broad area of norms and entities, and are not specific to Individuals or Data Protection / Privacy. For individual specific rights, see dpv:DataSubjectRight

Right Exercise Activity
type: Class
type: Concept
type: Organisational Measure
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2022-11-02
example: E0059
term status: accepted
broader: Organisational Measure
definition: An activity representing an exercising of an active right
in scheme: rights-classes
scope note: There may be multiple activities associated with exercising and fulfilling rights. See the RightExerciseRecord concept for record-keeping of such activities in a cohesive manner.

Right Exercise Notice
type: Class
type: Concept
type: Organisational Measure
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2022-10-22
term status: accepted
broader: Right Notice
definition: Information associated with exercising of an active right such as where and how to exercise the right, information required for it, or updates on an exercised rights request
in scheme: rights-classes
scope note: This concept is intended for providing information regarding a right exercise. For specific instances of such exercises, see RightExerciseActivity and RightExerciseRecord.

Right Exercise Record
type: Class
type: Concept
type: Organisational Measure
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2022-11-02
modified: 2025-08-17
example: E0057
term status: modified
broader: Records of Activities
definition: Record of a Right being exercised
in scheme: rights-classes
scope note: This concept represents a record of one or more right exercise activities, such as those associated with a single data subject or service or entity

Right Fulfilment Notice
type: Class
type: Concept
type: Organisational Measure
contributor: Beatriz Esteves
contributor: Harshvardhan J. Pandit
created: 2022-11-02
term status: accepted
broader: Right Exercise Notice
definition: Notice provided regarding fulfilment of a right
in scheme: rights-classes
scope note: This notice is associated with situations where information is provided with the intention of progressing the fulfilment of a right. For example, a notice asking for more information regarding the scope of the right, or providing information on where to access the data provided under a right.

Right Non-Fulfilment Notice
type: Class
type: Concept
type: Organisational Measure
contributor: Beatriz Esteves
contributor: Harshvardhan J. Pandit
created: 2022-11-02
example: E0058
example: E0061
term status: accepted
broader: Right Exercise Notice
definition: Notice provided regarding non-fulfilment of a right
in scheme: rights-classes
scope note: This notice is associated with situations where information is provided with the intention of communicating non-fulfilment of a right. For example, to provide justifications on why a right could not be fulfilled or providing information about another entity who should be approached for exercising this right.

Right Notice
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2024-06-16
term status: accepted
broader: Notice
definition: Information associated with rights, such as which rights exist, when and where they are applicable, and other relevant information
in scheme: rights-classes
scope note: This concept also covers information about rights exercise, with dpv:RightExerciseNotice specifically representing information provided in connection with exercising of rights. Both notices may be needed, e.g. RightNotice for providing information about existence and exercise of rights, and RightExerciseNotice for providing additional information specifically about exercise of rights - such as to request more information or provide updates on an exercised rights request

Rights Fulfilment
type: Class
type: Concept
type: Purpose
contributor: Arthit Suriyawongkul
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2024-02-14
modified: 2025-08-06
term status: modified
broader: Legal Obligation
definition: Purposes associated with the fulfillment of rights specified in law
in scheme: purposes-classes
scope note: Where Rights Fulfillment includes activities that are not legal obligations, for example conducting Identity Verification, the documentation should indicate this by expressing them as separate purposes within the same activity

Rights Impact Assessment
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2024-04-14
term status: accepted
broader: Impact Assessment
definition: Impact assessment which involves determining the impact on rights and freedoms
in scheme: risk-classes
scope note: The rights and freedoms may be those defined in law or other norms, and may be bound to a jurisdiction

Rights Management
type: Class
type: Concept
type: Organisational Measure
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2024-04-14
term status: accepted
broader: Organisational Measure
definition: Methods associated with rights management where 'rights' refer to controlling who can do what with a resource
in scheme: organisational-measures-classes

Risk
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2020-11-18
modified: 2024-08-16
example: E0027
example: E0068
example: E0071
subclass of: Risk Concept
term status: accepted
broader: Risk Concept
definition: A risk or possibility or uncertainty of negative effects, impacts, or consequences
in scheme: risk-classes
scope note: Risks can be associated with one or more different concepts such as purpose, processing, personal data, technical or organisational measure

Risk Assessment
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2024-04-14
term status: accepted
broader: Assessment
definition: Assessment involving identification, analysis, and evaluation of risk
in scheme: risk-classes

Risk Concept
type: Class
type: Concept
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
contributor: Rob Brennan
created: 2024-08-16
term status: accepted
definition: Parent concept for combining concepts associated with risk assessment such as actual and potential Risk, Risk Source, Consequences, and Impacts
in scheme: risk-classes
scope note: RiskConcept is a generic concept used for creation of specific taxonomies in the RISK extension to provide guidance on how a concept can potentially be a risk, risk source, consequence, and impact. It is not intended to be used directly and is only created for organisation of concepts in DPV vocabularies

Risk Level
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-07-20
example: E0068
example: E0071
term status: accepted
definition: The magnitude of a risk expressed as an indication to aid in its management
in scheme: risk-classes
scope note: Risk Levels can be defined as a combination of different characteristics. For example, ISO 31073:2022 defines it as a combination of consequences and their likelihood. Another example would be the Risk Matrix where Risk Level is defined as a combination of Likelihood and Severity associated with the Risk.

Risk Mitigation Measure
type: Class
type: Concept
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2020-11-04
example: E0068
subclass of: Technical and Organisational Measure
term status: accepted
broader: Technical and Organisational Measure
definition: Measures intended to mitigate, minimise, or prevent risk.
in scheme: risk-classes

Rule
type: Class
type: Concept
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2022-10-19
example: E0030
term status: accepted
definition: A rule describing a process or control that directs or determines if and how an activity should be conducted
in scheme: rules-classes

Rule Fulfilled
type: Class
type: Concept
type: Rule Fulfilment Status
contributor: Harshvardhan J. Pandit
created: 2024-09-10
term status: accepted
broader: Rule Fulfilment Status
definition: Status indicating a rule has been fulfilled, completed, or satisfied
in scheme: rules-classes

Rule Fulfilment Status
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2024-09-10
example: E0084
subclass of: Status
term status: accepted
broader: Status
definition: Status associated with a rule for indicating whether it is applicable, or has been utilised, and whether the requirements of the rule have been fulfilled or violated
in scheme: rules-classes

Rule Unfulfilled
type: Class
type: Concept
type: Rule Fulfilment Status
contributor: Harshvardhan J. Pandit
created: 2024-09-10
term status: accepted
broader: Rule Fulfilment Status
definition: Status indicating a rule has not been fulfilled nor violated
in scheme: rules-classes

Rule Violated
type: Class
type: Concept
type: Rule Fulfilment Status
contributor: Harshvardhan J. Pandit
created: 2024-09-10
term status: accepted
broader: Rule Fulfilment Status
definition: Status indicating a rule has been violated, breached, broken, or infracted
in scheme: rules-classes

SME Organisation
type: Class
type: Concept
contributor: Georg P. Krog
created: 2024-12-01
subclass of: Legal Entity
term status: accepted
broader: Legal Entity
definition: An organisation that is characterised as a Small or Medium-sized Enterprise based on limited staff and revenue
in scheme: entities-organisation-classes

Safeguard
type: Class
type: Concept
type: Organisational Measure
contributor: David Hickey
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2021-09-22
term status: accepted
broader: Organisational Measure
definition: A safeguard is a precautionary measure for the protection against or mitigation of negative effects
in scheme: organisational-measures-classes
scope note: This concept is relevant given the requirement to assert safeguards in cross-border data transfers

Safeguard for Data Transfer
type: Class
type: Concept
type: Organisational Measure
contributor: David Hickey
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2021-09-22
term status: accepted
broader: Safeguard
definition: Represents a safeguard used for data transfer. Can include technical or organisational measures.
in scheme: organisational-measures-classes

Scale
type: Class
type: Concept
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Rana Saniei
created: 2022-06-15
subclass of: Processing Context
term status: accepted
broader: Processing Context
definition: A measurement along some dimension
in scheme: processing-scale-classes
scope note: Scales are subjective concepts that need to be defined and interpreted within the context of their application. For example, what would be small within one context could be large within another.

Scientific Research
type: Class
type: Concept
type: Purpose
contributor: Beatriz Esteves
contributor: Harshvardhan J. Pandit
created: 2024-02-14
source: DGA 2.16
term status: accepted
broader: Research and Development
definition: Purposes associated with scientific research
in scheme: purposes-classes

Scope
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-06-15
subclass of: Context
term status: accepted
broader: Context
definition: Indication of the extent or range or boundaries associated with(in) a context
in scheme: context-classes

Scoring of Individuals
type: Class
type: Concept
type: Evaluation and Scoring
contributor: Harshvardhan J. Pandit
created: 2022-10-22
modified: 2022-11-30
source: GDPR Art.4-2
term status: accepted
broader: Evaluation and Scoring
definition: Processing that involves scoring of individuals
in scheme: processing-context-classes

Screen
type: Class
type: Concept
type: Processing
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2022-06-15
term status: accepted
broader: Transform
definition: to remove data for some criteria
in scheme: processing-classes

Seal
type: Class
type: Concept
type: Organisational Measure
contributor: Axel Polleres
contributor: Harshvardhan J. Pandit
contributor: Mark Lizar
contributor: Rob Brennan
created: 2019-04-05
term status: accepted
broader: Certification and Seal
definition: A seal or a mark indicating proof of certification to some certification or standard
in scheme: organisational-measures-classes

Search Functionalities
type: Class
type: Concept
type: Purpose
contributor: Georg P. Krog
created: 2022-11-09
term status: accepted
broader: Service Provision
definition: Purposes associated with providing searching, querying, or other forms of information retrieval related functionalities
in scheme: purposes-classes

Secondary Importance
type: Class
type: Concept
type: Importance
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-02-11
term status: accepted
broader: Importance
definition: Indication of 'secondary' or 'minor' or 'auxiliary' importance
in scheme: context-classes

Secondary Use
type: Class
type: Concept
type: ReuseCompatibility
contributor: Arthit Suriyawongkul
contributor: Beatriz Esteves
contributor: Delaram Golpayegani
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-06-19
term status: accepted
broader: ReuseCompatibility
definition: Concept indicating incompatibility based on the use not being compatible with an earlier context
in scheme: status-classes
scope note: Secondary Use refers to an assessment where two contexts are found to be incompatible, e.g. if purpose is used to test compatibility, then for two activities the second activity is said be the secondary use if its purpose is incompatible with the first activity's purpose

Secret Sharing Schemes
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Data Pseudonymisation: Advanced Techniques and Use Cases
term status: accepted
broader: Cryptographic Methods
definition: Use of secret sharing schemes where the secret can only be reconstructed through combination of sufficient number of individuals
in scheme: technical-measures-classes

Sector
type: Class
type: Concept
contributor: Axel Polleres
contributor: Elmar Kiesling
contributor: Fajar Ekaputra
contributor: Harshvardhan J. Pandit
contributor: Javier Fernández
contributor: Simon Steyskal
created: 2019-04-05
example: E0043
term status: accepted
definition: Sector describes the area of application or domain that indicates or restricts scope for interpretation and application of purpose e.g. Agriculture, Banking
in scheme: purposes-classes
scope note: There are various sector codes used commonly to indicate the domain of an organisation or business. Examples include NACE (EU), ISIC (UN), SIC and NAICS (USA).

