DPV-GDPR extends the [[[DPV]]] to provide taxonomies of concepts such as legal bases, rights, and data transfer tools as defined within the [[[GDPR]]].

The canonical URL for DPV-GDPR is https://w3id.org/dpv/dpv-gdpr which contains (this) specification. The namespace for DPV terms is https://w3id.org/dpv/dpv-gdpr#, the suggested prefix is dpv-gdpr, and this document along with source and releases are available at https://github.com/w3c/dpv.

DPV Family of Documents

Contributing: The DPVCG welcomes participation to improve the DPV and associated resources, including expansion or refinement of concepts, requesting information and applications, and addressing open issues. See contributing page for further information.

Introduction

The Data Privacy Vocabulary (DPV) provides terms to annotate and categorise instances of legally compliant personal data handling. In particular, the vocabulary provides LegalBasis and DataSubjectRight as top-level concepts representing the various legal bases for justifying processing of personal data and rights provided to the data subject respectively. Since these concepts are specifically defined within the scope of jurisdictional laws, their implementation is provided as a separate vocabulary that extends the DPV, thereby permitting continued usage of DPV as a jurisdiction-agnostic and generic vocabulary.

The DPV-GDPR vocabulary extends the concepts within DPV regarding legal bases, data subject rights, data transfer tools, data protection impact assessment (DPIA), and compliance, and provides a compatible extension to be used in combination with the DPV to represent GDPR-specific information.

Rights under GDPR

GDPR provides several rights to the data subject, whose applicability depends on the context and nature of processing taking place. DPV lists these rights at an abstract level as concepts along with their origin in specific clauses of the GDPR.

In addition to DPV's concepts regarding exercise of rights, DPV-GDPR provides additional concepts specific to the implementation of its rights. For example, [=SARNotice=] refers to the information provided in fulfilment of [=A15=] Right of Access, or using [=dcat:Resource=] to represent the dataset provided in fulfilment of [=A20=] Right to Data Portability.

Data Transfer Tools

GDPR regulates data transfers outside the EU/EEA based on jurisdictions the transfer is occurring within and the guarantees available regarding the protection of personal data and fundamental rights. To indicate the sufficiency of a data transfer being compatible and adherent to these requirements, the European Commission provides various 'data transfer tools' based on the legal bases provided within the GDPR. DPV-GDPR models these as follows.

The DPV-GDPR's concepts for transfer tools are currently symbolic, and do not provide a way to actually implement those tools. For example, to represent the information contained within a SCC or BCR. The DPVCG is interested in providing such implementations, and welcomes discussions and contributions for the same.

DPIA

[[GDPR]] Article 35 specifies the conditions and requirements associated with Data Protection Impact Assessments. DPV-GDPR expands on the DPIA concept defined as an Organisational Measure within DPV by considering a DPIA as consisting of the following iterative process, and providing statuses for documenting their progression and outputs:

  1. Identifying activities for which a DPIA is to be undertaken (represented using DPV and DPV-GDPR)
  2. Checking whether a DPIA is needed as per GDPR Art.35 and other jurisdictional requirements: the activitiy is [=DPIANecessityAssessment=] and its output is denoted using [=DPIANecessityStatus=]
  3. Conducting the DPIA to identify risks and impacts: the activity is [=DPIAProcedure=] and its output is denoted using [=DPIARiskStatus=]
  4. Determining the outcome based on risk mitigation: the activity is [=DPIAOutcome=] and its output is denoted using [=DPIAOutcomeStatus=]
  5. Determining whether processing should be permitted to continue or be carried out, with the outcome being denote using [=DPIAProcessingRecommendation=]
  6. Assessing whether processing is carried out in conformance with the DPIA, with the outcome being denoted using [=DPIAConformity=]

In addition to DPV's concepts for representing information about processing of personal data, DPV-GDPR also recommends using [[[DCT]]] concepts to represent relevant metadata, such as dates, identifiers, validity, etc.

The DPVCG is working on updating the [[[GUIDE-GDPR-DPIA]]] based on recent updates in DPV and DPV-GDPR. In addition to these, we are also working on providing concepts for expressing impacts and risk management within [[[RISK]]].

Compliance

The concepts in this section reflect the status of processing operations being in compliance with GDPR, by extending the ComplianceStatus from DPV for GDPR. It does not define the requirements for compliance itself.

Vocabulary Index

Classes

A13 Right to be Informed

Term A13 Prefix eu-gdpr
Label A13 Right to be Informed
IRI https://w3id.org/dpv/legal/eu/gdpr#A13
Type rdfs:Class, skos:Concept, dpv:Right
Broader/Parent types dpv:DataSubjectRightdpv:Right
Object of relation dpv:hasRight
Definition information to be provided where personal data is directly collected from data subject
Source GDPR Art.13
Date Created 2020-11-04
Contributors Beatriz Esteves, Georg Krog, Harshvardhan J. Pandit
Documented in Eu-gdpr Rights

A14 Right to be Informed

Term A14 Prefix eu-gdpr
Label A14 Right to be Informed
IRI https://w3id.org/dpv/legal/eu/gdpr#A14
Type rdfs:Class, skos:Concept, dpv:Right
Broader/Parent types dpv:DataSubjectRightdpv:Right
Object of relation dpv:hasRight
Definition information to be provided where personal data is collected from other sources
Source GDPR Art.14
Date Created 2020-11-04
Contributors Beatriz Esteves, Georg Krog, Harshvardhan J. Pandit
Documented in Eu-gdpr Rights

A15 Right of Access

Term A15 Prefix eu-gdpr
Label A15 Right of Access
IRI https://w3id.org/dpv/legal/eu/gdpr#A15
Type rdfs:Class, skos:Concept, dpv:Right
Broader/Parent types dpv:DataSubjectRightdpv:Right
Object of relation dpv:hasRight
Definition Right of access
Source GDPR Art.15
Date Created 2020-11-04
Contributors Beatriz Esteves, Georg Krog, Harshvardhan J. Pandit
Documented in Eu-gdpr Rights

A16 Right to Rectification

Term A16 Prefix eu-gdpr
Label A16 Right to Rectification
IRI https://w3id.org/dpv/legal/eu/gdpr#A16
Type rdfs:Class, skos:Concept, dpv:Right
Broader/Parent types dpv:DataSubjectRightdpv:Right
Object of relation dpv:hasRight
Definition Right to rectification
Source GDPR Art.16
Date Created 2020-11-04
Contributors Beatriz Esteves, Georg Krog, Harshvardhan J. Pandit
Documented in Eu-gdpr Rights

A17 Right to Erasure

Term A17 Prefix eu-gdpr
Label A17 Right to Erasure
IRI https://w3id.org/dpv/legal/eu/gdpr#A17
Type rdfs:Class, skos:Concept, dpv:Right
Broader/Parent types dpv:DataSubjectRightdpv:Right
Object of relation dpv:hasRight
Definition Right to erasure ('Right to be forgotten')
Source GDPR Art.17
Date Created 2020-11-04
Contributors Beatriz Esteves, Georg Krog, Harshvardhan J. Pandit
Documented in Eu-gdpr Rights

A18 Right to Restrict Processing

Term A18 Prefix eu-gdpr
Label A18 Right to Restrict Processing
IRI https://w3id.org/dpv/legal/eu/gdpr#A18
Type rdfs:Class, skos:Concept, dpv:Right
Broader/Parent types dpv:DataSubjectRightdpv:Right
Object of relation dpv:hasRight
Definition Right to restriction of processing
Source GDPR Art.18
Date Created 2020-11-04
Contributors Beatriz Esteves, Georg Krog, Harshvardhan J. Pandit
Documented in Eu-gdpr Rights

A19 Right to Rectification

Term A19 Prefix eu-gdpr
Label A19 Right to Rectification
IRI https://w3id.org/dpv/legal/eu/gdpr#A19
Type rdfs:Class, skos:Concept, dpv:Right
Broader/Parent types dpv:DataSubjectRightdpv:Right
Object of relation dpv:hasRight
Definition Right to be notified in case of rectification or erasure of personal data or restriction of processing
Source GDPR Art.19
Date Created 2020-11-04
Contributors Beatriz Esteves, Georg Krog, Harshvardhan J. Pandit
Documented in Eu-gdpr Rights

A20 Right to Data Portability

Term A20 Prefix eu-gdpr
Label A20 Right to Data Portability
IRI https://w3id.org/dpv/legal/eu/gdpr#A20
Type rdfs:Class, skos:Concept, dpv:Right
Broader/Parent types dpv:DataSubjectRightdpv:Right
Object of relation dpv:hasRight
Definition Right to data portability
Source GDPR Art.20
Date Created 2020-11-04
Contributors Beatriz Esteves, Georg Krog, Harshvardhan J. Pandit
Documented in Eu-gdpr Rights

A21 Right to object

Term A21 Prefix eu-gdpr
Label A21 Right to object
IRI https://w3id.org/dpv/legal/eu/gdpr#A21
Type rdfs:Class, skos:Concept, dpv:Right
Broader/Parent types dpv:DataSubjectRightdpv:Right
Object of relation dpv:hasRight
Definition Right to object to processing of personal data
Source GDPR Art.21
Date Created 2020-11-04
Contributors Beatriz Esteves, Georg Krog, Harshvardhan J. Pandit
Documented in Eu-gdpr Rights

