The LEGAL extension extends the [[[DPV]]] to represent laws, authorities, and other legal concepts in various jurisdictions.

The canonical URL for LEGAL extension is https://w3id.org/dpv/legal, the namespace is https://w3id.org/dpv/legal#, the suggested prefix is legal, and this document along with source and releases are available at https://github.com/w3c/dpv.

This document is provided as part of the BETA release. We welcome reviews, comments, and other feedback till 31st July. If there are no major issues, we will continue with the planned release.

Contributing: The DPVCG welcomes participation to improve the DPV and associated resources, including expansion or refinement of concepts, requesting information and applications, and addressing open issues. See contributing guide for further information.

DPV and Related Resources

[[[DPV]]]: is the base/core specification for the 'Data Privacy Vocabulary', which is extended for Personal Data [[PD]], Locations [[LOC]], Risk Management [[RISK]], Technology [[TECH]], and [[AI]]. Specific [[LEGAL]] extensions are also provided which model jurisdiction specific regulations and concepts . To support understanding and applications of [[DPV]], various guides and resources [[GUIDES]] are provided, including a [[PRIMER]]. A Search Index of all concepts from DPV and extensions is available.

[[DPV]] and related resources are published on GitHub. For a general overview of the Data Protection Vocabularies and Controls Community Group [[DPVCG]], its history, deliverables, and activities - refer to DPVCG Website. For meetings, see the DPVCG calendar.

The peer-reviewed article “Creating A Vocabulary for Data Privacy” presents a historical overview of the DPVCG, and describes the methodology and structure of the DPV along with describing its creation. An open-access version can be accessed here, here, and here. The article preprint Data Privacy Vocabulary (DPV) - Version 2 describes the changes made in DPV v2.

DPV Extensions for Laws

The following extensions to the [[DPV]] exist for modelling concepts from laws and regulations:

Laws

Laws are represented as instances of dpv:Law, and are associated with their jurisdictions using the [[LOC]] taxonomy and dpv:hasJurisdiction relation. The webpage for the law, if available, is indicated using foaf:homepage, and the temporal start and end if available, is represented using dct:temporal relation with an instance of time:ProperInterval.