Secure Multi-Party Computation
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Cryptographic Methods
definition: Use of cryptographic methods for entities to jointly compute functions without revealing inputs
in scheme: technical-measures-classes

Secure Processing Environment
type: Class
type: Concept
type: Organisational Measure
contributor: Beatriz Esteves
contributor: Harshvardhan J. Pandit
created: 2024-04-14
source: DGA 2.20
term status: accepted
broader: Security Procedure
definition: A physical or virtual environment supported by organisational means that integrates security and compliance requirements and allows supervising data processing actions
in scheme: organisational-measures-classes

Security Assessment
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA 5G Cybersecurity Standards
term status: accepted
broader: Risk Assessment
definition: Assessment of security intended to identity gaps, vulnerabilities, risks, and effectiveness of controls
in scheme: risk-classes

Security Audit
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2024-12-17
term status: accepted
broader: Audit
definition: An audit that systematically examines the existence and use of security risks and measures within information systems, networks, and security policies to identify vulnerabilities, risks, and gaps
in scheme: organisational-measures-classes

Security Incident Notice
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2024-04-14
term status: accepted
broader: Notice
definition: A notice providing information about security incident(s)
in scheme: notice-classes
in scheme: organisational-measures-classes

Security Incident Notification
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2024-04-14
term status: accepted
broader: Notification
definition: Notification of information about security incident(s)
in scheme: organisational-measures-classes

Security Incident Record
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2024-04-14
term status: accepted
broader: Records of Activities
definition: Record of a security incident
in scheme: organisational-measures-classes

Security Knowledge Training
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA 5G Cybersecurity Standards
term status: accepted
broader: Staff Training
definition: Training intended to increase knowledge regarding security
in scheme: organisational-measures-classes

Security Method
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-24
term status: accepted
broader: Technical Measure
definition: Methods that relate to creating and providing security
in scheme: technical-measures-classes

Security Procedure
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-24
term status: accepted
broader: Organisational Measure
definition: Procedures associated with assessing, implementing, and evaluating security
in scheme: organisational-measures-classes

Security Role Procedures
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA 5G Cybersecurity Standards
term status: accepted
broader: Security Procedure
definition: Procedures related to security roles
in scheme: organisational-measures-classes

Sell Data to Third Parties
type: Class
type: Concept
type: Purpose
contributor: Axel Polleres
contributor: Elmar Kiesling
contributor: Fajar Ekaputra
contributor: Harshvardhan J. Pandit
contributor: Javier Fernández
contributor: Simon Steyskal
created: 2019-04-05
term status: accepted
broader: Sell Products
definition: Purposes associated with selling or sharing data or information to third parties
in scheme: purposes-classes
scope note: Sell here means exchange, submit, or provide in return for direct or indirect compensation. Was subclass of commercial interest, changed to reflect selling something

Sell Insights from Data
type: Class
type: Concept
type: Purpose
contributor: Axel Polleres
contributor: Elmar Kiesling
contributor: Fajar Ekaputra
contributor: Harshvardhan J. Pandit
contributor: Javier Fernández
contributor: Simon Steyskal
created: 2019-04-05
term status: accepted
broader: Sell Products
definition: Purposes associated with selling or sharing insights obtained from analysis of data
in scheme: purposes-classes
scope note: Sell here means exchange, submit, or provide in return for direct or indirect compensation. Was subclass of commercial interest, changed to reflect selling something

Sell Products
type: Class
type: Concept
type: Purpose
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2021-09-08
term status: accepted
broader: Service Provision
definition: Purposes associated with selling products or services
in scheme: purposes-classes
scope note: Sell here means exchange, submit, or provide in return for direct or indirect compensation.

Sell Products to Data Subject
type: Class
type: Concept
type: Purpose
contributor: Axel Polleres
contributor: Elmar Kiesling
contributor: Fajar Ekaputra
contributor: Harshvardhan J. Pandit
contributor: Javier Fernández
contributor: Simon Steyskal
created: 2019-04-05
term status: accepted
broader: Sell Products
definition: Purposes associated with selling products or services to the user, consumer, or data subjects
in scheme: purposes-classes
scope note: Sell Products here refers to processing necessary to provide and complete a sale to customers. It should not be confused with providing services with a cost based on an established agreement.

Semi Private Space
type: Class
type: Concept
type: Location
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-04-07
term status: accepted
broader: Private Space
definition: A private space that acts as a shared space with other entities but which is still essentially private for the individuals e.g. a semi-private hospital room shared with another patient
in scheme: jurisdiction-classes

Sensitive Data
type: Class
type: Concept
created: 2024-02-14
subclass of: Data
term status: accepted
broader: Data
definition: Data deemed sensitive
in scheme: personal-data-classes

Sensitive Non Personal Data
type: Class
type: Concept
created: 2024-02-14
source: DGA 30(a)
subclass of: Sensitive Data
term status: accepted
broader: Sensitive Data
definition: Non-personal data deemed sensitive
in scheme: personal-data-classes

Sensitive Personal Data
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-01-19
example: E0010
example: E0045
subclass of: Personal Data
subclass of: Sensitive Data
term status: accepted
broader: Personal Data
broader: Sensitive Data
definition: Personal data that is considered 'sensitive' in terms of privacy and/or impact, and therefore requires additional considerations and/or protection
in scheme: personal-data-classes
scope note: Sensitivity' is a matter of context, and may be defined within legal frameworks. For GDPR, Special categories of personal data are considered a subset of sensitive data. To illustrate the difference between the two, consider the situation where Location data is collected, and which is considered 'sensitive' but not 'special'. As a probable rule, sensitive data require additional considerations whereas special category data requires additional legal basis / justifications.

Sensitivity Level
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2023-08-24
subclass of: Severity
term status: accepted
broader: Severity
definition: Sensitivity' reflects the risk of impact if not secured or utilised with appropriate measures and controls e.g. for sensitive data
in scheme: risk-classes
scope note: ISO/IEC TS 38505-3:2021 defines 'data sensitivity' as the potential harm of unauthorised disclosure. DPV's use of the concept goes beyond disclosure as it refers to the level of safeguards or controls the data requires as a reflection of its 'sensitive' nature. To indicate quantified levels of sensitivity, e.g. "high sensitivity", instances of severity can be directly used or specialised

Service
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2024-05-09
example: E0031
example: E0041
subclass of: Process
term status: accepted
broader: Process
definition: A service is a process where one entity provides some benefit or assistance to another entity
in scheme: process-classes
scope note: Service Provider and Service Consumer reflect the roles associated with a service. 'Service' as a process is a distinct concept from the use of 'service' as a provision method in Tech extension

Service Consumer
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2024-04-20
subclass of: Legal Entity
term status: accepted
broader: Legal Entity
definition: The entity that consumes or receives the service
in scheme: entities-legalrole-classes

Service Level Agreement (SLA)
type: Class
type: Concept
type: Legal Basis
created: 2024-08-27
term status: accepted
broader: Contract by Domain
definition: A contract regarding the provision of a service which outlines the acceptable metrics and performance of the service for the consumer
in scheme: contract-types-classes

Service Optimisation
type: Class
type: Concept
type: Purpose
contributor: Axel Polleres
contributor: Elmar Kiesling
contributor: Fajar Ekaputra
contributor: Harshvardhan J. Pandit
contributor: Javier Fernández
contributor: Simon Steyskal
created: 2019-04-05
term status: accepted
broader: Service Provision
definition: Purposes associated with optimisation of services or activities
in scheme: purposes-classes
scope note: Subclass of ServiceProvision since optimisation is usually considered part of providing services

Service Personalisation
type: Class
type: Concept
type: Purpose
contributor: Axel Polleres
contributor: Elmar Kiesling
contributor: Fajar Ekaputra
contributor: Harshvardhan J. Pandit
contributor: Javier Fernández
contributor: Simon Steyskal
created: 2019-04-05
term status: accepted
broader: Personalisation
broader: Service Provision
definition: Purposes associated with providing personalisation within services or product or activities
in scheme: purposes-classes

Service Provider
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2024-04-20
subclass of: Legal Entity
term status: accepted
broader: Legal Entity
definition: The entity that provides a service
in scheme: entities-legalrole-classes

Service Provision
type: Class
type: Concept
type: Purpose
contributor: Axel Polleres
contributor: Elmar Kiesling
contributor: Fajar Ekaputra
contributor: Harshvardhan J. Pandit
contributor: Javier Fernández
contributor: Simon Steyskal
created: 2019-04-05
term status: accepted
broader: Purpose
definition: Purposes associated with providing service or product or activities
in scheme: purposes-classes

Service Registration
type: Class
type: Concept
type: Purpose
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2020-11-04
term status: accepted
broader: Service Provision
definition: Purposes associated with registering users and collecting information required for providing a service
in scheme: purposes-classes
scope note: An example of service registration is to provide a form that collects information such as preferred language or media format for downloading a movie

Service Usage Analytics
type: Class
type: Concept
type: Purpose
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2020-11-04
modified: 2022-10-05
term status: accepted
broader: Service Provision
definition: Purposes associated with conducting analysis and reporting related to usage of services or products
in scheme: purposes-classes
scope note: Was "UsageAnalytics", prefixed with Service to better reflect scope

Severity
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-07-21
example: E0068
term status: accepted
definition: The magnitude of being unwanted or having negative effects such as harmful impacts
in scheme: risk-classes
scope note: Severity can be associated with Risk, or its Consequences and Impacts

Share
type: Class
type: Concept
type: Processing
created: 2019-05-07
source: GDPR Art.4-2
term status: accepted
broader: Disclose
definition: to give data (or a portion of it) to others
in scheme: processing-classes

Single Sign On
type: Class
type: Concept
type: Technical Measure
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2020-11-04
term status: accepted
broader: Authentication Protocols
definition: Use of credentials or processes that enable using one set of credentials to authenticate multiple contexts.
in scheme: technical-measures-classes

Singular Data Volume
type: Class
type: Concept
type: Data Volume
contributor: Harshvardhan J. Pandit
created: 2022-06-15
term status: accepted
broader: Data Volume
definition: Data volume that is considered singular i.e. a specific instance or single item
in scheme: processing-scale-classes

Singular Frequency
type: Class
type: Concept
type: Frequency
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
term status: accepted
broader: Frequency
definition: Frequency where occurrences are singular i.e. they take place only once
in scheme: context-classes

Singular Scale Of Data Subjects
type: Class
type: Concept
type: Data Subject Scale
contributor: Harshvardhan J. Pandit
created: 2022-06-15
term status: accepted
broader: Data Subject Scale
definition: Scale of data subjects considered singular i.e. a specific data subject
in scheme: processing-scale-classes

Small Data Volume
type: Class
type: Concept
type: Data Volume
contributor: Harshvardhan J. Pandit
created: 2022-06-15
term status: accepted
broader: Data Volume
definition: Data volume that is considered small or limited within the context
in scheme: processing-scale-classes

Small Scale Of Data Subjects
type: Class
type: Concept
type: Data Subject Scale
contributor: Harshvardhan J. Pandit
created: 2022-06-15
term status: accepted
broader: Data Subject Scale
definition: Scale of data subjects considered small or limited within the context
in scheme: processing-scale-classes

Small Scale Processing
type: Class
type: Concept
type: Processing Scale
contributor: Harshvardhan J. Pandit
created: 2022-09-07
term status: accepted
broader: Processing Scale
definition: Processing that takes place at small scales (as specified by some criteria)
in scheme: processing-scale-classes

Social Media Marketing
type: Class
type: Concept
type: Purpose
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2020-11-04
term status: accepted
broader: Marketing
definition: Purposes associated with conducting marketing through social media
in scheme: purposes-classes

Special Category Personal Data
type: Class
type: Concept
contributor: Elmar Kiesling
contributor: Fajar Ekaputra
contributor: Harshvardhan J. Pandit
created: 2019-05-07
modified: 2022-01-19
source: GDPR Art.9-1
example: E0010
example: E0045
subclass of: Sensitive Personal Data
term status: accepted
broader: Sensitive Personal Data
definition: Sensitive Personal Data whose use requires specific additional legal permission or justification
in scheme: personal-data-classes
scope note: The term 'special category' is based on GDPR Art.9, but should not be considered as exclusive to it. DPV considers all Special Categories to also be Sensitive, but whose use is either prohibited or regulated and therefore requires additional legal basis for justification that is separate from that for general personal data.

