Consent Ontology in Social Media
type: Ontology
imports: bfo-core.owl
created: 2025-09-01
description: An ontology that formally represents knowledge about data subject consent, according to Brazil's General Data Protection Law (LGPD). The scope covers the main concepts related to consent within the context of digital social media.
version info: 1.0.0

has notice
type: AnnotationProperty
range includes: Notice
created: 2022-06-22
term status: accepted
broader: hasOrganisationalMeasure
definition: Indicates the use or applicability of a Notice for the specified context
in scheme: notice-properties
sub property of: hasOrganisationalMeasure

has notice
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Online Platform
range: Privacy Notice
comment: Indicates the use or applicability of a Notice for the specified context.
label: tem aviso @pt-br

acts as contact point for
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Data Protection Officer
range: Class
  union of: Controller
  union of: Data subject
  union of: National authority
comment: The DPO acts as a point of contact between the data controller, the data subjects, and the National Authority.
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
label: canal de comunicação entre @pt-br
example: The Data Protection Officer acts as contact point for the Data Subject and the Controller.

allows management by
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Consent Management
range: Digital Social Media User
comment: Indicates that a consent management system allows management by a user.
label: permite gerenciamento por @pt-br
example: A privacy dashboard allows management by the user.

attempt to influence
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Class
  union of: Dark Pattern Action
  union of: Dark Pattern Artifact
range: Digital Social Media User
comment: Indicates that a deceptive interface attempts to influence the user's decision.
label: tenta influenciar @pt-br
example: A deceptive interface attempts to influence the user's decision.

can lead to
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Class
  union of: Cognitive Bias
  union of: Limitation of Cognitive Capacity
range: Vitiated Consent
comment: Indicates that a cognitive bias or limitation can be a contributing factor leading to a vitiated consent.
label: pode levar a @pt-br
example: A cognitive bias can lead to a vitiated consent.

decides on
type: ObjectProperty
inverse of: is decided by
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Controller
range: Processing
comment: Indicates that the controller decides on processing of personal data.
label: decide sobre @pt-br
example: The controller is someone who decides on the purposes and means of processing.

delivers information to
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Privacy Notice
range: Digital Social Media User
comment: Indicates that a notice or document communicates information directly to the user.
label: entrega informação a @pt-br
example: A privacy notice delivers information to the user about their data rights.

details processing
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Privacy Policy
range: Processing
comment: Indicates that a document specifies or explains data processing operations.
label: detalha o processamento de @pt-br
example: A privacy policy details processing of personal data by the platform.

establishes status
type: ObjectProperty
inverse of: is status established by
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Consent Decision
range: Consent Status
comment: Relates a consent decision act (occurrent) to the legal state (disposition) it establishes.
label: estabelece o status @pt-br
example: An act of granting consent establishes a status of 'given'.

exploits
type: ObjectProperty
inverse of: is exploited by
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Class
  union of: Dark Pattern Action
  union of: Dark Pattern Artifact
range: Class
  union of: Cognitive Bias
  union of: Limitation of Cognitive Capacity
comment: Indicates that a dark pattern leverages a specific cognitive bias or limitation to be effective.
label: explora @pt-br
example: An Overloading pattern exploits the user's limited attention.

expresses preference for
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Digital Social Media User
range: Privacy Preference
comment: Indicates that a user expresses specific privacy preferences regarding data processing.
label: expressa preferência por @pt-br
example: The user expresses preference for their privacy preference to limit data sharing.

governs usage of
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Terms and Conditions
range: Online Platform
comment: Indicates that a document regulates how a user can interact with a platform or service.
label: regula o uso de @pt-br
example: Terms and Conditions governs the usage of a digital social media platform.

has account
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Digital Social Media User
range: Digital Social Media Account
comment: Indicates that a user has an account on a platform.
label: tem conta @pt-br
example: A user has account on a platform.

has appointee
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Appointing Process
range: Data Protection Officer
comment: The DPO is appointed by the data controller and the data processor.
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209.
label: tem nomeado @pt-br
example: The Data Protection Officer has been appointed by the Controller.

has appointer
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Appointing Process
range: Controller
comment: Indicates that a controller appoints a Data Protection Officer.
label: tem nomeante @pt-br
example: A Controller appoints a Data Protection Officer.

Relates an agent to their cognitive capacity.
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Natural Person
range: Cognitive Capacity
label: has cognitive capacity
label: tem capacidade cognitiva @pt-br
example: Every natural person has cognitive capacity.

has consent decision by
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Consent Status
range: Data subject
comment: Relates a consent decision to the agent who makes it.
label: decisão de consentimento tomada por @pt-br
example: The consent decision is made by the data subject.

has document
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Online Platform
range: Class
  union of: Policy Document
  union of: Terms and Conditions
comment: Indicates that a platform provides or makes available a document.
label: tem documento @pt-br
example: An online platform has a privacy policy document for its users.

has formal act
type: ObjectProperty
type: FunctionalProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Appointing Process
range: Formal Act Of Appointment
comment: A property that links an appointing process to the formal act or document that officially records and gives legal effect to that appointment.
label: tem ato formal @pt-br
example: The appointing process has formal act that confirms the appointment.

has personal data
type: ObjectProperty
type: InverseFunctionalProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Natural Person
range: Personal Data
comment: Indicates that a natural person has personal data.
comment: tem dados pessoais @pt-br
example: A data subject has personal data, such as their name or email.

has quality
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
comment: A relation that links a class to a specific qualifying attribute it must possess.
label: tem qualidade @pt-br
example: A valid consent has quality of being informed.

has recipient
type: ObjectProperty
inverse of: is recipient of
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Processing
range: Agent
comment: A property that links a processing activity to the agent who receives the data.
label: tem destinatário @pt-br
example: A data transfer operation has a Third Party as its recipient.

has right
type: ObjectProperty
inverse of: is right of
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Natural Person
range: Right
comment: A relation that links a data subject to a right they possess.
label: tem direito @pt-br
example: A Data Subject has the right of erasure.

has role
type: ObjectProperty
inverse of: is role of
type: AsymmetricProperty
type: IrreflexiveProperty
comment: Indicates that an agent assumes a specific role in the context of data processing.
label: tem papel @pt-br
example: A Data Processing Agent has a role of Controller.

has user
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Online Platform
range: Digital Social Media User
comment: Indicates that digital social media has users.
label: tem usuário @pt-br
example: An online platform has users.

has vitiating factor
type: ObjectProperty
sub property of: topObjectProperty
inverse of: is vitiating factor of
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Vitiated Consent
range: Defects of the Legal Transaction
comment: Indicates that the consent is obtained through some factor such as error, fraud, coercion, injury, or state of danger.
label: tem fator viciante @pt-br
example: A Vitiated Consent has vitiating factor, such as Error or Coercion.

hosts account
type: ObjectProperty
inverse of: is hosted on
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Online Platform
range: Account
comment: Indicates that an online platform hosts a user account.
label: hospeda conta @pt-br
example: An online platform hosts accounts for its users.

implements dark pattern
type: ObjectProperty
inverse of: is implemented on
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Online Platform
range: Class
  union of: Dark Pattern Action
  union of: Dark Pattern Artifact
comment: Indicates that a platform or interface implements a specific dark pattern.
label: implementa padrão obscuro @pt-br
example: A social media interface implements dark patterns to guide user choices.

informs about
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Policy Document
range: Processing
comment: Indicates that a document provides information about a specific processing activity.
label: informa sobre @pt-br
example: A policy document informs about processing.

is about person
type: ObjectProperty
type: FunctionalProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Personal Data
range: Natural Person
comment: Data directly or indirectly associated or related to an individual.
label: é sobre uma pessoa @pt-br
example: A piece of Personal Data is about a person.

is accessible on
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Control Mechanism
range: Online Platform
comment: Control mechanisms accessible on social networking platforms and sites.
label: está disponível em @pt-br
example: A control panel is accessible on the social media platform.

is decided by
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Processing
range: Controller
comment: Indicates that a processing activity is decided by a controller.
label: é decidido por @pt-br
example: A processing activity is decided by the Controller.

is described in notice
type: ObjectProperty
inverse of: provides notice about
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Processing
range: Privacy Notice
comment: Indicates that a processing activity is described in a specific notice.
label: é descrito em aviso @pt-br
example: The purpose of the processing is described in notice.

is exploited by
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Class
  union of: Cognitive Bias
  union of: Limitation of Cognitive Capacity
range: Class
  union of: Dark Pattern Action
  union of: Dark Pattern Artifact
comment: Indicates that a cognitive bias or limitation is leveraged by a specific dark pattern.
label: é explorado por @pt-br
example: The user’s limited attention is exploited by an Overloading pattern.

is granted by
type: ObjectProperty
equivalent property: is provided by
sub property of: has consent decision by
inverse of: provides consent
type: FunctionalProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Consent Status
range: Data subject
comment: Deliberately granted by the data subjects.
label: é concedido por @pt-br
example: A Consent Given status shows that consent is granted by the data subject.

is hosted on
type: ObjectProperty
type: FunctionalProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Account
range: Online Platform
comment: Indicates that an account exists on or is hosted by a specific online platform.
label: é hospedada em @pt-br
example: An online account is hosted on a specific platform.

is implemented on
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Class
  union of: Dark Pattern Action
  union of: Dark Pattern Artifact
range: Online Platform
comment: Dark patterns are interfaces implemented on social media platforms.
label: é implementado em @pt-br
example: A Dark Pattern is implemented on a user interface.

is influenced by
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Decision Making Process
range: Class
  union of: Cognitive Bias
  union of: Limitation of Cognitive Capacity
comment: Indicates that a decision-making process is influenced by cognitive bias or limitation.
label: é influenciado por @pt-br
example: A Decision Making Process is influenced by Cognitive Bias.

is influenced by defect
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Consent Granting
range: Defects of the Legal Transaction
comment: Relates a consent-granting act to a defect of the legal transaction that influenced it.
label: é influenciado por vício @pt-br
example: An act of granting consent is influenced by a defect of the legal transaction.

is made by
type: ObjectProperty
inverse of: makes decision
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Decision
range: Natural Person
comment: A relation that links a decision to the natural person who made it.
label: é feita por @pt-br
example: A decision is made by a natural person.

is made manifestly public by
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Personal Data
range: Data subject
comment: A relation indicating that a piece of personal data was made manifestly public by the data subject to whom it pertains.
label: é tornado público por @pt-br
example: A piece of Personal Data is made manifestly public by a Data Subject.

is operated by
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Online Platform
range: Platform Operator
comment: Relates a digital service to its operator.
label: é operado por @pt-br
example: A digital social media platform is operated by the company.

is performed by
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Consent Decision
range: Data subject
comment: Relates a decision process (occurrent) to the data subject (continuant) who performs it.
label: é realizado por @pt-br
example: A consent decision is performed by the data subject.

is performed on
type: ObjectProperty
inverse of: is subject of processing
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Processing
range: Class
  union of: Data that is not personal.
  union of: Personal Data
comment: Indicates that a operation is performed on personal data.
label: é realizado em @pt-br
example: A Processing activity is performed on Personal Data.

is permitted under
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Processing
range: Consent Exemption
comment: A relation indicating that a processing activity is permitted under a specific legal exemption, waiving a standard requirement such as consent.
label: é permitido sob @pt-br
example: The processing of public data is permitted under a specific consent exemption.

is provided by
type: ObjectProperty
sub property of: has consent decision by
type: FunctionalProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Consent Status
comment: Indicates that the consent has been provided by the data subject.
label: é dado por @pt-br
example: The consent is provided by the data subject.

is recipient of
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Agent
range: Processing
comment: A property that links the agent who receives the data to the processing activity.
label: é destinatário de @pt-br
example: A data transfer operation has a Third Party as its recipient.