ID Name Jurisdictions Webpage Start/End
legal-de:law-BDSG Federal Data Protection Act (BDSG) Germany link 2019-11-20/ongoing
legal-de:law-BE-BbgDSG Brandenburg Data Protection Act (BbgDSG) Brandenburg, Germany link
legal-de:law-BE-BlnDSG Berlin Data Protection Act (BlnDSG) Berlin, Germany link
legal-de:law-BW-LDSG State Data Protection Act (LDSG) (BW) Baden-Württemberg, Germany link
legal-de:law-BY-BayDSG Bavarian Data Protection Act (BayDSG) Bavaria, Germany link
legal-de:law-HB-BremDSGVOAG Bremen Implementing Act for the EU General Data Protection Regulation (BremDSGVOAG) Bremen, Germany link
legal-de:law-HE-HDISG Hessian Data Protection and Freedom of Information Act (HDSIG) Hesse, Germany link
legal-de:law-HH-HmbDSG Hamburg Data Protection Act (HmbDSG) Hamburg, Germany link
legal-de:law-LSA-DSG Law on the protection of personal data of citizens (Saxony-Anhalt Data Protection Act - DSG LSA) Saxony-Anhalt, Germany link
legal-de:law-MV-DSG Act to adapt the State Data Protection Act and other data protection regulations in the area of ​​responsibility of the Ministry of the Interior and Europe Mecklenburg-West Pomerania to Regulation (EU) 2016/679 and to implement Directive (EU) 2016/680 Mecklenburg-Western-Pomerania, Germany link
legal-de:law-NI-NDSG Lower Saxony Data Protection Act (NDSG) Lower-Saxony, Germany link
legal-de:law-NW-DSG North Rhine-Westphalia Data Protection Act (DSG NRW) North-Rhine Westphalia, Germany link
legal-de:law-RP-LDSG State Data Protection Act (LDSG) Rhineland-Palatinate, Germany link
legal-de:law-SH-LDSG Schleswig-Holstein law for the protection of personal data (state data protection law - LDSG) Schleswig-Holstein, Germany link
legal-de:law-SL-SDSG Saarland Data Protection Act Saarland, Germany link
legal-de:law-SN-SächsDSG Law for the Protection of Informational Self-Determination in the Free State of Saxony (Saxon Data Protection Act - SächsDSG) Saxony, Germany link
legal-de:law-TH-ThürDSG Thuringian Data Protection Act (ThürDSG) Thuringia, Germany link
legal-eu:law-AIAct AI Act European Union (EU) link
legal-eu:law-DGA Data Governance Act (DGA) European Union (EU) link 2023-09-24/ongoing
legal-eu:law-DMA Digital Markets Act (DMA) European Union (EU) link 2022-11-01/ongoing
legal-eu:law-DSA Digital Services Act (DSA) European Union (EU) link 2022-11-16/ongoing
legal-eu:law-DataAct Data Act European Union (EU) link
legal-eu:law-GDPR General Data Protection Regulation (GDPR) European Union (EU) ; Iceland ; Liechtenstein ; Norway link 2018-05-25/ongoing
legal-gb:law-DPA Data Protection Act (DPA) United Kingdom of Great Britain and Northern Ireland link 2018-05-25/ongoing
legal-gb:law-GDPR General Data Protection Regulation (GDPR) United Kingdom of Great Britain and Northern Ireland link 2019-02-28/ongoing
legal-ie:law-DPA Data Protection Act 2018 (DPA) Ireland link 2018-05-24/ongoing
legal-in:law-DPDP Digital Personal Data Protection Act 2023 (DPDP) India link 2023-08-11/ongoing
legal-us:law-CA-CCPA California Consumer Privacy Act (CCPA) California, United States of America link 2020-01-01/ongoing
legal-us:law-CA-CPRA California Privacy Rights Act (CPRA) California, United States of America link 2023-01-01/ongoing
legal-us:law-CO-CPA Colorado Privacy Act (CPA) Colorado, United States of America link 2024-01-07/ongoing
legal-us:law-CT-CTPA Connecticut Data Privacy Act (CTPA) Connecticut, United States of America link 2023-01-07/ongoing
legal-us:law-NV-NPICICA Nevada Privacy of Information Collected on the Internet from Consumers Act (NPICICA) Nevada, United States of America link 2021-01-10/ongoing
legal-us:law-UT-UCPA Utah Consumer Privacy Act (UCPA) Utah, United States of America link 2023-12-31/ongoing
legal-us:law-VA-VCDPA Virginia Consumer Data Protection Act (VCDPA) Virginia, United States of America link 2023-01-01/ongoing

Vocabulary Index

Classes

Properties

DPV uses the following terms from [[RDF]] and [[RDFS]] with their defined meanings:

The following external concepts are re-used within DPV:

External

Contributors

The following people have contributed to this vocabulary. The names are ordered alphabetically. The affiliations are informative do not represent formal endorsements. Affiliations may be outdated. The list is generated automatically from the contributors listed for defined concepts.

Funding Acknowledgements

Funding Sponsors

The DPVCG was established as part of the SPECIAL H2020 Project, which received funding from the European Union’s Horizon 2020 research and innovation programme under grant agreement No. 731601 from 2017 to 2019.

Harshvardhan J. Pandit was funded to work on DPV from 2020 to 2022 by the Irish Research Council's Government of Ireland Postdoctoral Fellowship Grant#GOIPD/2020/790.

The ADAPT SFI Centre for Digital Media Technology is funded by Science Foundation Ireland through the SFI Research Centres Programme and is co-funded under the European Regional Development Fund (ERDF) through Grant#13/RC/2106 (2018 to 2020) and Grant#13/RC/2106_P2 (2021 onwards).

Funding Acknowledgements for Contributors

The contributions of Harshvardhan J. Pandit have been made with the financial support of Science Foundation Ireland under Grant Agreement No. 13/RC/2106_P2 at the ADAPT SFI Research Centre.