DPV-GDPR extends the [[[DPV]]] to provide taxonomies of concepts such as legal bases, rights, and data transfer tools as defined within the [[[GDPR]]].
The canonical URL for DPV-GDPR is https://w3id.org/dpv/dpv-gdpr which contains (this) specification. The namespace for DPV terms is https://w3id.org/dpv/dpv-gdpr#
, the suggested prefix is dpv-gdpr
, and this document along with source and releases are available at https://github.com/w3c/dpv.
Newcomers to the DPV are strongly recommended to first read through the Primer to familiarise themselves with the semantics and concepts of DPV.
Related Links
The peer-reviewed article “Creating A Vocabulary for Data Privacy” presents a historical overview of the DPVCG, and describes the methodology and structure of the DPV along with describing its creation. An open-access version can be accessed here, here, and here.
Contributing: The DPVCG welcomes participation to improve the DPV and associated resources, including expansion or refinement of concepts, requesting information and applications, and addressing open issues. See contributing page for further information.
The Data Privacy Vocabulary (DPV) provides terms to annotate and categorise instances of legally compliant personal data handling. In particular, the vocabulary provides LegalBasis
and DataSubjectRight
as top-level concepts representing the various legal bases for justifying processing of personal data and rights provided to the data subject respectively. Since these concepts are specifically defined within the scope of jurisdictional laws, their implementation is provided as a separate vocabulary that extends the DPV, thereby permitting continued usage of DPV as a jurisdiction-agnostic and generic vocabulary.
The DPV-GDPR vocabulary extends the concepts within DPV regarding legal bases, data subject rights, data transfer tools, data protection impact assessment (DPIA), and compliance, and provides a compatible extension to be used in combination with the DPV to represent GDPR-specific information.
The GDPR Article 6 specifies that it is mandatory for every processing to have one (or more) legal basis that justifies its compliance. These are represented as Core Legal Basis. In addition, Articles 9 legal basis are represented as legal basis for Special Category Personal Data, and those from Articles 45, 46, and 49 are represented as legal basis for Data Transfer.
DPV and DPV-GDPR only define the legal basis as concepts, and do not define or provide information associated with their validity. For example, determining whether consent is valid, or the appropriateness of a legal basis for its application in a use-case. The DPVCG is interested in providing such "helpful assistance" through semantics, and welcomes discussions and contributions for the same.
GDPR provides several rights to the data subject, whose applicability depends on the context and nature of processing taking place. DPV lists these rights at an abstract level as concepts along with their origin in specific clauses of the GDPR.
In addition to DPV's concepts regarding exercise of rights, DPV-GDPR provides additional concepts specific to the implementation of its rights. For example, [=SARNotice=] refers to the information provided in fulfilment of [=A15=] Right of Access, or using [=dcat:Resource=] to represent the dataset provided in fulfilment of [=A20=] Right to Data Portability.
Legal Basis (rows), Right (columns) | A13 Right to be Informed | A14 Right to be Informed | A15 Right of Access | A16 Right to Rectification | A17 Right to Erasure | A18 Right to Restrict Processing | A19 Right to Rectification | A20 Right to Data Portability | A21 Right to object | A22 Right to object to automated decision making | A7-3 Right to Withdraw Consent | A77 Right to Complaint |
---|---|---|---|---|---|---|---|---|---|---|---|---|
Art.6(1-a) consent | ☒ | ☒ | ☒ | ☒ | ☒ | ☒ | ☐ | ☒ | ☐ | ☒ | ☒ | ☒ |
Art 6(1-a) explicit consent | ☒ | ☒ | ☒ | ☒ | ☒ | ☒ | ☐ | ☒ | ☐ | ☒ | ☒ | ☒ |
Art.6(1-a) regular consent | ☒ | ☒ | ☒ | ☒ | ☒ | ☒ | ☐ | ☒ | ☐ | ☒ | ☒ | ☒ |
Art 6(1-b) contract | ☒ | ☒ | ☒ | ☒ | ☒ | ☒ | ☐ | ☒ | ☐ | ☒ | ☐ | ☒ |
Art 6(1-b) contract performance | ☒ | ☒ | ☒ | ☒ | ☒ | ☒ | ☐ | ☒ | ☐ | ☒ | ☐ | ☒ |
Art 6(1-b) enter into contract | ☒ | ☒ | ☒ | ☒ | ☒ | ☒ | ☐ | ☒ | ☐ | ☒ | ☐ | ☒ |
Art 6(1-c) legal obligation | ☒ | ☐ | ☒ | ☒ | ☐ | ☒ | ☐ | ☐ | ☐ | ☐ | ☐ | ☒ |
Art 6(1-d) protect vital interests | ☒ | ☒ | ☒ | ☒ | ☒ | ☒ | ☐ | ☐ | ☐ | ☒ | ☐ | ☒ |
Art 6(1-d) protect vital interests of data subject | ☒ | ☒ | ☒ | ☒ | ☒ | ☒ | ☐ | ☐ | ☐ | ☒ | ☐ | ☒ |
Art 6(1-d) protect vital interests of natural person | ☒ | ☒ | ☒ | ☒ | ☒ | ☒ | ☐ | ☐ | ☐ | ☒ | ☐ | ☒ |
Art 6(1-e) public interest or official authority | ☒ | ☒ | ☒ | ☒ | ☐ | ☒ | ☐ | ☐ | ☒ | ☒ | ☐ | ☒ |
Art 6(1-e) official authority | ☒ | ☒ | ☒ | ☒ | ☐ | ☒ | ☐ | ☐ | ☒ | ☒ | ☐ | ☒ |
Art 6(1-e) public interest | ☒ | ☒ | ☒ | ☒ | ☐ | ☒ | ☐ | ☐ | ☒ | ☒ | ☐ | ☒ |
Art 6(1-f) legitimate interest | ☒ | ☒ | ☒ | ☒ | ☒ | ☒ | ☐ | ☐ | ☒ | ☒ | ☐ | ☒ |
Art 6(1-f) legitimate interest of controller | ☒ | ☒ | ☒ | ☒ | ☒ | ☒ | ☐ | ☐ | ☒ | ☒ | ☐ | ☒ |
Art 6(1-f) legitimate interest of third party | ☒ | ☒ | ☒ | ☒ | ☒ | ☒ | ☐ | ☐ | ☒ | ☒ | ☐ | ☒ |
GDPR regulates data transfers outside the EU/EEA based on jurisdictions the transfer is occurring within and the guarantees available regarding the protection of personal data and fundamental rights. To indicate the sufficiency of a data transfer being compatible and adherent to these requirements, the European Commission provides various 'data transfer tools' based on the legal bases provided within the GDPR. DPV-GDPR models these as follows.
The DPV-GDPR's concepts for transfer tools are currently symbolic, and do not provide a way to actually implement those tools. For example, to represent the information contained within a SCC or BCR. The DPVCG is interested in providing such implementations, and welcomes discussions and contributions for the same.
[[GDPR]] Article 35 specifies the conditions and requirements associated with Data Protection Impact Assessments. DPV-GDPR expands on the DPIA
concept defined as an Organisational Measure within DPV by considering a DPIA as consisting of the following iterative process, and providing statuses for documenting their progression and outputs:
In addition to DPV's concepts for representing information about processing of personal data, DPV-GDPR also recommends using [[[DCT]]] concepts to represent relevant metadata, such as dates, identifiers, validity, etc.
The DPVCG is working on updating the [[[GUIDE-GDPR-DPIA]]] based on recent updates in DPV and DPV-GDPR. In addition to these, we are also working on providing concepts for expressing impacts and risk management within [[[RISK]]].
The concepts in this section reflect the status of processing operations being in compliance with GDPR, by extending the ComplianceStatus
from DPV for GDPR. It does not define the requirements for compliance itself.