is refused by
type: ObjectProperty
sub property of: has consent decision by
type: FunctionalProperty
type: AsymmetricProperty
type: IrreflexiveProperty
range: Data subject
comment: The state where consent has been refused by the data subject.
label: é recusado por @pt-br
example: A Consent Refused status indicates that consent has been refused by the data subject.

is restricted by
type: ObjectProperty
inverse of: restricts cognitive capacity
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Cognitive Capacity
range: Limitation of Cognitive Capacity
comment: Indicates the cognitive capacity is restricted by limitations of cognitive capacity.
label: é restringido por @pt-br
example: The cognitive capacity is restricted by limitations of cognitive capacity.

is revoked by
type: ObjectProperty
sub property of: has consent decision by
inverse of: revokes consent
type: FunctionalProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Consent Status
range: Data subject
comment: Indicates that the consent has been revoked by the data subject.
label: é revogado por @pt-br
example: A Consent Withdrawn status shows that consent has been revoked by the data subject.

is right of
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Right
range: Natural Person
comment: A relation that links a data subject to a right they possess.
label: é direito de @pt-br
example: The right to erasure is a right of the Data Subject.

is role of
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
comment: Links a specific role to the agent that assumes it.
label: é papel de @pt-br
example: A DPO is a role of a natural person.

is status established by
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Consent Status
range: Consent Decision
comment: Relates a consent status (disposition) to the decision process (occurrent) that it is a result of.
label: é status estabelecido por @pt-br
example: A status of 'given' is established by an act of granting consent.

is stipulated in
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
comment: Indicates that a legal concept is defined or established within a specific Legislation.
label: é estipulada em @pt-br
example: A legal Principle is stipulated in the Legislation.

is subject of processing
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Data
range: Processing
comment: Indicates that a data entity is the subject of a processing activity.
label: é objeto de tratamento @pt-br
example: Personal Data is subject of processing.

is subject to
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Natural Person
range: Class
  union of: Cognitive Bias
  union of: Limitation of Cognitive Capacity
comment: Indicates that an entity is affected by a bias, or limitation.
label: é sujeita a @pt-br
example: A natural person is subject to cognitive biases.

is vitiating factor of
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Defects of the Legal Transaction
range: Vitiated Consent
comment: Indicates that a factor such as error, fraud, coercion, injury, or state of danger has resulted in the obtaining of vitiated consent.
label: é fator viciante de @pt-br
example: An Error is vitiating factor of a Vitiated Consent.

justifies processing
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Legal Basis
range: Processing
comment: Legal basis used to justify processing of data or use of technology in accordance with a law.
label: justifica tratamento de dados @pt-br
example: A Legal Basis justifies processing of personal data.

makes decision
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Natural Person
range: Decision
comment: A relation that links a decision to the natural person who made it.
label: faz uma decisão @pt-br
example: A natural person makes a decision.

must be informed about
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Data subject
range: Processing
comment: The data subject must have easy access to information about the processing of their data.
label: deve ser informado sobre @pt-br
example: A data subject must be informed about data processing.

must observe
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Processing
range: Principle under LGPD
comment: Activities of processing personal data shall be done in good faith and must observe the principles.
label: deve observar @pt-br
example: A processing activity must observe the principles of the legislation.

performs cognitive process
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Natural Person
range: Cognitive Process
comment: Indicates that a data subject performs or is engaged in a cognitive process.
label: realiza processo cognitivo @pt-br
example: A data subject performs cognitive process when making a choice.

permit limitation to
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Control Mechanism
range: Digital Social Media Account
comment: Indicates that a control mechanism allows the user to limit access to their account.
label: permite limitação para @pt-br
example: A Control Mechanism permits limitation to the user's account settings.

processes on behalf of
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Processor Role
range: Controller Role
comment: A ‘processor’ means a natural or legal person, public authority, agency or other body which processes data on behalf of the controller.
label: realiza tratamento em nome de @pt-br
example: A processor processes on behalf of a Controller.

processes personal data
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Processor
range: Personal Data
comment: Indicates a natural person or legal entity of either public or private law that processes personal data on behalf of the controller.
label: realiza o tratamento de dados pessoais @pt-br
example: A processor processes personal data.

provides consent
type: ObjectProperty
type: InverseFunctionalProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Data subject
range: Consent Status
comment: Indicates that a data subject has provided consent for processing.
label: fornece consentimento @pt-br
example: A data subject provides their consent for a specific purpose.

provides notice about
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Privacy Notice
range: Processing
comment: Indicates that a notice provides information about a specific processing activity.
label: fornece aviso sobre @pt-br
example: A Privacy Policy provides notice about the data processing activities.

requires action for consent
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Opt-In
range: Consent Status
comment: Opt-in is a process where someone is required to take an action to express explicit consent.
label: exige ação para o consentimento @pt-br
example: An Opt-In mechanism requires action for consent.

requires legal basis
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Processing
range: Consent Status
comment: Processing of Personal Data requires consent.
label: requer hipótese legal @pt-br
example: A processing activity requires a valid Legal Basis.

restricts cognitive capacity
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Limitation of Cognitive Capacity
range: Cognitive Capacity
comment: Indicates that a limitation of cognitive capacity restricts the general cognitive capacity of a subject.
label: restringe capacidade cognitiva @pt-br
example: A limitation of Cognitive Capacity restricts the user's ability to decide rationally.

results in decision
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Decision Making Process
range: Decision
comment: Indicates that a decision-making process results in a specific decision.
label: resulta em decisão @pt-br
example: A Decision Making Process results in a decision.

revokes consent
type: ObjectProperty
type: InverseFunctionalProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Data subject
comment: The state where the data subject revokes the consent.
label: revoga consentimento @pt-br
example: A data subject revokes a previously given consent.

supports consent of
type: ObjectProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Policy Document
range: Digital Social Media User
comment: Indicates that a document or mechanism helps a user provide informed consent.
label: apoia o consentimento de @pt-br
example: A privacy notice supports the consent of the user before data collection.

Is status for consent
type: ObjectProperty
sub property of: topObjectProperty
inverse of: has status
type: AsymmetricProperty
type: IrreflexiveProperty
is defined by: Links a status to the consent that uses it.
label: É status para consentimento @pt-br

has consent status
type: ObjectProperty
type: FunctionalProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Consent Status
range: Consent Status
comment: specifies the state or status of consent

has legal basis
type: ObjectProperty
sub property of: topObjectProperty
type: FunctionalProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Consent
range: Legal Basis
is defined by: Indicates use or applicability of a Legal Basis
label: tem hipótese legal @pt

has status
type: ObjectProperty
type: FunctionalProperty
type: AsymmetricProperty
type: IrreflexiveProperty
domain: Consent Status
range: Consent Status
comment: Indicates the status of specified concept
label: tem status @pt-br

account name
type: DatatypeProperty
domain: Online Account
range: Literal
comment: Indicates the name (identifier) associated with this online account.
term status: testing

age
type: DatatypeProperty
type: FunctionalProperty
domain: Person
range: Datatype
  on datatype: integer
  with restrictions:
    min inclusive: 0
  with restrictions:
    max inclusive: 150
comment: The age in years of some agent.
term status: unstable

birthday
type: DatatypeProperty
type: FunctionalProperty
domain: Person
range: date
comment: The birthday of this Agent, represented in mm-dd string form, eg. '12-31'.
term status: unstable

firstName
type: DatatypeProperty
domain: Person
range: Literal
comment: The first name of a person.
term status: testing

gender
type: DatatypeProperty
type: FunctionalProperty
domain: Person
range: string
comment: The gender of this Agent (typically but not necessarily 'male' or 'female').
term status: testing

Surname
type: DatatypeProperty
domain: Person
range: Literal
comment: The surname of some person.
term status: archaic

Account creation date
type: DatatypeProperty
type: FunctionalProperty
domain: Account
range: dateTime
comment: The specific date and time when the account was created.
label: Data de criação da conta @pt

Account ID
type: DatatypeProperty
type: FunctionalProperty
domain: Account
comment: A unique identifier assigned to the account by the platform.
label: ID da conta @pt

Account status
type: DatatypeProperty
type: FunctionalProperty
domain: Account
range: string
comment: The current status of the account, e.g., 'active', 'suspended', 'deleted'.
label: Status da conta @pt

Consent expiration
type: DatatypeProperty
domain: Consent Given
range: date
comment: The date on which the given consent is set to expire.
label: Expiração do consentimento @pt

Consent mechanism
type: DatatypeProperty
domain: Consent Given
range: string
comment: A textual description of the mechanism through which consent was obtained.
label: Mecanismo de consentimento @pt

Data category
type: DatatypeProperty
domain: Personal Data
range: string
comment: Classification of personal data according to the context of its use.
label: Categoria dos dados @pt

Data source
type: DatatypeProperty
domain: Data
range: string
comment: A description of the source from which the data was obtained, e.g., 'User-provided form', 'Inferred from browsing activity.
label: Fonte dos dados @pt

Describes agents' responsibility
type: DatatypeProperty
domain: Processing
range: Literal
comment: A textual description of the responsibilities of the agents.
label: Descreve a responsabilidade dos agentes @pt

Document URL
type: DatatypeProperty
domain: Policy Document
range: anyURI
comment: The URL where the document can be accessed.
label: URL do documento @pt

DPO contact e-mail
type: DatatypeProperty
domain: Data Protection Officer
range: string
comment: The official contact email address for the Data Protection Officer.
label: E-mail de contato do DPO @pt

DPO full name
type: DatatypeProperty
type: FunctionalProperty
domain: Data Protection Officer
range: string
comment: Nome do DPO @pt
comment: The full name of the person appointed as the Data Protection Officer.

Has confirmation timestamp
type: DatatypeProperty
type: FunctionalProperty
domain: Consent Given
range: dateTime
comment: The specific date and time when consent was given by the data subject.
label: Tem data de confirmação @pt

Has contact e-mail
type: DatatypeProperty
domain: Data Processing Agent
range: string
comment: A contact email address for the data processing agent.
label: Tem e-mail de contato @pt

Has duration
type: DatatypeProperty
domain: Processing
range: Literal
comment: Specifies the duration of the data processing.
label: Tem duração @pt-br

Has effective date
type: DatatypeProperty
type: FunctionalProperty
domain: Policy Document
range: date
comment: The date from which the policy document is effective.
label: Tem data de vigência @pt

Has e-mail address
type: DatatypeProperty
domain: Data subject
range: string
comment: An email address belonging to the natural person.
label: Tem endereço de e-mail @pt

has formal act type
type: DatatypeProperty
domain: Formal Act Of Appointment
range: string
comment: Specifies the type of formal document used for an appointment, such as an administrative act or a specific contract.
label: tem tipo de ato formal @pt

Has legal adress
type: DatatypeProperty
domain: Data Processing Agent
range: string
comment: The official legal address of the data processing agent.
label: Tem endereço oficial @pt

Has legal name
type: DatatypeProperty
type: FunctionalProperty
domain: Data Processing Agent
range: string
comment: The official legal name of the data processing agent.
label: Tem nome legal @pt

Has national ID
type: DatatypeProperty
type: FunctionalProperty
domain: Natural Person
range: string
comment: A national identification number for the natural person, e.g., CPF in Brazil.
label: Tem documento nacional @pt

Has phone number
type: DatatypeProperty
domain: Natural Person
range: string
comment: A phone number belonging to the natural person.
label: Tem número de telefone @pt

Has processing method
type: DatatypeProperty
domain: Processing
range: Literal
comment: A description of the method or manner in which the data processing is carried out.
label: Tem forma de tratamento @pt-br

