The Legal extension uses the following concepts and properties to define laws, authorities, and jurisdictions.
This page provides the following legal concepts:
Copyright © 2024 the Contributors to the Legal Concepts for European Union (EU) Specification, published by the Data Privacy Vocabularies and Controls Community Group under the W3C Community Final Specification Agreement (FSA). A human-readable summary is available.
The LEGAL-EU extension extends the Data Privacy Vocabulary (DPV) Specification to represent laws, authorities, and other legal concepts in EU jurisdiction.
The canonical URL for LEGAL-EU extension is https://w3id.org/dpv/legal/eu, the namespace is https://w3id.org/dpv/legal/eu#, the suggested prefix is legal-eu, and this document along with source and releases are available at https://github.com/w3c/dpv.
This specification was published by the Data Privacy Vocabularies and Controls Community Group. It is not a W3C Standard nor is it on the W3C Standards Track. Please note that under the W3C Community Final Specification Agreement (FSA) other conditions apply. Learn more about W3C Community and Business Groups.
Contributing: The DPVCG welcomes participation to improve the DPV and associated resources, including expansion or refinement of concepts, requesting information and applications, and addressing open issues. See contributing guide for further information.
GitHub Issues are preferred for discussion of this specification.
Data Privacy Vocabulary (DPV) Specification: is the base/core specification for the 'Data Privacy Vocabulary', which is extended for Personal Data [PD], Locations [LOC], Risk Management [RISK], Technology [TECH], and [AI]. Specific [LEGAL] extensions are also provided which model jurisdiction specific regulations and concepts . To support understanding and applications of [DPV], various guides and resources [GUIDES] are provided, including a [PRIMER]. A Search Index of all concepts from DPV and extensions is available.
[DPV] and related resources are published on GitHub. For a general overview of the Data Protection Vocabularies and Controls Community Group [DPVCG], its history, deliverables, and activities - refer to DPVCG Website. For meetings, see the DPVCG calendar.
The peer-reviewed article “Creating A Vocabulary for Data Privacy” presents a historical overview of the DPVCG, and describes the methodology and structure of the DPV along with describing its creation. An open-access version can be accessed here, here, and here. The article Data Privacy Vocabulary (DPV) - Version 2, accepted for presentation at the 23rd International Semantic Web Conference (ISWC 2024), describes the changes made in DPV v2.
The Legal extension uses the following concepts and properties to define laws, authorities, and jurisdictions.
This page provides the following legal concepts:
The following extensions to the [DPV] exist for modelling concepts from laws and regulations:
Laws are represented as instances of dpv:Law, and are associated with their jurisdictions using the [LOC] taxonomy and dpv:hasJurisdiction relation. The webpage for the law, if available, is indicated using foaf:homepage, and the temporal start and end if available, is represented using dct:temporal relation with an instance of time:ProperInterval.
| ID | Name | Jurisdictions | Authorities | Webpage | Start/End |
|---|---|---|---|---|---|
law-AIAct
|
AI Act | European Union (EU) | link | ||
law-DGA
|
Data Governance Act (DGA) | European Union (EU) | link | 2023-09-24/ongoing | |
law-DMA
|
Digital Markets Act (DMA) | European Union (EU) | link | 2022-11-01/ongoing | |
law-DSA
|
Digital Services Act (DSA) | European Union (EU) | link | 2022-11-16/ongoing | |
law-DataAct
|
Data Act | European Union (EU) | link | ||
law-GDPR
|
General Data Protection Regulation (GDPR) | European Union (EU) ; Iceland ; Liechtenstein ; Norway | legal-eu:DPA-EDPB, legal-eu:DPA-EDPS | link | 2018-05-25/ongoing |
Adequacy decisions representing agreements between jurisdictions such as for free flow of data, are currently only defined in [GDPR]. They are represented as instances of eu-gdpr:AdequacyDecision, and are associated with relevant jurisdictions using dpv:hasJurisdiction. The start and end, if available, is represented using dct:temporal with an instance of time:ProperInterval. The webpage, if available, is indicated using foaf:homepage.