Sporadic Data Volume
type: Class
type: Concept
type: Data Volume
contributor: Harshvardhan J. Pandit
created: 2022-06-15
term status: accepted
broader: Data Volume
definition: Data volume that is considered sporadic or sparse within the context
in scheme: processing-scale-classes

Sporadic Frequency
type: Class
type: Concept
type: Frequency
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
term status: accepted
broader: Frequency
definition: Frequency where occurrences are sporadic or infrequent or sparse
in scheme: context-classes

Sporadic Scale Of Data Subjects
type: Class
type: Concept
type: Data Subject Scale
contributor: Harshvardhan J. Pandit
created: 2022-06-15
term status: accepted
broader: Data Subject Scale
definition: Scale of data subjects considered sporadic or sparse within the context
in scheme: processing-scale-classes

Staff Training
type: Class
type: Concept
type: Organisational Measure
contributor: Axel Polleres
contributor: Harshvardhan J. Pandit
contributor: Mark Lizar
contributor: Rob Brennan
created: 2019-04-05
example: E0021
term status: accepted
broader: Organisational Measure
definition: Practices and policies regarding training of staff members
in scheme: organisational-measures-classes

Standard
type: Class
type: Concept
type: Organisational Measure
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
created: 2024-12-01
term status: accepted
broader: Guidelines Principle
definition: A set of requirements or norms that are agreed upon i.e. they are considered a 'standard'
in scheme: organisational-measures-classes
scope note: DPV does not restrict the notion of 'standard' to those published by specific or 'formal' bodies

Standard Form Contract
type: Class
type: Concept
type: Legal Basis
created: 2024-08-27
term status: accepted
broader: Contract by Negotiation Type
definition: A contract where the terms and conditions are determined by one or more of the parties, and the other parties have negligible or no ability to negotiate the terms and conditions
in scheme: contract-types-classes
scope note: Such a contract results in the unempowered parties being in a "take it or leave it" position as they can only accept or reject the contract. Standard form contracts are also known as "Adhesion contract" or "Boilerplate contract"

Standards Conformance
type: Class
type: Concept
type: Organisational Measure
contributor: Beatriz Esteves
contributor: Harshvardhan J. Pandit
created: 2024-04-14
source: DGA 12.d
term status: accepted
broader: Governance Procedures
definition: Purposes associated with activities undertaken to ensure or achieve conformance with standards
in scheme: organisational-measures-classes

Startup Organisation
type: Class
type: Concept
contributor: Georg P. Krog
created: 2024-12-01
subclass of: Legal Entity
term status: accepted
broader: Legal Entity
definition: An organisation that is newly established and is nascent in terms of available resources
in scheme: entities-organisation-classes

Statistical Confidentiality Agreement
type: Class
type: Concept
type: Legal Measure
created: 2022-02-09
modified: 2024-08-27
term status: accepted
broader: Legal Agreement
definition: An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for classification and management of 'confidential data' based on a statistical framework
in scheme: legal-measures-classes

Statistically Confidential Data
type: Class
type: Concept
created: 2024-02-14
source: DGA 2(20)
subclass of: Confidential Data
term status: accepted
broader: Confidential Data
definition: Data protected through Statistical Confidentiality regulations and agreements
in scheme: personal-data-classes

Status
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-05-18
subclass of: Context
term status: accepted
broader: Context
definition: The status or state of something
in scheme: status-classes

Storage Condition
type: Class
type: Concept
contributor: Axel Polleres
contributor: Harshvardhan J. Pandit
contributor: Mark Lizar
contributor: Rob Brennan
created: 2019-04-05
example: E0011
example: E0048
subclass of: Processing Condition
term status: accepted
broader: Processing Condition
definition: Conditions required or followed regarding storage of data
in scheme: processing-context-classes

Storage Deletion
type: Class
type: Concept
contributor: Axel Polleres
contributor: Harshvardhan J. Pandit
contributor: Mark Lizar
contributor: Rob Brennan
created: 2019-04-05
example: E0048
subclass of: Storage Condition
term status: accepted
broader: Storage Condition
definition: Deletion or Erasure of data including any deletion guarantees
in scheme: processing-context-classes

Storage Duration
type: Class
type: Concept
contributor: Axel Polleres
contributor: Harshvardhan J. Pandit
contributor: Mark Lizar
contributor: Rob Brennan
created: 2019-04-05
example: E0048
subclass of: Processing Duration
subclass of: Storage Condition
term status: accepted
broader: Processing Duration
broader: Storage Condition
definition: Duration or temporal limitation on storage of data
in scheme: processing-context-classes

Storage Location
type: Class
type: Concept
contributor: Axel Polleres
contributor: Harshvardhan J. Pandit
contributor: Mark Lizar
contributor: Rob Brennan
created: 2019-04-05
example: E0048
subclass of: Processing Location
subclass of: Storage Condition
term status: accepted
broader: Processing Location
broader: Storage Condition
definition: Location or geospatial scope where the data is stored
in scheme: processing-context-classes

Storage Restoration
type: Class
type: Concept
contributor: Axel Polleres
contributor: Harshvardhan J. Pandit
contributor: Mark Lizar
contributor: Rob Brennan
created: 2019-04-05
example: E0048
subclass of: Storage Condition
term status: accepted
broader: Storage Condition
definition: Regularity and temporal span of data restoration/backup mechanisms that guarantee that data is preserved
in scheme: processing-context-classes

Store
type: Class
type: Concept
type: Processing
created: 2019-05-07
source: GDPR Art.4-2
term status: accepted
broader: Processing
definition: to keep data for future use
in scheme: processing-classes

Structure
type: Class
type: Concept
type: Processing
created: 2019-05-07
source: GDPR Art.4-2
term status: accepted
broader: Organise
definition: to arrange data according to a structure
in scheme: processing-classes

Student
type: Class
type: Concept
type: Human Subject
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-04-06
modified: 2024-12-17
term status: modified
broader: Human Subject
definition: Humans that are students
in scheme: entities-datasubject-classes

Sub-Processor Agreement
type: Class
type: Concept
type: Legal Basis
type: Legal Measure
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-01-26
modified: 2024-08-27
term status: modified
broader: Data Processing Agreement
definition: An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of data between a Data Processor and a Data (Sub-)Processor
in scheme: contract-types-classes

Subscriber
type: Class
type: Concept
type: Human Subject
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-04-06
modified: 2024-12-17
term status: modified
broader: Human Subject
definition: Humans that subscribe to service(s)
in scheme: entities-datasubject-classes
scope note: note: subscriber can be customer or consumer

Subsidiary Legal Entity
type: Class
type: Concept
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2024-04-14
subclass of: Organisation
term status: accepted
broader: Organisation
definition: A legal entity that operates as a subsidiary of another legal entity
in scheme: entities-classes

Support Contract Negotiation
type: Class
type: Concept
type: Organisational Measure
contributor: Beatriz Esteves
contributor: Harshvardhan J. Pandit
created: 2024-04-14
source: DGA 2.15
term status: accepted
broader: Support Entity Decision Making
definition: Supporting entities, including individuals, with negotiating a contract and its terms and conditions
in scheme: organisational-measures-classes

Support Entity Decision Making
type: Class
type: Concept
type: Organisational Measure
contributor: Beatriz Esteves
contributor: Harshvardhan J. Pandit
created: 2024-04-14
source: DGA 2.15
term status: accepted
broader: Organisational Measure
definition: Supporting entities, including individuals, in making decisions
in scheme: organisational-measures-classes

Support Exchange of Views
type: Class
type: Concept
type: Organisational Measure
contributor: Beatriz Esteves
contributor: Harshvardhan J. Pandit
created: 2024-04-14
source: DGA 2.15
term status: accepted
broader: Support Entity Decision Making
definition: Supporting individuals and entities in exchanging views e.g. regarding data processing purposes for their best interests
in scheme: organisational-measures-classes

Support Informed Consent Decision
type: Class
type: Concept
type: Organisational Measure
contributor: Beatriz Esteves
contributor: Harshvardhan J. Pandit
created: 2024-04-14
source: DGA 2.15
term status: accepted
broader: Support Entity Decision Making
definition: Supporting individuals with making a decision regarding their informed consent
in scheme: organisational-measures-classes

Supranational Authority
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-02-02
source: ADMS controlled vocabulary
subclass of: Authority
term status: accepted
broader: Authority
definition: An authority tasked with overseeing legal compliance for a supra-national union e.g. EU
in scheme: entities-authority-classes

Supranational Union
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-01-19
modified: 2025-05-04
subclass of: Jurisdiction
term status: modified
broader: Jurisdiction
definition: A political union of two or more countries with an establishment of common authority
in scheme: jurisdiction-classes

Symmetric Cryptography
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Cryptographic Methods
definition: Use of cryptography where the same keys are utilised for encryption and decryption of information
in scheme: technical-measures-classes

Symmetric Encryption
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Data Pseudonymisation: Advanced Techniques and Use Cases
term status: accepted
broader: Encryption
definition: Use of symmetric cryptography to encrypt data
in scheme: technical-measures-classes

Synthetic Data
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-08-18
modified: 2023-12-10
source: ENISA Data Protection Engineering
subclass of: Generated Data
term status: accepted
broader: Generated Data
definition: Synthetic data refers to artificially created data such that it is intended to resemble real data (personal or non-personal), but does not refer to any specific identified or identifiable individual, or to the real measure of an observable parameter in the case of non-personal data
in scheme: personal-data-classes

Systematic Monitoring
type: Class
type: Concept
type: Processing Context
contributor: Harshvardhan J. Pandit
contributor: Piero Bonatti
created: 2020-11-04
source: GDPR Art.4-2
term status: accepted
broader: Processing Context
definition: Processing that involves systematic monitoring of individuals
in scheme: processing-context-classes

Targeted Advertising
type: Class
type: Concept
type: Purpose
contributor: Harshvardhan J. Pandit
created: 2022-03-30
term status: accepted
broader: Personalised Advertising
definition: Purposes associated with creating and providing personalised advertisement where the personalisation is targeted to a specific individual or group of individuals
in scheme: purposes-classes

Technical Measure
type: Class
type: Concept
contributor: Axel Polleres
contributor: Harshvardhan J. Pandit
contributor: Mark Lizar
contributor: Rob Brennan
created: 2019-04-05
modified: 2023-12-10
example: E0020
example: E0064
subclass of: Technical and Organisational Measure
term status: accepted
broader: Technical and Organisational Measure
definition: Technical measures used to safeguard and ensure good practices in connection with data and technologies
in scheme: TOM-classes

Technical and Organisational Measure
type: Class
type: Concept
contributor: Bud Bruegger
created: 2019-04-05
modified: 2023-12-10
term status: accepted
definition: Technical and Organisational measures used to safeguard and ensure good practices in connection with data and technologies
in scheme: TOM-classes

Technical Service Provision
type: Class
type: Concept
type: Purpose
contributor: Harshvardhan J. Pandit
created: 2021-09-08
term status: accepted
broader: Service Provision
definition: Purposes associated with managing and providing technical processes and functions necessary for delivering services
in scheme: purposes-classes

Technical Standard
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2024-12-01
term status: accepted
broader: Standard
definition: A technical standard is a standard that establishes norms or requirements regarding technology or technical processes
in scheme: organisational-measures-classes

Technology
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-01-26
term status: accepted
definition: The technology, technological implementation, or any techniques, skills, methods, and processes used or applied
in scheme: processing-context-classes
scope note: Examples (non-exhaustive) include: Algorithm, Process, Method, Skill, Database, Cookies, Server, Device

Temporal Duration
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
subclass of: Duration
term status: accepted
broader: Duration
definition: Duration that has a fixed temporal duration e.g. 6 months
in scheme: context-classes

Terminate Contract
type: Class
type: Concept
created: 2024-08-27
subclass of: Contract Control
term status: accepted
broader: Contract Control
definition: Control for terminating a contract
in scheme: contract-control-classes

Terms of Service
type: Class
type: Concept
type: Contractual Clause
contributor: Georg P. Krog
created: 2024-08-27
term status: accepted
broader: Contractual Clause
definition: Contractual clauses outlining the terms and conditions regarding the provision of a service, typically between a service provider and a service consumer, also know as 'Terms of Use' and 'Terms and Conditions' and commonly abbreviated as TOS, ToS, ToU, or T&C
in scheme: contract-clause-classes

Third Country
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-02-09
modified: 2025-05-04
subclass of: Country
term status: modified
broader: Country
definition: Represents a country outside applicable or compatible jurisdiction as outlined in law
in scheme: jurisdiction-classes

Third Party
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2019-06-04
modified: 2024-05-21
source: GDPR Art.4-10
subclass of: Legal Entity
term status: accepted
broader: Legal Entity
definition: A ‘third party’ means any natural or legal person other than - the entities directly involved or operating under those directly involved in a process
in scheme: entities-legalrole-classes
scope note: Third Party in the context of personal data processing are entities other than the data subject, controllers, processors, and authorities

Third-Party Agreement
type: Class
type: Concept
type: Legal Basis
type: Legal Measure
contributor: Harshvardhan J. Pandit
created: 2022-02-09
modified: 2024-08-27
term status: modified
broader: Third Party Contract
definition: An agreement outlining conditions, criteria, obligations, responsibilities, and specifics for carrying out processing of data between a Data Controller or Processor and a Third Party
in scheme: contract-types-classes

Third Party Contract
type: Class
type: Concept
type: Legal Basis
created: 2023-12-10
modified: 2024-08-27
term status: sunset
broader: Data Processing Agreement
definition: Creation, completion, fulfilment, or performance of a contract, with the Data Controller and Third Party as parties, and involving specified processing of data or technologies. NOTE: This concept is being deprecated - use dpv:ThirdPartyAgreement which has a more explicit definition of the entities involved and the intent of the contract
in scheme: contract-types-classes

Third Party as Data Source
type: Class
type: Concept
type: Data Source
created: 2023-10-12
term status: accepted
broader: Data Source
definition: Data Sourced from a Third Party, e.g. when data is collected from an entity that is neither the Controller nor the Data Subject
in scheme: processing-context-classes

Third Party Security Procedures
type: Class
type: Concept
type: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA 5G Cybersecurity Standards
term status: accepted
broader: Security Procedure
definition: Procedures related to security associated with Third Parties
in scheme: organisational-measures-classes

Tourist
type: Class
type: Concept
type: Human Subject
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-04-06
modified: 2024-12-17
term status: modified
broader: Human Subject
definition: Humans that are tourists i.e. not citizens and not immigrants
in scheme: entities-datasubject-classes

Tracking
type: Class
type: Concept
type: Processing
contributor: Beatriz Esteves
contributor: Harshvardhan J. Pandit
contributor: Iain Henderson
created: 2024-12-17
example: E0075
term status: accepted
broader: Use
definition: to use data to track a specific factor (e.g. a human or their activities) across multiple distinct contexts
in scheme: processing-classes
scope note: Tracking is a widely used (and abused) concept and therefore carries several distinct interpretations, for example see Do Not Track which defines tracking in the context of the web, and where other forms of tracking such as location tracking or physical biometric tracking may exist which are defined differently. For this concept, DPVCG defines Tracking in the broadest possible sense and strongly recommends adopters to provide their specific definition or interpretation by either extending this concept, through a usage note, or by contributing the specific term back to DPVCG for inclusion in DPV or an extension. This concept may change in the future based on developments in privacy and legal spaces. In DPV, Tracking is defined as a type of processing operation that may collect and/or may use data - which covers both initial collection and usage as well as subsequent use of existing data to track an individual. The classification of Tracking as a processing operation also implies that it is not sufficient as a Purpose on its own and therefore a suitable purpose from the DPV taxonomy should be used to justify it.