A22 Right to object to automated decision making

Term A22 Prefix eu-gdpr
Label A22 Right to object to automated decision making
IRI https://w3id.org/dpv/legal/eu/gdpr#A22
Type rdfs:Class, skos:Concept, dpv:Right
Broader/Parent types dpv:DataSubjectRightdpv:Right
Object of relation dpv:hasRight
Definition Right not to be subject to a decision based solely on automated processing including profiling
Source GDPR Art.22
Date Created 2020-11-04
Contributors Beatriz Esteves, Georg Krog, Harshvardhan J. Pandit
Documented in Eu-gdpr Rights

Art 45(3) adequacy decision

Term A45-3 Prefix eu-gdpr
Label Art 45(3) adequacy decision
IRI https://w3id.org/dpv/legal/eu/gdpr#A45-3
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:DataTransferLegalBasisdpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition Personal data can flow freely from the EU to a third country with an Adequacy Decision without any further safeguard being necessary.
Usage Note Transfer from EU to a third country. Third country has Adequacy Decision.
Source GDPR Art.45-3
Date Created 2020-11-04
Date Modified 2021-09-08
Contributors Georg P Krog
Documented in Eu-gdpr Legal-basis-Data-transfer

Art 46(2-a) legal instrument

Term A46-2-a Prefix eu-gdpr
Label Art 46(2-a) legal instrument
IRI https://w3id.org/dpv/legal/eu/gdpr#A46-2-a
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:DataTransferLegalBasisdpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition A legally binding and enforceable instrument between public authorities or bodies
Usage Note Transfer from EU to a third country. Third country has no Adequacy Decision. Third country has appropriate safeguards. Transfer does not require specific authorisation from a Supervisor Authority.
Source GDPR Art.46-2a
Date Created 2020-11-04
Date Modified 2021-09-08
Contributors Georg P Krog
Documented in Eu-gdpr Legal-basis-Data-transfer

Art 46(2-b) Binding Corporate Rules (BCR)

Term A46-2-b Prefix eu-gdpr
Label Art 46(2-b) Binding Corporate Rules (BCR)
IRI https://w3id.org/dpv/legal/eu/gdpr#A46-2-b
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:DataTransferLegalBasisdpv:LegalBasis
Broader/Parent types eu-gdpr:BindingCorporateRuleseu-gdpr:DataTransferTooldpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Object of relation dpv:hasLegalBasis, dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure
Definition Binding corporate rules
Usage Note Transfer from EU to a third country. Third country has no Adequacy Decision. Third country has appropriate safeguards. Transfer does not require specific authorisation from a Supervisor Authority.
Source GDPR Art.46-2b
Date Created 2020-11-04
Date Modified 2021-09-08
Contributors Georg P Krog
Documented in Eu-gdpr Legal-basis-Data-transfer

Art 46(2-c) Standard Contractual Clauses (SCC) by EC

Term A46-2-c Prefix eu-gdpr
Label Art 46(2-c) Standard Contractual Clauses (SCC) by EC
IRI https://w3id.org/dpv/legal/eu/gdpr#A46-2-c
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types eu-gdpr:SCCByCommissioneu-gdpr:DataTransferTooldpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Broader/Parent types eu-gdpr:SCCByCommissioneu-gdpr:StandardContractualClausesdpv:Contractdpv:LegalAgreementdpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Broader/Parent types eu-gdpr:SCCByCommissioneu-gdpr:StandardContractualClauseseu-gdpr:DataTransferTooldpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Broader/Parent types dpv:DataTransferLegalBasisdpv:LegalBasis
Object of relation dpv:hasLegalBasis, dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure
Definition Standard data protection clauses adopted by the Commission
Usage Note Transfer from EU to a third country. Third country has no Adequacy Decision. Third country has appropriate safeguards. Transfer does not require specific authorisation from a Supervisor Authority.
Source GDPR Art.46-2c
Date Created 2020-11-04
Date Modified 2021-09-08
Contributors Georg P Krog
Documented in Eu-gdpr Legal-basis-Data-transfer

Art 46(2-d) Standard Contractual Clauses (SCC) by DPA

Term A46-2-d Prefix eu-gdpr
Label Art 46(2-d) Standard Contractual Clauses (SCC) by DPA
IRI https://w3id.org/dpv/legal/eu/gdpr#A46-2-d
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types eu-gdpr:SCCBySupervisoryAuthorityeu-gdpr:DataTransferTooldpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Broader/Parent types eu-gdpr:SCCBySupervisoryAuthorityeu-gdpr:StandardContractualClausesdpv:Contractdpv:LegalAgreementdpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Broader/Parent types eu-gdpr:SCCBySupervisoryAuthorityeu-gdpr:StandardContractualClauseseu-gdpr:DataTransferTooldpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Broader/Parent types dpv:DataTransferLegalBasisdpv:LegalBasis
Object of relation dpv:hasLegalBasis, dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure
Definition Standard data protection clauses adopted by a Supervisory Authority
Usage Note Transfer from EU to a third country. Third country has no Adequacy Decision. Third country has appropriate safeguards. Transfer does not require specific authorisation from a Supervisor Authority
Source GDPR Art.46-2d
Date Created 2020-11-04
Date Modified 2021-09-08
Contributors Georg P Krog
Documented in Eu-gdpr Legal-basis-Data-transfer

Art 46(2-e) code of conduct

Term A46-2-e Prefix eu-gdpr
Label Art 46(2-e) code of conduct
IRI https://w3id.org/dpv/legal/eu/gdpr#A46-2-e
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:DataTransferLegalBasisdpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition An approved code of conduct pursuant to GDPR Article 40 together with binding and enforceable commitments of the controller or processor in the third country to apply the appropriate safeguards, including as regards individuals´ rights
Usage Note Transfer from EU to a third country. Third country has no Adequacy Decision. Third country has appropriate safeguards. Transfer does not require specific authorisation from a Supervisor Authority.
Source GDPR Art.46-2e
Date Created 2020-11-04
Date Modified 2021-09-08
Contributors Georg P Krog
Documented in Eu-gdpr Legal-basis-Data-transfer

Art 46(2-f) certification

Term A46-2-f Prefix eu-gdpr
Label Art 46(2-f) certification
IRI https://w3id.org/dpv/legal/eu/gdpr#A46-2-f
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:DataTransferLegalBasisdpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition An approved certification mechanism pursuant to GDPR Article 42 together with binding and enforceable commitments of the controller or processor in the third country to appy the appropriate safeguards, including as regards individuals` rights
Usage Note Transfer from EU to a third country. Third country has no Adequacy Decision. Third country has appropriate safeguards. Transfer does not require specific authorisation from a Supervisor Authority.
Source GDPR Art.46-2f
Date Created 2020-11-04
Date Modified 2021-09-08
Contributors Georg P Krog
Documented in Eu-gdpr Legal-basis-Data-transfer

Art 46(3-a) contractual clauses

Term A46-3-a Prefix eu-gdpr
Label Art 46(3-a) contractual clauses
IRI https://w3id.org/dpv/legal/eu/gdpr#A46-3-a
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:DataTransferLegalBasisdpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition Contractual clauses with controller, processor or recipient of the personal data in the third country or the international organisation.
Usage Note Transfer from EU to a third country. Third country has no Adequacy Decision. Appropriate safeguards exist. Transfer does requires specific authorisation from a Supervisor Authority.
Source GDPR Art.46-3a
Date Created 2020-11-04
Date Modified 2021-09-08
Contributors Georg P Krog
Documented in Eu-gdpr Legal-basis-Data-transfer

Art 46(3-b) administrative arrangements

Term A46-3-b Prefix eu-gdpr
Label Art 46(3-b) administrative arrangements
IRI https://w3id.org/dpv/legal/eu/gdpr#A46-3-b
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:DataTransferLegalBasisdpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition Provisions to be inserted into administrative arrangements between public authorities or bodies which include enforceable and effective data subject rights
Usage Note Transfer from EU to a third country. Third country has no Adequacy Decision. Appropriate safeguards exist. Transfer does requires specific authorisation from a Supervisor Authority.
Source GDPR Art.46-3b
Date Created 2020-11-04
Date Modified 2021-09-08
Contributors Georg P Krog
Documented in Eu-gdpr Legal-basis-Data-transfer

Art 49(1-a) explicit consent

Term A49-1-a Prefix eu-gdpr
Label Art 49(1-a) explicit consent
IRI https://w3id.org/dpv/legal/eu/gdpr#A49-1-a
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:DataTransferLegalBasisdpv:LegalBasis
Broader/Parent types dpv:ExplicitlyExpressedConsentdpv:ExpressedConsentdpv:InformedConsentdpv:Consentdpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition The data subject has explicitly consented to the proposed transfer, after having been informed of the possible risks of such transfers for the data subject due to the absence of an adequacy decision and appropriate safeguards.
Usage Note Transfer from EU to a third country. Third country has no Adequacy Decision. Appropriate safeguards do not exist.
Source GDPR Art.49-1a
Date Created 2020-11-04
Date Modified 2022-06-22
Contributors Georg P Krog
Documented in Eu-gdpr Legal-basis-Data-transfer