| ID | Name | Jurisdictions | Webpage | Start/End |
|---|---|---|---|---|
Adequacy-EU-AD
|
EU Adequacy Decision for Andorra | Andorra, European Union (EU) | link | 2010-10-21/ongoing |
Adequacy-EU-AR
|
EU Adequacy Decision for Argentina | Argentina, European Union (EU) | link | 2003-07-05/ongoing |
Adequacy-EU-CA
|
EU Adequacy Decision for Canada (commercial organisations) | Canada, European Union (EU) | link | 2002-01-04/ongoing |
Adequacy-EU-CH
|
EU Adequacy Decision for Switzerland | Switzerland, European Union (EU) | link | 2000-08-25/ongoing |
Adequacy-EU-FO
|
EU Adequacy Decision for Faroe Islands | European Union (EU), Faroe Islands | link | 2010-03-09/ongoing |
Adequacy-EU-GB
|
EU Adequacy Decision for United Kingdom | European Union (EU), United Kingdom of Great Britain and Northern Ireland | link | 2021-06-28/ongoing |
Adequacy-EU-GG
|
EU Adequacy Decision for Guernsey | European Union (EU), Guernsey | link | 2003-11-21/ongoing |
Adequacy-EU-IL
|
EU Adequacy Decision for Israel | European Union (EU), Israel | link | 2011-02-01/ongoing |
Adequacy-EU-IM
|
EU Adequacy Decision for Isle of Man | European Union (EU), Isle of Man | link | 2004-04-30/ongoing |
Adequacy-EU-JE
|
EU Adequacy Decision for Jersey | European Union (EU), Jersey | link | 2008-05-26/ongoing |
Adequacy-EU-JP
|
EU Adequacy Decision for Japan | European Union (EU), Japan | link | 2019-01-23/ongoing |
Adequacy-EU-NZ
|
EU Adequacy Decision for New Zealand | European Union (EU), New Zealand | link | 2012-12-20/ongoing |
Adequacy-EU-UY
|
EU Adequacy Decision for Uruguay | European Union (EU), Uruguay | link | 2012-08-22/ongoing |
| Term | Adequacy-EU-AD | Prefix | legal-eu |
|---|---|---|---|
| Label | EU Adequacy Decision for Andorra | ||
| IRI | https://w3id.org/dpv/legal/eu#Adequacy-EU-AD | ||
| Type | rdfs:Class, skos:Concept, eu-gdpr:AdequacyDecision | ||
| Broader/Parent types | eu-gdpr:AdequacyDecision | ||
| Date Created | 2022-03-30 | ||
| Contributors | Harshvardhan J. Pandit | ||
| has jurisdiction | Andorra , European Union (EU) | ||
| See More: | section LEGAL in LEGAL-EU |
| Term | Adequacy-EU-AR | Prefix | legal-eu |
|---|---|---|---|
| Label | EU Adequacy Decision for Argentina | ||
| IRI | https://w3id.org/dpv/legal/eu#Adequacy-EU-AR | ||
| Type | rdfs:Class, skos:Concept, eu-gdpr:AdequacyDecision | ||
| Broader/Parent types | eu-gdpr:AdequacyDecision | ||
| Date Created | 2022-03-30 | ||
| Contributors | Harshvardhan J. Pandit | ||
| has jurisdiction | Argentina , European Union (EU) | ||
| See More: | section LEGAL in LEGAL-EU |
| Term | Adequacy-EU-CA | Prefix | legal-eu |
|---|---|---|---|
| Label | EU Adequacy Decision for Canada (commercial organisations) | ||
| IRI | https://w3id.org/dpv/legal/eu#Adequacy-EU-CA | ||
| Type | rdfs:Class, skos:Concept, eu-gdpr:AdequacyDecision | ||
| Broader/Parent types | eu-gdpr:AdequacyDecision | ||
| Date Created | 2022-03-30 | ||
| Contributors | Harshvardhan J. Pandit | ||
| has jurisdiction | Canada , European Union (EU) | ||
| See More: | section LEGAL in LEGAL-EU |
| Term | Adequacy-EU-CH | Prefix | legal-eu |
|---|---|---|---|
| Label | EU Adequacy Decision for Switzerland | ||
| IRI | https://w3id.org/dpv/legal/eu#Adequacy-EU-CH | ||