Tracking by First Party
type: Class
type: Concept
type: Processing
contributor: Harshvardhan J. Pandit
created: 2024-12-17
term status: accepted
broader: Tracking
definition: to perform tracking where the performing entity is a first party within the context
in scheme: processing-classes
scope note: This concept does not strictly only specify the processing operation, but also the relation of the individual with the implementing entity. These concepts may change in the future based on discussions around how to express First and Third Party.

Tracking by Third Party
type: Class
type: Concept
type: Processing
contributor: Harshvardhan J. Pandit
created: 2024-12-17
term status: accepted
broader: Tracking
definition: to perform tracking where the performing entity is a third party within the context
in scheme: processing-classes
scope note: This concept does not strictly only specify the processing operation, but also the relation of the individual with the implementing entity. These concepts may change in the future based on discussions around how to express First and Third Party.

Transfer
type: Class
type: Concept
type: Processing
created: 2019-05-07
source: SPECIAL Project
example: E0035
term status: accepted
broader: Processing
definition: to move data from one place to another
in scheme: processing-classes
related: Transfer

Transform
type: Class
type: Concept
type: Processing
created: 2019-05-07
source: GDPR Art.4-2
term status: accepted
broader: Processing
definition: to change the form or nature of data
in scheme: processing-classes

Transmit
type: Class
type: Concept
type: Processing
created: 2019-05-07
source: GDPR Art.4-2
term status: accepted
broader: Disclose
definition: to send out data
in scheme: processing-classes

Trusted Computing
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Cryptographic Methods
definition: Use of cryptographic methods to restrict access and execution to trusted parties and code
in scheme: technical-measures-classes

Trusted Execution Environment
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
modified: 2024-04-14
source: ENISA Data Protection Engineering
term status: accepted
broader: Cryptographic Methods
definition: Use of cryptographic methods to restrict access and execution to trusted parties and code within a dedicated execution environment
in scheme: technical-measures-classes

Unacceptable Rule
type: Class
type: Concept
type: Rule
contributor: Arthit Suriyawongkul
contributor: Beatriz Esteves
contributor: Delaram Golpayegani
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2025-06-19
term status: accepted
broader: Rule
definition: A rule that is unacceptable where it is not desirable if it occurs
in scheme: rules-classes
scope note: Unacceptable is a subjective concept that enables specifying something is to be avoided as compared to "acceptable". By itself it does not signal any deterrence or prohibition - for which further specific concepts are defined

Uncategorised Data
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
contributor: Rob Brennan
created: 2025-03-09
subclass of: Data
term status: accepted
broader: Data
definition: Data whose categorisation is not known e.g. whether it is personal or non-personal data
in scheme: personal-data-classes
scope note: This concept is intended for indicating that a legally relevant categorisation of data has not been made - specifically regarding whether it is personal data or not, but it can also be extended for other categorisations such as sensitive data or domain-specific confidential data

Unexpected
type: Class
type: Concept
type: Expectation Status
contributor: Delaram Golpayegani
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2024-05-10
term status: accepted
broader: Expectation Status
definition: Status indicating the specified context was unexpected i.e. not expected
in scheme: status-classes

Uninformed Consent
type: Class
type: Concept
type: Legal Basis
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-06-21
term status: accepted
broader: Consent
definition: Consent that is uninformed i.e. without requirement to provide sufficient information to make a consenting decision
in scheme: consent-types-classes

Unintended
type: Class
type: Concept
type: Intention Status
contributor: Delaram Golpayegani
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2024-05-10
term status: accepted
broader: Intention Status
definition: Status indicating the specified context was unintended i.e. not intended
in scheme: status-classes

Unknown Applicability
type: Class
type: Concept
type: Applicability
contributor: Harshvardhan J. Pandit
created: 2023-08-24
term status: accepted
broader: Applicability
definition: Concept indicating information or context availability is unknown i.e. it is not known if the information exists or is applicable and therefore statements about its availability cannot be made (yet)
in scheme: context-classes
scope note: This concept is useful when describing situations where it cannot be stated whether the context applies or whether the information is not available yet. For example, if a form field asks about whether a process X was completed and it is not yet known whether X applies or not and therefore it is also unclear whether X was completed or not. Using UnknownApplicability is a signal that the applicability of X should be assessed, and if applicable, then information about X should be identified and used here.

Unlawful
type: Class
type: Concept
type: Lawfulness
contributor: Harshvardhan J. Pandit
created: 2022-10-19
term status: accepted
broader: Lawfulness
definition: State of being unlawful or legally non-compliant
in scheme: status-classes

Unstructured Data
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
contributor: Rob Brennan
created: 2025-03-09
subclass of: Data
term status: accepted
broader: Data
definition: Data that is without a predefined data model or is not organised in a pre-defined manner
in scheme: personal-data-classes
scope note: This concept is relevant to application of privacy/data protection regulations like GDPR as unstructured data may contain PII/personal data and it is useful to flag such data with unknown or incomplete modelling information for audits. It is also useful to flag data for potential quality issues

Until Event Duration
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
subclass of: Duration
term status: accepted
broader: Duration
definition: Duration that takes place until a specific event occurs e.g. Account Closure
in scheme: context-classes

Until Time Duration
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
subclass of: Duration
term status: accepted
broader: Duration
definition: Duration that has a fixed end date e.g. 2022-12-31
in scheme: context-classes

Unverified Data
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-11-02
subclass of: Data
term status: accepted
broader: Data
definition: Data that has not been verified in terms of accuracy, inconsistency, or quality
in scheme: personal-data-classes

Usage Control
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Access Control Method
definition: Management of usage, which is intended to be broader than access control and may cover trust, digital rights, or other relevant controls
in scheme: technical-measures-classes

Use
type: Class
type: Concept
type: Processing
created: 2019-05-07
source: GDPR Art.4-2
term status: accepted
broader: Processing
definition: to use data
in scheme: processing-classes

Use of Synthetic Data
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Data Protection Engineering
term status: accepted
broader: Security Method
definition: Use of synthetic data to preserve privacy, security, or other effects and side-effects
in scheme: technical-measures-classes

User
type: Class
type: Concept
type: Human Subject
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-04-06
modified: 2024-12-17
term status: modified
broader: Human Subject
definition: Humans that use service(s)
in scheme: entities-datasubject-classes

User Interface Personalisation
type: Class
type: Concept
type: Purpose
contributor: Axel Polleres
contributor: Elmar Kiesling
contributor: Fajar Ekaputra
contributor: Harshvardhan J. Pandit
contributor: Javier Fernández
contributor: Simon Steyskal
created: 2019-04-05
term status: accepted
broader: Service Personalisation
definition: Purposes associated with personalisation of interfaces presented to the user
in scheme: purposes-classes
scope note: Examples of user-interface personalisation include changing the language to match the locale

Variable Location
type: Class
type: Concept
type: Location Fixture
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2020-10-05
term status: accepted
broader: Location Fixture
definition: Location that is known but is variable e.g. somewhere within a given area
in scheme: jurisdiction-classes

Vendor Management
type: Class
type: Concept
type: Purpose
contributor: David Hickey
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2021-09-01
source: Belgian DPA ROPA Template
term status: accepted
broader: Purpose
definition: Purposes associated with manage orders, payment, evaluation, and prospecting related to vendors
in scheme: purposes-classes

Vendor Payment
type: Class
type: Concept
type: Purpose
contributor: David Hickey
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2021-09-01
source: Belgian DPA ROPA Template
term status: accepted
broader: Vendor Management
definition: Purposes associated with managing payment of vendors
in scheme: purposes-classes

Vendor Records Management
type: Class
type: Concept
type: Purpose
contributor: David Hickey
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2021-09-01
source: Belgian DPA ROPA Template
term status: accepted
broader: Vendor Management
definition: Purposes associated with managing records and orders related to vendors
in scheme: purposes-classes

Vendor Selection Assessment
type: Class
type: Concept
type: Purpose
contributor: David Hickey
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2021-09-01
source: Belgian DPA ROPA Template
term status: accepted
broader: Vendor Management
definition: Purposes associated with managing selection, assessment, and evaluation related to vendors
in scheme: purposes-classes

Verification
type: Class
type: Concept
type: Purpose
contributor: Beatriz Esteves
contributor: Harshvardhan J. Pandit
created: 2024-02-14
term status: accepted
broader: Enforce Security
definition: Purposes association with verification e.g. information, identity, integrity
in scheme: purposes-classes

Verified Data
type: Class
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-11-02
subclass of: Data
term status: accepted
broader: Data
definition: Data that has been verified in terms of accuracy, consistency, or quality
in scheme: personal-data-classes

Virtualisation Security
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Security Method
definition: Security implemented at or through virtualised environments
in scheme: technical-measures-classes

Visitor
type: Class
type: Concept
type: Human Subject
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-04-06
modified: 2024-12-17
term status: modified
broader: Human Subject
definition: Humans that are temporary visitors
in scheme: entities-datasubject-classes

Vital Interest
type: Class
type: Concept
type: Legal Basis
contributor: Harshvardhan J. Pandit
created: 2021-04-21
example: E0083
term status: accepted
broader: Legal Basis
definition: Activities are necessary or required to protect vital interests of a data subject or other natural person
in scheme: legal-basis-classes

Vital Interest Completed
type: Class
type: Concept
type: Vital Interest Status
created: 2024-08-27
term status: accepted
broader: Vital Interest Status
definition: Status where the vital interest activity has been completed
in scheme: legal-basis-status-classes

Vital Interest Objected
type: Class
type: Concept
type: Vital Interest Status
created: 2024-08-27
term status: accepted
broader: Vital Interest Status
definition: Status where the vital interest activity was objected to by the Data Subject or another relevant entity
in scheme: legal-basis-status-classes

Vital Interest of Data Subject
type: Class
type: Concept
type: Legal Basis
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2021-04-21
term status: accepted
broader: Vital Interest of Natural Person
definition: Activities are necessary or required to protect vital interests of a data subject
in scheme: legal-basis-classes

Vital Interest of Natural Person
type: Class
type: Concept
type: Legal Basis
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2021-04-21
term status: accepted
broader: Vital Interest
definition: Activities are necessary or required to protect vital interests of a natural person
in scheme: legal-basis-classes

Vital Interest Ongoing
type: Class
type: Concept
type: Vital Interest Status
created: 2024-08-27
term status: accepted
broader: Vital Interest Status
definition: Status where the vital interest activity is ongoing
in scheme: legal-basis-status-classes

Vital Interest Pending
type: Class
type: Concept
type: Vital Interest Status
created: 2024-08-27
term status: accepted
broader: Vital Interest Status
definition: Status where the vital interest activity has not started
in scheme: legal-basis-status-classes

Vital Interest Status
type: Class
type: Concept
created: 2024-08-27
example: E0083
subclass of: Status
term status: accepted
broader: Status
definition: Status associated with use of Vital Interest as a legal basis
in scheme: legal-basis-status-classes

Vulnerability Testing Methods
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Security Method
definition: Methods that assess or discover vulnerabilities in a system
in scheme: technical-measures-classes

Vulnerable Data Subject
type: Class
type: Concept
type: Human Subject
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2020-11-04
modified: 2024-12-17
term status: modified
broader: Vulnerable Human
definition: Humans which should be considered 'vulnerable' and therefore would require additional measures and safeguards
in scheme: entities-datasubject-classes
scope note: This concept denotes a Data Subject or a group are vulnerable, but not what vulnerability they possess or its context. This information can be provided additionally as comments, or as separate concepts and relations. Proposals for this are welcome.