Has publication date
type: DatatypeProperty
type: FunctionalProperty
domain: Policy Document
range: date
comment: The date on which this version of the policy document was published.
label: Tem data de publicação @pt

Has refusal timestamp
type: DatatypeProperty
type: FunctionalProperty
domain: Consent Refused
range: dateTime
comment: The specific date and time when consent was refused by the data subject.
label: Tem data de recusamento @pt

Has specific purpose
type: DatatypeProperty
domain: Processing
range: Literal
comment: A detailed, specific, and explicit description of the purpose for each particular processing activity.
label: Tem finalidade específica @pt

Has version
type: DatatypeProperty
type: FunctionalProperty
domain: Policy Document
range: string
comment: The version identifier for the policy document, e.g., 'v1.2.
label: Tem versão @pt

Has withdrawal timestamp
type: DatatypeProperty
type: FunctionalProperty
domain: Consent Withdrawn
range: dateTime
comment: The specific date and time when consent was withdrawn by the data subject.
label: Tem data de revogação @pt

Is anonymised
type: DatatypeProperty
domain: Data
range: boolean
comment: A boolean value indicating whether the data has been anonymised.
label: É anonimizado @pt

Last updated date
type: DatatypeProperty
domain: Control Mechanism
range: date
comment: The date when the control mechanism was last updated or modified.
label: Última data de atualização @pt

Legal citation
type: DatatypeProperty
domain: Legal Basis under LGPD
range: string
comment: The specific legal citation that defines or supports this legal basis.
label: Citação legal @pt

Mechanism description
type: DatatypeProperty
domain: Control Mechanism
range: Literal
comment: A textual description of what the control mechanism does and how it works.
label: Descrição do mecanismo @pt

Mechanism name
type: DatatypeProperty
domain: Control Mechanism
range: string
comment: A human-readable name for the control mechanism.
label: Nome do mecanismo @pt

Pattern description
type: DatatypeProperty
domain: Class
  union of: Dark Pattern Action
  union of: Dark Pattern Artifact
range: Literal
comment: A textual description of how the dark pattern is implemented and its effect.
label: Descrição do pattern @pt

Pattern location
type: DatatypeProperty
domain: Class
  union of: Dark Pattern Action
  union of: Dark Pattern Artifact
range: string
comment: The specific location within a user interface where the dark pattern is found.
label: Localização do pattern @pt

Platform name
type: DatatypeProperty
type: FunctionalProperty
domain: Online Platform
range: string
comment: The commercial or official name of the online platform.
label: Nome da plataforma @pt

Platform URL
type: DatatypeProperty
type: FunctionalProperty
domain: Online Platform
range: anyURI
comment: The primary URL for accessing the online platform.
label: URL da plataforma @pt

processing description
type: DatatypeProperty
domain: Processing
range: Literal
comment: A general, human-readable description of the processing activity.
label: Descrição do tratamento @pt

Vitiation reason
type: DatatypeProperty
domain: Vitiated Consent
range: Literal
comment: A textual explanation for why the consent was deemed vitiated or invalid.
label: Explicação do vício @pt

information content entity
type: Class
subclass of: BFO_0000031
subclass of: Restriction
  on property: IAO_0000136
  some values from: BFO_0000001
IAO_0000111: information content entity
IAO_0000112: Examples of information content entites include journal articles, data, graphical layouts, and graphs.
IAO_0000114: IAO_0000122
IAO_0000115: A generically dependent continuant that is about some thing.
IAO_0000116: 2014-03-10: The use of "thing" is intended to be general enough to include universals and configurations (see https://groups.google.com/d/msg/information-ontology/GBxvYZCk1oc/-L6B5fSBBTQJ).
IAO_0000116: information_content_entity 'is_encoded_in' some digital_entity in obi before split (040907). information_content_entity 'is_encoded_in' some physical_document in obi before split (040907). Previous. An information content entity is a non-realizable information entity that 'is encoded in' some digital or physical entity.
IAO_0000117: PERSON: Chris Stoeckert
IAO_0000119: OBI_0000142

document
type: Class
subclass of: information content entity
IAO_0000111: document
IAO_0000112: A journal article, patent application, laboratory notebook, or a book
IAO_0000114: IAO_0000120
IAO_0000115: A collection of information content entities intended to be understood together as a whole
IAO_0000117: PERSON: Lawrence Hunter

Agent
type: Class
subclass of: BFO_0000040
comment: An agent (eg. person, group, software or physical artifact).
term status: stable
preferred label: Agente @pt-br

Online Account
type: Class
subclass of: Account
comment: An online account.
term status: testing
preferred label: Conta online @pt

Person
type: Class
subclass of: Agent
subclass of: Restriction
  on property: Surname
  min cardinality: 1
subclass of: Restriction
  on property: age
  max cardinality: 1
subclass of: Restriction
  on property: birthday
  max cardinality: 1
subclass of: Restriction
  on property: gender
  max cardinality: 1
disjoint with: Legal Entity
comment: A person.
label: Pessoa @pt-br
term status: stable

Access
type: Class
subclass of: Processing Operation
is defined by: BRASIL. Comitê Central de Governança de Dados. Guia de boas práticas: Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, DF: Secretaria de Governo Digital, 2024. Available at: https://www.gov.br/governodigital/pt-br/privacidade-e-seguranca/guias/guia_lgpd.pdf. @pt-br
label: Acesso @pt-br
definition: Entering, transiting, knowing, or consulting the information.

Account
type: Class
subclass of: information content entity
comment: A record of a user's credentials and profile on a system or platform, which grants them access to its services.
label: Conta @pt-br

Accountability
type: Class
subclass of: Principle under LGPD
comment: According to Article 6, Item X of the Brazilian General Data Protection Law (LGPD - Law No. 13,709/2018).
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
label: Responsabilização @pt-br
definition: The data processing agent must demonstrate the adoption of effective measures to ensure compliance with personal data protection regulations.

Adequacy
type: Class
subclass of: Principle under LGPD
comment: According to Article 6, Item X of the Brazilian General Data Protection Law (LGPD - Law No. 13,709/2018).
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
label: Adequação @pt-br
definition: Compatibility of the processing with the purposes informed to the data subject.

Ambiguous Wording or Information
type: Class
subclass of: Left In The Dark
is defined by: EUROPEAN DATA PROTECTION BOARD (EDPB). Guidelines 03/2022 on deceptive design patterns in social media platform interfaces: how to recognise and avoid them. Versão final. Bruxelas, 24 fev. 2023. Available at: https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-032022-deceptive-design-patterns-social-media_en.
label: Informação ambígua @pt-br
definition: Using ambiguous and vague terms when giving information to users.

Anonymised Data
type: Class
equivalent class: Class
  intersection of: Data
  intersection of: Restriction
    on property: Is anonymised
    has value: true
subclass of: Data that is not personal.
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
label: Dados anonimizados @pt-br
definition: Data related to a data subject who cannot be identified.

Anonymization
type: Class
subclass of: Processing Operation
comment: According to Article 5, XI, of the Brazilian Data Protection Law.
is defined by: BRASIL. Comitê Central de Governança de Dados. Guia de boas práticas: Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, DF: Secretaria de Governo Digital, 2024. Available at: https://www.gov.br/governodigital/pt-br/privacidade-e-seguranca/guias/guia_lgpd.pdf. @pt-br
label: Anonimização @pt-br
definition: Use of reasonable technical means available at the time of processing, by which a given data loses the possibility of direct or indirect association with an individual.

Appointing Process
type: Class
subclass of: BFO_0000015
subclass of: Restriction
  on property: has appointee
  some values from: Data Protection Officer
subclass of: Restriction
  on property: has appointer
  some values from: Controller
comment: An occurent that represents the process by which a Data Controller appoints a Data Protection Officer.
label: Processo de nomeação @pt-br

Brazilian Legislation
type: Class
subclass of: Legislation
label: Legislação brasileira @pt-br
definition: A specific Legislation that is part of the Brazilian legal system.

Classification
type: Class
subclass of: Processing Operation
is defined by: BRASIL. Comitê Central de Governança de Dados. Guia de boas práticas: Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, DF: Secretaria de Governo Digital, 2024. Available at: https://www.gov.br/governodigital/pt-br/privacidade-e-seguranca/guias/guia_lgpd.pdf. @pt-br
label: Classificação @pt-br
definition: Ordering or categorizing data.

Coercion
type: Class
subclass of: Defects of the Legal Transaction
comment: Article 151 - Braziliam civil law.
is defined by: BRASIL. Lei nº 10.406, de 10 de janeiro de 2022. Institui o Código Civil. Brasília: Presidência da República, 2015. Available at: https://www.planalto.gov.br/ccivil_03/leis/2002/l10406compilada.htm. @pt-br
label: Coerção @pt-br
definition: Occurs when it causes the victim a fear of imminent and considerable harm to their person, family, or property.

Cognitive Bias
type: Class
subclass of: BFO_0000016
is defined by: KORTELING, J. E. (Hans); TOET, Alexander. Cognitive Biases. In: DELLA SALA, Sergio (Ed.). Reference Module in Neuroscience and Biobehavioral Psychology. Amsterdam: Elsevier, 2020. p. 610–619. Available at: https://doi.org/10.1016/B978-0-12-809324-5.24105-9.
label: Viés cognitivo @pt-br
definition: Deviations in human decision making. Systematic and universally occurring tendencies, inclinations, or dispositions that skew or distort information processes in ways that make their outcome inaccurate, suboptimal or simply wrong.

Cognitive Capacity
type: Class
subclass of: BFO_0000016
is defined by: KLEINSORGE, T. Cognitive capacity, representation, and instruction. Frontiers in Psychology, v. 12, art. 701687, 2021. DOI: 10.3389/fpsyg.2021.701687. Available at: https://www.frontiersin.org/journals/psychology/articles/10.3389/fpsyg.2021.701687/full.
label: Capacidade cognitiva @pt-br
definition: Refers to limits in cognitive processing and task performance that are thought to arise from limits intrinsic to an organism.

Cognitive Process
type: Class
subclass of: BFO_0000015
label: Processo cognitivo @pt-br
definition: Mental processes involved in the acquisition, processing, and utilization of knowledge or information.

Collection
type: Class
subclass of: Processing Operation
is defined by: BRASIL. Comitê Central de Governança de Dados. Guia de boas práticas: Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, DF: Secretaria de Governo Digital, 2024. Available at: https://www.gov.br/governodigital/pt-br/privacidade-e-seguranca/guias/guia_lgpd.pdf. @pt-br
label: Coleta @pt-br
definition: Gathering data for a specific purpose.

Communication
type: Class
subclass of: Processing Operation
is defined by: BRASIL. Comitê Central de Governança de Dados. Guia de boas práticas: Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, DF: Secretaria de Governo Digital, 2024. Available at: https://www.gov.br/governodigital/pt-br/privacidade-e-seguranca/guias/guia_lgpd.pdf. @pt-br
label: Comunicação @pt-br
definition: Transmitting information to data policy actions.

Conflicting Information
type: Class
subclass of: Left In The Dark
is defined by: EUROPEAN DATA PROTECTION BOARD (EDPB). Guidelines 03/2022 on deceptive design patterns in social media platform interfaces: how to recognise and avoid them. Versão final. Bruxelas, 24 fev. 2023. Available at: https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-032022-deceptive-design-patterns-social-media_en.
label: Informação conflitante @pt-br
definition: Giving pieces of information to users that conflict with each other in some way.

Consent
type: Class
subclass of: Legal Basis under LGPD
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
label: Consentimento @pt-br
definition: Data subject agrees to the processing of their personal data.

Consent Decision
type: Class
subclass of: Decision
subclass of: Restriction
  on property: is performed by
  some values from: Data subject
label: Decisão de consentimento @pt-br
definition: The process/act representing a data subject's decision to grant, refuse, or withdraw consent for the processing of their personal data.