Art 49(1-b) performance of contract

Term A49-1-b Prefix eu-gdpr
Label Art 49(1-b) performance of contract
IRI https://w3id.org/dpv/legal/eu/gdpr#A49-1-b
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:Contractdpv:LegalAgreementdpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Broader/Parent types dpv:DataTransferLegalBasisdpv:LegalBasis
Object of relation dpv:hasLegalBasis, dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure
Definition The transfer is necessary for the performance of a contract between the data subject and controller or the implementation of pre-contractual measures taken at the data subject´s request.
Usage Note Transfer from EU to a third country. Third country has no Adequacy Decision. Appropriate safeguards do not exist.
Source GDPR Art.49-1b
Date Created 2020-11-04
Date Modified 2021-09-08
Contributors Georg P Krog
Documented in Eu-gdpr Legal-basis-Data-transfer

Art 49(1-c) conclusion of contract

Term A49-1-c Prefix eu-gdpr
Label Art 49(1-c) conclusion of contract
IRI https://w3id.org/dpv/legal/eu/gdpr#A49-1-c
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:Contractdpv:LegalAgreementdpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Broader/Parent types dpv:DataTransferLegalBasisdpv:LegalBasis
Object of relation dpv:hasLegalBasis, dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure
Definition The transfer is necessary for the conclusion or performance of a contract concluded in the interest of the data subject and controller and another natural or legal person.
Usage Note Transfer from EU to a third country. Third country has no Adequacy Decision. Appropriate safeguards do not exist.
Source GDPR Art.49-1c
Date Created 2020-11-04
Date Modified 2021-09-08
Contributors Georg P Krog
Documented in Eu-gdpr Legal-basis-Data-transfer

Art 49(1-d) public interest

Term A49-1-d Prefix eu-gdpr
Label Art 49(1-d) public interest
IRI https://w3id.org/dpv/legal/eu/gdpr#A49-1-d
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:DataTransferLegalBasisdpv:LegalBasis
Broader/Parent types dpv:PublicInterestdpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition The transfer is necessary for important reasons of public interest.
Usage Note Transfer from EU to a third country. Third country has no Adequacy Decision. Appropriate safeguards do not exist.
Source GDPR Art.49-1d
Date Created 2020-11-04
Date Modified 2021-09-08
Contributors Georg P Krog
Documented in Eu-gdpr Legal-basis-Data-transfer

Art 49(1-e) legal claims

Term A49-1-e Prefix eu-gdpr
Label Art 49(1-e) legal claims
IRI https://w3id.org/dpv/legal/eu/gdpr#A49-1-e
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:DataTransferLegalBasisdpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition The transfer is necessary for the establishment, exercise or defence of legal claims.
Usage Note Transfer from EU to a third country. Third country has no Adequacy Decision. Appropriate safeguards do not exist.
Source GDPR Art.49-1e
Date Created 2020-11-04
Date Modified 2021-09-08
Contributors Georg P Krog
Documented in Eu-gdpr Legal-basis-Data-transfer

Art 49(1-f) protect vital interests

Term A49-1-f Prefix eu-gdpr
Label Art 49(1-f) protect vital interests
IRI https://w3id.org/dpv/legal/eu/gdpr#A49-1-f
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:DataTransferLegalBasisdpv:LegalBasis
Broader/Parent types dpv:VitalInterestOfNaturalPersondpv:VitalInterestdpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition The transfer is necessary in order to protect the vital interests of the data subject or of other persons, where the person is physically or legally incapable of giving consent.
Usage Note Transfer from EU to a third country. Third country has no Adequacy Decision. Appropriate safeguards do not exist.
Source GDPR Art.49-1f
Date Created 2020-11-04
Date Modified 2021-09-08
Contributors Georg P Krog
Documented in Eu-gdpr Legal-basis-Data-transfer

Art 49(1-g) public register

Term A49-1-g Prefix eu-gdpr
Label Art 49(1-g) public register
IRI https://w3id.org/dpv/legal/eu/gdpr#A49-1-g
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:DataTransferLegalBasisdpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition The transfer is made from a register which according to Union or Member State law is intended to provide information to the public in general or by any person who can demonstrate a legitimate interest, but only to the extent that the conditions laid down by Union or Member State law for consultation are fulfilled in the particular case.
Usage Note Transfer from EU to a third country. Third country has not Adequacy Decision. Appropriate safeguards do not exist.
Source GDPR Art.49-1g
Date Created 2020-11-04
Date Modified 2021-09-08
Contributors Georg P Krog
Documented in Eu-gdpr Legal-basis-Data-transfer

Art 49(2) legitimate interests

Term A49-2 Prefix eu-gdpr
Label Art 49(2) legitimate interests
IRI https://w3id.org/dpv/legal/eu/gdpr#A49-2
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:LegitimateInterestdpv:LegalBasis
Broader/Parent types dpv:DataTransferLegalBasisdpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition The transfer is not repetetive, concerns only a limited number of data subjects, is necessary for the purposes of compelling legitimate interests pursued by controller which are not overridden by the interests or rights and freedoms of the data subject, and controller has assessed all the circumstances surrounding the data transfer and have on the basis of that assessment provided suitable safeguards with regard to the protection of personal data.
Usage Note Transfer from EU to a third country. Third country has no Adequacy Decision. Appropriate safeguards do not exist and no other options apply.
Source GDPR Art.49-2
Date Created 2020-11-04
Date Modified 2021-09-08
Contributors Georg P Krog
Documented in Eu-gdpr Legal-basis-Data-transfer

Art.6(1-a) consent

Term A6-1-a Prefix eu-gdpr
Label Art.6(1-a) consent
IRI https://w3id.org/dpv/legal/eu/gdpr#A6-1-a
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:ExpressedConsentdpv:InformedConsentdpv:Consentdpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition Legal basis based on data subject's given consent to the processing of his or her personal data for one or more specific purposes
Usage Note Consent can be explicit or non-explicit. To express these specifically, see the explicit and non-explicit variations provided for Art.6-1a.
Source GDPR Art.6-1a
Date Created 2022-09-07
Date Modified 2022-11-24
Contributors Harshvardhan J. Pandit
Documented in Eu-gdpr Legal-basis, Eu-gdpr Legal-basis-Rights-mapping

Art 6(1-b) contract

Term A6-1-b Prefix eu-gdpr
Label Art 6(1-b) contract
IRI https://w3id.org/dpv/legal/eu/gdpr#A6-1-b
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:Contractdpv:LegalAgreementdpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Object of relation dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure
Definition Legal basis based on performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract
Source GDPR Art.6-1b
Date Created 2019-04-05
Date Modified 2022-11-24
Contributors Eva Schlehahn, Bud Bruegger, Harshvardhan J. Pandit
Documented in Eu-gdpr Legal-basis, Eu-gdpr Legal-basis-Rights-mapping

Art 6(1-b) contract performance

Term A6-1-b-contract-performance Prefix eu-gdpr
Label Art 6(1-b) contract performance
IRI https://w3id.org/dpv/legal/eu/gdpr#A6-1-b-contract-performance
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types eu-gdpr:A6-1-bdpv:Contractdpv:LegalAgreementdpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Broader/Parent types dpv:ContractPerformancedpv:Contractdpv:LegalAgreementdpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Object of relation dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure
Definition Legal basis based on performance of a contract to which the data subject is party
Source GDPR Art.6-1b
Date Created 2022-11-24
Date Modified 2022-11-24
Contributors Georg P Krog
Documented in Eu-gdpr Legal-basis, Eu-gdpr Legal-basis-Rights-mapping

Art 6(1-b) enter into contract

Term A6-1-b-enter-into-contract Prefix eu-gdpr
Label Art 6(1-b) enter into contract
IRI https://w3id.org/dpv/legal/eu/gdpr#A6-1-b-enter-into-contract
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:EnterIntoContractdpv:Contractdpv:LegalAgreementdpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Broader/Parent types eu-gdpr:A6-1-bdpv:Contractdpv:LegalAgreementdpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Object of relation dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure
Definition Legal basis based on taking steps at the request of the data subject prior to entering into a contract
Source GDPR Art.6-1b
Date Created 2022-11-24
Date Modified 2022-11-24
Contributors Georg P Krog
Documented in Eu-gdpr Legal-basis, Eu-gdpr Legal-basis-Rights-mapping

Art 6(1-c) legal obligation

Term A6-1-c Prefix eu-gdpr
Label Art 6(1-c) legal obligation
IRI https://w3id.org/dpv/legal/eu/gdpr#A6-1-c
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:LegalObligationdpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition Legal basis based on compliance with a legal obligation to which the controller is subject
Source GDPR Art.6-1c
Date Created 2019-04-05
Date Modified 2022-11-24
Contributors Eva Schlehahn, Bud Bruegger, Harshvardhan J. Pandit
Documented in Eu-gdpr Legal-basis, Eu-gdpr Legal-basis-Rights-mapping

Art 6(1-d) protect vital interests

Term A6-1-d Prefix eu-gdpr
Label Art 6(1-d) protect vital interests
IRI https://w3id.org/dpv/legal/eu/gdpr#A6-1-d
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:VitalInterestdpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition Legal basis based on protecting the vital interests of the data subject or of another natural person
Source GDPR Art.6-1d
Date Created 2019-04-05
Date Modified 2022-11-24
Contributors Eva Schlehahn, Bud Bruegger, Harshvardhan J. Pandit
Documented in Eu-gdpr Legal-basis, Eu-gdpr Legal-basis-Rights-mapping