Vulnerable Human
type: Class
type: Concept
type: Human Subject
contributor: Harshvardhan J. Pandit
created: 2024-12-17
term status: accepted
broader: Human Subject
definition: Human(s) which should be considered 'vulnerable' within the context
in scheme: entities-datasubject-classes

WebBrowser Security
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Security Method
definition: Security implemented at or over web browsers
in scheme: technical-measures-classes

Web Security Protocols
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Security Method
definition: Security implemented at or over web-based protocols
in scheme: technical-measures-classes

Wireless Security Protocols
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Reference Incident Classification Taxonomy 2018
term status: accepted
broader: Security Method
definition: Security implemented at or over wireless communication protocols
in scheme: technical-measures-classes

Withdraw Consent
type: Class
type: Concept
created: 2024-05-11
subclass of: Consent Control
subclass of: Withdrawing from Process
term status: accepted
broader: Consent Control
broader: Withdrawing from Process
definition: Control for withdrawing consent
in scheme: consent-controls-classes
scope note: Indicates how the data subject can withdraw consent e.g. used with dpv:isExercisedAt

Withdrawing from Process
type: Class
type: Concept
type: Entity Permissive Involvement
contributor: Delaram Golpayegani
contributor: Harshvardhan J. Pandit
contributor: Steve Hickman
created: 2024-05-11
term status: accepted
broader: Entity Permissive Involvement
definition: Involvement where entity can withdraw a previously given assent from specified context
in scheme: processing-context-classes

Within Device (deprecated)
type: Class
type: Concept
type: Location
contributor: Harshvardhan J. Pandit
created: 2022-06-15
modified: 2025-05-04
term status: sunset
broader: Local Location
definition: Location is local and entirely within a device, such as a smartphone
in scheme: jurisdiction-classes
scope note: This concept will be deprecated in a future DPV release, it is suggested to use the existing concepts representing device as tech:Device to have parity and consistency between the use of device as a technology and for data storage

Within Physical Environment
type: Class
type: Concept
type: Location
contributor: Harshvardhan J. Pandit
created: 2020-10-06
modified: 2025-05-04
term status: sunset
broader: Location
definition: Location is local and entirely within a physical environment, such as a room
in scheme: jurisdiction-classes
scope note: This concept will be deprecated in a future DPV release, it is suggested to use other concepts that also represent the nature of the location e.g. dpv:PrivateSpace or its accessibility dpv:PubliclyAccessibleSpace

Within Virtual Environment
type: Class
type: Concept
type: Location
contributor: Harshvardhan J. Pandit
created: 2020-10-06
modified: 2025-05-04
term status: sunset
broader: Location
definition: Location is local and entirely within a virtual environment, such as a software system
in scheme: jurisdiction-classes
scope note: This concept will be deprecated in a future DPV release, it is suggested to use the existing concepts representing device as tech:Software and its taxonomy to have parity and consistency between the use of software as a technology and as a virtual environment for data storage and operations

Zero Knowledge Authentication
type: Class
type: Concept
type: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-08-17
source: ENISA Data Protection Engineering
term status: accepted
broader: Authentication Protocols
broader: Cryptographic Methods
definition: Authentication using Zero-Knowledge proofs
in scheme: technical-measures-classes

dct:accessRights
type: Property
type: Concept
in scheme: rights-properties
scope note: Also used for specifying constraints on access associated with Rights Exercising (e.g. User must log in) or access to provided data (e.g. access via link)

dct:format
type: Property
type: Concept
in scheme: rights-properties
scope note: Also used for specifying the format of provided information, for example a CSV dataset

dct:hasPart
type: Property
type: Concept
domain includes: Right Exercise Record
range includes: Right Exercise Activity
in scheme: rights-properties
scope note: Also used for specifying a RightExerciseRecord has RightExerciseActivity as part of its records

dct:isPartOf
type: Property
type: Concept
domain includes: Right Exercise Activity
range includes: Right Exercise Record
in scheme: rights-properties
scope note: Also used for specifying a RightExerciseActivity is part of a RightExerciseRecord

dct:valid
type: Property
type: Concept
in scheme: rights-properties
scope note: Also used for specifying the temporal validity of an activity associated with Right Exercise. For example, limits on duration for providing or accessing provided information

foaf:page
type: Property
type: Concept
domain includes: Right Exercise Activity
in scheme: rights-properties
scope note: Also used to indicate a web page or document providing information or functionality associated with a Right Exercise

Data Privacy Vocabulary (DPV)
type: Ontology
type: Profile
bibliographic citation: Harshvardhan J. Pandit, Beatriz Esteves, Georg P. Krog, Paul Ryan, Delaram Golpayegani, Julian Flake (2025) Data Privacy Vocabulary (DPV) – Version 2.0. In: Demartini, G., et al. The Semantic Web – ISWC 2024. ISWC 2024. Lecture Notes in Computer Science, vol 15233. Springer, Cham. https://doi.org/10.1007/978-3-031-77847-6_10
conforms to: http://www.w3.org/2000/01/rdf-schema
conforms to: http://www.w3.org/2004/02/skos/core
contributor: Arthit Suriyawongkul
contributor: Axel Polleres
contributor: Beatriz Esteves
contributor: Bud Bruegger
contributor: Damien Desfontaines
contributor: Danielle Welter
contributor: David Hickey
contributor: Delaram Golpayegani
contributor: Elmar Kiesling
contributor: Fajar Ekaputra
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Iain Henderson
contributor: Javier Fernández
contributor: Julian Flake
contributor: Julio Hernandez
contributor: Mark Lizar
contributor: Maya Borges
contributor: Paul Ryan
contributor: Piero Bonatti
contributor: Rana Saniei
contributor: Rob Brennan
contributor: Rudy Jacob
contributor: Simon Steyskal
contributor: Steve Hickman
created: 2022-08-18
creator: Beatriz Esteves
creator: Delaram Golpayegani
creator: Georg P. Krog
creator: Harshvardhan J. Pandit
creator: Julian Flake
creator: Paul Ryan
description: The Data Privacy Vocabulary (DPV) provides terms (classes and properties) to represent information about processing of personal data, for example - purposes, processing operations, personal data, technical and organisational measures.
issued: 2022-08-18
license: document-license-2023
modified: 2025-08-01
publisher: www.w3.org
source: dpvcg
doi: 10.5281/zenodo.12505841
status: http://purl.org/ontology/bibo/status/published
preferred namespace prefix: dpv
preferred namespace uri: https://w3id.org/dpv#
label: DPV
version IRI: https://w3id.org/dpv/2.2
version info: 2.2
has resource: Data Privacy Vocabulary (DPV) - HTML serialisation
has resource: Data Privacy Vocabulary (DPV) - JSON-LD serialisation
has resource: Data Privacy Vocabulary (DPV) - N3 serialisation
has resource: Data Privacy Vocabulary (DPV) - RDF/XML serialisation
has resource: Data Privacy Vocabulary (DPV) - Turtle serialisation
has resource: Examples
has resource: Guides for Data Privacy Vocabulary
has resource: Primer for Data Privacy Vocabulary
is profile of: rdf-schema#
is profile of: core#
version: 2.2

has active entity
type: Property
type: Concept
range includes: Entity
created: 2024-05-11
sub property of: has entity
term status: accepted
broader: has entity
definition: indicates the entity is actively involved in specified context
in scheme: processing-context-properties

has activity status
type: Property
type: Concept
range includes: Activity Status
contributor: Harshvardhan J. Pandit
created: 2022-05-18
example: E0054
sub property of: has status
term status: accepted
broader: has status
definition: Indicates the status of activity of specified concept
in scheme: status-properties

has address
type: Property
type: Concept
domain includes: Entity
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2020-11-04
term status: accepted
definition: Specifies address of a legal entity such as street address or pin code
in scheme: entities-properties

has algorithmic logic
type: Property
type: Concept
range includes: Algorithmic Logic
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2020-11-04
modified: 2022-06-15
term status: accepted
definition: Indicates the logic used in processing such as for automated decision making
in scheme: processing-context-properties

has applicability
type: Property
type: Concept
range includes: Applicability
contributor: Harshvardhan J. Pandit
created: 2023-08-24
example: E0053
term status: accepted
definition: Indicates situations where the context is not applicable, information is not available, or this is unknown. An appropriate instance of dpv:Applicability should be used with this relation to express the situation
in scheme: context-properties

has applicable law
type: Property
type: Concept
range includes: Law
contributor: Harshvardhan J. Pandit
created: 2022-01-19
term status: accepted
definition: Indicates applicability of a Law
in scheme: jurisdiction-properties

has audit status
type: Property
type: Concept
range includes: Audit Status
contributor: Harshvardhan J. Pandit
created: 2022-06-22
example: E0056
example: E0057
sub property of: has status
term status: accepted
broader: has status
definition: Indicates the status of audit associated with specified concept
in scheme: status-properties

has authority
type: Property
type: Concept
range includes: Authority
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2022-01-19
term status: accepted
definition: Indicates applicability of authority for a jurisdiction
in scheme: entities-authority-properties

has automation level
type: Property
type: Concept
range includes: Automation Level
contributor: Harshvardhan J. Pandit
created: 2022-08-13
modified: 2024-04-20
term status: accepted
definition: Indicates the level of automation involved in implementation of the specified context
in scheme: processing-context-properties

has conformance status
type: Property
type: Concept
range includes: Conformance Status
contributor: Harshvardhan J. Pandit
created: 2024-06-10
term status: accepted
definition: Indicates the status of being conformant or non-conformant
in scheme: status-properties

has consent control
type: Property
type: Concept
range includes: Consent Control
created: 2024-05-11
term status: accepted
definition: Specific a control associated with consent
in scheme: consent-properties

has consent status
type: Property
type: Concept
range includes: Consent Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-06-21
term status: accepted
definition: Specifies the state or status of consent
in scheme: consent-properties

has contact
type: Property
type: Concept
domain includes: Entity
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2020-11-04
term status: accepted
definition: Specifies contact details of a legal entity such as phone or email
in scheme: entities-properties

has context
type: Property
type: Concept
range includes: Context
created: 2019-04-05
term status: accepted
definition: Indicates a purpose is restricted to the specified context(s)
in scheme: context-properties

has contract control
type: Property
type: Concept
domain includes: Contract
range includes: Contract Control
created: 2024-08-27
term status: accepted
definition: Indicates the contract to be used with a contract
in scheme: contract-properties

has contractual clause
type: Property
type: Concept
domain includes: Contract
domain includes: Contractual Clause
range includes: Contractual Clause
created: 2024-12-17
example: E0078
term status: accepted
definition: Indicates the association or involvement of specified contractual clause
in scheme: contract-properties

has contractual fulfilment status
type: Property
type: Concept
domain includes: Contract
domain includes: Contractual Clause
range includes: Contract Status
created: 2024-08-27
example: E0077
example: E0078
sub property of: has contract status
term status: accepted
broader: has contract status
definition: Indicates the fulfilment status of a contract or a contractual clause
in scheme: contract-properties

has data exporter
type: Property
type: Concept
range includes: Data Exporter
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2022-02-09
sub property of: has entity
term status: accepted
broader: has entity
definition: Indicates inclusion or applicability of a LegalEntity in the role of Data Exporter
in scheme: entities-legalrole-properties

has data importer
type: Property
type: Concept
range includes: Data Importer
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2022-02-09
sub property of: has recipient
term status: accepted
broader: has recipient
definition: Indicates inclusion or applicability of a LegalEntity in the role of Data Importer
in scheme: entities-legalrole-properties

has data processor
type: Property
type: Concept
range includes: Data Processor
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2022-02-09
sub property of: has recipient
term status: accepted
broader: has recipient
definition: Indicates inclusion or applicability of a Data Processor
in scheme: entities-legalrole-properties

has data protection officer
type: Property
type: Concept
range includes: Data Protection Officer
contributor: Paul Ryan
contributor: Rob Brennan
created: 2022-03-02
sub property of: has representative
term status: accepted
broader: has representative
definition: Specifies an associated data protection officer
in scheme: entities-legalrole-properties

has data source
type: Property
type: Concept
range includes: Data Source
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2020-11-04
term status: accepted
definition: Indicates the source or origin of data being processed
in scheme: processing-context-properties

has data subject
type: Property
type: Concept
range includes: Data Subject
contributor: Axel Polleres
contributor: Bud Bruegger
contributor: Harshvardhan J. Pandit
contributor: Javier Fernández
contributor: Mark Lizar
created: 2019-04-04
modified: 2024-12-17
example: E0074
sub property of: has human subject
term status: modified
broader: has human subject
definition: Indicates association with Data Subject
in scheme: entities-datasubject-properties