| Type | rdfs:Class, skos:Concept, eu-gdpr:AdequacyDecision | ||
| Broader/Parent types | eu-gdpr:AdequacyDecision | ||
| Date Created | 2022-03-30 | ||
| Contributors | Harshvardhan J. Pandit | ||
| has jurisdiction | Switzerland , European Union (EU) | ||
| See More: | section LEGAL in LEGAL-EU |
| Term | Adequacy-EU-FO | Prefix | legal-eu |
|---|---|---|---|
| Label | EU Adequacy Decision for Faroe Islands | ||
| IRI | https://w3id.org/dpv/legal/eu#Adequacy-EU-FO | ||
| Type | rdfs:Class, skos:Concept, eu-gdpr:AdequacyDecision | ||
| Broader/Parent types | eu-gdpr:AdequacyDecision | ||
| Date Created | 2022-03-30 | ||
| Contributors | Harshvardhan J. Pandit | ||
| has jurisdiction | European Union (EU) , Faroe Islands | ||
| See More: | section LEGAL in LEGAL-EU |
| Term | Adequacy-EU-GB | Prefix | legal-eu |
|---|---|---|---|
| Label | EU Adequacy Decision for United Kingdom | ||
| IRI | https://w3id.org/dpv/legal/eu#Adequacy-EU-GB | ||
| Type | rdfs:Class, skos:Concept, eu-gdpr:AdequacyDecision | ||
| Broader/Parent types | eu-gdpr:AdequacyDecision | ||
| Date Created | 2022-03-30 | ||
| Contributors | Harshvardhan J. Pandit | ||
| has jurisdiction | European Union (EU) , United Kingdom of Great Britain and Northern Ireland | ||
| See More: | section LEGAL in LEGAL-EU |
| Term | Adequacy-EU-GG | Prefix | legal-eu |
|---|---|---|---|
| Label | EU Adequacy Decision for Guernsey | ||
| IRI | https://w3id.org/dpv/legal/eu#Adequacy-EU-GG | ||
| Type | rdfs:Class, skos:Concept, eu-gdpr:AdequacyDecision | ||
| Broader/Parent types | eu-gdpr:AdequacyDecision | ||
| Date Created | 2022-03-30 | ||
| Contributors | Harshvardhan J. Pandit | ||
| has jurisdiction | European Union (EU) , Guernsey | ||
| See More: | section LEGAL in LEGAL-EU |
| Term | Adequacy-EU-IL | Prefix | legal-eu |
|---|---|---|---|
| Label | EU Adequacy Decision for Israel | ||
| IRI | https://w3id.org/dpv/legal/eu#Adequacy-EU-IL | ||
| Type | rdfs:Class, skos:Concept, eu-gdpr:AdequacyDecision | ||
| Broader/Parent types | eu-gdpr:AdequacyDecision | ||
| Date Created | 2022-03-30 | ||
| Contributors | Harshvardhan J. Pandit | ||
| has jurisdiction | European Union (EU) , Israel | ||
| See More: | section LEGAL in LEGAL-EU |
| Term | Adequacy-EU-IM | Prefix | legal-eu |
|---|---|---|---|
| Label | EU Adequacy Decision for Isle of Man | ||
| IRI | https://w3id.org/dpv/legal/eu#Adequacy-EU-IM | ||
| Type | rdfs:Class, skos:Concept, eu-gdpr:AdequacyDecision | ||
| Broader/Parent types | eu-gdpr:AdequacyDecision | ||
| Date Created | 2022-03-30 | ||
| Contributors | Harshvardhan J. Pandit | ||
| has jurisdiction | European Union (EU) , Isle of Man | ||
| See More: | section LEGAL in LEGAL-EU |
| Term | Adequacy-EU-JE | Prefix | legal-eu |
|---|---|---|---|
| Label | EU Adequacy Decision for Jersey | ||
| IRI | https://w3id.org/dpv/legal/eu#Adequacy-EU-JE | ||
| Type | rdfs:Class, skos:Concept, eu-gdpr:AdequacyDecision | ||
| Broader/Parent types | eu-gdpr:AdequacyDecision | ||
| Date Created | 2022-03-30 | ||
| Contributors | Harshvardhan J. Pandit | ||
| has jurisdiction | European Union (EU) , Jersey | ||
| See More: | section LEGAL in LEGAL-EU |
| Term | Adequacy-EU-JP | Prefix | legal-eu |