Art 6(1-d) protect vital interests of data subject

Term A6-1-d-data-subject Prefix eu-gdpr
Label Art 6(1-d) protect vital interests of data subject
IRI https://w3id.org/dpv/legal/eu/gdpr#A6-1-d-data-subject
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types eu-gdpr:A6-1-ddpv:VitalInterestdpv:LegalBasis
Broader/Parent types dpv:VitalInterestOfDataSubjectdpv:VitalInterestOfNaturalPersondpv:VitalInterestdpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition Legal basis based on protecting the vital interests of the data subject
Source GDPR Art.6-1d
Date Created 2022-11-24
Date Modified 2022-11-24
Contributors Georg P Krog
Documented in Eu-gdpr Legal-basis, Eu-gdpr Legal-basis-Rights-mapping

Art 6(1-d) protect vital interests of natural person

Term A6-1-d-natual-person Prefix eu-gdpr
Label Art 6(1-d) protect vital interests of natural person
IRI https://w3id.org/dpv/legal/eu/gdpr#A6-1-d-natual-person
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:VitalInterestOfNaturalPersondpv:VitalInterestdpv:LegalBasis
Broader/Parent types eu-gdpr:A6-1-ddpv:VitalInterestdpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition Legal basis based on protecting the vital interests of another natural person that is not the data subject
Source GDPR Art.6-1d
Date Created 2022-11-24
Date Modified 2022-11-24
Contributors Georg P Krog
Documented in Eu-gdpr Legal-basis, Eu-gdpr Legal-basis-Rights-mapping

Art 6(1-e) public interest or official authority

Term A6-1-e Prefix eu-gdpr
Label Art 6(1-e) public interest or official authority
IRI https://w3id.org/dpv/legal/eu/gdpr#A6-1-e
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:OfficialAuthorityOfControllerdpv:LegalBasis
Broader/Parent types dpv:PublicInterestdpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition Legal basis based on performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
Source GDPR Art.6-1e
Date Created 2019-04-05
Date Modified 2022-11-24
Contributors Eva Schlehahn, Bud Bruegger, Harshvardhan J. Pandit
Documented in Eu-gdpr Legal-basis, Eu-gdpr Legal-basis-Rights-mapping

Art 6(1-e) official authority

Term A6-1-e-official-authority Prefix eu-gdpr
Label Art 6(1-e) official authority
IRI https://w3id.org/dpv/legal/eu/gdpr#A6-1-e-official-authority
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types eu-gdpr:A6-1-edpv:OfficialAuthorityOfControllerdpv:LegalBasis
Broader/Parent types eu-gdpr:A6-1-edpv:PublicInterestdpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition Legal basis based on the exercise of official authority vested in the controller
Source GDPR Art.6-1e
Date Created 2022-08-24
Date Modified 2022-11-24
Contributors Harshvardhan J. Pandit
Documented in Eu-gdpr Legal-basis, Eu-gdpr Legal-basis-Rights-mapping

Art 6(1-e) public interest

Term A6-1-e-public-interest Prefix eu-gdpr
Label Art 6(1-e) public interest
IRI https://w3id.org/dpv/legal/eu/gdpr#A6-1-e-public-interest
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types eu-gdpr:A6-1-edpv:OfficialAuthorityOfControllerdpv:LegalBasis
Broader/Parent types eu-gdpr:A6-1-edpv:PublicInterestdpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition Legal basis based on performance of a task carried out in the public interest
Source GDPR Art.6-1e
Date Created 2022-08-24
Date Modified 2022-11-24
Contributors Harshvardhan J. Pandit
Documented in Eu-gdpr Legal-basis, Eu-gdpr Legal-basis-Rights-mapping

Art 6(1-f) legitimate interest

Term A6-1-f Prefix eu-gdpr
Label Art 6(1-f) legitimate interest
IRI https://w3id.org/dpv/legal/eu/gdpr#A6-1-f
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:LegitimateInterestdpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition Legal basis based on the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child
Source GDPR Art.6-1f
Date Created 2019-04-05
Date Modified 2022-11-24
Contributors Eva Schlehahn, Bud Bruegger, Harshvardhan J. Pandit
Documented in Eu-gdpr Legal-basis, Eu-gdpr Legal-basis-Rights-mapping

Art 6(1-f) legitimate interest of controller

Term A6-1-f-controller Prefix eu-gdpr
Label Art 6(1-f) legitimate interest of controller
IRI https://w3id.org/dpv/legal/eu/gdpr#A6-1-f-controller
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types eu-gdpr:A6-1-fdpv:LegitimateInterestdpv:LegalBasis
Broader/Parent types dpv:LegitimateInterestOfControllerdpv:LegitimateInterestdpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition Legal basis based on the purposes of the legitimate interests pursued by the controller, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child
Source GDPR Art.6-1f
Date Created 2022-11-24
Date Modified 2022-11-24
Contributors Georg P Krog
Documented in Eu-gdpr Legal-basis, Eu-gdpr Legal-basis-Rights-mapping

Art 6(1-f) legitimate interest of third party

Term A6-1-f-third-party Prefix eu-gdpr
Label Art 6(1-f) legitimate interest of third party
IRI https://w3id.org/dpv/legal/eu/gdpr#A6-1-f-third-party
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:LegitimateInterestOfThirdPartydpv:LegitimateInterestdpv:LegalBasis
Broader/Parent types eu-gdpr:A6-1-fdpv:LegitimateInterestdpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition Legal basis based on the purposes of the legitimate interests pursued by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child
Source GDPR Art.6-1f
Date Created 2022-11-24
Date Modified 2022-11-24
Contributors Georg P Krog
Documented in Eu-gdpr Legal-basis, Eu-gdpr Legal-basis-Rights-mapping

A7-3 Right to Withdraw Consent

Term A7-3 Prefix eu-gdpr
Label A7-3 Right to Withdraw Consent
IRI https://w3id.org/dpv/legal/eu/gdpr#A7-3
Type rdfs:Class, skos:Concept, dpv:Right
Broader/Parent types dpv:DataSubjectRightdpv:Right
Object of relation dpv:hasRight
Definition Right to withdraw consent at any time
Source GDPR Art.7-3
Date Created 2020-11-04
Contributors Beatriz Esteves, Georg Krog, Harshvardhan J. Pandit
Documented in Eu-gdpr Rights

A77 Right to Complaint

Term A77 Prefix eu-gdpr
Label A77 Right to Complaint
IRI https://w3id.org/dpv/legal/eu/gdpr#A77
Type rdfs:Class, skos:Concept, dpv:Right
Broader/Parent types dpv:DataSubjectRightdpv:Right
Object of relation dpv:hasRight
Definition Right to lodge a complaint with a supervisory authority
Source GDPR Art.77
Date Created 2020-11-04
Contributors Beatriz Esteves, Georg Krog, Harshvardhan J. Pandit
Documented in Eu-gdpr Rights

Art 9(2-a) explicit consent

Term A9-2-a Prefix eu-gdpr
Label Art 9(2-a) explicit consent
IRI https://w3id.org/dpv/legal/eu/gdpr#A9-2-a
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:ExplicitlyExpressedConsentdpv:ExpressedConsentdpv:InformedConsentdpv:Consentdpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition explicit consent with special categories of data
Source GDPR Art.9-2a
Date Created 2019-04-05
Date Modified 2021-09-08
Contributors Eva Schlehahn, Bud Bruegger
Documented in Eu-gdpr Legal-basis-Special

Art 9(2-b) employment, social security, social protection law

Term A9-2-b Prefix eu-gdpr
Label Art 9(2-b) employment, social security, social protection law
IRI https://w3id.org/dpv/legal/eu/gdpr#A9-2-b
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition employment and social security and social protection law
Source GDPR Art.9-2b
Date Created 2019-04-05
Contributors Eva Schlehahn, Bud Bruegger
Documented in Eu-gdpr Legal-basis-Special

Art 9(2-c) protect vital interest

Term A9-2-c Prefix eu-gdpr
Label Art 9(2-c) protect vital interest
IRI https://w3id.org/dpv/legal/eu/gdpr#A9-2-c
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:VitalInterestdpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition protection of the vital interests
Source GDPR Art.9-2c
Date Created 2019-04-05
Date Modified 2021-09-08
Contributors Eva Schlehahn, Bud Bruegger
Documented in Eu-gdpr Legal-basis-Special

Art 9(2-d) legitimate activities

Term A9-2-d Prefix eu-gdpr
Label Art 9(2-d) legitimate activities
IRI https://w3id.org/dpv/legal/eu/gdpr#A9-2-d
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:LegitimateInterestdpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition legitimate activities with appropriate safeguards by a foundation, association or any other not-for-profit body with a political, philosophical, religious or trade union aim and on condition that the processing relates solely to the members or to former members of the body or to persons who have regular contact with it in connection with its purposes and that the personal data are not disclosed outside that body without the consent of the data subjects;
Source GDPR Art.9-2d
Date Created 2019-04-05
Date Modified 2021-09-08
Contributors Eva Schlehahn, Bud Bruegger
Documented in Eu-gdpr Legal-basis-Special