has data subject scale
type: Property
type: Concept
range includes: Data Subject Scale
contributor: Harshvardhan J. Pandit
created: 2022-06-22
sub property of: has scale
term status: accepted
broader: has scale
definition: Indicates the scale of data subjects
in scheme: processing-scale-properties

has data volume
type: Property
type: Concept
range includes: Data Volume
contributor: Harshvardhan J. Pandit
created: 2022-06-22
sub property of: has scale
term status: accepted
broader: has scale
definition: Indicates the volume of data
in scheme: processing-scale-properties

has deterrence
type: Property
type: Concept
domain includes: Context
range includes: Deterrence
contributor: Arthit Suriyawongkul
contributor: Beatriz Esteves
contributor: Delaram Golpayegani
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2025-06-19
sub property of: has rule
term status: accepted
broader: has rule
definition: Specifies applicability or inclusion of a deterrence rule within specified context
in scheme: rules-properties

has duration
type: Property
type: Concept
range includes: Duration
contributor: Axel Polleres
contributor: Harshvardhan J. Pandit
contributor: Mark Lizar
contributor: Rob Brennan
created: 2019-04-05
source: SPECIAL Project
example: E0050
example: E0070
term status: accepted
definition: Indicates information about duration
in scheme: context-properties

has entity control
type: Property
type: Concept
range includes: EntityControl
contributor: Harshvardhan J. Pandit
created: 2024-04-14
sub property of: has technical and organisational measure
term status: accepted
broader: has technical and organisational measure
definition: Indicates a control or measure provided for an entity to perform the specified action
in scheme: TOM-properties

has entity involvement
type: Property
type: Concept
range includes: Entity Involvement
created: 2024-05-11
term status: accepted
definition: Indicates involvement of an entity in specified context
in scheme: processing-context-properties

has expectation
type: Property
type: Concept
range includes: Expectation Status
contributor: Harshvardhan J. Pandit
created: 2024-05-10
modified: 2024-06-10
sub property of: has status
term status: accepted
broader: has status
definition: Indicates whether the specified context was expected or unexpected
in scheme: status-properties

has fee
type: Property
type: Concept
range includes: Fee Requirement
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2024-08-27
term status: accepted
definition: Indicates whether a fee is required for the specified context
in scheme: context-properties

has frequency
type: Property
type: Concept
range includes: Frequency
contributor: Harshvardhan J. Pandit
created: 2022-02-16
example: E0051
term status: accepted
definition: Indicates the frequency with which something takes place
in scheme: context-properties

has fulfilment status
type: Property
type: Concept
domain includes: Context
range includes: Rule
contributor: Harshvardhan J. Pandit
created: 2024-09-10
modified: 2025-06-19
sub property of: has status
term status: modified
broader: has status
definition: Specifies the fulfillment status associated with a rule
in scheme: rules-properties

has geographic coverage
type: Property
type: Concept
range includes: Geographic Coverage
contributor: Harshvardhan J. Pandit
created: 2022-06-22
sub property of: has scale
term status: accepted
broader: has scale
definition: Indicates the geographic coverage (of specified context)
in scheme: processing-scale-properties

has human involvement
type: Property
type: Concept
range includes: Human Involvement
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2020-11-04
example: E0074
term status: accepted
definition: Indicates Involvement of humans in processing such as within automated decision making process
in scheme: processing-context-properties
scope note: Human involvement is also relevant to 'human in the loop'

has identifier
type: Property
type: Concept
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2020-11-25
term status: accepted
definition: Indicates an identifier associated for identification or reference
in scheme: context-properties

has impact
type: Property
type: Concept
range includes: Impact
contributor: Beatriz Esteves
contributor: Fajar Ekaputra
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2022-05-18
example: E0068
example: E0069
example: E0088
sub property of: has consequence
term status: accepted
broader: has consequence
definition: Indicates impact(s) possible or arising as consequences from specified concept
in scheme: risk-properties

has impact assessment
type: Property
type: Concept
range includes: Impact Assessment
contributor: Harshvardhan J. Pandit
created: 2024-04-14
sub property of: has assessment
term status: accepted
broader: has assessment
definition: Indicates an impact assessment associated with the specific context
in scheme: risk-properties

has impact on
type: Property
type: Concept
domain includes: Impact
contributor: Beatriz Esteves
contributor: Fajar Ekaputra
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2022-05-18
example: E0068
sub property of: has consequence on
term status: accepted
broader: has consequence on
definition: Indicates the thing (e.g. plan, process, or entity) affected by an impact
in scheme: risk-properties

has importance
type: Property
type: Concept
range includes: Importance
contributor: Harshvardhan J. Pandit
created: 2024-04-13
term status: accepted
definition: Indicates the importance for specified context or criteria
in scheme: context-properties

has indication method
type: Property
type: Concept
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-06-21
term status: accepted
definition: Specifies the method by which an entity has indicated the specific context
in scheme: legal-basis-properties

has informed status
type: Property
type: Concept
range includes: Entity Informed Status
contributor: Harshvardhan J. Pandit
created: 2024-05-10
sub property of: has status
term status: accepted
broader: has status
definition: Indicates whether an entity was informed or uninformed
in scheme: status-properties

has intention
type: Property
type: Concept
range includes: Intention Status
contributor: Harshvardhan J. Pandit
created: 2024-05-10
sub property of: has status
term status: accepted
broader: has status
definition: Indicates whether the specified context was intended or unintended
in scheme: status-properties

has inverse jurisdiction
type: Property
type: Concept
domain includes: Jurisdiction
range includes: Inverse Jurisdiction
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-05-04
sub property of: has location
term status: accepted
broader: has location
definition: Indicates the inverse jurisdiction for a given jurisdiction
in scheme: jurisdiction-properties
scope note: Using this property gives the set of all other jurisdictions that are not part of the jurisdiction e.g. when used with a country, it refers to all other countries

has involvement
type: Property
type: Concept
range includes: Involvement Status
contributor: Harshvardhan J. Pandit
created: 2024-05-10
sub property of: has status
term status: accepted
broader: has status
definition: Indicates the involvement status for the specified context
in scheme: status-properties

has joint data controllers
type: Property
type: Concept
range includes: Joint Data Controllers
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2022-02-09
sub property of: has data controller
term status: accepted
broader: has data controller
definition: Indicates inclusion or applicability of a Joint Data Controller
in scheme: entities-legalrole-properties

has jurisdiction
type: Property
type: Concept
range includes: Location
contributor: Harshvardhan J. Pandit
created: 2022-01-19
term status: accepted
definition: Indicates applicability of specified jurisdiction
in scheme: jurisdiction-properties

has justification
type: Property
type: Concept
domain includes: Right Exercise Activity
range includes: Justification
contributor: Harshvardhan J. Pandit
created: 2022-06-15
example: E0057
example: E0058
example: E0059
example: E0061
example: E0062
example: E0063
term status: accepted
definition: Indicates a justification for specified concept or context
in scheme: context-properties
in scheme: rights-properties
scope note: Also used for specifying a justification for non-fulfilment of Right Exercise

has lawfulness
type: Property
type: Concept
range includes: Lawfulness
contributor: Harshvardhan J. Pandit
created: 2022-10-22
sub property of: has compliance status
term status: accepted
broader: has compliance status
definition: Indicates the status of being lawful or legally compliant
in scheme: status-properties

has legal basis
type: Property
type: Concept
range includes: Legal Basis
contributor: Axel Polleres
contributor: Javier Fernández
created: 2019-04-04
modified: 2020-11-04
term status: accepted
definition: Indicates use or applicability of a Legal Basis
in scheme: legal-basis-properties

has legal measure
type: Property
type: Concept
range includes: Legal Measure
created: 2023-12-10
sub property of: has organisational measure
term status: accepted
broader: has organisational measure
definition: Indicates use or applicability of Legal measure
in scheme: TOM-properties

has likelihood
type: Property
type: Concept
range includes: Likelihood
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-07-20
example: E0068
term status: accepted
definition: Indicates the likelihood associated with a concept
in scheme: risk-properties

has name
type: Property
type: Concept
domain includes: Entity
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2020-11-04
term status: accepted
definition: Specifies name of a legal entity
in scheme: entities-properties

has necessity
type: Property
type: Concept
range includes: Necessity
contributor: Harshvardhan J. Pandit
created: 2024-04-13
example: E0052
term status: accepted
definition: Indicates the necessity for specified context or criteria
in scheme: context-properties

has non-involved entity
type: Property
type: Concept
range includes: Entity
created: 2024-05-11
sub property of: has entity
term status: accepted
broader: has entity
definition: indicates the entity is not involved in specified context
in scheme: processing-context-properties

has non-personal data process
type: Property
type: Concept
range includes: Non-Personal Data Process
contributor: Harshvardhan J. Pandit
created: 2023-12-12
term status: accepted
definition: Indicates association with a Non-Personal Data Process
in scheme: process-properties

has notice
type: Property
type: Concept
range includes: Notice
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-06-22
sub property of: has organisational measure
term status: accepted
broader: has organisational measure
definition: Indicates the use or applicability of a Notice for the specified context
in scheme: notice-properties

has notice icon
type: Property
type: Concept
range includes: Notice Icon
created: 2024-08-17
example: E0072
term status: accepted
definition: Indicates the concept can be represented graphically using the specified icon
in scheme: notice-properties

has notice layer
type: Property
type: Concept
domain includes: Notice
domain includes: Notice Layer
range includes: Notice Layer
created: 2024-08-17
example: E0072
term status: accepted
definition: Indicates the use of a notice layer within a notice or to associate a layer with another layer
in scheme: notice-properties

has notice status
type: Property
type: Concept
domain includes: Notice
range includes: Notice Status
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2024-12-01
example: E0073
term status: accepted
definition: Indicates the status of the associated notice
in scheme: notice-properties

has notification status
type: Property
type: Concept
range includes: Notification Status
contributor: Harshvardhan J. Pandit
created: 2024-06-10
term status: accepted
definition: Indicates the status associated with a notice
in scheme: status-properties

has obligation
type: Property
type: Concept
domain includes: Context
range includes: Obligation
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2022-10-19
sub property of: has rule
term status: accepted
broader: has rule
definition: Specifies applicability or inclusion of an obligation rule within specified context
in scheme: rules-properties

has organisational unit
type: Property
type: Concept
domain includes: Entity
range includes: Organisational Unit
contributor: Harshvardhan J. Pandit
created: 2024-06-10
sub property of: has entity
term status: accepted
broader: has entity
definition: Indicates the specified entity is a unit of the organisation
in scheme: entities-properties

has outcome
type: Property
type: Concept
contributor: Harshvardhan J. Pandit
created: 2022-05-18
term status: accepted
definition: Indicates an outcome of specified concept or context
in scheme: context-properties

has party
type: Property
type: Concept
domain includes: Contract
range includes: Legal Entity
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-01-14
term status: accepted
definition: Indicates a legal entity involved as a party in a contract
in scheme: contract-properties

has passive entity
type: Property
type: Concept
range includes: Entity
created: 2024-05-11
sub property of: has entity
term status: accepted
broader: has entity
definition: indicates the entity is passively involved in specified context
in scheme: processing-context-properties

has permission
type: Property
type: Concept
domain includes: Context
range includes: Permission
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2022-10-19
example: E0066
sub property of: has rule
term status: accepted
broader: has rule
definition: Specifies applicability or inclusion of a permission rule within specified context
in scheme: rules-properties

has personal data
type: Property
type: Concept
range includes: Personal Data
contributor: Harshvardhan J. Pandit
created: 2022-01-19
example: E0044
sub property of: has data
term status: accepted
broader: has data
definition: Indicates association with Personal Data
in scheme: personal-data-properties

has personal data handling
type: Property
type: Concept
range includes: Personal Data Handling
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2022-01-19
term status: accepted
definition: Indicates association with Personal Data Handling
in scheme: process-properties

has personal data process
type: Property
type: Concept
range includes: Personal Data Process
contributor: Harshvardhan J. Pandit
created: 2023-12-11
term status: accepted
definition: Indicates association with a Personal Data Process
in scheme: process-properties

has physical measure
type: Property
type: Concept
range includes: Physical Measure
created: 2023-12-10
sub property of: has technical and organisational measure
term status: accepted
broader: has technical and organisational measure
definition: Indicates use or applicability of Physical measure
in scheme: TOM-properties

has policy
type: Property
type: Concept
range includes: Policy
contributor: Harshvardhan J. Pandit
created: 2022-01-26
sub property of: has technical and organisational measure
term status: accepted
broader: has technical and organisational measure
definition: Indicates policy applicable or used
in scheme: TOM-properties

has process
type: Property
type: Concept
range includes: Process
contributor: Harshvardhan J. Pandit
created: 2023-12-10
term status: accepted
definition: Indicates association with a Process
in scheme: process-properties