Term | A13 | Prefix | eu-gdpr |
---|---|---|---|
Label | A13 Right to be Informed | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A13 | ||
Type | rdfs:Class, skos:Concept, dpv:Right | ||
Broader/Parent types | dpv:DataSubjectRight → dpv:Right | ||
Object of relation | dpv:hasRight | ||
Definition | information to be provided where personal data is directly collected from data subject | ||
Source | GDPR Art.13 | ||
Date Created | 2020-11-04 | ||
Contributors | Beatriz Esteves, Georg Krog, Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Rights |
Term | A14 | Prefix | eu-gdpr |
---|---|---|---|
Label | A14 Right to be Informed | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A14 | ||
Type | rdfs:Class, skos:Concept, dpv:Right | ||
Broader/Parent types | dpv:DataSubjectRight → dpv:Right | ||
Object of relation | dpv:hasRight | ||
Definition | information to be provided where personal data is collected from other sources | ||
Source | GDPR Art.14 | ||
Date Created | 2020-11-04 | ||
Contributors | Beatriz Esteves, Georg Krog, Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Rights |
Term | A15 | Prefix | eu-gdpr |
---|---|---|---|
Label | A15 Right of Access | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A15 | ||
Type | rdfs:Class, skos:Concept, dpv:Right | ||
Broader/Parent types | dpv:DataSubjectRight → dpv:Right | ||
Object of relation | dpv:hasRight | ||
Definition | Right of access | ||
Source | GDPR Art.15 | ||
Date Created | 2020-11-04 | ||
Contributors | Beatriz Esteves, Georg Krog, Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Rights |
Term | A16 | Prefix | eu-gdpr |
---|---|---|---|
Label | A16 Right to Rectification | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A16 | ||
Type | rdfs:Class, skos:Concept, dpv:Right | ||
Broader/Parent types | dpv:DataSubjectRight → dpv:Right | ||
Object of relation | dpv:hasRight | ||
Definition | Right to rectification | ||
Source | GDPR Art.16 | ||
Date Created | 2020-11-04 | ||
Contributors | Beatriz Esteves, Georg Krog, Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Rights |
Term | A17 | Prefix | eu-gdpr |
---|---|---|---|
Label | A17 Right to Erasure | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A17 | ||
Type | rdfs:Class, skos:Concept, dpv:Right | ||
Broader/Parent types | dpv:DataSubjectRight → dpv:Right | ||
Object of relation | dpv:hasRight | ||
Definition | Right to erasure ('Right to be forgotten') | ||
Source | GDPR Art.17 | ||
Date Created | 2020-11-04 | ||
Contributors | Beatriz Esteves, Georg Krog, Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Rights |
Term | A18 | Prefix | eu-gdpr |
---|---|---|---|
Label | A18 Right to Restrict Processing | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A18 | ||
Type | rdfs:Class, skos:Concept, dpv:Right | ||
Broader/Parent types | dpv:DataSubjectRight → dpv:Right | ||
Object of relation | dpv:hasRight | ||
Definition | Right to restriction of processing | ||
Source | GDPR Art.18 | ||
Date Created | 2020-11-04 | ||
Contributors | Beatriz Esteves, Georg Krog, Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Rights |
Term | A19 | Prefix | eu-gdpr |
---|---|---|---|
Label | A19 Right to Rectification | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A19 | ||
Type | rdfs:Class, skos:Concept, dpv:Right | ||
Broader/Parent types | dpv:DataSubjectRight → dpv:Right | ||
Object of relation | dpv:hasRight | ||
Definition | Right to be notified in case of rectification or erasure of personal data or restriction of processing | ||
Source | GDPR Art.19 | ||
Date Created | 2020-11-04 | ||
Contributors | Beatriz Esteves, Georg Krog, Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Rights |
Term | A20 | Prefix | eu-gdpr |
---|---|---|---|
Label | A20 Right to Data Portability | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A20 | ||
Type | rdfs:Class, skos:Concept, dpv:Right | ||
Broader/Parent types | dpv:DataSubjectRight → dpv:Right | ||
Object of relation | dpv:hasRight | ||
Definition | Right to data portability | ||
Source | GDPR Art.20 | ||
Date Created | 2020-11-04 | ||
Contributors | Beatriz Esteves, Georg Krog, Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Rights |
Term | A21 | Prefix | eu-gdpr |
---|---|---|---|
Label | A21 Right to object | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A21 | ||
Type | rdfs:Class, skos:Concept, dpv:Right | ||
Broader/Parent types | dpv:DataSubjectRight → dpv:Right | ||
Object of relation | dpv:hasRight | ||
Definition | Right to object to processing of personal data | ||
Source | GDPR Art.21 | ||
Date Created | 2020-11-04 | ||
Contributors | Beatriz Esteves, Georg Krog, Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Rights |
Term | A22 | Prefix | eu-gdpr |
---|---|---|---|
Label | A22 Right to object to automated decision making | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A22 | ||
Type | rdfs:Class, skos:Concept, dpv:Right | ||
Broader/Parent types | dpv:DataSubjectRight → dpv:Right | ||
Object of relation | dpv:hasRight | ||
Definition | Right not to be subject to a decision based solely on automated processing including profiling | ||
Source | GDPR Art.22 | ||
Date Created | 2020-11-04 | ||
Contributors | Beatriz Esteves, Georg Krog, Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Rights |
Term | A45-3 | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 45(3) adequacy decision | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A45-3 | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | dpv:DataTransferLegalBasis → dpv:LegalBasis | ||
Object of relation | dpv:hasLegalBasis | ||
Definition | Personal data can flow freely from the EU to a third country with an Adequacy Decision without any further safeguard being necessary. | ||
Usage Note | Transfer from EU to a third country. Third country has Adequacy Decision. | ||
Source | GDPR Art.45-3 | ||
Date Created | 2020-11-04 | ||
Date Modified | 2021-09-08 | ||
Contributors | Georg P Krog | ||
Documented in | Eu-gdpr Legal-basis-Data-transfer |
Term | A46-2-a | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 46(2-a) legal instrument | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A46-2-a | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | dpv:DataTransferLegalBasis → dpv:LegalBasis | ||
Object of relation | dpv:hasLegalBasis | ||
Definition | A legally binding and enforceable instrument between public authorities or bodies | ||
Usage Note | Transfer from EU to a third country. Third country has no Adequacy Decision. Third country has appropriate safeguards. Transfer does not require specific authorisation from a Supervisor Authority. | ||
Source | GDPR Art.46-2a | ||
Date Created | 2020-11-04 | ||
Date Modified | 2021-09-08 | ||
Contributors | Georg P Krog | ||
Documented in | Eu-gdpr Legal-basis-Data-transfer |
Term | A46-2-b | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 46(2-b) Binding Corporate Rules (BCR) | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A46-2-b | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | dpv:DataTransferLegalBasis → dpv:LegalBasis | ||
Broader/Parent types | eu-gdpr:BindingCorporateRules → eu-gdpr:DataTransferTool → dpv:OrganisationalMeasure → dpv:TechnicalOrganisationalMeasure | ||
Object of relation | dpv:hasLegalBasis, dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure | ||
Definition | Binding corporate rules | ||
Usage Note | Transfer from EU to a third country. Third country has no Adequacy Decision. Third country has appropriate safeguards. Transfer does not require specific authorisation from a Supervisor Authority. | ||
Source | GDPR Art.46-2b | ||
Date Created | 2020-11-04 | ||
Date Modified | 2021-09-08 | ||
Contributors | Georg P Krog | ||
Documented in | Eu-gdpr Legal-basis-Data-transfer |
Term | A46-2-e | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 46(2-e) code of conduct | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A46-2-e | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | dpv:DataTransferLegalBasis → dpv:LegalBasis | ||
Object of relation | dpv:hasLegalBasis | ||
Definition | An approved code of conduct pursuant to GDPR Article 40 together with binding and enforceable commitments of the controller or processor in the third country to apply the appropriate safeguards, including as regards individuals´ rights | ||
Usage Note | Transfer from EU to a third country. Third country has no Adequacy Decision. Third country has appropriate safeguards. Transfer does not require specific authorisation from a Supervisor Authority. | ||
Source | GDPR Art.46-2e | ||
Date Created | 2020-11-04 | ||
Date Modified | 2021-09-08 | ||
Contributors | Georg P Krog | ||
Documented in | Eu-gdpr Legal-basis-Data-transfer |
Term | A46-2-f | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 46(2-f) certification | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A46-2-f | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | dpv:DataTransferLegalBasis → dpv:LegalBasis | ||
Object of relation | dpv:hasLegalBasis | ||
Definition | An approved certification mechanism pursuant to GDPR Article 42 together with binding and enforceable commitments of the controller or processor in the third country to appy the appropriate safeguards, including as regards individuals` rights | ||
Usage Note | Transfer from EU to a third country. Third country has no Adequacy Decision. Third country has appropriate safeguards. Transfer does not require specific authorisation from a Supervisor Authority. | ||
Source | GDPR Art.46-2f | ||
Date Created | 2020-11-04 | ||
Date Modified | 2021-09-08 | ||
Contributors | Georg P Krog | ||
Documented in | Eu-gdpr Legal-basis-Data-transfer |
Term | A46-3-a | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 46(3-a) contractual clauses | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A46-3-a | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | dpv:DataTransferLegalBasis → dpv:LegalBasis | ||
Object of relation | dpv:hasLegalBasis | ||
Definition | Contractual clauses with controller, processor or recipient of the personal data in the third country or the international organisation. | ||
Usage Note | Transfer from EU to a third country. Third country has no Adequacy Decision. Appropriate safeguards exist. Transfer does requires specific authorisation from a Supervisor Authority. | ||
Source | GDPR Art.46-3a | ||
Date Created | 2020-11-04 | ||
Date Modified | 2021-09-08 | ||
Contributors | Georg P Krog | ||