Art 9(2-e) data made public

Term A9-2-e Prefix eu-gdpr
Label Art 9(2-e) data made public
IRI https://w3id.org/dpv/legal/eu/gdpr#A9-2-e
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition data manifestly made public by the data subject
Source GDPR Art.9-2e
Date Created 2019-04-05
Contributors Eva Schlehahn, Bud Bruegger
Documented in Eu-gdpr Legal-basis-Special

Art 9(2-f) judicial process

Term A9-2-f Prefix eu-gdpr
Label Art 9(2-f) judicial process
IRI https://w3id.org/dpv/legal/eu/gdpr#A9-2-f
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition establishment, exercise or defence of legal claims / courts acting in their judicial capacity
Source GDPR Art.9-2f
Date Created 2019-04-05
Contributors Eva Schlehahn, Bud Bruegger
Documented in Eu-gdpr Legal-basis-Special

Art 9(2-g) public interest

Term A9-2-g Prefix eu-gdpr
Label Art 9(2-g) public interest
IRI https://w3id.org/dpv/legal/eu/gdpr#A9-2-g
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:PublicInterestdpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition substantial public interest, on the basis of Union or Member State law
Source GDPR Art.9-2g
Date Created 2019-04-05
Date Modified 2021-09-08
Contributors Eva Schlehahn, Bud Bruegger
Documented in Eu-gdpr Legal-basis-Special

Art 9(2-h) health & medicine

Term A9-2-h Prefix eu-gdpr
Label Art 9(2-h) health & medicine
IRI https://w3id.org/dpv/legal/eu/gdpr#A9-2-h
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services on the basis of Union or Member State law or pursuant to contract with a health professional and subject to the conditions and safeguards referred to in paragraph 3
Source GDPR Art.9-2h
Date Created 2019-04-05
Contributors Eva Schlehahn, Bud Bruegger
Documented in Eu-gdpr Legal-basis-Special

Art 9(2-i) public interest in public health

Term A9-2-i Prefix eu-gdpr
Label Art 9(2-i) public interest in public health
IRI https://w3id.org/dpv/legal/eu/gdpr#A9-2-i
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:PublicInterestdpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition public interest in public health
Source GDPR Art.9-2i
Date Created 2019-04-05
Date Modified 2021-09-08
Contributors Eva Schlehahn, Bud Bruegger
Documented in Eu-gdpr Legal-basis-Special

Art 9(2-j) public interest, scientific research, statistical purpose

Term A9-2-j Prefix eu-gdpr
Label Art 9(2-j) public interest, scientific research, statistical purpose
IRI https://w3id.org/dpv/legal/eu/gdpr#A9-2-j
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:PublicInterestdpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition public interest, scientific or historical research purposes or statistical purposes based on Union or Member State law
Source GDPR Art.9-2j
Date Created 2019-04-05
Date Modified 2021-09-08
Contributors Eva Schlehahn, Bud Bruegger
Documented in Eu-gdpr Legal-basis-Special

AdHoc Contractual Clauses

Term AdHocContractualClauses Prefix eu-gdpr
Label AdHoc Contractual Clauses
IRI https://w3id.org/dpv/legal/eu/gdpr#AdHocContractualClauses
Type rdfs:Class, skos:Concept, dpv:OrganisationalMeasure
Broader/Parent types eu-gdpr:DataTransferTooldpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Broader/Parent types dpv:Contractdpv:LegalAgreementdpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Object of relation dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure
Definition Contractual Clauses not drafted by the EU Commission, e.g. by the Controller
Source EDPB Recommendations 01/2020 on Supplementary Measures and Transfer Tools
Date Created 2021-09-22
Contributors Harshvardhan J. Pandit
Documented in Eu-gdpr Data-transfers

Binding Corporate Rules (BCR)

Term BindingCorporateRules Prefix eu-gdpr
Label Binding Corporate Rules (BCR)
IRI https://w3id.org/dpv/legal/eu/gdpr#BindingCorporateRules
Type rdfs:Class, skos:Concept, dpv:OrganisationalMeasure
Broader/Parent types eu-gdpr:DataTransferTooldpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Object of relation dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure
Definition Binding corporate rules (BCR) are data protection policies adhered to by companies established in the EU for transfers of personal data outside the EU within a group of undertakings or enterprises.
Source GDPR Art.4-20
Date Created 2021-09-22
Contributors David Hickey, Paul Ryan, Georg P Krog, Harshvardhan J. Pandit
Documented in Eu-gdpr Data-transfers

Certification Mechanisms for Data Transfers

Term CertificationMechanismsForDataTransfers Prefix eu-gdpr
Label Certification Mechanisms for Data Transfers
IRI https://w3id.org/dpv/legal/eu/gdpr#CertificationMechanismsForDataTransfers
Type rdfs:Class, skos:Concept, dpv:OrganisationalMeasure
Broader/Parent types eu-gdpr:DataTransferTooldpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Object of relation dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure
Definition Certification and its binding or specified mechanisms intended to provide sufficient safeguards for data transfers
Source EDPB Recommendations 01/2020 on Supplementary Measures and Transfer Tools
Date Created 2021-09-22
Contributors Harshvardhan J. Pandit
Documented in Eu-gdpr Data-transfers

Codes of Conduct for Data Transfers

Term CodesOfConductForDataTransfers Prefix eu-gdpr
Label Codes of Conduct for Data Transfers
IRI https://w3id.org/dpv/legal/eu/gdpr#CodesOfConductForDataTransfers
Type rdfs:Class, skos:Concept, dpv:OrganisationalMeasure
Broader/Parent types eu-gdpr:DataTransferTooldpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Object of relation dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure
Definition Codes of Conduct that outline sufficient safeguards for carrying out data transfers
Source EDPB Recommendations 01/2020 on Supplementary Measures and Transfer Tools
Date Created 2021-09-22
Contributors Harshvardhan J. Pandit
Documented in Eu-gdpr Data-transfers

Data Transfer Tool

Term DataTransferTool Prefix eu-gdpr
Label Data Transfer Tool
IRI https://w3id.org/dpv/legal/eu/gdpr#DataTransferTool
Type rdfs:Class, skos:Concept, dpv:OrganisationalMeasure
Broader/Parent types dpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Object of relation dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure
Definition A legal instrument or tool intended to assist or justify data transfers
Source GDPR Art.46,EDPB Recommendations 01/2020 on Supplementary Measures and Transfer Tools
Date Created 2021-09-22
Date Modified 2023-10-30
Contributors David Hickey, Harshvardhan J. Pandit
Documented in Eu-gdpr Data-transfers

Direct Data Collection Notice

Term DirectDataCollectionNotice Prefix eu-gdpr
Label Direct Data Collection Notice
IRI https://w3id.org/dpv/legal/eu/gdpr#DirectDataCollectionNotice
Type rdfs:Class, skos:Concept, dpv:OrganisationalMeasure
Broader/Parent types dpv:RightFulfilmentNoticedpv:Noticedpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Object of relation dpv:hasNotice, dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure
Definition A Notice provided in fulfilment of GDPR's Art.13 regarding information to be provided where personal data are collected from the data subject
Date Created 2022-11-09
Contributors Beatriz Esteves, Georg Krog, Harshvardhan J. Pandit
Documented in Eu-gdpr Rights

DPIA Conformant

Term DPIAConformant Prefix eu-gdpr
Label DPIA Conformant
IRI https://w3id.org/dpv/legal/eu/gdpr#DPIAConformant
Type rdfs:Class, skos:Concept, eu-gdpr:DPIAConformity
Broader/Parent types eu-gdpr:DPIAConformitydpv:ConformanceStatusdpv:Statusdpv:Context
Object of relation dpv:hasContext, dpv:hasStatus
Definition Expressing the specified process is conformant with a DPIA
Date Created 2022-10-22
Contributors Harshvardhan J. Pandit, Georg P Krog
Documented in Eu-gdpr Dpia

DPIA Conformity

Term DPIAConformity Prefix eu-gdpr
Label DPIA Conformity
IRI https://w3id.org/dpv/legal/eu/gdpr#DPIAConformity
Type rdfs:Class, skos:Concept
Broader/Parent types dpv:ConformanceStatusdpv:Statusdpv:Context
Object of relation dpv:hasContext, dpv:hasStatus
Definition Conformity of a process with a DPIA
Date Created 2022-10-22
Contributors Harshvardhan J. Pandit, Georg P Krog
Documented in Eu-gdpr Dpia

DPIA Indicates High Risk

Term DPIAIndicatesHighRisk Prefix eu-gdpr
Label DPIA Indicates High Risk
IRI https://w3id.org/dpv/legal/eu/gdpr#DPIAIndicatesHighRisk
Type rdfs:Class, skos:Concept, eu-gdpr:DPIARiskStatus
Broader/Parent types eu-gdpr:DPIARiskStatusdpv:AuditStatusdpv:Statusdpv:Context
Object of relation dpv:hasAuditStatus, dpv:hasContext, dpv:hasStatus
Definition DPIA identifying high risk levels
Date Created 2022-06-22
Contributors Harshvardhan J. Pandit
Documented in Eu-gdpr Dpia