|---|---|---|---|
| Label | EU Adequacy Decision for Japan | ||
| IRI | https://w3id.org/dpv/legal/eu#Adequacy-EU-JP | ||
| Type | rdfs:Class, skos:Concept, eu-gdpr:AdequacyDecision | ||
| Broader/Parent types | eu-gdpr:AdequacyDecision | ||
| Date Created | 2022-03-30 | ||
| Contributors | Harshvardhan J. Pandit | ||
| has jurisdiction | European Union (EU) , Japan | ||
| See More: | section LEGAL in LEGAL-EU |
| Term | Adequacy-EU-NZ | Prefix | legal-eu |
|---|---|---|---|
| Label | EU Adequacy Decision for New Zealand | ||
| IRI | https://w3id.org/dpv/legal/eu#Adequacy-EU-NZ | ||
| Type | rdfs:Class, skos:Concept, eu-gdpr:AdequacyDecision | ||
| Broader/Parent types | eu-gdpr:AdequacyDecision | ||
| Date Created | 2022-03-30 | ||
| Contributors | Harshvardhan J. Pandit | ||
| has jurisdiction | European Union (EU) , New Zealand | ||
| See More: | section LEGAL in LEGAL-EU |
| Term | Adequacy-EU-UY | Prefix | legal-eu |
|---|---|---|---|
| Label | EU Adequacy Decision for Uruguay | ||
| IRI | https://w3id.org/dpv/legal/eu#Adequacy-EU-UY | ||
| Type | rdfs:Class, skos:Concept, eu-gdpr:AdequacyDecision | ||
| Broader/Parent types | eu-gdpr:AdequacyDecision | ||
| Date Created | 2022-03-30 | ||
| Contributors | Harshvardhan J. Pandit | ||
| has jurisdiction | European Union (EU) , Uruguay | ||
| See More: | section LEGAL in LEGAL-EU |
| Term | DPA-EDPB | Prefix | legal-eu |
|---|---|---|---|
| Label | European Data Protection Board | ||
| IRI | https://w3id.org/dpv/legal/eu#DPA-EDPB | ||
| Type | rdfs:Class, skos:Concept, eu-gdpr:DataProtectionAuthority | ||
| Broader/Parent types | eu-gdpr:DataProtectionAuthority | ||
| Broader/Parent types | dpv:Law | ||
| Object of relation | dpv:hasApplicableLaw | ||
| Date Created | 2023-12-13 | ||
| has applicable law | General Data Protection Regulation (GDPR) | ||
| has jurisdiction | European Union (EU) , Iceland , Liechtenstein , Norway | ||
| See More: | section LEGAL in LEGAL-EU |
| Term | DPA-EDPS | Prefix | legal-eu |
|---|---|---|---|
| Label | European Data Protection Supervisor | ||
| IRI | https://w3id.org/dpv/legal/eu#DPA-EDPS | ||
| Type | rdfs:Class, skos:Concept, eu-gdpr:DataProtectionAuthority | ||
| Broader/Parent types | eu-gdpr:DataProtectionAuthority | ||
| Broader/Parent types | dpv:Law | ||
| Object of relation | dpv:hasApplicableLaw | ||
| Date Created | 2023-12-12 | ||
| has applicable law | General Data Protection Regulation (GDPR) | ||
| has jurisdiction | European Union (EU) | ||
| See More: | section LEGAL in LEGAL-EU |
| Term | law-AIAct | Prefix | legal-eu |
|---|---|---|---|
| Label | AI Act | ||
| IRI | https://w3id.org/dpv/legal/eu#law-AIAct | ||
| Type | rdfs:Class, skos:Concept, dpv:Law | ||
| Broader/Parent types | dpv:Law | ||
| Object of relation | dpv:hasApplicableLaw | ||
| Date Created | 2023-12-09 | ||
| has jurisdiction | European Union (EU) | ||
| See More: | section LEGAL in LEGAL-EU |
| Term | law-DataAct | Prefix | legal-eu |
|---|---|---|---|
| Label | Data Act | ||
| IRI | https://w3id.org/dpv/legal/eu#law-DataAct | ||
| Type | rdfs:Class, skos:Concept, dpv:Law | ||
| Broader/Parent types | dpv:Law | ||
| Object of relation | dpv:hasApplicableLaw | ||
