W3C DPVCG - DPV v0.2
- 1. HTTPS://W3.ORG/NS/DPV Beatriz Esteves, Universidad Politécnica de Madrid, Spain Email: beatriz.gesteves@upm.es |Twitter: @b_esteves4 January 2021
- 2. ▪ DPVCG ▪ Data Privacy Vocabulary ▪ Base Vocabulary ▪ Personal Data Categories ▪ Purposes ▪ Processing Categories ▪ Technical and Organisational Measures ▪ Legal Basis, including Consent ▪ Entities ▪ Ongoing Work 2 Authors: ▪ Axel Polleres (Vienna University of Economics and Business) ▪ Beatriz Esteves (Universidad Politécnica de Madrid) ▪ Bert Bos (W3C/ERCIM) ▪ Bud Bruegger (Unabhängige Landeszentrum für Datenschutz Schleswig-Holstein) ▪ Elmar Kiesling (Vienna University of Technology) ▪ Eva Schlehahn (Unabhängige Landeszentrum für Datenschutz Schleswig-Holstein) ▪ Fajar J. Ekaputra (Vienna University of Technology) ▪ Georg P. Krog (Signatu AS) ▪ Harshvardhan J. Pandit (Trinity College Dublin) ▪ Javier D. Fernández (Vienna University of Economics and Business) ▪ Mark Lizar (OpenConsent/Kantara Initiative) ▪ Paul Ryan (Uniphar PLC) ▪ Piero Bonatti (Università di Napoli Federico II) ▪ Ramisa Gachpaz Hamed (Trinity College Dublin) ▪ Rigo Wenning (W3C/ERCIM) ▪ Rob Brennan (Dublin City University) ▪ Simon Steyskal (Siemens)
- 3. 3 Mission: Develop a taxonomy of privacy and data protection related terms, which include terms from the new European General Data Protection Regulation (GDPR), such as a taxonomy of personal data as well as a classification of purposes and events of disclosures, consent, and processing such personal data. W3C Community Group made up of academia, industry, legal experts ▪ Community group at https://www.w3.org/community/dpvcg/ ▪ Access at http://w3.org/ns/dpv ▪ Development at http://github.com/dpvcg/dpv ▪ Public mailing list at https://lists.w3.org/Archives/Public/public-dpvcg/
- 4. 4 Modular vocabulary for representing personal data handling activities ▪ Serialised using RDF, RDFS and OWL ▪ First version published in July 2019 modelled: ▪ Personal data categories ▪ Purposes ▪ Processing categories ▪ Technical and organizational measures ▪ Legal Basis, including consent ▪ Recipients, data controllers, data subjects ▪ A new version, v0.2, released in January 2021 extends the existing modules and adds: ▪ Rights ▪ Risks ▪ More entities: authority, data protection officer, child Applications: ▪ Represent policies for personal data handling ▪ Represent information about consent ▪ Document personal data handling actions ▪ Support automated checking of legal compliances of data handling
- 5. 5 Data Controller `Acme` is collecting and using `Email` for `Marketing`: ex:Acme a dpv:DataController . ex:AcmeMarketing a dpv:PersonalDataHandling ; dpv:hasPersonalDataCategory dpv:EmailAddress ; dpv:hasProcessing dpv:Collect ; dpv:hasProcessing dpv:Use ; dpv:hasPurpose dpv:Marketing .
- 6. 6
- 7. 7
- 8. 8
- 9. 9
- 10. 10
- 11. 11 Consent GDPR specific legal basis are provided in a separate vocabulary – DPV-GDPR ▪ Namespace: https://www.w3.org/ns/dpv- gdpr ▪ Legal basis defined by Article 6 for the processing of personal data ▪ Legal basis defined by Article 9 for the processing of special categories of personal data ▪ Legal basis defined by Articles 45, 46 and 49 for the transfer of personal data DPV-GDPR v0.2 also includes a taxonomy of data subject rights defined within the GDPR
- 12. 12 ▪ ‘Primer Document’: non-technical introduction to DPV ▪ Use-Cases and Examples documentation for adoption ▪ Expanding the vocabularies ▪ Open & ongoing feedback/suggestion ▪ Github Issues / Pull-Requests ▪ Public Mailing Lists Community group at https://www.w3.org/community/dpvcg/ Access at http://w3.org/ns/dpv Development at http://github.com/dpvcg/dpv Public mailing list at https://lists.w3.org/Archives/Public/public-dpvcg/