DPIA Indicates Low Risk

Term DPIAIndicatesLowRisk Prefix eu-gdpr
Label DPIA Indicates Low Risk
IRI https://w3id.org/dpv/legal/eu/gdpr#DPIAIndicatesLowRisk
Type rdfs:Class, skos:Concept, eu-gdpr:DPIARiskStatus
Broader/Parent types eu-gdpr:DPIARiskStatusdpv:AuditStatusdpv:Statusdpv:Context
Object of relation dpv:hasAuditStatus, dpv:hasContext, dpv:hasStatus
Definition DPIA identifying low risk levels
Date Created 2022-06-22
Contributors Harshvardhan J. Pandit
Documented in Eu-gdpr Dpia

DPIA Indicates No Risk

Term DPIAIndicatesNoRisk Prefix eu-gdpr
Label DPIA Indicates No Risk
IRI https://w3id.org/dpv/legal/eu/gdpr#DPIAIndicatesNoRisk
Type rdfs:Class, skos:Concept, eu-gdpr:DPIARiskStatus
Broader/Parent types eu-gdpr:DPIARiskStatusdpv:AuditStatusdpv:Statusdpv:Context
Object of relation dpv:hasAuditStatus, dpv:hasContext, dpv:hasStatus
Definition DPIA identifying no risk is present
Date Created 2022-06-22
Contributors Harshvardhan J. Pandit
Documented in Eu-gdpr Dpia

DPIA Necessity Assessment

Term DPIANecessityAssessment Prefix eu-gdpr
Label DPIA Necessity Assessment
IRI https://w3id.org/dpv/legal/eu/gdpr#DPIANecessityAssessment
Type rdfs:Class, skos:Concept, dpv:OrganisationalMeasure
Broader/Parent types dpv:DPIAdpv:ImpactAssessmentdpv:Assessmentdpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Object of relation dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure
Definition Process that determines whether a DPIA is necessary
Date Created 2022-06-22
Contributors Harshvardhan J. Pandit
Documented in Eu-gdpr Dpia

DPIA Necessity Status

Term DPIANecessityStatus Prefix eu-gdpr
Label DPIA Necessity Status
IRI https://w3id.org/dpv/legal/eu/gdpr#DPIANecessityStatus
Type rdfs:Class, skos:Concept
Broader/Parent types dpv:AuditStatusdpv:Statusdpv:Context
Object of relation dpv:hasAuditStatus, dpv:hasContext, dpv:hasStatus
Definition Status reflecting whether a DPIA is necessary
Date Created 2022-06-22
Contributors Harshvardhan J. Pandit
Documented in Eu-gdpr Dpia

DPIA Non-Conformant

Term DPIANonConformant Prefix eu-gdpr
Label DPIA Non-Conformant
IRI https://w3id.org/dpv/legal/eu/gdpr#DPIANonConformant
Type rdfs:Class, skos:Concept, eu-gdpr:DPIAConformity
Broader/Parent types eu-gdpr:DPIAConformitydpv:ConformanceStatusdpv:Statusdpv:Context
Object of relation dpv:hasContext, dpv:hasStatus
Definition Expressing the specified process is not conformant with a DPIA
Date Created 2022-10-22
Contributors Harshvardhan J. Pandit, Georg P Krog
Documented in Eu-gdpr Dpia

DPIA Not Required

Term DPIANotRequired Prefix eu-gdpr
Label DPIA Not Required
IRI https://w3id.org/dpv/legal/eu/gdpr#DPIANotRequired
Type rdfs:Class, skos:Concept, eu-gdpr:DPIANecessityStatus
Broader/Parent types eu-gdpr:DPIANecessityStatusdpv:AuditStatusdpv:Statusdpv:Context
Object of relation dpv:hasAuditStatus, dpv:hasContext, dpv:hasStatus
Definition Condition where a DPIA is not required
Date Created 2022-06-22
Contributors Harshvardhan J. Pandit
Documented in Eu-gdpr Dpia

DPIA Outcome

Term DPIAOutcome Prefix eu-gdpr
Label DPIA Outcome
IRI https://w3id.org/dpv/legal/eu/gdpr#DPIAOutcome
Type rdfs:Class, skos:Concept, dpv:OrganisationalMeasure
Broader/Parent types dpv:DPIAdpv:ImpactAssessmentdpv:Assessmentdpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Object of relation dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure
Definition Process representing determining outcome of a DPIA
Date Created 2022-06-22
Contributors Harshvardhan J. Pandit
Documented in Eu-gdpr Dpia

DPIA Outcome DPA Consultation

Term DPIAOutcomeDPAConsultation Prefix eu-gdpr
Label DPIA Outcome DPA Consultation
IRI https://w3id.org/dpv/legal/eu/gdpr#DPIAOutcomeDPAConsultation
Type rdfs:Class, skos:Concept, eu-gdpr:DPIAOutcomeStatus
Broader/Parent types eu-gdpr:DPIAOutcomeStatusdpv:AuditStatusdpv:Statusdpv:Context
Object of relation dpv:hasAuditStatus, dpv:hasContext, dpv:hasStatus
Definition DPIA outcome status indicating a DPA consultation is required
Date Created 2022-06-22
Contributors Harshvardhan J. Pandit
Documented in Eu-gdpr Dpia

DPIA Outcome High Residual Risk

Term DPIAOutcomeHighResidualRisk Prefix eu-gdpr
Label DPIA Outcome High Residual Risk
IRI https://w3id.org/dpv/legal/eu/gdpr#DPIAOutcomeHighResidualRisk
Type rdfs:Class, skos:Concept, eu-gdpr:DPIAOutcomeStatus
Broader/Parent types eu-gdpr:DPIAOutcomeStatusdpv:AuditStatusdpv:Statusdpv:Context
Object of relation dpv:hasAuditStatus, dpv:hasContext, dpv:hasStatus
Definition DPIA outcome status indicating high residual risk which are not acceptable for continuation
Date Created 2022-06-22
Contributors Harshvardhan J. Pandit
Documented in Eu-gdpr Dpia

DPIA Outcome Risks Mitigated

Term DPIAOutcomeRisksMitigated Prefix eu-gdpr
Label DPIA Outcome Risks Mitigated
IRI https://w3id.org/dpv/legal/eu/gdpr#DPIAOutcomeRisksMitigated
Type rdfs:Class, skos:Concept, eu-gdpr:DPIAOutcomeStatus
Broader/Parent types eu-gdpr:DPIAOutcomeStatusdpv:AuditStatusdpv:Statusdpv:Context
Object of relation dpv:hasAuditStatus, dpv:hasContext, dpv:hasStatus
Definition DPIA outcome status indicating (all) risks have been mitigated
Date Created 2022-06-22
Contributors Harshvardhan J. Pandit
Documented in Eu-gdpr Dpia

DPIA Outcome Status

Term DPIAOutcomeStatus Prefix eu-gdpr
Label DPIA Outcome Status
IRI https://w3id.org/dpv/legal/eu/gdpr#DPIAOutcomeStatus
Type rdfs:Class, skos:Concept
Broader/Parent types dpv:AuditStatusdpv:Statusdpv:Context
Object of relation dpv:hasAuditStatus, dpv:hasContext, dpv:hasStatus
Definition Status reflecting the outcomes of a DPIA
Date Created 2022-06-22
Contributors Harshvardhan J. Pandit
Documented in Eu-gdpr Dpia

DPIA Procedure

Term DPIAProcedure Prefix eu-gdpr
Label DPIA Procedure
IRI https://w3id.org/dpv/legal/eu/gdpr#DPIAProcedure
Type rdfs:Class, skos:Concept, dpv:OrganisationalMeasure
Broader/Parent types dpv:DPIAdpv:ImpactAssessmentdpv:Assessmentdpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Object of relation dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure
Definition Process representing carrying out a DPIA
Date Created 2022-06-22
Contributors Harshvardhan J. Pandit
Documented in Eu-gdpr Dpia

DPIA Processing Recommendation

Term DPIAProcessingRecommendation Prefix eu-gdpr
Label DPIA Processing Recommendation
IRI https://w3id.org/dpv/legal/eu/gdpr#DPIAProcessingRecommendation
Type rdfs:Class, skos:Concept
Broader/Parent types dpv:AuditStatusdpv:Statusdpv:Context
Object of relation dpv:hasAuditStatus, dpv:hasContext, dpv:hasStatus
Definition Recommendation from the DPIA regarding processing
Date Created 2022-10-22
Contributors Harshvardhan J. Pandit, Georg P Krog
Documented in Eu-gdpr Dpia

DPIA Recommends Processing Continue

Term DPIARecommendsProcessingContinue Prefix eu-gdpr
Label DPIA Recommends Processing Continue
IRI https://w3id.org/dpv/legal/eu/gdpr#DPIARecommendsProcessingContinue
Type rdfs:Class, skos:Concept, eu-gdpr:DPIAProcessingRecommendation
Broader/Parent types eu-gdpr:DPIAProcessingRecommendationdpv:AuditStatusdpv:Statusdpv:Context
Object of relation dpv:hasAuditStatus, dpv:hasContext, dpv:hasStatus
Definition Recommendation from a DPIA that the processing may continue
Date Created 2022-10-22
Contributors Harshvardhan J. Pandit, Georg P Krog
Documented in Eu-gdpr Dpia