Documented in | Eu-gdpr Legal-basis-Data-transfer |
Term | A46-3-b | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 46(3-b) administrative arrangements | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A46-3-b | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | dpv:DataTransferLegalBasis → dpv:LegalBasis | ||
Object of relation | dpv:hasLegalBasis | ||
Definition | Provisions to be inserted into administrative arrangements between public authorities or bodies which include enforceable and effective data subject rights | ||
Usage Note | Transfer from EU to a third country. Third country has no Adequacy Decision. Appropriate safeguards exist. Transfer does requires specific authorisation from a Supervisor Authority. | ||
Source | GDPR Art.46-3b | ||
Date Created | 2020-11-04 | ||
Date Modified | 2021-09-08 | ||
Contributors | Georg P Krog | ||
Documented in | Eu-gdpr Legal-basis-Data-transfer |
Term | A49-1-a | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 49(1-a) explicit consent | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A49-1-a | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | dpv:DataTransferLegalBasis → dpv:LegalBasis | ||
Broader/Parent types | dpv:ExplicitlyExpressedConsent → dpv:ExpressedConsent → dpv:InformedConsent → dpv:Consent → dpv:LegalBasis | ||
Object of relation | dpv:hasLegalBasis | ||
Definition | The data subject has explicitly consented to the proposed transfer, after having been informed of the possible risks of such transfers for the data subject due to the absence of an adequacy decision and appropriate safeguards. | ||
Usage Note | Transfer from EU to a third country. Third country has no Adequacy Decision. Appropriate safeguards do not exist. | ||
Source | GDPR Art.49-1a | ||
Date Created | 2020-11-04 | ||
Date Modified | 2022-06-22 | ||
Contributors | Georg P Krog | ||
Documented in | Eu-gdpr Legal-basis-Data-transfer |
Term | A49-1-b | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 49(1-b) performance of contract | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A49-1-b | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | dpv:Contract → dpv:LegalAgreement → dpv:OrganisationalMeasure → dpv:TechnicalOrganisationalMeasure | ||
Broader/Parent types | dpv:DataTransferLegalBasis → dpv:LegalBasis | ||
Object of relation | dpv:hasLegalBasis, dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure | ||
Definition | The transfer is necessary for the performance of a contract between the data subject and controller or the implementation of pre-contractual measures taken at the data subject´s request. | ||
Usage Note | Transfer from EU to a third country. Third country has no Adequacy Decision. Appropriate safeguards do not exist. | ||
Source | GDPR Art.49-1b | ||
Date Created | 2020-11-04 | ||
Date Modified | 2021-09-08 | ||
Contributors | Georg P Krog | ||
Documented in | Eu-gdpr Legal-basis-Data-transfer |
Term | A49-1-c | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 49(1-c) conclusion of contract | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A49-1-c | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | dpv:Contract → dpv:LegalAgreement → dpv:OrganisationalMeasure → dpv:TechnicalOrganisationalMeasure | ||
Broader/Parent types | dpv:DataTransferLegalBasis → dpv:LegalBasis | ||
Object of relation | dpv:hasLegalBasis, dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure | ||
Definition | The transfer is necessary for the conclusion or performance of a contract concluded in the interest of the data subject and controller and another natural or legal person. | ||
Usage Note | Transfer from EU to a third country. Third country has no Adequacy Decision. Appropriate safeguards do not exist. | ||
Source | GDPR Art.49-1c | ||
Date Created | 2020-11-04 | ||
Date Modified | 2021-09-08 | ||
Contributors | Georg P Krog | ||
Documented in | Eu-gdpr Legal-basis-Data-transfer |
Term | A49-1-d | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 49(1-d) public interest | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A49-1-d | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | dpv:DataTransferLegalBasis → dpv:LegalBasis | ||
Broader/Parent types | dpv:PublicInterest → dpv:LegalBasis | ||
Object of relation | dpv:hasLegalBasis | ||
Definition | The transfer is necessary for important reasons of public interest. | ||
Usage Note | Transfer from EU to a third country. Third country has no Adequacy Decision. Appropriate safeguards do not exist. | ||
Source | GDPR Art.49-1d | ||
Date Created | 2020-11-04 | ||
Date Modified | 2021-09-08 | ||
Contributors | Georg P Krog | ||
Documented in | Eu-gdpr Legal-basis-Data-transfer |
Term | A49-1-e | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 49(1-e) legal claims | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A49-1-e | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | dpv:DataTransferLegalBasis → dpv:LegalBasis | ||
Object of relation | dpv:hasLegalBasis | ||
Definition | The transfer is necessary for the establishment, exercise or defence of legal claims. | ||
Usage Note | Transfer from EU to a third country. Third country has no Adequacy Decision. Appropriate safeguards do not exist. | ||
Source | GDPR Art.49-1e | ||
Date Created | 2020-11-04 | ||
Date Modified | 2021-09-08 | ||
Contributors | Georg P Krog | ||
Documented in | Eu-gdpr Legal-basis-Data-transfer |
Term | A49-1-f | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 49(1-f) protect vital interests | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A49-1-f | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | dpv:DataTransferLegalBasis → dpv:LegalBasis | ||
Broader/Parent types | dpv:VitalInterestOfNaturalPerson → dpv:VitalInterest → dpv:LegalBasis | ||
Object of relation | dpv:hasLegalBasis | ||
Definition | The transfer is necessary in order to protect the vital interests of the data subject or of other persons, where the person is physically or legally incapable of giving consent. | ||
Usage Note | Transfer from EU to a third country. Third country has no Adequacy Decision. Appropriate safeguards do not exist. | ||
Source | GDPR Art.49-1f | ||
Date Created | 2020-11-04 | ||
Date Modified | 2021-09-08 | ||
Contributors | Georg P Krog | ||
Documented in | Eu-gdpr Legal-basis-Data-transfer |
Term | A49-1-g | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 49(1-g) public register | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A49-1-g | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | dpv:DataTransferLegalBasis → dpv:LegalBasis | ||
Object of relation | dpv:hasLegalBasis | ||
Definition | The transfer is made from a register which according to Union or Member State law is intended to provide information to the public in general or by any person who can demonstrate a legitimate interest, but only to the extent that the conditions laid down by Union or Member State law for consultation are fulfilled in the particular case. | ||
Usage Note | Transfer from EU to a third country. Third country has not Adequacy Decision. Appropriate safeguards do not exist. | ||
Source | GDPR Art.49-1g | ||
Date Created | 2020-11-04 | ||
Date Modified | 2021-09-08 | ||
Contributors | Georg P Krog | ||
Documented in | Eu-gdpr Legal-basis-Data-transfer |
Term | A49-2 | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 49(2) legitimate interests | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A49-2 | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | dpv:LegitimateInterest → dpv:LegalBasis | ||
Broader/Parent types | dpv:DataTransferLegalBasis → dpv:LegalBasis | ||
Object of relation | dpv:hasLegalBasis | ||
Definition | The transfer is not repetetive, concerns only a limited number of data subjects, is necessary for the purposes of compelling legitimate interests pursued by controller which are not overridden by the interests or rights and freedoms of the data subject, and controller has assessed all the circumstances surrounding the data transfer and have on the basis of that assessment provided suitable safeguards with regard to the protection of personal data. | ||
Usage Note | Transfer from EU to a third country. Third country has no Adequacy Decision. Appropriate safeguards do not exist and no other options apply. | ||
Source | GDPR Art.49-2 | ||
Date Created | 2020-11-04 | ||
Date Modified | 2021-09-08 | ||
Contributors | Georg P Krog | ||
Documented in | Eu-gdpr Legal-basis-Data-transfer |
Term | A6-1-a | Prefix | eu-gdpr |
---|---|---|---|
Label | Art.6(1-a) consent | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A6-1-a | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | dpv:ExpressedConsent → dpv:InformedConsent → dpv:Consent → dpv:LegalBasis | ||
Object of relation | dpv:hasLegalBasis | ||
Definition | Legal basis based on data subject's given consent to the processing of his or her personal data for one or more specific purposes | ||
Usage Note | Consent can be explicit or non-explicit. To express these specifically, see the explicit and non-explicit variations provided for Art.6-1a. | ||
Source | GDPR Art.6-1a | ||
Date Created | 2022-09-07 | ||
Date Modified | 2022-11-24 | ||
Contributors | Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Legal-basis, Eu-gdpr Legal-basis-Rights-mapping |
Term | A6-1-a-explicit-consent | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 6(1-a) explicit consent | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A6-1-a-explicit-consent | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | dpv:ExplicitlyExpressedConsent → dpv:ExpressedConsent → dpv:InformedConsent → dpv:Consent → dpv:LegalBasis | ||
Broader/Parent types | eu-gdpr:A6-1-a → dpv:ExpressedConsent → dpv:InformedConsent → dpv:Consent → dpv:LegalBasis | ||
Object of relation | dpv:hasLegalBasis | ||
Definition | Legal basis based on data subject's given explicit consent to the processing of his or her personal data for one or more specific purposes | ||
Usage Note | Valid consent in this case would have requirements for being 'explicit' in addition to requirements defined by A4-11. This is also mentioned in the Article 29 Working Party document "Guidelines on Consent under Regulation 2016/679 (wp259rev.01)" | ||
Source | GDPR Art.6-1a | ||
Date Created | 2022-06-22 | ||
Date Modified | 2022-11-24 | ||
Contributors | Eva Schlehahn, Bud Bruegger, Harshvardhan J. Pandit, Rigo Wenning | ||
Documented in | Eu-gdpr Legal-basis, Eu-gdpr Legal-basis-Rights-mapping |