Consent Exemption
type: Class
subclass of: BFO_0000031
subclass of: Restriction
  on property: is stipulated in
  has value: Brazilian General Data Protection Law
comment: The legal concept of an exemption from the requirement of consent for processing, applicable under specific conditions defined by law, such as when data is made manifestly public by the data subject.
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
label: Consentimento dispensado @pt-br

Consent Given
type: Class
equivalent class: Class
  intersection of: Restriction
    on property: has quality
    some values from: Free Consent
  intersection of: Restriction
    on property: has quality
    some values from: Informed Consent
  intersection of: Restriction
    on property: has quality
    some values from: Unequivocal Consent
  intersection of: Restriction
    on property: is granted by
    qualified cardinality: 1
    on class: Data subject
subclass of: Status Valid for Processing
subclass of: Restriction
  on property: is status established by
  some values from: Consent Granting
subclass of: Restriction
  on property: has status
  some values from: Status Valid for Processing
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209 @pt-br
label: Consentimento dado @pt-br
definition: When the data subject agrees to the processing of personal data.

Consent Granting
type: Class
subclass of: Consent Decision
subclass of: Restriction
  on property: establishes status
  some values from: Class
    union of: Consent Given
    union of: Consent Invalidated
disjoint with: Consent Refusal
disjoint with: Consent Withdrawal
comment: The process/act of a data subject actively granting consent.
label: Concessão de consentimento @pt-br

Consent Management
type: Class
subclass of: Control Mechanism
subclass of: Restriction
  on property: allows management by
  some values from: Digital Social Media User
is defined by: ALMEIDA, João; SILVA, Maria. A Blockchain-Based Hybrid Architecture for Auditable Consent Management. IEEE Transactions on Industrial Informatics, v. 19, n. 4, p. 2654–2662, 2023. DOI: 10.1109/TII.2023.10604861. Available at: https://ieeexplore.ieee.org/document/10604861.
label: Gerenciamento de consentimento @pt-br
definition: A system that allows individuals to determine what personal information they are willing to permit data processors to access.

Consent Refusal
type: Class
subclass of: Consent Decision
subclass of: Restriction
  on property: establishes status
  some values from: Consent Refused
comment: The process/act of a data subject actively refusing consent when requested.
label: Recusa de consentimento @pt-br

Consent Refused
type: Class
equivalent class: Restriction
  on property: is refused by
  qualified cardinality: 1
  on class: Data subject
subclass of: Status Invalid for Processing
subclass of: Restriction
  on property: is status established by
  some values from: Consent Refusal
disjoint with: Consent Withdrawn
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
label: Consentimento recusado @pt-br
definition: When the data subject objects to the processing of personal data.

Consent Withdrawal
type: Class
subclass of: Consent Decision
subclass of: Restriction
  on property: establishes status
  some values from: Consent Withdrawn
comment: The process/act of a data subject revoking a previously granted consent.
label: Revogação de consentimento @pt-br

Consent Withdrawn
type: Class
equivalent class: Restriction
  on property: is revoked by
  qualified cardinality: 1
  on class: Data subject
subclass of: Status Invalid for Processing
subclass of: Restriction
  on property: is status established by
  some values from: Consent Withdrawal
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
label: Consentimento revogado @pt-br
definition: Consent may be revoked at any time upon express request of the data subject.

ContinuousPrompting
type: Class
subclass of: Dark Pattern Action
is defined by: EUROPEAN DATA PROTECTION BOARD (EDPB). Guidelines 03/2022 on deceptive design patterns in social media platform interfaces: how to recognise and avoid them. Versão final. Bruxelas, 24 fev. 2023. Available at: https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-032022-deceptive-design-patterns-social-media_en.
label: Solicitação contínua @pt-br
broader: Overloading
definition: Pushing users to provide more personal data than necessary for the purpose of processing or to agree with another use of their data by repeatedly asking users to provide data or to consent to a new purpose of processing.

Control
type: Class
subclass of: Processing Operation
is defined by: BRASIL. Comitê Central de Governança de Dados. Guia de boas práticas: Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, DF: Secretaria de Governo Digital, 2024. Available at: https://www.gov.br/governodigital/pt-br/privacidade-e-seguranca/guias/guia_lgpd.pdf. @pt-br
label: Controle @pt-br
definition: Regulating, determining, or monitoring actions on data.

Control Mechanism
type: Class
subclass of: BFO_0000034
is defined by: ALBESHER, Abdulmohsen S.; ALHUSSAIN, Thamer. Evaluating and comparing the usability of privacy in WhatsApp, Twitter, and Snapchat. International Journal of Advanced Computer Science and Applications, v. 12, n. 8, 2021. DOI: 10.14569/IJACSA.2021.0120829. Available at: https://thesai.org/Publications/ViewPaper?Volume=12&Issue=8&Code=IJACSA&SerialNo=29.
label: Mecanismo de controle @pt-br
definition: Permit clients to limit who can see their profiles and filter what data or information other users or guests can see.

Controller
type: Class
equivalent class: Class
  intersection of: Data Processing Agent
  intersection of: Restriction
    on property: has role
    some values from: Controller Role
subclass of: Restriction
  on property: decides on
  some values from: Processing
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
label: Controlador @pt-br
alternative label: Data controller
definition: Natural person or legal entity of either public or private law in charge of making the decisions regarding the processing of personal data.

Controller Role
type: Class
subclass of: BFO_0000023
subclass of: Restriction
  on property: is role of
  some values from: Controller
comment: A role for an agent who makes decisions about the processing of personal data.
label: Papel de controlador @pt-br

Dark Pattern Action
type: Class
subclass of: BFO_0000015
subclass of: Restriction
  on property: exploits
  some values from: Class
    union of: Cognitive Bias
    union of: Limitation of Cognitive Capacity
is defined by: EUROPEAN DATA PROTECTION BOARD (EDPB). Guidelines 03/2022 on deceptive design patterns in social media platform interfaces: how to recognise and avoid them. Versão final. Bruxelas, 24 fev. 2023. Available at: https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-032022-deceptive-design-patterns-social-media_en.
label: Ação de padrão manipulativo @pt-br
definition: Represents a process or action of manipulation within a user interface that attempts to influence a user's decisions regarding their personal data. This class distinguishes the manipulative actions from the design artifacts that enable them.

Dark Pattern Artifact
type: Class
subclass of: information content entity
subclass of: Restriction
  on property: exploits
  some values from: Class
    union of: Cognitive Bias
    union of: Limitation of Cognitive Capacity
is defined by: EUROPEAN DATA PROTECTION BOARD (EDPB). Guidelines 03/2022 on deceptive design patterns in social media platform interfaces: how to recognise and avoid them. Versão final. Bruxelas, 24 fev. 2023. Available at: https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-032022-deceptive-design-patterns-social-media_en.
label: Artefato de padrão manipulativo @pt-br
incompatible with: Deceptive Design Pattern
alternative label: Deceptive pattern
alternative label: Padrão obscuro @pt
definition: Interfaces implemented on social media platforms that attempt to influence users into making unintended, unwilling and potentially harmful decisions in favour of the social media platforms interests.

Data
type: Class
subclass of: information content entity
is defined by: ORGANIZAÇÃO PARA COOPERAÇÃO E DESENVOLVIMENTO ECONÔMICO (OCDE). Recommendation of the Council on Enhancing Access to and Sharing of Data. Paris: OCDE, 2021. Available at: https://legalinstruments.oecd.org/en/instruments/OECD-LEGAL-0463.
label: Dados @pt-br
alternative label: Information
alternative label: Informação @pt-br
definition: Refers to recorded information in structured or unstructured formats, including text, images, sound, and video.

Data Processing Agent
type: Class
subclass of: Agent
subclass of: Class
  union of: Natural Person
  union of: Private Legal Entity
  union of: Public Legal Entity
comment: The data controller and the data processor.
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
label: Agente de tratamento @pt-br
alternative label: Processing Agent

Data Protection Officer
type: Class
equivalent class: Restriction
  on property: has role
  some values from: DPO Role
subclass of: Agent
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
label: Encarregado @pt-br
alternative label: Protection Officer
definition: Someone who acts as a point of contact between the data controller, the data subjects and the ANPD.
has acronym: DPO

Data Quality
type: Class
subclass of: Principle under LGPD
comment: According to Article 6, Item X of the Brazilian General Data Protection Law (LGPD - Law No. 13,709/2018).
comment: Guarantee to the data subjects of accuracy, clarity, relevance and updating of data.
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
label: Qualidade dos dados @pt-br

Data subject
type: Class
subclass of: Natural Person
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209.
label: Titular dos dados @pt-br
alternative label: Provedor de dados @pt-br
alternative label: Sujeito de dados @pt-br
definition: Natural person to whom the personal data that is object of the processing refers to.

Data Subject Right
type: Class
subclass of: Right
subclass of: Restriction
  on property: is stipulated in
  has value: Brazilian General Data Protection Law
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
is defined by: Rights of the data subject according to Article 18 of the General Data Protection Law 13.709/18.
label: Direito do titular @pt-br
definition: It is the legal right that each individual (data subject) has over their personal data, allowing them to control how their information is collected, processed, stored, and shared by organizations.

Dead End
type: Class
subclass of: Obstructing
is defined by: EUROPEAN DATA PROTECTION BOARD (EDPB). Guidelines 03/2022 on deceptive design patterns in social media platform interfaces: how to recognise and avoid them. Versão final. Bruxelas, 24 fev. 2023. Available at: https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-032022-deceptive-design-patterns-social-media_en.
label: Beco sem saída @pt-br
definition: While users are looking for information or a control, they end up not finding it as a redirection link is either not working or not available at all.

Deceptive Snugness
type: Class
subclass of: Skipping
is defined by: EUROPEAN DATA PROTECTION BOARD (EDPB). Guidelines 03/2022 on deceptive design patterns in social media platform interfaces: how to recognise and avoid them. Versão final. Bruxelas, 24 fev. 2023. Available at: https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-032022-deceptive-design-patterns-social-media_en.
label: Conforto enganoso @pt-br
definition: By default, the most data invasive features and options are enabled.

Decision
type: Class
subclass of: BFO_0000015
label: Decisão @pt-br
definition: The outcome or resolution of a decision-making process.

Decision Making Process
type: Class
subclass of: Cognitive Process
is defined by: MÜLLER, Silke M.; LIEBHERR, Magnus; WEGMANN, Elisa; BRAND, Matthias. Decision making – A neuropsychological perspective. In: Della SALA, Sergio (Ed.). Encyclopedia of Behavioral Neuroscience. 2. ed. Amsterdam: Elsevier, 2022. p. 396–403. DOI: 10.1016/B978-0-12-819641-0.00132-8. Available at: https://www.sciencedirect.com/science/article/abs/pii/B9780128196410001328?via%3Dihub.
label: Processo de tomada de decisão @pt-br
definition: Refers to a multistep procedure involving problem identification, solution generation and evaluation, and selection of the most suitable option.

Decontextualising
type: Class
subclass of: Fickle
is defined by: EUROPEAN DATA PROTECTION BOARD (EDPB). Guidelines 03/2022 on deceptive design patterns in social media platform interfaces: how to recognise and avoid them. Versão final. Bruxelas, 24 fev. 2023. Available at: https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-032022-deceptive-design-patterns-social-media_en.
label: Descontextualização @pt-br
definition: A data protection information or control is located on a page that is out of context.