has processing
type: Property
type: Concept
range includes: Processing
contributor: Axel Polleres
contributor: Bud Bruegger
contributor: Harshvardhan J. Pandit
contributor: Javier Fernández
contributor: Mark Lizar
created: 2019-04-04
modified: 2020-11-04
source: SPECIAL Project
example: E0085
term status: accepted
definition: Indicates association with Processing
in scheme: processing-properties

has processing scale
type: Property
type: Concept
range includes: Processing Scale
contributor: Harshvardhan J. Pandit
created: 2024-12-01
sub property of: has scale
term status: accepted
broader: has scale
definition: Indicates the scale of processing operations
in scheme: processing-scale-properties

has prohibition
type: Property
type: Concept
domain includes: Context
range includes: Prohibition
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2022-10-19
example: E0066
sub property of: has rule
term status: accepted
broader: has rule
definition: Specifies applicability or inclusion of a prohibition rule within specified context
in scheme: rules-properties

has purpose
type: Property
type: Concept
range includes: Purpose
contributor: Axel Polleres
contributor: Bud Bruegger
contributor: Harshvardhan J. Pandit
contributor: Javier Fernández
contributor: Mark Lizar
created: 2019-04-04
modified: 2020-11-04
source: SPECIAL Project
term status: accepted
definition: Indicates association with Purpose
in scheme: purposes-properties

has recipient data controller
type: Property
type: Concept
range includes: Data Controller
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2022-02-09
sub property of: has recipient
term status: accepted
broader: has recipient
definition: Indicates inclusion or applicability of a Data Controller as a Recipient of persona data
in scheme: entities-legalrole-properties

has recipient third party
type: Property
type: Concept
range includes: Third Party
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2022-02-09
sub property of: has recipient
term status: accepted
broader: has recipient
definition: Indicates inclusion or applicability of a Third Party as a Recipient of persona data
in scheme: entities-legalrole-properties

has recommendation
type: Property
type: Concept
domain includes: Context
range includes: Recommendation
contributor: Arthit Suriyawongkul
contributor: Beatriz Esteves
contributor: Delaram Golpayegani
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2025-06-19
sub property of: has rule
term status: accepted
broader: has rule
definition: Specifies applicability or inclusion of a recommendation rule within specified context
in scheme: rules-properties

has record of activity
type: Property
type: Concept
range includes: Records of Activities
contributor: Harshvardhan J. Pandit
created: 2024-05-05
sub property of: has organisational measure
term status: accepted
broader: has organisational measure
definition: Indicates a relevant record of activity
in scheme: TOM-properties

has relation with data subject
type: Property
type: Concept
domain includes: Entity
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-06-21
sub property of: has entity
term status: accepted
broader: has entity
definition: Indicates the relation between specified Entity and Data Subject
in scheme: entities-datasubject-properties

has request status
type: Property
type: Concept
range includes: Request Status
contributor: Harshvardhan J. Pandit
created: 2024-06-10
term status: accepted
definition: Indicates the status associated with a request
in scheme: status-properties

has residual risk
type: Property
type: Concept
domain includes: Risk
range includes: Residual Risk
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-07-20
example: E0068
term status: accepted
definition: Indicates the associated risk is the remaining or residual risk from applying mitigation measures or treatments to this risk
in scheme: risk-properties

has responsible entity
type: Property
type: Concept
range includes: Entity
contributor: Harshvardhan J. Pandit
created: 2022-03-02
sub property of: has entity
term status: accepted
broader: has entity
definition: Specifies the indicated entity is responsible within some context
in scheme: entities-properties

has reuse compatibility
type: Property
type: Concept
range includes: ReuseCompatibility
contributor: Arthit Suriyawongkul
contributor: Beatriz Esteves
contributor: Delaram Golpayegani
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-06-19
sub property of: has status
term status: accepted
broader: has status
definition: Indicates the reuse compatibility for the specified context
in scheme: status-properties

has right
type: Property
type: Concept
range includes: Right
contributor: Harshvardhan J. Pandit
created: 2020-11-18
example: E0061
example: E0067
term status: accepted
definition: Indicates use or applicability of Right
in scheme: rights-properties

has risk
type: Property
type: Concept
range includes: Risk
contributor: Harshvardhan J. Pandit
created: 2020-11-18
example: E0068
term status: accepted
definition: Indicates applicability of Risk for this concept
in scheme: risk-properties

has risk assessment
type: Property
type: Concept
range includes: Risk Assessment
contributor: Harshvardhan J. Pandit
created: 2024-04-14
sub property of: has assessment
term status: accepted
broader: has assessment
definition: Indicates an associated risk assessment
in scheme: risk-properties

has risk level
type: Property
type: Concept
domain includes: Risk
range includes: Risk Level
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-07-20
example: E0068
example: E0071
term status: accepted
definition: Indicates the associated risk level associated with a risk
in scheme: risk-properties

has scope
type: Property
type: Concept
range includes: Scope
contributor: Harshvardhan J. Pandit
created: 2022-06-15
term status: accepted
definition: Indicates the scope of specified concept or context
in scheme: context-properties

has sector
type: Property
type: Concept
range includes: Sector
created: 2019-04-05
term status: accepted
definition: Indicates the purpose is associated with activities in the indicated (Economic) Sector(s)
in scheme: purposes-properties

has sensitivity level
type: Property
type: Concept
range includes: Sensitivity Level
contributor: Harshvardhan J. Pandit
created: 2023-08-24
term status: accepted
definition: Indicates the associated level of sensitivity
in scheme: risk-properties

has service
type: Property
type: Concept
range includes: Service
contributor: Harshvardhan J. Pandit
created: 2024-04-20
term status: accepted
definition: Indicates associated with the specified service
in scheme: process-properties

has service consumer
type: Property
type: Concept
domain includes: Service
range includes: Service Consumer
contributor: Harshvardhan J. Pandit
created: 2024-04-20
sub property of: has entity
term status: accepted
broader: has entity
definition: Indicates the entity that consumes or receives the associated service
in scheme: entities-legalrole-properties

has service provider
type: Property
type: Concept
domain includes: Service
range includes: Service Provider
contributor: Harshvardhan J. Pandit
created: 2024-04-20
sub property of: has entity
term status: accepted
broader: has entity
definition: Indicates the entity that provides the associated service
in scheme: entities-legalrole-properties

has severity
type: Property
type: Concept
range includes: Severity
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-07-20
example: E0068
term status: accepted
definition: Indicates the severity associated with a concept
in scheme: risk-properties

has storage condition
type: Property
type: Concept
range includes: Storage Condition
contributor: Axel Polleres
contributor: Harshvardhan J. Pandit
contributor: Mark Lizar
contributor: Rob Brennan
created: 2022-08-13
source: SPECIAL Project
sub property of: has processing condition
term status: accepted
broader: has processing condition
definition: Indicates information about storage condition
in scheme: processing-context-properties

has subsidiary
type: Property
type: Concept
domain includes: Organisation
range includes: Organisation
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2024-04-14
example: E0038
sub property of: has entity
term status: accepted
broader: has entity
definition: Indicates this entity has the specified entity as its subsidiary
in scheme: entities-properties

has technical measure
type: Property
type: Concept
range includes: Technical Measure
contributor: Harshvardhan J. Pandit
created: 2022-02-09
example: E0064
example: E0070
sub property of: has technical and organisational measure
term status: accepted
broader: has technical and organisational measure
definition: Indicates use or applicability of Technical measure
in scheme: TOM-properties

has third country
type: Property
type: Concept
range includes: Third Country
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2022-02-09
sub property of: has country
term status: accepted
broader: has country
definition: Indicates applicability or relevance of a 'third country'
in scheme: jurisdiction-properties

has third party
type: Property
type: Concept
range includes: Third Party
contributor: Harshvardhan J. Pandit
created: 2025-02-02
sub property of: has entity
term status: accepted
broader: has entity
definition: Indicates association with Third Party
in scheme: entities-legalrole-properties

has uncategorised data
type: Property
type: Concept
range includes: Uncategorised Data
contributor: Harshvardhan J. Pandit
contributor: Rob Brennan
created: 2025-03-09
sub property of: has data
term status: accepted
broader: has data
definition: Indicates association with the specified uncategorised data
in scheme: personal-data-properties

has unstructured data
type: Property
type: Concept
range includes: Unstructured Data
contributor: Harshvardhan J. Pandit
contributor: Rob Brennan
created: 2025-03-09
sub property of: has data
term status: accepted
broader: has data
definition: Indicates association with the specified unstructured data
in scheme: personal-data-properties

is after
type: Property
type: Concept
domain includes: Right Exercise Activity
range includes: Right Exercise Activity
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2022-03-02
term status: accepted
definition: Indicates the specified concepts is 'after' this concept in some context
in scheme: context-properties
in scheme: rights-properties
scope note: Also used for specifying a RightExerciseActivity occurs before another RightExerciseActivity

is applicable for
type: Property
type: Concept
range includes: Scope
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2024-04-13
term status: accepted
definition: Indicates the concept or information is applicable for specified context
in scheme: context-properties

is authority for
type: Property
type: Concept
domain includes: Authority
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2022-01-19
term status: accepted
definition: Indicates area, scope, or applicability of an Authority
in scheme: entities-authority-properties

is before
type: Property
type: Concept
domain includes: Right Exercise Activity
range includes: Right Exercise Activity
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2022-03-02
term status: accepted
definition: Indicates the specified concepts is 'before' this concept in some context
in scheme: context-properties
in scheme: rights-properties
scope note: Also used for specifying a RightExerciseActivity occurs before another RightExerciseActivity

is determined by entity
type: Property
type: Concept
range includes: Entity
contributor: Harshvardhan J. Pandit
created: 2024-05-10
sub property of: has entity
term status: accepted
broader: has entity
definition: Indicates the context is determined by the specified entity
in scheme: processing-context-properties

is during
type: Property
type: Concept
contributor: Harshvardhan J. Pandit
created: 2024-08-13
term status: accepted
definition: Indicates the specified concepts occur 'during' this concept in some context
in scheme: context-properties

is exercised at
type: Property
type: Concept
domain includes: Active Right
range includes: Right Exercise Notice
contributor: Harshvardhan J. Pandit
created: 2022-10-22
term status: accepted
definition: Indicates context or information about exercising a right
in scheme: rights-properties

is implemented by entity
type: Property
type: Concept
domain includes: Right Exercise Activity
range includes: Entity
contributor: Axel Polleres
contributor: Beatriz Esteves
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2019-05-07
modified: 2022-01-26
example: E0037
example: E0085
term status: accepted
definition: Indicates implementation details such as entities or agents
in scheme: processing-context-properties
in scheme: rights-properties
scope note: Also used to indicate the Entity that implements or performs a Right Exercise Activity
scope note: The use of 'entity' is inclusive of entities (e.g. Data Processor) as well as 'agent' (e.g. DPO). For indicating technological implementation, the property isImplementedByTechnology should be used.

is implemented using technology
type: Property
type: Concept
range includes: Technology
contributor: Beatriz Esteves
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-01-26
modified: 2022-06-15
example: E0064
example: E0085
term status: accepted
definition: Indicates implementation details such as technologies or processes
in scheme: processing-context-properties
scope note: The term 'technology' is inclusive of technologies, processes, and methods.