Term | A6-1-a-non-explicit-consent | Prefix | eu-gdpr |
---|---|---|---|
Label | Art.6(1-a) regular consent | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A6-1-a-non-explicit-consent | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | eu-gdpr:A6-1-a → dpv:ExpressedConsent → dpv:InformedConsent → dpv:Consent → dpv:LegalBasis | ||
Object of relation | dpv:hasLegalBasis | ||
Definition | Legal basis based on data subject's given non-explicit express consent to the processing of his or her personal data for one or more specific purposes | ||
Usage Note | Definition of consent: A data subject's unambigious/clear affirmative action that signifies an agreement to process their personal data (Rigo Wenning) . What is referred to as 'non-explicit consent' here is also termed as 'regular' consent in the Article 29 Working Party document "Guidelines on Consent under Regulation 2016/679 (wp259rev.01)". This is the legal basis that requires consent but not at the level of being 'explicit'. | ||
Source | GDPR Art.6-1a | ||
Date Created | 2019-04-10 | ||
Date Modified | 2022-11-24 | ||
Contributors | Eva Schlehahn, Bud Bruegger, Harshvardhan J. Pandit, Rigo Wenning | ||
Documented in | Eu-gdpr Legal-basis, Eu-gdpr Legal-basis-Rights-mapping |
Term | A6-1-b | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 6(1-b) contract | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A6-1-b | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | dpv:Contract → dpv:LegalAgreement → dpv:OrganisationalMeasure → dpv:TechnicalOrganisationalMeasure | ||
Object of relation | dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure | ||
Definition | Legal basis based on performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract | ||
Source | GDPR Art.6-1b | ||
Date Created | 2019-04-05 | ||
Date Modified | 2022-11-24 | ||
Contributors | Eva Schlehahn, Bud Bruegger, Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Legal-basis, Eu-gdpr Legal-basis-Rights-mapping |
Term | A6-1-b-contract-performance | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 6(1-b) contract performance | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A6-1-b-contract-performance | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | eu-gdpr:A6-1-b → dpv:Contract → dpv:LegalAgreement → dpv:OrganisationalMeasure → dpv:TechnicalOrganisationalMeasure | ||
Broader/Parent types | dpv:ContractPerformance → dpv:Contract → dpv:LegalAgreement → dpv:OrganisationalMeasure → dpv:TechnicalOrganisationalMeasure | ||
Object of relation | dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure | ||
Definition | Legal basis based on performance of a contract to which the data subject is party | ||
Source | GDPR Art.6-1b | ||
Date Created | 2022-11-24 | ||
Date Modified | 2022-11-24 | ||
Contributors | Georg P Krog | ||
Documented in | Eu-gdpr Legal-basis, Eu-gdpr Legal-basis-Rights-mapping |
Term | A6-1-b-enter-into-contract | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 6(1-b) enter into contract | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A6-1-b-enter-into-contract | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | dpv:EnterIntoContract → dpv:Contract → dpv:LegalAgreement → dpv:OrganisationalMeasure → dpv:TechnicalOrganisationalMeasure | ||
Broader/Parent types | eu-gdpr:A6-1-b → dpv:Contract → dpv:LegalAgreement → dpv:OrganisationalMeasure → dpv:TechnicalOrganisationalMeasure | ||
Object of relation | dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure | ||
Definition | Legal basis based on taking steps at the request of the data subject prior to entering into a contract | ||
Source | GDPR Art.6-1b | ||
Date Created | 2022-11-24 | ||
Date Modified | 2022-11-24 | ||
Contributors | Georg P Krog | ||
Documented in | Eu-gdpr Legal-basis, Eu-gdpr Legal-basis-Rights-mapping |
Term | A6-1-c | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 6(1-c) legal obligation | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A6-1-c | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | dpv:LegalObligation → dpv:LegalBasis | ||
Object of relation | dpv:hasLegalBasis | ||
Definition | Legal basis based on compliance with a legal obligation to which the controller is subject | ||
Source | GDPR Art.6-1c | ||
Date Created | 2019-04-05 | ||
Date Modified | 2022-11-24 | ||
Contributors | Eva Schlehahn, Bud Bruegger, Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Legal-basis, Eu-gdpr Legal-basis-Rights-mapping |
Term | A6-1-d | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 6(1-d) protect vital interests | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A6-1-d | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | dpv:VitalInterest → dpv:LegalBasis | ||
Object of relation | dpv:hasLegalBasis | ||
Definition | Legal basis based on protecting the vital interests of the data subject or of another natural person | ||
Source | GDPR Art.6-1d | ||
Date Created | 2019-04-05 | ||
Date Modified | 2022-11-24 | ||
Contributors | Eva Schlehahn, Bud Bruegger, Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Legal-basis, Eu-gdpr Legal-basis-Rights-mapping |
Term | A6-1-d-data-subject | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 6(1-d) protect vital interests of data subject | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A6-1-d-data-subject | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | eu-gdpr:A6-1-d → dpv:VitalInterest → dpv:LegalBasis | ||
Broader/Parent types | dpv:VitalInterestOfDataSubject → dpv:VitalInterestOfNaturalPerson → dpv:VitalInterest → dpv:LegalBasis | ||
Object of relation | dpv:hasLegalBasis | ||
Definition | Legal basis based on protecting the vital interests of the data subject | ||
Source | GDPR Art.6-1d | ||
Date Created | 2022-11-24 | ||
Date Modified | 2022-11-24 | ||
Contributors | Georg P Krog | ||
Documented in | Eu-gdpr Legal-basis, Eu-gdpr Legal-basis-Rights-mapping |
Term | A6-1-d-natual-person | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 6(1-d) protect vital interests of natural person | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A6-1-d-natual-person | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | dpv:VitalInterestOfNaturalPerson → dpv:VitalInterest → dpv:LegalBasis | ||
Broader/Parent types | eu-gdpr:A6-1-d → dpv:VitalInterest → dpv:LegalBasis | ||
Object of relation | dpv:hasLegalBasis | ||
Definition | Legal basis based on protecting the vital interests of another natural person that is not the data subject | ||
Source | GDPR Art.6-1d | ||
Date Created | 2022-11-24 | ||
Date Modified | 2022-11-24 | ||
Contributors | Georg P Krog | ||
Documented in | Eu-gdpr Legal-basis, Eu-gdpr Legal-basis-Rights-mapping |
Term | A6-1-e | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 6(1-e) public interest or official authority | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A6-1-e | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | dpv:OfficialAuthorityOfController → dpv:LegalBasis | ||
Broader/Parent types | dpv:PublicInterest → dpv:LegalBasis | ||
Object of relation | dpv:hasLegalBasis | ||
Definition | Legal basis based on performance of a task carried out in the public interest or in the exercise of official authority vested in the controller | ||
Source | GDPR Art.6-1e | ||
Date Created | 2019-04-05 | ||
Date Modified | 2022-11-24 | ||
Contributors | Eva Schlehahn, Bud Bruegger, Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Legal-basis, Eu-gdpr Legal-basis-Rights-mapping |
Term | A6-1-e-official-authority | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 6(1-e) official authority | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A6-1-e-official-authority | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | eu-gdpr:A6-1-e → dpv:OfficialAuthorityOfController → dpv:LegalBasis | ||
Broader/Parent types | eu-gdpr:A6-1-e → dpv:PublicInterest → dpv:LegalBasis | ||
Object of relation | dpv:hasLegalBasis | ||
Definition | Legal basis based on the exercise of official authority vested in the controller | ||
Source | GDPR Art.6-1e | ||
Date Created | 2022-08-24 | ||
Date Modified | 2022-11-24 | ||
Contributors | Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Legal-basis, Eu-gdpr Legal-basis-Rights-mapping |
Term | A6-1-e-public-interest | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 6(1-e) public interest | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A6-1-e-public-interest | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | eu-gdpr:A6-1-e → dpv:OfficialAuthorityOfController → dpv:LegalBasis | ||
Broader/Parent types | eu-gdpr:A6-1-e → dpv:PublicInterest → dpv:LegalBasis | ||
Object of relation | dpv:hasLegalBasis | ||
Definition | Legal basis based on performance of a task carried out in the public interest | ||
Source | GDPR Art.6-1e | ||
Date Created | 2022-08-24 | ||
Date Modified | 2022-11-24 | ||
Contributors | Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Legal-basis, Eu-gdpr Legal-basis-Rights-mapping |
Term | A6-1-f | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 6(1-f) legitimate interest | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A6-1-f | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | dpv:LegitimateInterest → dpv:LegalBasis | ||
Object of relation | dpv:hasLegalBasis | ||
Definition | Legal basis based on the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child | ||
Source | GDPR Art.6-1f | ||
Date Created | 2019-04-05 | ||
Date Modified | 2022-11-24 | ||
Contributors | Eva Schlehahn, Bud Bruegger, Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Legal-basis, Eu-gdpr Legal-basis-Rights-mapping |
Term | A6-1-f-controller | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 6(1-f) legitimate interest of controller | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A6-1-f-controller | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | eu-gdpr:A6-1-f → dpv:LegitimateInterest → dpv:LegalBasis | ||
Broader/Parent types | dpv:LegitimateInterestOfController → dpv:LegitimateInterest → dpv:LegalBasis | ||
Object of relation | dpv:hasLegalBasis | ||
Definition | Legal basis based on the purposes of the legitimate interests pursued by the controller, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child | ||
Source | GDPR Art.6-1f | ||
Date Created | 2022-11-24 | ||
Date Modified | 2022-11-24 | ||
Contributors | Georg P Krog | ||
Documented in | Eu-gdpr Legal-basis, Eu-gdpr Legal-basis-Rights-mapping |