Default Bias
type: Class
subclass of: Cognitive Bias
is defined by: WOLMARANS, L.; VOORHOEVE, A. What makes personal data processing by social networking services permissible? Canadian Journal of Philosophy, v. 52, n. 1, p. 93–108, jan. 2022. DOI: 10.1017/can.2022.4. Available at: https://www.cambridge.org/core/journals/canadian-journal-of-philosophy/article/what-makes-personal-data-processing-by-social-networking-services-permissible/7D5435C95A593554009B60E2EBEAD6C0.
label: Viés do padrão @pt-br
definition: People stick with default privacy settings out of convenience or due to an implicit belief that they are protective recommendations.

Defects of the Legal Transaction
type: Class
subclass of: BFO_0000015
subclass of: Restriction
  on property: is stipulated in
  has value: Brazilian Civil Code
comment: According to Brazilian Civil Law.
comment: Represents the legal factors that invalidate a legal transaction. These factors are processes that can lead to vitiated consent.
is defined by: BRASIL. Lei nº 10.406, de 10 de janeiro de 2022. Institui o Código Civil. Brasília: Presidência da República, 2015. Available at: https://www.planalto.gov.br/ccivil_03/leis/2002/l10406compilada.htm. @pt-br
label: Defeitos do negócio jurídico @pt-br

Digital Social Media
type: Class
subclass of: Online Platform
subclass of: Restriction
  on property: has user
  some values from: Digital Social Media User
is defined by: GOLDER, Su; AHMED, Shahd; NORMAN, Gill; BOOTH, Andrew. Attitudes toward the ethics of research using social media: uma revisão sistemática. Journal of Medical Internet Research, v. 19, n. 6, art. e195, 2017. DOI: 10.2196/jmir.7082. Available at: https://www.jmir.org/2017/6/e195.
label: Mídias sociais digitais @pt-br
definition: Any Web-based computer-mediated tools to cocreate, share or exchange information, ideas, pictures or videos in virtual communities and networks.

Digital Social Media Account
type: Class
subclass of: Online Account
subclass of: Restriction
  on property: is hosted on
  some values from: Digital Social Media
comment: An online account in any digital social media.
label: Conta em mídia social digital @pt-br

Digital Social Media User
type: Class
equivalent class: Class
  intersection of: Data subject
  intersection of: Restriction
    on property: has account
    some values from: Digital Social Media Account
subclass of: Data subject
label: Usuário em mídia social digital @pt-br
definition: A data subject who holds an account and interacts with a digital social media platform.

Dissemination
type: Class
subclass of: Processing Operation
is defined by: BRASIL. Comitê Central de Governança de Dados. Guia de boas práticas: Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, DF: Secretaria de Governo Digital, 2024. Available at: https://www.gov.br/governodigital/pt-br/privacidade-e-seguranca/guias/guia_lgpd.pdf. @pt-br
label: Difusão @pt-br
definition: Disclosing, propagating, or multiplying data.

Distribution
type: Class
subclass of: Processing Operation
is defined by: BRASIL. Comitê Central de Governança de Dados. Guia de boas práticas: Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, DF: Secretaria de Governo Digital, 2024. Available at: https://www.gov.br/governodigital/pt-br/privacidade-e-seguranca/guias/guia_lgpd.pdf. @pt-br
label: Distribuição @pt-br
definition: Arranging data according to a specific criterion.

DPO Role
type: Class
subclass of: BFO_0000023
subclass of: Restriction
  on property: is role of
  some values from: Class
    union of: Legal Entity
    union of: Natural Person
comment: A role for an agent who acts as a point of contact between the data controller, the data subjects, and the National Authority.
label: Papel de encarregado @pt-br

Elimination
type: Class
subclass of: Processing Operation
is defined by: BRASIL. Comitê Central de Governança de Dados. Guia de boas práticas: Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, DF: Secretaria de Governo Digital, 2024. Available at: https://www.gov.br/governodigital/pt-br/privacidade-e-seguranca/guias/guia_lgpd.pdf. @pt-br
label: Eliminação @pt-br
definition: Deleting or destroying data.

Emotional Steering
type: Class
subclass of: Stirring
is defined by: EUROPEAN DATA PROTECTION BOARD (EDPB). Guidelines 03/2022 on deceptive design patterns in social media platform interfaces: how to recognise and avoid them. Versão final. Bruxelas, 24 fev. 2023. Available at: https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-032022-deceptive-design-patterns-social-media_en.
label: Direcionamento emocional @pt-br
definition: Influencing the emotional state of users in such a way is likely to lead them to make an action that works against their data protection interests.

Error
type: Class
subclass of: Defects of the Legal Transaction
comment: Article 138 - Braziliam civil law.
comment: When the declarations of intent result from a substantial error.
is defined by: BRASIL. Lei nº 10.406, de 10 de janeiro de 2022. Institui o Código Civil. Brasília: Presidência da República, 2015. Available at: https://www.planalto.gov.br/ccivil_03/leis/2002/l10406compilada.htm. @pt-br
label: Erro @pt-br

Evaluation
type: Class
subclass of: Processing Operation
is defined by: BRASIL. Comitê Central de Governança de Dados. Guia de boas práticas: Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, DF: Secretaria de Governo Digital, 2024. Available at: https://www.gov.br/governodigital/pt-br/privacidade-e-seguranca/guias/guia_lgpd.pdf. @pt-br
label: Avaliação @pt-br
definition: Analyzing data to produce information.

Extraction
type: Class
subclass of: Processing Operation
is defined by: BRASIL. Comitê Central de Governança de Dados. Guia de boas práticas: Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, DF: Secretaria de Governo Digital, 2024. Available at: https://www.gov.br/governodigital/pt-br/privacidade-e-seguranca/guias/guia_lgpd.pdf. @pt-br
label: Extração @pt-br
definition: Copying or removing data from its original location.

Fickle
type: Class
subclass of: Dark Pattern Artifact
is defined by: EUROPEAN DATA PROTECTION BOARD (EDPB). Guidelines 03/2022 on deceptive design patterns in social media platform interfaces: how to recognise and avoid them. Versão final. Bruxelas, 24 fev. 2023. Available at: https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-032022-deceptive-design-patterns-social-media_en.
label: Inconsistência @pt-br
definition: Design of the interface is inconsistent and not clear.

Filing
type: Class
subclass of: Processing Operation
is defined by: BRASIL. Comitê Central de Governança de Dados. Guia de boas práticas: Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, DF: Secretaria de Governo Digital, 2024. Available at: https://www.gov.br/governodigital/pt-br/privacidade-e-seguranca/guias/guia_lgpd.pdf. @pt-br
label: Arquivamento @pt-br
definition: Keeping a record of data at any stage.

Formal Act Of Appointment
type: Class
subclass of: document
is defined by: ASSOCIAÇÃO NACIONAL DE PROTEÇÃO DE DADOS (ANPD). Resolução CD/ANPD nº 18, de 16 de julho de 2024. Aprova o Regulamento sobre a atuação do encarregado pelo tratamento de dados pessoais. Diário Oficial da União, Brasília, DF, ed. 136, p. 1-4, 18 jul. 2024. Available at: https://www.in.gov.br/en/web/dou/-/resolucao-cd/anpd-n-18-de-16-de-julho-de-2024-572632074. @pt-br
label: Ato formal de nomeação @pt-br
definition: Represents a formal, written document used to indicate a data processing agent's explicit intention to appoint an individual or legal entity as the Data Protection Officer.

Fraud
type: Class
subclass of: Defects of the Legal Transaction
comment: Malicious conduct carried out with the aim of leading the other party to a mistake about the actual circumstances of the transaction.
is defined by: GUERRA, Alexandre Dartanhan de Mello (coord.); MARTINS, Ricardo Marcondes (et al.). Estudos em homenagem a Clóvis Beviláqua por ocasião do centenário do Direito Civil codificado no Brasil, 1. São Paulo: Escola Paulista da Magistratura, 2018. Livro. (v). ISBN 9788590679011. Available at: https://biblioteca.sophia.com.br/terminal/9549/acervo/detalhe/51489. @pt-br
label: Dolo @pt-br

Free Access
type: Class
subclass of: Principle under LGPD
comment: According to Article 6, Item X of the Brazilian General Data Protection Law (LGPD - Law No. 13,709/2018).
comment: Guarantee to the data subjects of facilitated and free of charge consultation on the form and duration of the processing.
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
label: Livre acesso @pt-br

Free Bias
type: Class
subclass of: Cognitive Bias
is defined by: WOLMARANS, L.; VOORHOEVE, A. What makes personal data processing by social networking services permissible? Canadian Journal of Philosophy, v. 52, n. 1, p. 93–108, jan. 2022. DOI: 10.1017/can.2022.4. Available at: https://www.cambridge.org/core/journals/canadian-journal-of-philosophy/article/what-makes-personal-data-processing-by-social-networking-services-permissible/7D5435C95A593554009B60E2EBEAD6C0.
label: Viés de gratuidade @pt-br
definition: Consumers underweight the nonmonetary costs of acquiring goods or services with a zero monetary price.

Free Consent
type: Class
subclass of: BFO_0000019
is defined by: DROZD, O.; KIRRANE, S. A conceptual consent request framework for mobile devices. Information, v. 14, n. 9, p. 515, 2023. DOI: https://doi.org/10.3390/info14090515. Available at: https://www.mdpi.com/2078-2489/14/9/515.
label: Consentimento livre @pt-br
definition: Provide real choice to the data subjects

Good Faith
type: Class
subclass of: Principle under LGPD
comment: According to Article 6, Item X of the Brazilian General Data Protection Law (LGPD - Law No. 13,709/2018).
comment: The practice of the duty of respect, fairness, transparency, and loyalty in all legal relationships.
is defined by: ROSA, Marina da Silva. Boa-fé e probidade. In: ENCICLOPÉDIA JURÍDICA DA PUC/SP. São Paulo: PUC-SP, 2021. Available at: https://enciclopediajuridica.pucsp.br/verbete/597/edicao-3/boa-fe-e-probidade. @pt-br
label: Boa-Fé @pt-br

Granular Consent
type: Class
subclass of: BFO_0000019
is defined by: LUGATI, Lys Nunes; ALMEIDA, Juliana Evangelista de. Da evolução das legislações sobre proteção de dados: a necessidade de reavaliação do papel do consentimento como garantidor da autodeterminação informativa. Revista de Direito, Viçosa, v. 12, n. 2, p. 1–33, 2020. Available at: https://periodicos.ufv.br/revistadir/article/view/10597. @pt
label: Consentimento granular @pt-br
definition: Consent given in a segmented manner, at each stage of data flow and for each attempt to access personal data.

Consent given in a segmented manner.
type: Class
equivalent class: Class
  intersection of: Consent Given
  intersection of: Restriction
    on property: has quality
    some values from: Granular Consent
label: Consentimento granular dado @pt-br
label: Granular Consent Given

Hidden in Plain Sight
type: Class
subclass of: Dark Pattern Artifact
is defined by: EUROPEAN DATA PROTECTION BOARD (EDPB). Guidelines 03/2022 on deceptive design patterns in social media platform interfaces: how to recognise and avoid them. Versão final. Bruxelas, 24 fev. 2023. Available at: https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-032022-deceptive-design-patterns-social-media_en.
label: Escondido à vista de todos @pt-br
broader: Stirring
definition: Use a visual style or technique for information or data protection controls that nudges users toward less restrictive and thus more invasive options.

Hyperbolic Discounting
type: Class
subclass of: Limitation of Cognitive Capacity
is defined by: SEILING, L.; GSENGER, R.; MULUGETA, F.; HENNINGSEN, M.; MISCHAU, L.; SCHIRMBECK, M. Beware: processing of personal data—informed consent through risk communication. IEEE Transactions on Professional Communication, v. 67, n. 1, p. 4-25, mar. 2024. DOI: 10.1109/TPC.2024.3361328. Available at: https://ieeexplore.ieee.org/document/10472565.
label: Desconto hiperbólico @pt-br
definition: The overestimation of immediate consequences and discount of future consequences.