DPIA Recommends Processing Not Continue

Term DPIARecommendsProcessingNotContinue Prefix eu-gdpr
Label DPIA Recommends Processing Not Continue
IRI https://w3id.org/dpv/legal/eu/gdpr#DPIARecommendsProcessingNotContinue
Type rdfs:Class, skos:Concept, eu-gdpr:DPIAProcessingRecommendation
Broader/Parent types eu-gdpr:DPIAProcessingRecommendationdpv:AuditStatusdpv:Statusdpv:Context
Object of relation dpv:hasAuditStatus, dpv:hasContext, dpv:hasStatus
Definition Recommendation from a DPIA that the processing should not continue
Date Created 2022-10-22
Contributors Harshvardhan J. Pandit, Georg P Krog
Documented in Eu-gdpr Dpia

DPIA Required

Term DPIARequired Prefix eu-gdpr
Label DPIA Required
IRI https://w3id.org/dpv/legal/eu/gdpr#DPIARequired
Type rdfs:Class, skos:Concept, eu-gdpr:DPIANecessityStatus
Broader/Parent types eu-gdpr:DPIANecessityStatusdpv:AuditStatusdpv:Statusdpv:Context
Object of relation dpv:hasAuditStatus, dpv:hasContext, dpv:hasStatus
Definition Condition where a DPIA is required
Date Created 2022-06-22
Contributors Harshvardhan J. Pandit
Documented in Eu-gdpr Dpia

DPIA Risk Status

Term DPIARiskStatus Prefix eu-gdpr
Label DPIA Risk Status
IRI https://w3id.org/dpv/legal/eu/gdpr#DPIARiskStatus
Type rdfs:Class, skos:Concept
Broader/Parent types dpv:AuditStatusdpv:Statusdpv:Context
Object of relation dpv:hasAuditStatus, dpv:hasContext, dpv:hasStatus
Definition Status reflecting the status of risk associated with a DPIA
Date Created 2022-06-22
Contributors Harshvardhan J. Pandit
Documented in Eu-gdpr Dpia

GDPR Compliance Unknown

Term GDPRComplianceUnknown Prefix eu-gdpr
Label GDPR Compliance Unknown
IRI https://w3id.org/dpv/legal/eu/gdpr#GDPRComplianceUnknown
Type rdfs:Class, skos:Concept, dpv:Lawfulness
Broader/Parent types eu-gdpr:GDPRLawfulnessdpv:Lawfulnessdpv:ComplianceStatusdpv:Statusdpv:Context
Object of relation dpv:hasComplianceStatus, dpv:hasContext, dpv:hasLawfulness, dpv:hasStatus
Definition State where lawfulness or compliance with GDPR is unknown
Date Created 2022-10-22
Contributors Harshvardhan J. Pandit
Documented in Eu-gdpr Compliance

GDPR Compliant

Term GDPRCompliant Prefix eu-gdpr
Label GDPR Compliant
IRI https://w3id.org/dpv/legal/eu/gdpr#GDPRCompliant
Type rdfs:Class, skos:Concept, dpv:Lawfulness
Broader/Parent types eu-gdpr:GDPRLawfulnessdpv:Lawfulnessdpv:ComplianceStatusdpv:Statusdpv:Context
Object of relation dpv:hasComplianceStatus, dpv:hasContext, dpv:hasLawfulness, dpv:hasStatus
Definition State of being lawful or legally compliant for GDPR
Date Created 2022-10-22
Contributors Harshvardhan J. Pandit
Documented in Eu-gdpr Compliance

GDPR Lawfulness

Term GDPRLawfulness Prefix eu-gdpr
Label GDPR Lawfulness
IRI https://w3id.org/dpv/legal/eu/gdpr#GDPRLawfulness
Type rdfs:Class, skos:Concept, dpv:Lawfulness
Broader/Parent types dpv:Lawfulnessdpv:ComplianceStatusdpv:Statusdpv:Context
Object of relation dpv:hasComplianceStatus, dpv:hasContext, dpv:hasLawfulness, dpv:hasStatus
Definition Status or state associated with being lawful or legally compliant regarding GDPR
Date Created 2022-10-22
Contributors Harshvardhan J. Pandit
Documented in Eu-gdpr Compliance

GDPR Non-compliant

Term GDPRNonCompliant Prefix eu-gdpr
Label GDPR Non-compliant
IRI https://w3id.org/dpv/legal/eu/gdpr#GDPRNonCompliant
Type rdfs:Class, skos:Concept, dpv:Lawfulness
Broader/Parent types eu-gdpr:GDPRLawfulnessdpv:Lawfulnessdpv:ComplianceStatusdpv:Statusdpv:Context
Object of relation dpv:hasComplianceStatus, dpv:hasContext, dpv:hasLawfulness, dpv:hasStatus
Definition State of being unlawful or legally non-compliant for GDPR
Date Created 2022-10-22
Contributors Harshvardhan J. Pandit
Documented in Eu-gdpr Compliance

Indirect Data Collection Notice

Term IndirectDataCollectionNotice Prefix eu-gdpr
Label Indirect Data Collection Notice
IRI https://w3id.org/dpv/legal/eu/gdpr#IndirectDataCollectionNotice
Type rdfs:Class, skos:Concept, dpv:OrganisationalMeasure
Broader/Parent types dpv:RightFulfilmentNoticedpv:Noticedpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Object of relation dpv:hasNotice, dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure
Definition A Notice provided in fulfilment of GDPR's Art.14 regarding information to be provided where personal data are not collected from the data subject
Date Created 2022-11-09
Contributors Beatriz Esteves, Georg Krog, Harshvardhan J. Pandit
Documented in Eu-gdpr Rights

Rights Recipients Notice

Term RightsRecipientsNotice Prefix eu-gdpr
Label Rights Recipients Notice
IRI https://w3id.org/dpv/legal/eu/gdpr#RightsRecipientsNotice
Type rdfs:Class, skos:Concept, dpv:OrganisationalMeasure
Broader/Parent types dpv:RightFulfilmentNoticedpv:Noticedpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Object of relation dpv:hasNotice, dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure
Definition A Notice provided in fulfilment of GDPR's Art.19 regarding Recipients to whom a rights exercise has been communicated, such as regarding rectification (A.16) or erasure of personal data (A.17) or restriction of processing (A.18)
Date Created 2022-11-09
Contributors Beatriz Esteves, Georg Krog, Harshvardhan J. Pandit
Documented in Eu-gdpr Rights

SAR Notice

Term SARNotice Prefix eu-gdpr
Label SAR Notice
IRI https://w3id.org/dpv/legal/eu/gdpr#SARNotice
Type rdfs:Class, skos:Concept, dpv:OrganisationalMeasure
Broader/Parent types dpv:RightFulfilmentNoticedpv:Noticedpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Object of relation dpv:hasNotice, dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure
Definition A Notice provided in fulfilment of GDPR's Art.15 regarding information to be provided for Right of Access or Subject Access Request (SAR)
Date Created 2022-11-09
Contributors Beatriz Esteves, Georg Krog, Harshvardhan J. Pandit
Documented in Eu-gdpr Rights

SCCs adopted by Commission

Term SCCByCommission Prefix eu-gdpr
Label SCCs adopted by Commission
IRI https://w3id.org/dpv/legal/eu/gdpr#SCCByCommission
Type rdfs:Class, skos:Concept, dpv:OrganisationalMeasure
Broader/Parent types eu-gdpr:StandardContractualClausesdpv:Contractdpv:LegalAgreementdpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Broader/Parent types eu-gdpr:StandardContractualClauseseu-gdpr:DataTransferTooldpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Object of relation dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure
Definition Standard contractual clauses adopted by the Commission in accordance with the examination procedure referred to in GDPR Article 93(2)
Source GDPR Art.46-2c
Date Created 2021-09-22
Contributors David Hickey, Paul Ryan, Georg P Krog, Harshvardhan J. Pandit
Documented in Eu-gdpr Data-transfers

SCCs adopted by Supervisory Authority

Term SCCBySupervisoryAuthority Prefix eu-gdpr
Label SCCs adopted by Supervisory Authority
IRI https://w3id.org/dpv/legal/eu/gdpr#SCCBySupervisoryAuthority
Type rdfs:Class, skos:Concept, dpv:OrganisationalMeasure
Broader/Parent types eu-gdpr:StandardContractualClausesdpv:Contractdpv:LegalAgreementdpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Broader/Parent types eu-gdpr:StandardContractualClauseseu-gdpr:DataTransferTooldpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Object of relation dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure
Definition Standard data protection clauses adopted by a supervisory authority and approved by the Commission pursuant to the examination procedure referred to in GDPR Article 93(2)
Source GDPR Art.46-2d
Date Created 2021-09-22
Contributors David Hickey, Paul Ryan, Georg P Krog, Harshvardhan J. Pandit
Documented in Eu-gdpr Data-transfers

Standard Contractual Clauses (SCC)

Term StandardContractualClauses Prefix eu-gdpr
Label Standard Contractual Clauses (SCC)
IRI https://w3id.org/dpv/legal/eu/gdpr#StandardContractualClauses
Type rdfs:Class, skos:Concept, dpv:OrganisationalMeasure
Broader/Parent types dpv:Contractdpv:LegalAgreementdpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Broader/Parent types eu-gdpr:DataTransferTooldpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Object of relation dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure
Definition Standard Contractual Clauses (SCCs) are pre-approved clauses by the EU for ensuring appropriate data protection safeguards intended for data transfers from the EU to third countries
Source Implementing Decision on SCC for Data Transfers
Date Created 2021-09-22
Contributors David Hickey, Paul Ryan, Georg P Krog, Harshvardhan J. Pandit
Documented in Eu-gdpr Data-transfers