Term | A6-1-f-third-party | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 6(1-f) legitimate interest of third party | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A6-1-f-third-party | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | dpv:LegitimateInterestOfThirdParty → dpv:LegitimateInterest → dpv:LegalBasis | ||
Broader/Parent types | eu-gdpr:A6-1-f → dpv:LegitimateInterest → dpv:LegalBasis | ||
Object of relation | dpv:hasLegalBasis | ||
Definition | Legal basis based on the purposes of the legitimate interests pursued by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child | ||
Source | GDPR Art.6-1f | ||
Date Created | 2022-11-24 | ||
Date Modified | 2022-11-24 | ||
Contributors | Georg P Krog | ||
Documented in | Eu-gdpr Legal-basis, Eu-gdpr Legal-basis-Rights-mapping |
Term | A7-3 | Prefix | eu-gdpr |
---|---|---|---|
Label | A7-3 Right to Withdraw Consent | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A7-3 | ||
Type | rdfs:Class, skos:Concept, dpv:Right | ||
Broader/Parent types | dpv:DataSubjectRight → dpv:Right | ||
Object of relation | dpv:hasRight | ||
Definition | Right to withdraw consent at any time | ||
Source | GDPR Art.7-3 | ||
Date Created | 2020-11-04 | ||
Contributors | Beatriz Esteves, Georg Krog, Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Rights |
Term | A77 | Prefix | eu-gdpr |
---|---|---|---|
Label | A77 Right to Complaint | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A77 | ||
Type | rdfs:Class, skos:Concept, dpv:Right | ||
Broader/Parent types | dpv:DataSubjectRight → dpv:Right | ||
Object of relation | dpv:hasRight | ||
Definition | Right to lodge a complaint with a supervisory authority | ||
Source | GDPR Art.77 | ||
Date Created | 2020-11-04 | ||
Contributors | Beatriz Esteves, Georg Krog, Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Rights |
Term | A9-2-a | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 9(2-a) explicit consent | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A9-2-a | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | dpv:ExplicitlyExpressedConsent → dpv:ExpressedConsent → dpv:InformedConsent → dpv:Consent → dpv:LegalBasis | ||
Object of relation | dpv:hasLegalBasis | ||
Definition | explicit consent with special categories of data | ||
Source | GDPR Art.9-2a | ||
Date Created | 2019-04-05 | ||
Date Modified | 2021-09-08 | ||
Contributors | Eva Schlehahn, Bud Bruegger | ||
Documented in | Eu-gdpr Legal-basis-Special |
Term | A9-2-b | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 9(2-b) employment, social security, social protection law | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A9-2-b | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | dpv:LegalBasis | ||
Object of relation | dpv:hasLegalBasis | ||
Definition | employment and social security and social protection law | ||
Source | GDPR Art.9-2b | ||
Date Created | 2019-04-05 | ||
Contributors | Eva Schlehahn, Bud Bruegger | ||
Documented in | Eu-gdpr Legal-basis-Special |
Term | A9-2-c | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 9(2-c) protect vital interest | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A9-2-c | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | dpv:VitalInterest → dpv:LegalBasis | ||
Object of relation | dpv:hasLegalBasis | ||
Definition | protection of the vital interests | ||
Source | GDPR Art.9-2c | ||
Date Created | 2019-04-05 | ||
Date Modified | 2021-09-08 | ||
Contributors | Eva Schlehahn, Bud Bruegger | ||
Documented in | Eu-gdpr Legal-basis-Special |
Term | A9-2-d | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 9(2-d) legitimate activities | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A9-2-d | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | dpv:LegitimateInterest → dpv:LegalBasis | ||
Object of relation | dpv:hasLegalBasis | ||
Definition | legitimate activities with appropriate safeguards by a foundation, association or any other not-for-profit body with a political, philosophical, religious or trade union aim and on condition that the processing relates solely to the members or to former members of the body or to persons who have regular contact with it in connection with its purposes and that the personal data are not disclosed outside that body without the consent of the data subjects; | ||
Source | GDPR Art.9-2d | ||
Date Created | 2019-04-05 | ||
Date Modified | 2021-09-08 | ||
Contributors | Eva Schlehahn, Bud Bruegger | ||
Documented in | Eu-gdpr Legal-basis-Special |
Term | A9-2-e | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 9(2-e) data made public | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A9-2-e | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | dpv:LegalBasis | ||
Object of relation | dpv:hasLegalBasis | ||
Definition | data manifestly made public by the data subject | ||
Source | GDPR Art.9-2e | ||
Date Created | 2019-04-05 | ||
Contributors | Eva Schlehahn, Bud Bruegger | ||
Documented in | Eu-gdpr Legal-basis-Special |
Term | A9-2-f | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 9(2-f) judicial process | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A9-2-f | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | dpv:LegalBasis | ||
Object of relation | dpv:hasLegalBasis | ||
Definition | establishment, exercise or defence of legal claims / courts acting in their judicial capacity | ||
Source | GDPR Art.9-2f | ||
Date Created | 2019-04-05 | ||
Contributors | Eva Schlehahn, Bud Bruegger | ||
Documented in | Eu-gdpr Legal-basis-Special |
Term | A9-2-g | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 9(2-g) public interest | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A9-2-g | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | dpv:PublicInterest → dpv:LegalBasis | ||
Object of relation | dpv:hasLegalBasis | ||
Definition | substantial public interest, on the basis of Union or Member State law | ||
Source | GDPR Art.9-2g | ||
Date Created | 2019-04-05 | ||
Date Modified | 2021-09-08 | ||
Contributors | Eva Schlehahn, Bud Bruegger | ||
Documented in | Eu-gdpr Legal-basis-Special |
Term | A9-2-h | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 9(2-h) health & medicine | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A9-2-h | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | dpv:LegalBasis | ||
Object of relation | dpv:hasLegalBasis | ||
Definition | preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services on the basis of Union or Member State law or pursuant to contract with a health professional and subject to the conditions and safeguards referred to in paragraph 3 | ||
Source | GDPR Art.9-2h | ||
Date Created | 2019-04-05 | ||
Contributors | Eva Schlehahn, Bud Bruegger | ||
Documented in | Eu-gdpr Legal-basis-Special |
Term | A9-2-i | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 9(2-i) public interest in public health | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A9-2-i | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | dpv:PublicInterest → dpv:LegalBasis | ||
Object of relation | dpv:hasLegalBasis | ||
Definition | public interest in public health | ||
Source | GDPR Art.9-2i | ||
Date Created | 2019-04-05 | ||
Date Modified | 2021-09-08 | ||
Contributors | Eva Schlehahn, Bud Bruegger | ||
Documented in | Eu-gdpr Legal-basis-Special |
Term | A9-2-j | Prefix | eu-gdpr |
---|---|---|---|
Label | Art 9(2-j) public interest, scientific research, statistical purpose | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#A9-2-j | ||
Type | rdfs:Class, skos:Concept, dpv:LegalBasis | ||
Broader/Parent types | dpv:PublicInterest → dpv:LegalBasis | ||
Object of relation | dpv:hasLegalBasis | ||
Definition | public interest, scientific or historical research purposes or statistical purposes based on Union or Member State law | ||
Source | GDPR Art.9-2j | ||
Date Created | 2019-04-05 | ||
Date Modified | 2021-09-08 | ||
Contributors | Eva Schlehahn, Bud Bruegger | ||
Documented in | Eu-gdpr Legal-basis-Special |
Term | AdHocContractualClauses | Prefix | eu-gdpr |
---|---|---|---|
Label | AdHoc Contractual Clauses | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#AdHocContractualClauses | ||
Type | rdfs:Class, skos:Concept, dpv:OrganisationalMeasure | ||
Broader/Parent types | eu-gdpr:DataTransferTool → dpv:OrganisationalMeasure → dpv:TechnicalOrganisationalMeasure | ||
Broader/Parent types | dpv:Contract → dpv:LegalAgreement → dpv:OrganisationalMeasure → dpv:TechnicalOrganisationalMeasure | ||
Object of relation | dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure | ||
Definition | Contractual Clauses not drafted by the EU Commission, e.g. by the Controller | ||
Source | EDPB Recommendations 01/2020 on Supplementary Measures and Transfer Tools | ||
Date Created | 2021-09-22 | ||
Contributors | Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Data-transfers |
Term | BindingCorporateRules | Prefix | eu-gdpr |
---|---|---|---|
Label | Binding Corporate Rules (BCR) | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#BindingCorporateRules | ||
Type | rdfs:Class, skos:Concept, dpv:OrganisationalMeasure | ||
Broader/Parent types | eu-gdpr:DataTransferTool → dpv:OrganisationalMeasure → dpv:TechnicalOrganisationalMeasure | ||
Object of relation | dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure | ||
Definition | Binding corporate rules (BCR) are data protection policies adhered to by companies established in the EU for transfers of personal data outside the EU within a group of undertakings or enterprises. | ||
Source | GDPR Art.4-20 | ||
Date Created | 2021-09-22 | ||
Contributors | David Hickey, Paul Ryan, Georg P Krog, Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Data-transfers |
Term | CertificationMechanismsForDataTransfers | Prefix | eu-gdpr |
---|---|---|---|
Label | Certification Mechanisms for Data Transfers | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#CertificationMechanismsForDataTransfers | ||
Type | rdfs:Class, skos:Concept, dpv:OrganisationalMeasure | ||
Broader/Parent types | eu-gdpr:DataTransferTool → dpv:OrganisationalMeasure → dpv:TechnicalOrganisationalMeasure | ||
Object of relation | dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure | ||
Definition | Certification and its binding or specified mechanisms intended to provide sufficient safeguards for data transfers | ||
Source | EDPB Recommendations 01/2020 on Supplementary Measures and Transfer Tools | ||
Date Created | 2021-09-22 | ||