is indicated at time
type: Property
type: Concept
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-06-21
term status: accepted
definition: Specifies the temporal information for when the entity has indicated the specific context
in scheme: legal-basis-properties

is indicated by
type: Property
type: Concept
range includes: Entity
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-06-21
term status: accepted
definition: Specifies entity who indicates the specific context
in scheme: legal-basis-properties

is mitigated by measure
type: Property
type: Concept
domain includes: Risk
range includes: Risk Mitigation Measure
contributor: Harshvardhan J. Pandit
created: 2022-02-09
example: E0068
sub property of: has technical and organisational measure
term status: accepted
broader: has technical and organisational measure
definition: Indicate a risk is mitigated by specified measure
in scheme: risk-properties

is not applicable for
type: Property
type: Concept
range includes: Scope
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2024-04-13
term status: accepted
definition: Indicates the concept or information is not applicable for specified context
in scheme: context-properties

is organisational unit of
type: Property
type: Concept
domain includes: Organisational Unit
range includes: Entity
contributor: Arthit Suriyawongkul
contributor: Harshvardhan J. Pandit
created: 2024-06-10
modified: 2025-08-06
sub property of: has entity
term status: modified
broader: has entity
definition: Indicates this entity is an organisational unit of the specified entity
in scheme: entities-properties

is outside of location
type: Property
type: Concept
range includes: Location
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2025-05-04
sub property of: has location
term status: accepted
broader: has location
definition: Indicates the interpretation where the location being referenced is outside of the indicated concept
in scheme: jurisdiction-properties
scope note: This property is helpful for cases where a distinction needs to be made between inside/outside of a concept, and the area outside of that concept is to be referenced. For example, using Home with dpv:hasLocation means inside the Home, and using this property along with Home means outside of Home - such as the yard or porch

is policy for
type: Property
type: Concept
domain includes: Policy
contributor: Harshvardhan J. Pandit
created: 2022-01-26
term status: accepted
definition: Indicates the context or application of policy
in scheme: TOM-properties

is representative for
type: Property
type: Concept
domain includes: Representative
range includes: Entity
contributor: Harshvardhan J. Pandit
created: 2022-11-09
sub property of: has entity
term status: accepted
broader: has entity
definition: Indicates the entity is a representative for specified entity
in scheme: entities-properties

is residual risk of
type: Property
type: Concept
domain includes: Residual Risk
range includes: Risk
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
contributor: Paul Ryan
created: 2022-07-20
term status: accepted
definition: Indicates this risk is the remaining or residual risk from applying mitigation measures or treatments to specified risk
in scheme: risk-properties

is subsidiary of
type: Property
type: Concept
domain includes: Organisation
range includes: Organisation
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2024-04-14
sub property of: has entity
term status: accepted
broader: has entity
definition: Indicates this entity is the subsidiary of the specified entity
in scheme: entities-properties

mitigates risk
type: Property
type: Concept
domain includes: Risk Mitigation Measure
range includes: Risk
contributor: Harshvardhan J. Pandit
created: 2020-11-04
term status: accepted
definition: Indicates risks mitigated by this concept
in scheme: risk-properties

supports Compliance With
type: Property
type: Concept
domain includes: Technical and Organisational Measure
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2024-04-14
term status: accepted
definition: Indicate the measure is required for meeting specified requirement or satisfying specified condition/constraint
in scheme: TOM-properties

Data Privacy Vocabulary (DPV) - HTML serialisation
type: ResourceDescriptor
conforms to: https://www.w3.org/TR/html/
dct:format: https://www.iana.org/assignments/media-types/text/html
has artifact: dpv.html
has role: specification

Data Privacy Vocabulary (DPV) - JSON-LD serialisation
type: ResourceDescriptor
conforms to: json-ld11
dct:format: ld+json
has artifact: dpv.jsonld
has role: vocabulary

Data Privacy Vocabulary (DPV) - N3 serialisation
type: ResourceDescriptor
conforms to: https://www.w3.org/TeamSubmission/n3/
dct:format: https://www.iana.org/assignments/media-types/text/n3
has artifact: dpv.n3
has role: vocabulary

Data Privacy Vocabulary (DPV) - RDF/XML serialisation
type: ResourceDescriptor
conforms to: 22-rdf-syntax-ns#
dct:format: rdf+xml
has artifact: dpv.rdf
has role: vocabulary

Data Privacy Vocabulary (DPV) - Turtle serialisation
type: ResourceDescriptor
conforms to: turtle
dct:format: turtle
has artifact: dpv.ttl
has role: vocabulary

has compliance status
type: Property
type: Concept
range includes: Compliance Status
contributor: Harshvardhan J. Pandit
created: 2022-05-18
example: E0055
sub property of: has status
term status: accepted
broader: has status
definition: Indicates the status of compliance of specified concept
in scheme: status-properties

has consequence
type: Property
type: Concept
range includes: Consequence
contributor: Beatriz Esteves
contributor: Fajar Ekaputra
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Julian Flake
created: 2020-11-04
modified: 2021-09-21
example: E0068
example: E0071
term status: accepted
definition: Indicates consequence(s) possible or arising from specified concept
in scheme: risk-properties
scope note: Removed plural suffix for consistency

has consequence on
type: Property
type: Concept
domain includes: Consequence
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2022-11-24
term status: accepted
definition: Indicates the thing (e.g. plan, process, or entity) affected by a consequence
in scheme: risk-properties

has contract status
type: Property
type: Concept
domain includes: Contract
range includes: Contract Status
created: 2024-08-27
example: E0077
sub property of: has status
term status: accepted
broader: has status
definition: Indicates the status of the contract
in scheme: contract-properties

has country
type: Property
type: Concept
range includes: Country
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
created: 2022-01-19
sub property of: has location
term status: accepted
broader: has location
definition: Indicates applicability of specified country
in scheme: jurisdiction-properties

has data controller
type: Property
type: Concept
range includes: Data Controller
contributor: Axel Polleres
contributor: Bud Bruegger
contributor: Harshvardhan J. Pandit
contributor: Javier Fernández
contributor: Mark Lizar
created: 2019-04-04
modified: 2020-11-04
sub property of: has entity
term status: accepted
broader: has entity
definition: Indicates association with Data Controller
in scheme: entities-legalrole-properties

has human subject
type: Property
type: Concept
range includes: Human Subject
contributor: Harshvardhan J. Pandit
created: 2024-12-17
example: E0074
sub property of: has entity
term status: accepted
broader: has entity
definition: Indicates association with Human Subject
in scheme: entities-datasubject-properties

has processing condition
type: Property
type: Concept
range includes: Processing Condition
contributor: Harshvardhan J. Pandit
created: 2023-12-10
term status: accepted
definition: Indicates information about processing condition
in scheme: processing-context-properties

has representative
type: Property
type: Concept
domain includes: Entity
range includes: Representative
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2020-11-04
sub property of: has entity
term status: accepted
broader: has entity
definition: Specifies representative of the legal entity
in scheme: entities-properties

Examples
type: ResourceDescriptor
conforms to: https://www.w3.org/TR/html/
dct:format: https://www.iana.org/assignments/media-types/text/html
has role: guidance

Guides for Data Privacy Vocabulary
type: ResourceDescriptor
conforms to: https://www.w3.org/TR/html/
dct:format: https://www.iana.org/assignments/media-types/text/html
has role: guidance

Primer for Data Privacy Vocabulary
type: ResourceDescriptor
conforms to: https://www.w3.org/TR/html/
dct:format: https://www.iana.org/assignments/media-types/text/html
has role: guidance

has assessment
type: Property
type: Concept
range includes: Assessment
contributor: Harshvardhan J. Pandit
created: 2024-04-14
sub property of: has organisational measure
term status: accepted
broader: has organisational measure
definition: Indicates a relevant assessment associated with the specific context
in scheme: TOM-properties

has data
type: Property
type: Concept
range includes: Data
contributor: Harshvardhan J. Pandit
created: 2022-08-18
term status: accepted
definition: Indicates associated with Data (may or may not be personal)
in scheme: personal-data-properties

has location
type: Property
type: Concept
range includes: Location
contributor: Axel Polleres
contributor: Harshvardhan J. Pandit
contributor: Mark Lizar
contributor: Rob Brennan
created: 2019-04-05
source: SPECIAL Project
example: E0060
term status: accepted
definition: Indicates information about location
in scheme: jurisdiction-properties

has organisational measure
type: Property
type: Concept
range includes: Organisational Measure
contributor: Harshvardhan J. Pandit
created: 2022-02-09
sub property of: has technical and organisational measure
term status: accepted
broader: has technical and organisational measure
definition: Indicates use or applicability of Organisational measure
in scheme: TOM-properties

has recipient
type: Property
type: Concept
domain includes: Right Exercise Activity
range includes: Recipient
contributor: Axel Polleres
contributor: Bud Bruegger
contributor: Harshvardhan J. Pandit
contributor: Javier Fernández
contributor: Mark Lizar
created: 2019-04-04
modified: 2020-11-04
source: SPECIAL Project
sub property of: has entity
term status: accepted
broader: has entity
definition: Indicates Recipient of Data
in scheme: entities-legalrole-properties
in scheme: rights-properties
scope note: Also used to indicate the Recipient of a Right Exercise Activity

has scale
type: Property
type: Concept
range includes: Scale
contributor: Harshvardhan J. Pandit
created: 2022-06-15
term status: accepted
definition: Indicates the scale of specified concept
in scheme: processing-scale-properties

has rule
type: Property
type: Concept
domain includes: Context
range includes: Rule
contributor: Beatriz Esteves
contributor: Georg P. Krog
contributor: Harshvardhan J. Pandit
contributor: Paul Ryan
created: 2022-10-19
term status: accepted
definition: Specifies applicability or inclusion of a rule within specified context
in scheme: rules-properties

has technical and organisational measure
type: Property
type: Concept
range includes: Technical and Organisational Measure
contributor: Axel Polleres
contributor: Bud Bruegger
contributor: Harshvardhan J. Pandit
contributor: Javier Fernández
contributor: Mark Lizar
created: 2019-04-04
modified: 2020-11-04
term status: accepted
definition: Indicates use or applicability of Technical or Organisational measure
in scheme: TOM-properties

has status
type: Property
type: Concept
domain includes: Right Exercise Activity
range includes: Status
contributor: Harshvardhan J. Pandit
created: 2022-05-18
example: E0069
term status: accepted
definition: Indicates the status of specified concept
in scheme: rights-properties
in scheme: status-properties
scope note: Also used to Indicate the status of a Right Exercise Activity

has entity
type: Property
type: Concept
range includes: Entity
contributor: Harshvardhan J. Pandit
created: 2022-02-09
term status: accepted
definition: Indicates inclusion or applicability of an entity to some concept
in scheme: entities-properties
scope note: parent property for controller, processor, data subject, authority, etc.?

EDPB Recommendations 01/2020 on Data Transfers
type: WebPage

GDPR Art.4-1g
type: WebPage

ADAPT Centre, Trinity College Dublin
type: Organization

Dublin City University
type: Organization

Vienna University of Economics and Business
type: Organization

Vienna University of Technology
type: Organization

Iain Henderson
type: Agent
type: Person
member of: JLINC Labs

Julio Hernandez
type: Agent
type: Person
member of: Dublin City University

Damien Desfontaines
type: Agent
type: Person
member of: No affiliation provided

Danielle Welter
type: Agent
type: Person
member of: University of Luxembourg

Maya Borges
type: Agent
type: Person
member of: Danish Agency for Digitisation

Rudy Jacob
type: Agent
type: Person
member of: Proximus

Rana Saniei
type: Agent
type: Person
member of: Universidad Politécnica de Madrid

ADMS controlled vocabulary
type: WebPage

SPECIAL Project
type: WebPage

ENISA Data Pseudonymisation: Advanced Techniques and Use Cases
type: WebPage

ISO/IEC 22989:2022 Artificial intelligence concepts and terminology
type: WebPage

Bud Bruegger
type: Agent
type: Person
member of: Unabhängige Landeszentrum für Datenschutz Schleswig-Holstein

Piero Bonatti
type: Agent
type: Person
member of: Università di Napoli Federico II

ICO - What methods can we use to provide privacy information?
type: WebPage

ENISA Data Protection Engineering
type: WebPage

SPECIAL Project
type: WebPage

Belgian DPA ROPA Template
type: WebPage

GConsent
type: WebPage

ENISA 5G Cybersecurity Standards
type: WebPage

David Hickey
type: Agent
type: Person
member of: Dublin City University

Steve Hickman
type: Agent
type: Person
member of: Epistimis LLC

Simon Steyskal
type: Agent
type: Person
member of: Siemens

Arthit Suriyawongkul
type: Agent
type: Person
has ORCID: 0000-0002-9698-1899
member of: ADAPT Centre, Trinity College Dublin

Elmar Kiesling
type: Agent
type: Person
member of: Vienna University of Technology

GDPR Art.4-2
type: WebPage

Fajar Ekaputra
type: Agent
type: Person
member of: Vienna University of Technology

Mark Lizar
type: Agent
type: Person
member of: OpenConsent/Kantara Initiative

Rob Brennan
type: Agent
type: Person
has ORCID: 0000-0001-8236-362X
member of: University College Dublin

ENISA Reference Incident Classification Taxonomy 2018
type: WebPage

Javier Fernández
type: Agent
type: Person
member of: Vienna University of Economics and Business

Axel Polleres
type: Agent
type: Person
member of: Vienna University of Economics and Business

Delaram Golpayegani
type: Agent
type: Person
has ORCID: 0000-0002-1208-186X
member of: ADAPT Centre, Trinity College Dublin

Julian Flake
type: Agent
type: Person
has ORCID: 0009-0006-4623-1463
member of: University of Koblenz

Beatriz Esteves
type: Agent
type: Person
has ORCID: 0000-0003-0259-7560
member of: IDLab, IMEC, Ghent University

Paul Ryan
type: Agent
type: Person
has ORCID: 0000-0003-0770-2737
member of: Uniphar PLC

Georg P. Krog
type: Agent
type: Person
member of: Signatu AS

Harshvardhan J. Pandit
type: Agent
type: Person
has ORCID: 0000-0002-5068-3714
member of: AI Accountability Lab (AIAL), Trinity College Dublin