Inconsistent Interface
type: Class
subclass of: Fickle
is defined by: EUROPEAN DATA PROTECTION BOARD (EDPB). Guidelines 03/2022 on deceptive design patterns in social media platform interfaces: how to recognise and avoid them. Versão final. Bruxelas, 24 fev. 2023. Available at: https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-032022-deceptive-design-patterns-social-media_en.
label: Interface inconsistente @pt-br
definition: An interface is not consistent across different contexts or with users’ expectations.

Information Complexity
type: Class
subclass of: Limitation of Cognitive Capacity
is defined by: VAN OOIJEN, I.; VRABEC, H. U. Does the GDPR enhance consumers’ control over personal data? An analysis from a behavioural perspective. Journal of Consumer Policy, v. 42, p. 91–107, 2019. DOI: 10.1007/s10603-018-9399-7. Available at: https://link.springer.com/article/10.1007/s10603-018-9399-7. Acesso em: 03 maio 2025.
label: Complexidade de informação @pt-br
definition: The difficulty individuals face in understanding privacy-related information due to varying levels of literacy and the intricate nature of data policies.

Information Overload
type: Class
subclass of: Limitation of Cognitive Capacity
is defined by: VAN OOIJEN, I.; VRABEC, H. U. Does the GDPR enhance consumers’ control over personal data? An analysis from a behavioural perspective. Journal of Consumer Policy, v. 42, p. 91–107, 2019. DOI: 10.1007/s10603-018-9399-7. Available at: https://link.springer.com/article/10.1007/s10603-018-9399-7.
label: Sobrecarga de informação @pt-br
definition: When individuals are confronted with large amounts of complex and dispersed data, making it difficult for them to process, filter, and make informed decisions.

Informed Consent
type: Class
subclass of: BFO_0000019
is defined by: KURTEVA, Anelia; CHHETRI, Tek Raj; PANDIT, Harshvardhan J.; FENSEL, Anna. Consent through the lens of semantics: state of the art survey and best practices. Semantic Web, [s.l.], p. 1–27, 2021. Available at: https://doi.org/10.3233/SW-210438.
label: Consentimento informado @pt-br
definition: Requires provision of relevant information prior to consent.

Injury
type: Class
subclass of: Defects of the Legal Transaction
comment: Article 157 - Brazilian civil law.
is defined by: BRASIL. Lei nº 10.406, de 10 de janeiro de 2022. Institui o Código Civil. Brasília: Presidência da República, 2015. Available at: https://www.planalto.gov.br/ccivil_03/leis/2002/l10406compilada.htm. @pt-br
label: Lesão @pt-br
definition: When someone is obliged to a performance that is manifestly disproportionate to the value of the counter-performance.

Lacking Hierarchy
type: Class
subclass of: Fickle
is defined by: EUROPEAN DATA PROTECTION BOARD (EDPB). Guidelines 03/2022 on deceptive design patterns in social media platform interfaces: how to recognise and avoid them. Versão final. Bruxelas, 24 fev. 2023. Available at: https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-032022-deceptive-design-patterns-social-media_en.
label: Hierarquia ausente @pt-br
definition: Information related to data protection lacks hierarchy, making information appear several times and being presented in several ways.

Language Discontinuity
type: Class
subclass of: Fickle
is defined by: EUROPEAN DATA PROTECTION BOARD (EDPB). Guidelines 03/2022 on deceptive design patterns in social media platform interfaces: how to recognise and avoid them. Versão final. Bruxelas, 24 fev. 2023. Available at: https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-032022-deceptive-design-patterns-social-media_en.
label: Descontinuidade de linguagem @pt-br
definition: Information related to data protection is not provided in the official language(s) of the country where users live, whereas the service is.

Left In The Dark
type: Class
subclass of: Dark Pattern Artifact
is defined by: EUROPEAN DATA PROTECTION BOARD (EDPB). Guidelines 03/2022 on deceptive design patterns in social media platform interfaces: how to recognise and avoid them. Versão final. Bruxelas, 24 fev. 2023. Available at: https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-032022-deceptive-design-patterns-social-media_en.
label: Deixar no escuro @pt-br
definition: The interface is designed to hide information or data protection tools.

Legal Basis
type: Class
subclass of: information content entity
subclass of: Restriction
  on property: is stipulated in
  some values from: Legislation
label: Hipótese legal @pt-br
definition: A justification or lawful ground, stipulated by legislation, that permits the processing of personal data.

Legal Basis under LGPD
type: Class
subclass of: Legal Basis
subclass of: Restriction
  on property: is stipulated in
  has value: Brazilian General Data Protection Law
comment: Legal basis used to justify data processing or the use of technology in accordance with the LGPD.
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Disponível em: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. Acesso em: 6 fev. 2025. @pt-br
label: Base legal segundo LGPD @pt-br
preferred label: Hipótese legal segundo LGPD @pt-br

Legal Entity
type: Class
subclass of: Agent
is defined by: CAMARA DOS DEPUTADOS. Pessoa jurídica. Available at: https://www2.camara.leg.br/a-camara/estruturaadm/gestao-na-camara-dos-deputados/responsabilidade-social-e-ambiental/acessibilidade/glossarios/dicionario-de-libras/p/pessoa-juridica @pt-br
label: Pessoa jurídica @pt-br
definition: Entity constituted by individuals and recognized by the government as holder of rights and duties.

Legislation
type: Class
subclass of: document
label: Legislação @pt-br
definition: Rules or laws relating to a particular activity that are made by a government.

Liability
type: Class
subclass of: Principle under LGPD
comment: According to Article 6, Item X of the Brazilian General Data Protection Law (LGPD - Law No. 13,709/2018).
comment: The agent must prove the effectiveness of the measures in achieving compliance with personal data protection regulations.
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
label: Prestação de contas @pt-br

Limitation of Cognitive Capacity
type: Class
subclass of: BFO_0000016
subclass of: Restriction
  on property: restricts cognitive capacity
  some values from: Cognitive Capacity
comment: People have limitation of cognitive capacity that influence their rational decision and these limitations complicate the balanced benefit and risk assessment necessary for accurate decision-making processes.
is defined by: SEILING, L.; GSENGER, R.; MULUGETA, F.; HENNINGSEN, M.; MISCHAU, L.; SCHIRMBECK, M. Beware: processing of personal data—informed consent through risk communication. IEEE Transactions on Professional Communication, v. 67, n. 1, p. 4-25, mar. 2024. DOI: 10.1109/TPC.2024.3361328. Available at: https://ieeexplore.ieee.org/document/10472565.
label: Limitação da capacidade cognitiva @pt-br

Longer Than Necessary
type: Class
subclass of: Obstructing
is defined by: EUROPEAN DATA PROTECTION BOARD (EDPB). Guidelines 03/2022 on deceptive design patterns in social media platform interfaces: how to recognise and avoid them. Versão final. Bruxelas, 24 fev. 2023. Available at: https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-032022-deceptive-design-patterns-social-media_en.
label: Mais longo que o necessário @pt-br
definition: When users try to activate a control related to data protection, the user journey is made in a way that requires more steps from users, than the number of steps necessary for the activation of data invasive options.

Look Over There
type: Class
subclass of: Skipping
is defined by: EUROPEAN DATA PROTECTION BOARD (EDPB). Guidelines 03/2022 on deceptive design patterns in social media platform interfaces: how to recognise and avoid them. Versão final. Bruxelas, 24 fev. 2023. Available at: https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-032022-deceptive-design-patterns-social-media_en.
label: Olhe para lá @pt-br
definition: A data protection related action or information is put in competition with another element which can either be related to data protection or not.

Misleading Action
type: Class
subclass of: Obstructing
is defined by: EUROPEAN DATA PROTECTION BOARD (EDPB). Guidelines 03/2022 on deceptive design patterns in social media platform interfaces: how to recognise and avoid them. Versão final. Bruxelas, 24 fev. 2023. Available at: https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-032022-deceptive-design-patterns-social-media_en.
label: Ação enganosa @pt-br
definition: A discrepancy between information and actions available to users nudges them to do something they do not intend to.

Modification
type: Class
subclass of: Processing Operation
is defined by: BRASIL. Comitê Central de Governança de Dados. Guia de boas práticas: Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, DF: Secretaria de Governo Digital, 2024. Available at: https://www.gov.br/governodigital/pt-br/privacidade-e-seguranca/guias/guia_lgpd.pdf. @pt-br
label: Modificação @pt-br
definition: Altering data.

National authority
type: Class
subclass of: Public Legal Entity
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209.
label: Autoridade nacional @pt-br
definition: Body of the public administration responsible for ensuring, implementing and supervising compliance with the data protection law in all national territory.

Natural Person
type: Class
subclass of: Person
disjoint with: Private Legal Entity
disjoint with: Public Legal Entity
comment: Begins at birth with life and ends with death.
is defined by: BRASIL. Lei nº 10.406, de 10 de janeiro de 2022. Institui o Código Civil. Brasília: Presidência da República, 2015. Available at: https://www.planalto.gov.br/ccivil_03/leis/2002/l10406compilada.htm @pt
label: Pessoa natural @pt-br

Necessity
type: Class
subclass of: Principle under LGPD
comment: According to Article 6, Item X of the Brazilian General Data Protection Law (LGPD - Law No. 13,709/2018).
comment: Limitation of the processing to the minimum required for the accomplishment of its purposes.
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
label: Necessidade @pt-br

Non-Discrimination
type: Class
subclass of: Principle under LGPD
comment: According to Article 6, Item X of the Brazilian General Data Protection Law (LGPD - Law No. 13,709/2018).
comment: Impossibility of carrying out the processing for unlawful or abusive discriminatory purposes.
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
label: Não discriminação @pt-br

Data that is not personal.
type: Class
equivalent class: Class
  intersection of: Data
  intersection of: Class
    complement of: Personal Data
label: Dados não-pessoais @pt-br
label: Non Personal Data

Non Sensitive Personal Data
type: Class
equivalent class: Class
  intersection of: Personal Data
  intersection of: Class
    complement of: Sensitive Personal Data
disjoint with: Sensitive Personal Data
comment: Personal data that is not sensitive.
label: Dados pessoais não sensíveis @pt-br
alternative label: General personal data

Null Consent
type: Class
equivalent class: Class
  union of: Class
    complement of: Restriction
      on property: has quality
      some values from: Free Consent
  union of: Class
    complement of: Restriction
      on property: has quality
      some values from: Informed Consent
  union of: Class
    complement of: Restriction
      on property: has quality
      some values from: Unequivocal Consent
subclass of: Consent Invalidated
subclass of: Restriction
  on property: is status established by
  some values from: Consent Granting
disjoint with: Vitiated Consent
comment: Consent is considered null if the information provided to the data subject is misleading or abusive, or if it was not presented transparently, clearly, and unambiguously beforehand.
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
label: Consentimento nulo @pt-br

Obstructing
type: Class
subclass of: Dark Pattern Action
is defined by: EUROPEAN DATA PROTECTION BOARD (EDPB). Guidelines 03/2022 on deceptive design patterns in social media platform interfaces: how to recognise and avoid them. Versão final. Bruxelas, 24 fev. 2023. Available at: https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-032022-deceptive-design-patterns-social-media_en.
label: Obstrução @pt-br
definition: Hindering or blocking users in their process of becoming informed or managing their data by making the action hard or impossible to achieve.

Online Platform
type: Class
subclass of: information content entity
label: Plataforma online @pt-br
definition: A digital service or environment that facilitates interactions between users or between users and the service provider.