Contributors | Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Data-transfers |
Term | CodesOfConductForDataTransfers | Prefix | eu-gdpr |
---|---|---|---|
Label | Codes of Conduct for Data Transfers | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#CodesOfConductForDataTransfers | ||
Type | rdfs:Class, skos:Concept, dpv:OrganisationalMeasure | ||
Broader/Parent types | eu-gdpr:DataTransferTool → dpv:OrganisationalMeasure → dpv:TechnicalOrganisationalMeasure | ||
Object of relation | dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure | ||
Definition | Codes of Conduct that outline sufficient safeguards for carrying out data transfers | ||
Source | EDPB Recommendations 01/2020 on Supplementary Measures and Transfer Tools | ||
Date Created | 2021-09-22 | ||
Contributors | Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Data-transfers |
Term | DataTransferTool | Prefix | eu-gdpr |
---|---|---|---|
Label | Data Transfer Tool | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#DataTransferTool | ||
Type | rdfs:Class, skos:Concept, dpv:OrganisationalMeasure | ||
Broader/Parent types | dpv:OrganisationalMeasure → dpv:TechnicalOrganisationalMeasure | ||
Object of relation | dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure | ||
Definition | A legal instrument or tool intended to assist or justify data transfers | ||
Source | GDPR Art.46,EDPB Recommendations 01/2020 on Supplementary Measures and Transfer Tools | ||
Date Created | 2021-09-22 | ||
Date Modified | 2023-10-30 | ||
Contributors | David Hickey, Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Data-transfers |
Term | DirectDataCollectionNotice | Prefix | eu-gdpr |
---|---|---|---|
Label | Direct Data Collection Notice | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#DirectDataCollectionNotice | ||
Type | rdfs:Class, skos:Concept, dpv:OrganisationalMeasure | ||
Broader/Parent types | dpv:RightFulfilmentNotice → dpv:Notice → dpv:OrganisationalMeasure → dpv:TechnicalOrganisationalMeasure | ||
Object of relation | dpv:hasNotice, dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure | ||
Definition | A Notice provided in fulfilment of GDPR's Art.13 regarding information to be provided where personal data are collected from the data subject | ||
Date Created | 2022-11-09 | ||
Contributors | Beatriz Esteves, Georg Krog, Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Rights |
Term | DPIAConformant | Prefix | eu-gdpr |
---|---|---|---|
Label | DPIA Conformant | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#DPIAConformant | ||
Type | rdfs:Class, skos:Concept, eu-gdpr:DPIAConformity | ||
Broader/Parent types | eu-gdpr:DPIAConformity → dpv:ConformanceStatus → dpv:Status → dpv:Context | ||
Object of relation | dpv:hasContext, dpv:hasStatus | ||
Definition | Expressing the specified process is conformant with a DPIA | ||
Date Created | 2022-10-22 | ||
Contributors | Harshvardhan J. Pandit, Georg P Krog | ||
Documented in | Eu-gdpr Dpia |
Term | DPIAConformity | Prefix | eu-gdpr |
---|---|---|---|
Label | DPIA Conformity | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#DPIAConformity | ||
Type | rdfs:Class, skos:Concept | ||
Broader/Parent types | dpv:ConformanceStatus → dpv:Status → dpv:Context | ||
Object of relation | dpv:hasContext, dpv:hasStatus | ||
Definition | Conformity of a process with a DPIA | ||
Date Created | 2022-10-22 | ||
Contributors | Harshvardhan J. Pandit, Georg P Krog | ||
Documented in | Eu-gdpr Dpia |
Term | DPIAIndicatesHighRisk | Prefix | eu-gdpr |
---|---|---|---|
Label | DPIA Indicates High Risk | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#DPIAIndicatesHighRisk | ||
Type | rdfs:Class, skos:Concept, eu-gdpr:DPIARiskStatus | ||
Broader/Parent types | eu-gdpr:DPIARiskStatus → dpv:AuditStatus → dpv:Status → dpv:Context | ||
Object of relation | dpv:hasAuditStatus, dpv:hasContext, dpv:hasStatus | ||
Definition | DPIA identifying high risk levels | ||
Date Created | 2022-06-22 | ||
Contributors | Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Dpia |
Term | DPIAIndicatesLowRisk | Prefix | eu-gdpr |
---|---|---|---|
Label | DPIA Indicates Low Risk | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#DPIAIndicatesLowRisk | ||
Type | rdfs:Class, skos:Concept, eu-gdpr:DPIARiskStatus | ||
Broader/Parent types | eu-gdpr:DPIARiskStatus → dpv:AuditStatus → dpv:Status → dpv:Context | ||
Object of relation | dpv:hasAuditStatus, dpv:hasContext, dpv:hasStatus | ||
Definition | DPIA identifying low risk levels | ||
Date Created | 2022-06-22 | ||
Contributors | Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Dpia |
Term | DPIAIndicatesNoRisk | Prefix | eu-gdpr |
---|---|---|---|
Label | DPIA Indicates No Risk | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#DPIAIndicatesNoRisk | ||
Type | rdfs:Class, skos:Concept, eu-gdpr:DPIARiskStatus | ||
Broader/Parent types | eu-gdpr:DPIARiskStatus → dpv:AuditStatus → dpv:Status → dpv:Context | ||
Object of relation | dpv:hasAuditStatus, dpv:hasContext, dpv:hasStatus | ||
Definition | DPIA identifying no risk is present | ||
Date Created | 2022-06-22 | ||
Contributors | Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Dpia |
Term | DPIANecessityAssessment | Prefix | eu-gdpr |
---|---|---|---|
Label | DPIA Necessity Assessment | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#DPIANecessityAssessment | ||
Type | rdfs:Class, skos:Concept, dpv:OrganisationalMeasure | ||
Broader/Parent types | dpv:DPIA → dpv:ImpactAssessment → dpv:Assessment → dpv:OrganisationalMeasure → dpv:TechnicalOrganisationalMeasure | ||
Object of relation | dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure | ||
Definition | Process that determines whether a DPIA is necessary | ||
Date Created | 2022-06-22 | ||
Contributors | Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Dpia |
Term | DPIANecessityStatus | Prefix | eu-gdpr |
---|---|---|---|
Label | DPIA Necessity Status | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#DPIANecessityStatus | ||
Type | rdfs:Class, skos:Concept | ||
Broader/Parent types | dpv:AuditStatus → dpv:Status → dpv:Context | ||
Object of relation | dpv:hasAuditStatus, dpv:hasContext, dpv:hasStatus | ||
Definition | Status reflecting whether a DPIA is necessary | ||
Date Created | 2022-06-22 | ||
Contributors | Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Dpia |
Term | DPIANonConformant | Prefix | eu-gdpr |
---|---|---|---|
Label | DPIA Non-Conformant | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#DPIANonConformant | ||
Type | rdfs:Class, skos:Concept, eu-gdpr:DPIAConformity | ||
Broader/Parent types | eu-gdpr:DPIAConformity → dpv:ConformanceStatus → dpv:Status → dpv:Context | ||
Object of relation | dpv:hasContext, dpv:hasStatus | ||
Definition | Expressing the specified process is not conformant with a DPIA | ||
Date Created | 2022-10-22 | ||
Contributors | Harshvardhan J. Pandit, Georg P Krog | ||
Documented in | Eu-gdpr Dpia |
Term | DPIANotRequired | Prefix | eu-gdpr |
---|---|---|---|
Label | DPIA Not Required | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#DPIANotRequired | ||
Type | rdfs:Class, skos:Concept, eu-gdpr:DPIANecessityStatus | ||
Broader/Parent types | eu-gdpr:DPIANecessityStatus → dpv:AuditStatus → dpv:Status → dpv:Context | ||
Object of relation | dpv:hasAuditStatus, dpv:hasContext, dpv:hasStatus | ||
Definition | Condition where a DPIA is not required | ||
Date Created | 2022-06-22 | ||
Contributors | Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Dpia |
Term | DPIAOutcome | Prefix | eu-gdpr |
---|---|---|---|
Label | DPIA Outcome | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#DPIAOutcome | ||
Type | rdfs:Class, skos:Concept, dpv:OrganisationalMeasure | ||
Broader/Parent types | dpv:DPIA → dpv:ImpactAssessment → dpv:Assessment → dpv:OrganisationalMeasure → dpv:TechnicalOrganisationalMeasure | ||
Object of relation | dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure | ||
Definition | Process representing determining outcome of a DPIA | ||
Date Created | 2022-06-22 | ||
Contributors | Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Dpia |
Term | DPIAOutcomeDPAConsultation | Prefix | eu-gdpr |
---|---|---|---|
Label | DPIA Outcome DPA Consultation | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#DPIAOutcomeDPAConsultation | ||
Type | rdfs:Class, skos:Concept, eu-gdpr:DPIAOutcomeStatus | ||
Broader/Parent types | eu-gdpr:DPIAOutcomeStatus → dpv:AuditStatus → dpv:Status → dpv:Context | ||
Object of relation | dpv:hasAuditStatus, dpv:hasContext, dpv:hasStatus | ||
Definition | DPIA outcome status indicating a DPA consultation is required | ||
Date Created | 2022-06-22 | ||
Contributors | Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Dpia |
Term | DPIAOutcomeHighResidualRisk | Prefix | eu-gdpr |
---|---|---|---|
Label | DPIA Outcome High Residual Risk | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#DPIAOutcomeHighResidualRisk | ||
Type | rdfs:Class, skos:Concept, eu-gdpr:DPIAOutcomeStatus | ||
Broader/Parent types | eu-gdpr:DPIAOutcomeStatus → dpv:AuditStatus → dpv:Status → dpv:Context | ||
Object of relation | dpv:hasAuditStatus, dpv:hasContext, dpv:hasStatus | ||
Definition | DPIA outcome status indicating high residual risk which are not acceptable for continuation | ||
Date Created | 2022-06-22 | ||
Contributors | Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Dpia |
Term | DPIAOutcomeRisksMitigated | Prefix | eu-gdpr |
---|---|---|---|
Label | DPIA Outcome Risks Mitigated | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#DPIAOutcomeRisksMitigated | ||
Type | rdfs:Class, skos:Concept, eu-gdpr:DPIAOutcomeStatus | ||
Broader/Parent types | eu-gdpr:DPIAOutcomeStatus → dpv:AuditStatus → dpv:Status → dpv:Context | ||
Object of relation | dpv:hasAuditStatus, dpv:hasContext, dpv:hasStatus | ||
Definition | DPIA outcome status indicating (all) risks have been mitigated | ||
Date Created | 2022-06-22 | ||
Contributors | Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Dpia |
Term | DPIAOutcomeStatus | Prefix | eu-gdpr |
---|---|---|---|
Label | DPIA Outcome Status | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#DPIAOutcomeStatus | ||
Type | rdfs:Class, skos:Concept | ||
Broader/Parent types | dpv:AuditStatus → dpv:Status → dpv:Context | ||
Object of relation | dpv:hasAuditStatus, dpv:hasContext, dpv:hasStatus | ||
Definition | Status reflecting the outcomes of a DPIA | ||
Date Created | 2022-06-22 | ||