Supplementary Measure

Term SupplementaryMeasure Prefix eu-gdpr
Label Supplementary Measure
IRI https://w3id.org/dpv/legal/eu/gdpr#SupplementaryMeasure
Type rdfs:Class, skos:Concept, dpv:OrganisationalMeasure
Broader/Parent types eu-gdpr:DataTransferTooldpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Object of relation dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure
Definition Supplementary measures are intended to additionally provide safeguards or guarentees to bring the resulting protection in line with EU requirements
Source EDPB Recommendations 01/2020 on Supplementary Measures and Transfer Tools
Date Created 2021-09-22
Contributors David Hickey, Georg P Krog, Harshvardhan J. Pandit
Documented in Eu-gdpr Data-transfers

Properties

DPV uses the following terms from [[RDF]] and [[RDFS]] with their defined meanings:

The following external concepts are re-used within DPV:

External

dcat:Resource

Term dcat:Resource Prefix dcat
Label dcat:Resource
IRI http://www.w3.org/ns/dcat#Resource
Type rdfs:Class, rdfs:Class, skos:Concept, skos:Concept
Usage Note A dataset, data service, or any other resource associated with Right Exercise - such as for providing a copy of data
Date Created [rdflib.term.Literal('2022-11-02', datatype=rdflib.term.URIRef('http://www.w3.org/2001/XMLSchema#date')), rdflib.term.Literal('2022-11-09', datatype=rdflib.term.URIRef('http://www.w3.org/2001/XMLSchema#date'))]
Contributors Beatriz Esteves, Georg Krog, Harshvardhan J. Pandit
Documented in Dpv Rights

dct:conformsTo

Term dct:conformsTo Prefix dct
Label dct:conformsTo
IRI http://purl.org/dc/terms/conformsTo
Type rdf:Property, skos:Concept
Usage Note For expressing an existing standard, guideline, or requirements to which the DPIA document or process will be conforming to. This could be external guidelines published by an Authority, or internal guidelines established by the organisation
Documented in Eu-gdpr Dpia

dct:coverage

Term dct:coverage Prefix dct
Label dct:coverage
IRI http://purl.org/dc/terms/coverage
Type rdf:Property, skos:Concept
Usage Note For expressing coverage (e.g. jurisdictions, products, services) of the DPIA document or process. For temporal coverage, please see dct:temporal. The coverage can be expressed using dpv:PersonalDataHandling, or using another concept, or even be a link or reference to a document, or a textual description
Documented in

dct:created

Term dct:created Prefix dct
Label dct:created
IRI http://purl.org/dc/terms/created
Type rdf:Property, skos:Concept
Usage Note For expressing when the documentation (e.g. DPIA Necessity Assessment, or DPIA Procedure, or DPIA outcome) was created
Documented in

dct:dateAccepted

Term dct:dateAccepted Prefix dct
Label dct:dateAccepted
IRI http://purl.org/dc/terms/dateAccepted
Type rdf:Property, skos:Concept
Usage Note For expressing when the documentation (e.g. DPIA Necessity Assessment, or DPIA Procedure, or DPIA outcome) was accepted through audit or approval
Documented in Eu-gdpr Dpia

dct:dateSubmitted

Term dct:dateSubmitted Prefix dct
Label dct:dateSubmitted
IRI http://purl.org/dc/terms/dateSubmitted
Type rdf:Property, skos:Concept
Usage Note For expressing when the documentation (e.g. DPIA Necessity Assessment, or DPIA Procedure, or DPIA outcome) was submitted for audit or approval
Documented in Eu-gdpr Dpia

dct:description

Term dct:description Prefix dct
Label dct:description
IRI http://purl.org/dc/terms/description
Type rdf:Property, skos:Concept
Usage Note Indicates a description of the DPIA for human comprehension
Documented in Eu-gdpr Dpia

dct:hasPart

Term dct:hasPart Prefix dct
Label dct:hasPart
IRI http://purl.org/dc/terms/hasPart
Type rdf:Property, rdf:Property, skos:Concept, skos:Concept
Domain includes dpv:RightExerciseRecord
Range includes dpv:RightExerciseActivity
Usage Note Specifying a RightExerciseRecord has RightExerciseActivity as part of its records
Date Created 2022-11-02
Contributors Harshvardhan J. Pandit
Documented in Dpv Rights

dct:identifier

Term dct:identifier Prefix dct
Label dct:identifier
IRI http://purl.org/dc/terms/identifier
Type rdf:Property, skos:Concept
Usage Note Indicates an identifier associated with the DPIA documentation or process. Identifiers may be reused from existing systems, or created for the purposes of record management
Documented in Eu-gdpr Dpia

dct:isPartOf

Term dct:isPartOf Prefix dct
Label dct:isPartOf
IRI http://purl.org/dc/terms/isPartOf
Type rdf:Property, rdf:Property, skos:Concept, skos:Concept
Domain includes dpv:RightExerciseActivity
Range includes dpv:RightExerciseRecord
Usage Note Specifying a RightExerciseActivity is part of a RightExerciseRecord
Date Created 2022-11-02
Contributors Harshvardhan J. Pandit
Documented in Dpv Rights

dct:isVersionOf

Term dct:isVersionOf Prefix dct
Label dct:isVersionOf
IRI http://purl.org/dc/terms/isVersionOf
Type rdf:Property, skos:Concept
Usage Note For expressing prior versions or iterations of the DPIA document or process
Documented in Eu-gdpr Dpia

dct:modified

Term dct:modified Prefix dct
Label dct:modified
IRI http://purl.org/dc/terms/modified
Type rdf:Property, skos:Concept
Usage Note For expressing when the documentation (e.g. DPIA Necessity Assessment, or DPIA Procedure, or DPIA outcome) was last modified
Documented in

dct:subject

Term dct:subject Prefix dct
Label dct:subject
IRI http://purl.org/dc/terms/subject
Type rdf:Property, skos:Concept
Usage Note For expressing the subject of the DPIA document or process, where subject refers to the point of focus. For expressing what is affected or included within the DPIA, please see dct:coverage
Documented in

dct:temporal

Term dct:temporal Prefix dct
Label dct:temporal
IRI http://purl.org/dc/terms/temporal
Type rdf:Property, skos:Concept
Usage Note For expressing the temporal coverage of the DPIA document or process
Documented in

dct:title

Term dct:title Prefix dct
Label dct:title
IRI http://purl.org/dc/terms/title
Type rdf:Property, skos:Concept
Usage Note Indicates a title of the DPIA for human comprehension
Documented in

dct:valid

Term dct:valid Prefix dct
Label dct:valid
IRI http://purl.org/dc/terms/valid
Type rdf:Property, rdf:Property, skos:Concept, skos:Concept
Usage Note Specfiying the temporal validity of an activity associated with Right Exercise. For example, limits on duration for providing or accessing provided information
Date Created 2022-11-02
Contributors Harshvardhan J. Pandit
Documented in Dpv Rights

has status

Term dpv:hasStatus Prefix dpv
Label has status
IRI https://w3id.org/dpv#hasStatus
Type rdf:Property, rdf:Property, skos:Concept, skos:Concept
Domain includes dpv:RightExerciseActivity
Range includes dpv:Status
Definition Indicates the status of specified concept
Usage Note Indicates the status of a Right Exercise Activity
Date Created [rdflib.term.Literal('2022-11-02', datatype=rdflib.term.URIRef('http://www.w3.org/2001/XMLSchema#date')), rdflib.term.Literal('2022-05-18', datatype=rdflib.term.URIRef('http://www.w3.org/2001/XMLSchema#date'))]
Contributors Harshvardhan J. Pandit
Documented in Dpv Context-Status, Dpv Rights

Funding Acknowledgements

Funding Sponsors

The DPVCG and DPV were initiated as part of the SPECIAL H2020 Project, which received funding from the European Union’s Horizon 2020 research and innovation programme under grant agreement No. 731601. The SPECIAL project ran over a 3-year period from 2017 to 2019.

Harshvardhan J. Pandit was funded by the Irish Research Council Government of Ireland Postdoctoral Fellowship Grant#GOIPD/2020/790 for working within the DPVCG and contributing to the DPV. The fellowship lasted from 2020 to 2022.

Funding Acknowledgements for Contributors

The contributions of Piero Bonatti and Luigi Sauro to the DPVCG have been funded by the European Union’s Horizon 2020 research and innovation programme under grant agreement N. 731601 (project SPECIAL) until 2019, and under grant agreement N. 883464 (project TRAPEZE) from 2020 until 2023.

The contributions of Beatriz Esteves have received funding through the PROTECT ITN Project from the European Union’s Horizon 2020 research and innovation programme under the Marie Skłodowska-Curie grant agreement No 813497.

The contributions of Harshvardhan J. Pandit have received funding from the ADAPT SFI Centre for Digital Media Technology is funded by Science Foundation Ireland through the SFI Research Centres Programme and is co-funded under the European Regional Development Fund (ERDF) through Grant#13/RC/2106 (2018 to 2020) and Grant#13/RC/2106_P2 (2021 onwards)

Deprecated Terms