Opt-In
type: Class
subclass of: Consent Management
disjoint with: Opt-out
is defined by: ASSOCIAÇÃO BRASILEIRA DE NORMAS TÉCNICAS - ABNT. NBR ISO/IEC 29100:2024 - Tecnologia da informação - Técnicas de segurança - Arquitetura de privacidade. Rio de Janeiro, 2024. @pt-br
label: Opt-in @pt-br
definition: Process or type of policy whereby the personally identifiable information principal is required to take an action to express explicit consent.

Opt-out
type: Class
subclass of: Consent Management
comment: Opt-out @pt-br
is defined by: ASSOCIAÇÃO BRASILEIRA DE NORMAS TÉCNICAS - ABNT. NBR ISO/IEC 29100:2024 - Tecnologia da informação - Técnicas de segurança - Arquitetura de privacidade. Rio de Janeiro, 2024. @pt-br
definition: A process or type of policy whereby the personally identifiable information is required to take a separate action in order to withhold or withdraw consent, or oppose a specific type of processing.

Overloading
type: Class
subclass of: Dark Pattern Artifact
is defined by: EUROPEAN DATA PROTECTION BOARD (EDPB). Guidelines 03/2022 on deceptive design patterns in social media platform interfaces: how to recognise and avoid them. Versão final. Bruxelas, 24 fev. 2023. Available at: https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-032022-deceptive-design-patterns-social-media_en.
label: Sobrecarga @pt-br
definition: Large quantity of requests, information, options or possibilities.

Personal Data
type: Class
equivalent class: Class
  intersection of: Data
  intersection of: Restriction
    on property: is about person
    some values from: Natural Person
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
label: Dados pessoais @pt-br
definition: Information regarding an identified or identifiable natural person.

Platform Operator
type: Class
subclass of: Private Legal Entity
label: Operador de plataforma @pt-br
definition: A legal entity, such as an organization or company, that is responsible for the administration and operation of an online platform.

Policy Document
type: Class
subclass of: document
comment: A formal document that outlines the principles, rules, and guidelines an organization adheres to in a specific area, such as a privacy policy.
label: Documento de política @pt-br

Present Bias
type: Class
subclass of: Cognitive Bias
is defined by: WOLMARANS, L.; VOORHOEVE, A. What makes personal data processing by social networking services permissible? Canadian Journal of Philosophy, v. 52, n. 1, p. 93–108, jan. 2022. DOI: 10.1017/can.2022.4. Available at: https://www.cambridge.org/core/journals/canadian-journal-of-philosophy/article/what-makes-personal-data-processing-by-social-networking-services-permissible/7D5435C95A593554009B60E2EBEAD6C0.
label: Viés do presente @pt-br
definition: When considering the trade-off between well-being at the current moment and well-being at a later time, a person places more importance on their well-being in the present compared to how they would assess this trade-off at other times.

Prevention
type: Class
subclass of: Principle under LGPD
comment: According to Article 6, Item X of the Brazilian General Data Protection Law (LGPD - Law No. 13,709/2018).
comment: Adoption of measures to prevent the occurrence of damages due to the processing of personal data.
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
label: Prevenção @pt-br

Principle
type: Class
subclass of: information content entity
subclass of: Restriction
  on property: is stipulated in
  some values from: Legislation
is defined by: BRASIL. Senado Federal. Princípios jurídicos. Brasília: Subsecretaria de Edições Técnicas, 2001. (Texto para Discussão, n. 160). Available at: https://www2.senado.leg.br/bdsf/bitstream/handle/id/918/R160-19.pdf. @pt-br
label: Princípio @pt-br
definition: Primary and fundamental legal mandates.

Principle under LGPD
type: Class
subclass of: Principle
subclass of: Restriction
  on property: is stipulated in
  has value: Brazilian General Data Protection Law
comment: According to Article 6 of the Brazilian General Data Protection Law (LGPD - Law No. 13,709/2018).
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
label: Princípio conforme LGPD @pt-br

Privacy Maze
type: Class
subclass of: Overloading
is defined by: EUROPEAN DATA PROTECTION BOARD (EDPB). Guidelines 03/2022 on deceptive design patterns in social media platform interfaces: how to recognise and avoid them. Versão final. Bruxelas, 24 fev. 2023. Available at: https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-032022-deceptive-design-patterns-social-media_en.
label: Labirinto de privacidade @pt-br
definition: When users wish to obtain certain information or use a specific control or exercise a data subject right, it is particularly difficult for them to find it as they have to navigate through too many pages in order to obtain the relevant information or control.

Privacy Notice
type: Class
subclass of: Policy Document
is defined by: ROBOL, Marco; BREAUX, Travis D.; PAJA, Elda; GIORGINI, Paolo. Consent verification monitoring. ACM Transactions on Software Engineering and Methodology, v. 32, n. 1, art. 4, 29 jun. 2022. Available at: https://doi.org/10.1145/3490754.
label: Aviso de privacidade @pt-br
definition: Represents a notice or document outlining information regarding privacy.

Privacy Policy
type: Class
subclass of: Policy Document
subclass of: Restriction
  on property: provides notice about
  some values from: Processing
disjoint with: Terms and Conditions
is defined by: ROBOL, Marco; BREAUX, Travis D.; PAJA, Elda; GIORGINI, Paolo. Consent verification monitoring. ACM Transactions on Software Engineering and Methodology (TOSEM), v. 32, n. 1, 2022. DOI: 10.1145/3490754.
label: Política de Privacidade @pt-br
definition: A legal document organizations use to communicate their policy and practices to data subjects and users.

Privacy Preference
type: Class
subclass of: Control Mechanism
comment: Specific choices made by a personally identifiable information principal about how their information should be processed for a particular purpose.
is defined by: ASSOCIAÇÃO BRASILEIRA DE NORMAS TÉCNICAS - ABNT. NBR ISO/IEC 29100:2024 - Tecnologia da informação - Técnicas de segurança - Arquitetura de privacidade. Rio de Janeiro, 2024. @pt
label: Preferência de privacidade @pt

Private Legal Entity
type: Class
subclass of: Legal Entity
disjoint with: Public Legal Entity
label: Pessoa jurídica de direito privado @pt-br
definition: A legal entity governed by private law, typically established for private interests.

Processing
type: Class
subclass of: BFO_0000015
subclass of: Restriction
  on property: is performed on
  some values from: Class
    union of: Data that is not personal.
    union of: Personal Data
subclass of: Restriction
  on property: must observe
  some values from: Principle
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
label: Tratamento @pt-br
definition: Any operation performed on personal data.

Processing Based on Consent
type: Class
equivalent class: Class
  intersection of: Processing
  intersection of: Restriction
    on property: requires legal basis
    some values from: Class
      intersection of: Consent Status
      intersection of: Restriction
        on property: is granted by
        some values from: Data subject
      intersection of: Restriction
        on property: has consent status
        some values from: Consent Given
label: Tratamento com base no consentimento @pt-br
definition: A type of processing that is legally justified by a valid, given consent from the data subject.

Processing of Public Data
type: Class
equivalent class: Class
  intersection of: Processing
  intersection of: Restriction
    on property: is performed on
    some values from: Publicly Manifested Personal Data
subclass of: Restriction
  on property: is permitted under
  some values from: Consent Exemption
label: Tratamento de dados públicos @pt-br
definition: A type of processing performed on personal data that has been made manifestly public by the data subject, which may operate under a consent exemption.

Processing Operation
type: Class
subclass of: Processing
is defined by: EUROPEAN DATA PROTECTION BOARD (EDPB). Available at: https://www.edpb.europa.eu/sme-data-protection-guide/faq-frequently-asked-questions/answer/what-does-processing-personal-data_en
label: Operação de tratamento de dados @pt-br
definition: Any type of activity performed on or with individuals’ personal data.

Processor
type: Class
equivalent class: Class
  intersection of: Data Processing Agent
  intersection of: Restriction
    on property: has role
    some values from: Processor Role
subclass of: Restriction
  on property: processes personal data
  some values from: Personal Data
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
label: Operador @pt-br
definition: Natural person or legal entity of either public or private law that processes personal data on behalf of the controller.

Processor Role
type: Class
subclass of: BFO_0000023
subclass of: Restriction
  on property: is role of
  some values from: Processor
comment: A role for an agent who processes personal data on behalf of a controller.
label: Papel de operador @pt-br

Production
type: Class
subclass of: Processing Operation
is defined by: BRASIL. Comitê Central de Governança de Dados. Guia de boas práticas: Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, DF: Secretaria de Governo Digital, 2024. Available at: https://www.gov.br/governodigital/pt-br/privacidade-e-seguranca/guias/guia_lgpd.pdf. @pt-br
label: Produção @pt
definition: Creating goods and services based on data processing.

Profiling
type: Class
subclass of: Processing Operation
is defined by: RODRIGUES, Anna Luísa Braz. Os termos de uso do “Grindr” e a proteção de dados pessoais como direito de personalidade: a vulnerabilidade de usuários LGBTQIAPN+ em aplicativos de relacionamentos amorosos e sexuais. Revista do CAAP, Belo Horizonte, v. 29, n. 1, p. 1–26, 2024. Available at: https://doi.org/10.69881/rcaap.v29i1.52360. @pt-br
label: Perfilização @pt-br
alternative label: Perfilamento @pt-br
definition: Evaluate certain aspects related to a person, through an automated process of personal data processing.

Public Legal Entity
type: Class
subclass of: Legal Entity
label: Pessoa jurídica de direito público @pt-br
definition: A legal entity that is part of the direct or indirect public administration.

Publicly Manifested Personal Data
type: Class
equivalent class: Class
  intersection of: Personal Data
  intersection of: Restriction
    on property: is made manifestly public by
    some values from: Data subject
comment: Personal data that has been made manifestly public by the data subject, as described in Art. 7, § 4º of the LGPD.
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
label: Dados pessoais tornados públicos @pt-br

Purpose
type: Class
subclass of: Principle under LGPD
comment: According to Article 6, Item X of the Brazilian General Data Protection Law (LGPD - Law No. 13,709/2018).
comment: Processing for legitimate, specific and explicit purposes of which the data subject is informed.
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
label: Finalidade @pt-br

Rational Decision
type: Class
subclass of: Decision
is defined by: RICOU, M.; MARINA, S. Decision making and ethical reasoning in psychology. Psychology in Russia: State of the Art, v. 13, n. 1, p. 2–10, 2020. DOI: 10.11621/pir.2020.0101. Available at: https://psychologyinrussia.com/volumes/?article=8359.
label: Decisão racional @pt-br
definition: A decision based on a hypothetical-deductive model after all the necessary information has been obtained.

Reception
type: Class
subclass of: Processing Operation
is defined by: BRASIL. Comitê Central de Governança de Dados. Guia de boas práticas: Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, DF: Secretaria de Governo Digital, 2024. Available at: https://www.gov.br/governodigital/pt-br/privacidade-e-seguranca/guias/guia_lgpd.pdf. @pt-br
label: Recepção @pt-br
definition: Receiving data at the end of a transmission.

Reproduction
type: Class
subclass of: Processing Operation
is defined by: BRASIL. Comitê Central de Governança de Dados. Guia de boas práticas: Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, DF: Secretaria de Governo Digital, 2024. Available at: https://www.gov.br/governodigital/pt-br/privacidade-e-seguranca/guias/guia_lgpd.pdf. @pt-br
label: Reprodução @pt-br
definition: Copying pre-existing data.

Right
type: Class
subclass of: BFO_0000031
subclass of: Restriction
  on property: is stipulated in
  some values from: Legislation
label: Direito @pt-br
definition: A power or privilege held by the general public, usually as the result of a constitution, statute, regulation, or judicial precedent. Legal rights are enforceable by legal institutions and can be invoked in courts of law.

Right of Data Portability
type: Class
subclass of: Data Subject Right
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
label: Direito à portabilidade dos dados @pt-br
definition: The data subject has the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and has the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided.