Contributors | Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Dpia |
Term | DPIAProcedure | Prefix | eu-gdpr |
---|---|---|---|
Label | DPIA Procedure | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#DPIAProcedure | ||
Type | rdfs:Class, skos:Concept, dpv:OrganisationalMeasure | ||
Broader/Parent types | dpv:DPIA → dpv:ImpactAssessment → dpv:Assessment → dpv:OrganisationalMeasure → dpv:TechnicalOrganisationalMeasure | ||
Object of relation | dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure | ||
Definition | Process representing carrying out a DPIA | ||
Date Created | 2022-06-22 | ||
Contributors | Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Dpia |
Term | DPIAProcessingRecommendation | Prefix | eu-gdpr |
---|---|---|---|
Label | DPIA Processing Recommendation | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#DPIAProcessingRecommendation | ||
Type | rdfs:Class, skos:Concept | ||
Broader/Parent types | dpv:AuditStatus → dpv:Status → dpv:Context | ||
Object of relation | dpv:hasAuditStatus, dpv:hasContext, dpv:hasStatus | ||
Definition | Recommendation from the DPIA regarding processing | ||
Date Created | 2022-10-22 | ||
Contributors | Harshvardhan J. Pandit, Georg P Krog | ||
Documented in | Eu-gdpr Dpia |
Term | DPIARecommendsProcessingContinue | Prefix | eu-gdpr |
---|---|---|---|
Label | DPIA Recommends Processing Continue | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#DPIARecommendsProcessingContinue | ||
Type | rdfs:Class, skos:Concept, eu-gdpr:DPIAProcessingRecommendation | ||
Broader/Parent types | eu-gdpr:DPIAProcessingRecommendation → dpv:AuditStatus → dpv:Status → dpv:Context | ||
Object of relation | dpv:hasAuditStatus, dpv:hasContext, dpv:hasStatus | ||
Definition | Recommendation from a DPIA that the processing may continue | ||
Date Created | 2022-10-22 | ||
Contributors | Harshvardhan J. Pandit, Georg P Krog | ||
Documented in | Eu-gdpr Dpia |
Term | DPIARecommendsProcessingNotContinue | Prefix | eu-gdpr |
---|---|---|---|
Label | DPIA Recommends Processing Not Continue | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#DPIARecommendsProcessingNotContinue | ||
Type | rdfs:Class, skos:Concept, eu-gdpr:DPIAProcessingRecommendation | ||
Broader/Parent types | eu-gdpr:DPIAProcessingRecommendation → dpv:AuditStatus → dpv:Status → dpv:Context | ||
Object of relation | dpv:hasAuditStatus, dpv:hasContext, dpv:hasStatus | ||
Definition | Recommendation from a DPIA that the processing should not continue | ||
Date Created | 2022-10-22 | ||
Contributors | Harshvardhan J. Pandit, Georg P Krog | ||
Documented in | Eu-gdpr Dpia |
Term | DPIARequired | Prefix | eu-gdpr |
---|---|---|---|
Label | DPIA Required | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#DPIARequired | ||
Type | rdfs:Class, skos:Concept, eu-gdpr:DPIANecessityStatus | ||
Broader/Parent types | eu-gdpr:DPIANecessityStatus → dpv:AuditStatus → dpv:Status → dpv:Context | ||
Object of relation | dpv:hasAuditStatus, dpv:hasContext, dpv:hasStatus | ||
Definition | Condition where a DPIA is required | ||
Date Created | 2022-06-22 | ||
Contributors | Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Dpia |
Term | DPIARiskStatus | Prefix | eu-gdpr |
---|---|---|---|
Label | DPIA Risk Status | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#DPIARiskStatus | ||
Type | rdfs:Class, skos:Concept | ||
Broader/Parent types | dpv:AuditStatus → dpv:Status → dpv:Context | ||
Object of relation | dpv:hasAuditStatus, dpv:hasContext, dpv:hasStatus | ||
Definition | Status reflecting the status of risk associated with a DPIA | ||
Date Created | 2022-06-22 | ||
Contributors | Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Dpia |
Term | GDPRComplianceUnknown | Prefix | eu-gdpr |
---|---|---|---|
Label | GDPR Compliance Unknown | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#GDPRComplianceUnknown | ||
Type | rdfs:Class, skos:Concept, dpv:Lawfulness | ||
Broader/Parent types | eu-gdpr:GDPRLawfulness → dpv:Lawfulness → dpv:ComplianceStatus → dpv:Status → dpv:Context | ||
Object of relation | dpv:hasComplianceStatus, dpv:hasContext, dpv:hasLawfulness, dpv:hasStatus | ||
Definition | State where lawfulness or compliance with GDPR is unknown | ||
Date Created | 2022-10-22 | ||
Contributors | Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Compliance |
Term | GDPRCompliant | Prefix | eu-gdpr |
---|---|---|---|
Label | GDPR Compliant | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#GDPRCompliant | ||
Type | rdfs:Class, skos:Concept, dpv:Lawfulness | ||
Broader/Parent types | eu-gdpr:GDPRLawfulness → dpv:Lawfulness → dpv:ComplianceStatus → dpv:Status → dpv:Context | ||
Object of relation | dpv:hasComplianceStatus, dpv:hasContext, dpv:hasLawfulness, dpv:hasStatus | ||
Definition | State of being lawful or legally compliant for GDPR | ||
Date Created | 2022-10-22 | ||
Contributors | Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Compliance |
Term | GDPRLawfulness | Prefix | eu-gdpr |
---|---|---|---|
Label | GDPR Lawfulness | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#GDPRLawfulness | ||
Type | rdfs:Class, skos:Concept, dpv:Lawfulness | ||
Broader/Parent types | dpv:Lawfulness → dpv:ComplianceStatus → dpv:Status → dpv:Context | ||
Object of relation | dpv:hasComplianceStatus, dpv:hasContext, dpv:hasLawfulness, dpv:hasStatus | ||
Definition | Status or state associated with being lawful or legally compliant regarding GDPR | ||
Date Created | 2022-10-22 | ||
Contributors | Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Compliance |
Term | GDPRNonCompliant | Prefix | eu-gdpr |
---|---|---|---|
Label | GDPR Non-compliant | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#GDPRNonCompliant | ||
Type | rdfs:Class, skos:Concept, dpv:Lawfulness | ||
Broader/Parent types | eu-gdpr:GDPRLawfulness → dpv:Lawfulness → dpv:ComplianceStatus → dpv:Status → dpv:Context | ||
Object of relation | dpv:hasComplianceStatus, dpv:hasContext, dpv:hasLawfulness, dpv:hasStatus | ||
Definition | State of being unlawful or legally non-compliant for GDPR | ||
Date Created | 2022-10-22 | ||
Contributors | Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Compliance |
Term | IndirectDataCollectionNotice | Prefix | eu-gdpr |
---|---|---|---|
Label | Indirect Data Collection Notice | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#IndirectDataCollectionNotice | ||
Type | rdfs:Class, skos:Concept, dpv:OrganisationalMeasure | ||
Broader/Parent types | dpv:RightFulfilmentNotice → dpv:Notice → dpv:OrganisationalMeasure → dpv:TechnicalOrganisationalMeasure | ||
Object of relation | dpv:hasNotice, dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure | ||
Definition | A Notice provided in fulfilment of GDPR's Art.14 regarding information to be provided where personal data are not collected from the data subject | ||
Date Created | 2022-11-09 | ||
Contributors | Beatriz Esteves, Georg Krog, Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Rights |
Term | RightsRecipientsNotice | Prefix | eu-gdpr |
---|---|---|---|
Label | Rights Recipients Notice | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#RightsRecipientsNotice | ||
Type | rdfs:Class, skos:Concept, dpv:OrganisationalMeasure | ||
Broader/Parent types | dpv:RightFulfilmentNotice → dpv:Notice → dpv:OrganisationalMeasure → dpv:TechnicalOrganisationalMeasure | ||
Object of relation | dpv:hasNotice, dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure | ||
Definition | A Notice provided in fulfilment of GDPR's Art.19 regarding Recipients to whom a rights exercise has been communicated, such as regarding rectification (A.16) or erasure of personal data (A.17) or restriction of processing (A.18) | ||
Date Created | 2022-11-09 | ||
Contributors | Beatriz Esteves, Georg Krog, Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Rights |
Term | SARNotice | Prefix | eu-gdpr |
---|---|---|---|
Label | SAR Notice | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#SARNotice | ||
Type | rdfs:Class, skos:Concept, dpv:OrganisationalMeasure | ||
Broader/Parent types | dpv:RightFulfilmentNotice → dpv:Notice → dpv:OrganisationalMeasure → dpv:TechnicalOrganisationalMeasure | ||
Object of relation | dpv:hasNotice, dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure | ||
Definition | A Notice provided in fulfilment of GDPR's Art.15 regarding information to be provided for Right of Access or Subject Access Request (SAR) | ||
Date Created | 2022-11-09 | ||
Contributors | Beatriz Esteves, Georg Krog, Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Rights |
Term | SCCByCommission | Prefix | eu-gdpr |
---|---|---|---|
Label | SCCs adopted by Commission | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#SCCByCommission | ||
Type | rdfs:Class, skos:Concept, dpv:OrganisationalMeasure | ||
Broader/Parent types | eu-gdpr:StandardContractualClauses → dpv:Contract → dpv:LegalAgreement → dpv:OrganisationalMeasure → dpv:TechnicalOrganisationalMeasure | ||
Broader/Parent types | eu-gdpr:StandardContractualClauses → eu-gdpr:DataTransferTool → dpv:OrganisationalMeasure → dpv:TechnicalOrganisationalMeasure | ||
Object of relation | dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure | ||
Definition | Standard contractual clauses adopted by the Commission in accordance with the examination procedure referred to in GDPR Article 93(2) | ||
Source | GDPR Art.46-2c | ||
Date Created | 2021-09-22 | ||
Contributors | David Hickey, Paul Ryan, Georg P Krog, Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Data-transfers |
Term | SCCBySupervisoryAuthority | Prefix | eu-gdpr |
---|---|---|---|
Label | SCCs adopted by Supervisory Authority | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#SCCBySupervisoryAuthority | ||
Type | rdfs:Class, skos:Concept, dpv:OrganisationalMeasure | ||
Broader/Parent types | eu-gdpr:StandardContractualClauses → dpv:Contract → dpv:LegalAgreement → dpv:OrganisationalMeasure → dpv:TechnicalOrganisationalMeasure | ||
Broader/Parent types | eu-gdpr:StandardContractualClauses → eu-gdpr:DataTransferTool → dpv:OrganisationalMeasure → dpv:TechnicalOrganisationalMeasure | ||
Object of relation | dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure | ||
Definition | Standard data protection clauses adopted by a supervisory authority and approved by the Commission pursuant to the examination procedure referred to in GDPR Article 93(2) | ||
Source | GDPR Art.46-2d | ||
Date Created | 2021-09-22 | ||