| Date Created | 2023-12-08 | ||
| has jurisdiction | European Union (EU) | ||
| See More: | section LEGAL in LEGAL-EU |
| Term | law-DGA | Prefix | legal-eu |
|---|---|---|---|
| Label | Data Governance Act (DGA) | ||
| IRI | https://w3id.org/dpv/legal/eu#law-DGA | ||
| Type | rdfs:Class, skos:Concept, dpv:Law | ||
| Broader/Parent types | dpv:Law | ||
| Object of relation | dpv:hasApplicableLaw | ||
| Date Created | 2023-12-05 | ||
| has jurisdiction | European Union (EU) | ||
| See More: | section LEGAL in LEGAL-EU |
| Term | law-DMA | Prefix | legal-eu |
|---|---|---|---|
| Label | Digital Markets Act (DMA) | ||
| IRI | https://w3id.org/dpv/legal/eu#law-DMA | ||
| Type | rdfs:Class, skos:Concept, dpv:Law | ||
| Broader/Parent types | dpv:Law | ||
| Object of relation | dpv:hasApplicableLaw | ||
| Date Created | 2023-12-07 | ||
| has jurisdiction | European Union (EU) | ||
| See More: | section LEGAL in LEGAL-EU |
| Term | law-DSA | Prefix | legal-eu |
|---|---|---|---|
| Label | Digital Services Act (DSA) | ||
| IRI | https://w3id.org/dpv/legal/eu#law-DSA | ||
| Type | rdfs:Class, skos:Concept, dpv:Law | ||
| Broader/Parent types | dpv:Law | ||
| Object of relation | dpv:hasApplicableLaw | ||
| Date Created | 2023-12-06 | ||
| has jurisdiction | European Union (EU) | ||
| See More: | section LEGAL in LEGAL-EU |
| Term | law-GDPR | Prefix | legal-eu |
|---|---|---|---|
| Label | General Data Protection Regulation (GDPR) | ||
| IRI | https://w3id.org/dpv/legal/eu#law-GDPR | ||
| Type | rdfs:Class, skos:Concept, dpv:Law | ||
| Broader/Parent types | dpv:Law | ||
| Object of relation | dpv:hasApplicableLaw | ||
| Date Created | 2023-12-04 | ||
| Contributors | Harshvardhan J. Pandit | ||
| has authority | European Data Protection Board , European Data Protection Supervisor | ||
| has jurisdiction | European Union (EU) , Iceland , Liechtenstein , Norway | ||
| See More: | section LEGAL in LEGAL-EU |
DPV uses the following terms from [RDF] and [RDFS] with their defined meanings:
The following external concepts are re-used within DPV:
The following people have contributed to this vocabulary. The names are ordered alphabetically. The affiliations are informative do not represent formal endorsements. Affiliations may be outdated. The list is generated automatically from the contributors listed for defined concepts.
The DPVCG was established as part of the SPECIAL H2020 Project, which received funding from the European Union’s Horizon 2020 research and innovation programme under grant agreement No. 731601 from 2017 to 2019.
Harshvardhan J. Pandit was funded to work on DPV from 2020 to 2022 by the Irish Research Council's Government of Ireland Postdoctoral Fellowship Grant#GOIPD/2020/790.
The ADAPT SFI Centre for Digital Media Technology is funded by Science Foundation Ireland through the SFI Research Centres Programme and is co-funded under the European Regional Development Fund (ERDF) through Grant#13/RC/2106 (2018 to 2020) and Grant#13/RC/2106_P2 (2021 onwards).
The contributions of Harshvardhan J. Pandit have been made with the financial support of Science Foundation Ireland under Grant Agreement No. 13/RC/2106_P2 at the ADAPT SFI Research Centre.