Right of Erasure
type: Class
subclass of: Data Subject Right
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
label: Direito à eliminação @pt-br
definition: The data subject has the right to obtain erasure of their personal data.

Right to Access Personal Data
type: Class
subclass of: Data Subject Right
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
label: Direito ao acesso aos dados @pt-br
definition: The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data along with additional information about it.

Right to Anonymization
type: Class
subclass of: Data Subject Right
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
label: Direito à anonimização @pt-br
definition: The data subject has the right to data anonymization.

Right to Confirmation
type: Class
subclass of: Data Subject Right
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
label: Direito a confirmação @pt-br
definition: The data subject has the right to confirmation of the existence of processing.

Right to Information About Processing
type: Class
subclass of: Data Subject Right
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
label: Direito à informação sobre o tratamento @pt-br
definition: The right to basic information about processing provides data subjects with information about the processing activities involving their personal data.

Right to Object to Processing
type: Class
subclass of: Data Subject Right
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
label: Direito de opor-se ao tratamento @pt-br
definition: The data subject has the right to object to processing of their personal data.

Right to Personal Data Protection
type: Class
subclass of: Data Subject Right
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
label: Direito à proteção de dados pessoais @pt-br
definition: The right to the protection of personal data is ensured, including in digital media, as a fundamental right, according to Article 5, LXXIX, of the Federal Constitution.

Right to Rectification
type: Class
subclass of: Data Subject Right
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
label: Direito à correção @pt-br
definition: The data subject has a right to rectify their personal data.

Right to Restrict Processing
type: Class
subclass of: Data Subject Right
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
label: Direito ao bloqueio @pt-br
definition: The data subject has the right to restrict the processing of their personal data.

Right to Withdrawal
type: Class
subclass of: Data Subject Right
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
label: Direito à revogação @pt-br
definition: The data subject has the right to withdraw consent.

Security
type: Class
subclass of: Principle under LGPD
comment: According to Article 6, Item X of the Brazilian General Data Protection Law (LGPD - Law No. 13,709/2018).
comment: Use of technical and administrative measures able to protect personal data from unauthorized accesses and accidental or unlawful events of destruction, loss, alteration, communication or dissemination.
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
label: Segurança @pt-br

Sensitive Personal Data
type: Class
equivalent class: Class
  intersection of: Personal Data
  intersection of: Class
    union of: Restriction
      on property: Data category
      has value: biometric data
    union of: Restriction
      on property: Data category
      has value: genetic data
    union of: Restriction
      on property: Data category
      has value: health data
    union of: Restriction
      on property: Data category
      has value: political opinion
    union of: Restriction
      on property: Data category
      has value: racial or ethnic origin
    union of: Restriction
      on property: Data category
      has value: religious belief
    union of: Restriction
      on property: Data category
      has value: religious, philosophical or political organization affiliation
    union of: Restriction
      on property: Data category
      has value: sex life data
    union of: Restriction
      on property: Data category
      has value: trade union affiliation
subclass of: Personal Data
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
label: Dados pessoais sensíveis @pt-br
definition: Personal data concerning racial or ethnic origin, religious belief, political opinion, affiliation to trade unions or to a religious, philosophical or political organization, data regarding health or sex life, genetic or biometric data, when related to a natural person.

Skipping
type: Class
subclass of: Dark Pattern Artifact
is defined by: EUROPEAN DATA PROTECTION BOARD (EDPB). Guidelines 03/2022 on deceptive design patterns in social media platform interfaces: how to recognise and avoid them. Versão final. Bruxelas, 24 fev. 2023. Available at: https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-032022-deceptive-design-patterns-social-media_en.
label: Omissão @pt-br
definition: Designing the interface in a way that users forget or do not think about the data protection aspects.

State of Danger
type: Class
subclass of: Defects of the Legal Transaction
comment: Article 156 - Brazilian civil law.
is defined by: BRASIL. Lei nº 10.406, de 10 de janeiro de 2022. Institui o Código Civil. Brasília: Presidência da República, 2015. Available at: https://www.planalto.gov.br/ccivil_03/leis/2002/l10406compilada.htm. @pt-br
definition: When someone, pressed by the need to save themselves or a family member from serious harm, assumes an excessively burdensome obligation.
preferred label: Estado de perigo @pt-br

Stirring
type: Class
subclass of: Dark Pattern Action
is defined by: EUROPEAN DATA PROTECTION BOARD (EDPB). Guidelines 03/2022 on deceptive design patterns in social media platform interfaces: how to recognise and avoid them. Versão final. Bruxelas, 24 fev. 2023. Available at: https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-032022-deceptive-design-patterns-social-media_en.
label: Manipulação emocional @pt-br
definition: Affects the choice by appealing to their emotions or using visual nudges.

Storage
type: Class
subclass of: Processing Operation
is defined by: BRASIL. Comitê Central de Governança de Dados. Guia de boas práticas: Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, DF: Secretaria de Governo Digital, 2024. Available at: https://www.gov.br/governodigital/pt-br/privacidade-e-seguranca/guias/guia_lgpd.pdf. @pt-br
label: Armazenamento @pt-br
definition: Keeping or preserving data in a repository.

Terms and Conditions
type: Class
subclass of: document
is defined by: RODRIGUES, Anna Luísa Braz. Os termos de uso do “Grindr” e a proteção de dados pessoais como direito de personalidade: a vulnerabilidade de usuários LGBTQIAPN+ em aplicativos de relacionamentos amorosos e sexuais. Revista do CAAP, Belo Horizonte, v. 29, n. 1, p. 1–26, 2024. Available at: https://doi.org/10.69881/rcaap.v29i1.52360. @pt-br
label: Termos e condições de uso @pt-br
definition: Terms and Conditions of usage as provided to the user in agreement of provided service.

Third Party
type: Class
subclass of: Agent
comment: Someone who is not a party to a dispute or agreement.
is defined by: CORNELL LAW SCHOOL. Third party. Legal Information Institute, [s.d.]. Available at: https://www.law.cornell.edu/wex/third_party.
label: Terceiro @pt

Too Many Options
type: Class
subclass of: Overloading
is defined by: EUROPEAN DATA PROTECTION BOARD (EDPB). Guidelines 03/2022 on deceptive design patterns in social media platform interfaces: how to recognise and avoid them. Versão final. Bruxelas, 24 fev. 2023. Available at: https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-032022-deceptive-design-patterns-social-media_en.
label: Excesso de opções @pt-br
definition: Providing users with (too) many options to choose from.

Transfer
type: Class
subclass of: Processing Operation
is defined by: BRASIL. Comitê Central de Governança de Dados. Guia de boas práticas: Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, DF: Secretaria de Governo Digital, 2024. Available at: https://www.gov.br/governodigital/pt-br/privacidade-e-seguranca/guias/guia_lgpd.pdf. @pt-br
label: Transferência @pt-br
definition: Moving data from one storage area to another.

Transmission
type: Class
subclass of: Processing Operation
is defined by: BRASIL. Comitê Central de Governança de Dados. Guia de boas práticas: Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, DF: Secretaria de Governo Digital, 2024. Available at: https://www.gov.br/governodigital/pt-br/privacidade-e-seguranca/guias/guia_lgpd.pdf. @pt-br
label: Transmissão @pt-br
definition: Moving data between two points.

Transparency
type: Class
subclass of: Principle under LGPD
comment: According to Article 6, Item X of the Brazilian General Data Protection Law (LGPD - Law No. 13,709/2018).
comment: Guarantee to the data subjects of clear, accurate and easily accessible information on processing activities and the respective processing agents.
is defined by: BRASIL. Lei nº 13.709, de 14 de agosto de 2018. Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, 2018. Available at: https://www.in.gov.br/en/web/dou/-/lei-n-13.709-de-14-de-agosto-de-2018-174008209. @pt-br
label: Transparência @pt-br

Unequivocal Consent
type: Class
subclass of: BFO_0000019
is defined by: DROZD, O.; KIRRANE, S. A conceptual consent request framework for mobile devices. Information, v. 14, n. 9, p. 515, 2023. DOI: https://doi.org/10.3390/info14090515. Available at: https://www.mdpi.com/2078-2489/14/9/515.
label: Consentimento inequívoco @pt-br
alternative label: Consentimento explícito @pt-br
alternative label: Consentimento expresso @pt-br
definition: Deliberately granted by the data subjects

Usage
type: Class
subclass of: Processing Operation
is defined by: BRASIL. Comitê Central de Governança de Dados. Guia de boas práticas: Lei Geral de Proteção de Dados Pessoais (LGPD). Brasília, DF: Secretaria de Governo Digital, 2024. Available at: https://www.gov.br/governodigital/pt-br/privacidade-e-seguranca/guias/guia_lgpd.pdf. @pt-br
label: Utilização @pt-br
definition: Act or effect of utilizing data.

Vitiated Consent
type: Class
equivalent class: Class
  intersection of: Consent Invalidated
  intersection of: Restriction
    on property: is status established by
    some values from: Class
      intersection of: Consent Granting
      intersection of: Restriction
        on property: is influenced by defect
        some values from: Defects of the Legal Transaction
subclass of: Consent Invalidated
comment: When consent is obtained through error, fraud, coercion, injury, or state of danger
is defined by: LUGATI, L. N.; ALMEIDA, J. E. de. Da evolução das legislações sobre proteção de dados: a necessidade de reavaliação do papel do consentimento como garantidor da autodeterminação informativa. Revista de Direito, [S. l.], v. 12, n. 02, p. 01–33, 2020. DOI: 10.32361/2020120210597. Available at: https://periodicos.ufv.br/revistadir/article/view/10597. @pt-br
label: Vício do consentimento @pt-br

Status Invalid for Processing
type: Class
subclass of: Consent Status
disjoint with: Status Valid for Processing
comment: Represents consent states that are invalid for processing.
label: Status inválido para tratamento @pt-br

Status Valid for Processing
type: Class
subclass of: Consent Status
comment: Represents consent states that are valid for processing
label: Status válido para tratamento @pt-br

Consent Invalidated
type: Class
subclass of: Status Invalid for Processing
created: 2022-06-22
label: Consentimento invalidado @pt-br
term status: accepted
broader: ConsentStatusInvalidForProcessing
definition: The state where consent has been deemed to be invalid
in scheme: consent-status-classes
scope note: An example of this state is where an investigating authority or a court finds the collected consent did not meet requirements, and 'invalidates' both prior and future uses of it to carry out processing

Consent Status
type: Class
subclass of: BFO_0000016
created: 2022-06-22
label: Status do consentimento @pt-br
term status: accepted
definition: The state or status of 'consent' that provides information reflecting its operational status and validity for processing data
in scheme: consent-status-classes
scope note: States are useful as information artefacts to implement them in controlling processing, and to reflect the process and flow of obtaining and maintaining consent. For example, a database table that stores consent states for specific processing and can be queried to obtain them in an efficient manner. States are also useful in investigations to determine the use and validity of consenting practices

ANPD
type: NamedIndividual
type: National authority
comment: Agência Nacional de Proteção de Dados @pt

Brazilian Civil Code
type: NamedIndividual
type: Brazilian Legislation
comment: Brazilian Civil Code, law no. 10,406/2002
is defined by: BRASIL. Lei nº 10.406, de 10 de janeiro de 2022. Institui o Código Civil. Brasília: Presidência da República, 2015. Available at: https://www.planalto.gov.br/ccivil_03/leis/2002/l10406compilada.htm.
label: Código Civil @pt

Brazilian General Data Protection Law
type: NamedIndividual
type: Brazilian Legislation
comment: Brazilian General Data Protection Law, law no. 13,709/2018.
label: Lei Geral de Proteção de Dados Pessoais @pt