Contributors | David Hickey, Paul Ryan, Georg P Krog, Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Data-transfers |
Term | StandardContractualClauses | Prefix | eu-gdpr |
---|---|---|---|
Label | Standard Contractual Clauses (SCC) | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#StandardContractualClauses | ||
Type | rdfs:Class, skos:Concept, dpv:OrganisationalMeasure | ||
Broader/Parent types | dpv:Contract → dpv:LegalAgreement → dpv:OrganisationalMeasure → dpv:TechnicalOrganisationalMeasure | ||
Broader/Parent types | eu-gdpr:DataTransferTool → dpv:OrganisationalMeasure → dpv:TechnicalOrganisationalMeasure | ||
Object of relation | dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure | ||
Definition | Standard Contractual Clauses (SCCs) are pre-approved clauses by the EU for ensuring appropriate data protection safeguards intended for data transfers from the EU to third countries | ||
Source | Implementing Decision on SCC for Data Transfers | ||
Date Created | 2021-09-22 | ||
Contributors | David Hickey, Paul Ryan, Georg P Krog, Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Data-transfers |
Term | SupplementaryMeasure | Prefix | eu-gdpr |
---|---|---|---|
Label | Supplementary Measure | ||
IRI | https://w3id.org/dpv/legal/eu/gdpr#SupplementaryMeasure | ||
Type | rdfs:Class, skos:Concept, dpv:OrganisationalMeasure | ||
Broader/Parent types | eu-gdpr:DataTransferTool → dpv:OrganisationalMeasure → dpv:TechnicalOrganisationalMeasure | ||
Object of relation | dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure | ||
Definition | Supplementary measures are intended to additionally provide safeguards or guarentees to bring the resulting protection in line with EU requirements | ||
Source | EDPB Recommendations 01/2020 on Supplementary Measures and Transfer Tools | ||
Date Created | 2021-09-22 | ||
Contributors | David Hickey, Georg P Krog, Harshvardhan J. Pandit | ||
Documented in | Eu-gdpr Data-transfers |
DPV uses the following terms from [[RDF]] and [[RDFS]] with their defined meanings:
The following external concepts are re-used within DPV:
Term | dcat:Resource | Prefix | dcat |
---|---|---|---|
Label | dcat:Resource | ||
IRI | http://www.w3.org/ns/dcat#Resource | ||
Type | rdfs:Class, rdfs:Class, skos:Concept, skos:Concept | ||
Usage Note | A dataset, data service, or any other resource associated with Right Exercise - such as for providing a copy of data | ||
Date Created | [rdflib.term.Literal('2022-11-02', datatype=rdflib.term.URIRef('http://www.w3.org/2001/XMLSchema#date')), rdflib.term.Literal('2022-11-09', datatype=rdflib.term.URIRef('http://www.w3.org/2001/XMLSchema#date'))] | ||
Contributors | Beatriz Esteves, Georg Krog, Harshvardhan J. Pandit | ||
Documented in | Dpv Rights |
Term | dct:conformsTo | Prefix | dct |
---|---|---|---|
Label | dct:conformsTo | ||
IRI | http://purl.org/dc/terms/conformsTo | ||
Type | rdf:Property, skos:Concept | ||
Usage Note | For expressing an existing standard, guideline, or requirements to which the DPIA document or process will be conforming to. This could be external guidelines published by an Authority, or internal guidelines established by the organisation | ||
Documented in | Eu-gdpr Dpia |
Term | dct:coverage | Prefix | dct |
---|---|---|---|
Label | dct:coverage | ||
IRI | http://purl.org/dc/terms/coverage | ||
Type | rdf:Property, skos:Concept | ||
Usage Note | For expressing coverage (e.g. jurisdictions, products, services) of the DPIA document or process. For temporal coverage, please see dct:temporal. The coverage can be expressed using dpv:PersonalDataHandling, or using another concept, or even be a link or reference to a document, or a textual description | ||
Documented in |
Term | dct:created | Prefix | dct |
---|---|---|---|
Label | dct:created | ||
IRI | http://purl.org/dc/terms/created | ||
Type | rdf:Property, skos:Concept | ||
Usage Note | For expressing when the documentation (e.g. DPIA Necessity Assessment, or DPIA Procedure, or DPIA outcome) was created | ||
Documented in |
Term | dct:dateAccepted | Prefix | dct |
---|---|---|---|
Label | dct:dateAccepted | ||
IRI | http://purl.org/dc/terms/dateAccepted | ||
Type | rdf:Property, skos:Concept | ||
Usage Note | For expressing when the documentation (e.g. DPIA Necessity Assessment, or DPIA Procedure, or DPIA outcome) was accepted through audit or approval | ||
Documented in | Eu-gdpr Dpia |
Term | dct:dateSubmitted | Prefix | dct |
---|---|---|---|
Label | dct:dateSubmitted | ||
IRI | http://purl.org/dc/terms/dateSubmitted | ||
Type | rdf:Property, skos:Concept | ||
Usage Note | For expressing when the documentation (e.g. DPIA Necessity Assessment, or DPIA Procedure, or DPIA outcome) was submitted for audit or approval | ||
Documented in | Eu-gdpr Dpia |
Term | dct:description | Prefix | dct |
---|---|---|---|
Label | dct:description | ||
IRI | http://purl.org/dc/terms/description | ||
Type | rdf:Property, skos:Concept | ||
Usage Note | Indicates a description of the DPIA for human comprehension | ||
Documented in | Eu-gdpr Dpia |
Term | dct:hasPart | Prefix | dct |
---|---|---|---|
Label | dct:hasPart | ||
IRI | http://purl.org/dc/terms/hasPart | ||
Type | rdf:Property, rdf:Property, skos:Concept, skos:Concept | ||
Domain includes | dpv:RightExerciseRecord | ||
Range includes | dpv:RightExerciseActivity | ||
Usage Note | Specifying a RightExerciseRecord has RightExerciseActivity as part of its records | ||
Date Created | 2022-11-02 | ||
Contributors | Harshvardhan J. Pandit | ||
Documented in | Dpv Rights |
Term | dct:identifier | Prefix | dct |
---|---|---|---|
Label | dct:identifier | ||
IRI | http://purl.org/dc/terms/identifier | ||
Type | rdf:Property, skos:Concept | ||
Usage Note | Indicates an identifier associated with the DPIA documentation or process. Identifiers may be reused from existing systems, or created for the purposes of record management | ||
Documented in | Eu-gdpr Dpia |
Term | dct:isPartOf | Prefix | dct |
---|---|---|---|
Label | dct:isPartOf | ||
IRI | http://purl.org/dc/terms/isPartOf | ||
Type | rdf:Property, rdf:Property, skos:Concept, skos:Concept | ||
Domain includes | dpv:RightExerciseActivity | ||
Range includes | dpv:RightExerciseRecord | ||
Usage Note | Specifying a RightExerciseActivity is part of a RightExerciseRecord | ||
Date Created | 2022-11-02 | ||
Contributors | Harshvardhan J. Pandit | ||
Documented in | Dpv Rights |
Term | dct:isVersionOf | Prefix | dct |
---|---|---|---|
Label | dct:isVersionOf | ||
IRI | http://purl.org/dc/terms/isVersionOf | ||
Type | rdf:Property, skos:Concept | ||
Usage Note | For expressing prior versions or iterations of the DPIA document or process | ||
Documented in | Eu-gdpr Dpia |
Term | dct:modified | Prefix | dct |
---|---|---|---|
Label | dct:modified | ||
IRI | http://purl.org/dc/terms/modified | ||
Type | rdf:Property, skos:Concept | ||
Usage Note | For expressing when the documentation (e.g. DPIA Necessity Assessment, or DPIA Procedure, or DPIA outcome) was last modified | ||
Documented in |
Term | dct:subject | Prefix | dct |
---|---|---|---|
Label | dct:subject | ||
IRI | http://purl.org/dc/terms/subject | ||
Type | rdf:Property, skos:Concept | ||
Usage Note | For expressing the subject of the DPIA document or process, where subject refers to the point of focus. For expressing what is affected or included within the DPIA, please see dct:coverage | ||
Documented in |
Term | dct:temporal | Prefix | dct |
---|---|---|---|
Label | dct:temporal | ||
IRI | http://purl.org/dc/terms/temporal | ||
Type | rdf:Property, skos:Concept | ||
Usage Note | For expressing the temporal coverage of the DPIA document or process | ||
Documented in |
Term | dct:title | Prefix | dct |
---|---|---|---|
Label | dct:title | ||
IRI | http://purl.org/dc/terms/title | ||
Type | rdf:Property, skos:Concept | ||
Usage Note | Indicates a title of the DPIA for human comprehension | ||
Documented in |
Term | dct:valid | Prefix | dct |
---|---|---|---|
Label | dct:valid | ||
IRI | http://purl.org/dc/terms/valid | ||
Type | rdf:Property, rdf:Property, skos:Concept, skos:Concept | ||
Usage Note | Specfiying the temporal validity of an activity associated with Right Exercise. For example, limits on duration for providing or accessing provided information | ||
Date Created | 2022-11-02 | ||
Contributors | Harshvardhan J. Pandit | ||
Documented in | Dpv Rights |
Term | dpv:hasStatus | Prefix | dpv |
---|---|---|---|
Label | has status | ||
IRI | https://w3id.org/dpv#hasStatus | ||
Type | rdf:Property, rdf:Property, skos:Concept, skos:Concept | ||
Domain includes | dpv:RightExerciseActivity | ||
Range includes | dpv:Status | ||
Definition | Indicates the status of specified concept | ||
Usage Note | Indicates the status of a Right Exercise Activity | ||
Date Created | [rdflib.term.Literal('2022-11-02', datatype=rdflib.term.URIRef('http://www.w3.org/2001/XMLSchema#date')), rdflib.term.Literal('2022-05-18', datatype=rdflib.term.URIRef('http://www.w3.org/2001/XMLSchema#date'))] | ||
Contributors | Harshvardhan J. Pandit | ||
Documented in | Dpv Context-Status, Dpv Rights |
The DPVCG and DPV were initiated as part of the SPECIAL H2020 Project, which received funding from the European Union’s Horizon 2020 research and innovation programme under grant agreement No. 731601. The SPECIAL project ran over a 3-year period from 2017 to 2019.
Harshvardhan J. Pandit was funded by the Irish Research Council Government of Ireland Postdoctoral Fellowship Grant#GOIPD/2020/790 for working within the DPVCG and contributing to the DPV. The fellowship lasted from 2020 to 2022.
The contributions of Piero Bonatti and Luigi Sauro to the DPVCG have been funded by the European Union’s Horizon 2020 research and innovation programme under grant agreement N. 731601 (project SPECIAL) until 2019, and under grant agreement N. 883464 (project TRAPEZE) from 2020 until 2023.
The contributions of Beatriz Esteves have received funding through the PROTECT ITN Project from the European Union’s Horizon 2020 research and innovation programme under the Marie Skłodowska-Curie grant agreement No 813497.
The contributions of Harshvardhan J. Pandit have received funding from the ADAPT SFI Centre for Digital Media Technology is funded by Science Foundation Ireland through the SFI Research Centres Programme and is co-funded under the European Regional Development Fund (ERDF) through Grant#13/RC/2106 (2018 to 2020) and Grant#13/RC/2106_P2 (2021 onwards)