EU Data Governance Act (DGA)

version 2.0

Final Community Group Report

This version:
https://www.w3.org/community/reports/dpvcg/CG-FINAL-eu-dga-20240801/
Latest published version:
https://w3id.org/dpv/legal/eu/dga
Latest editor's draft:
https://dev.dpvcg.org//legal/eu/dga
Editors:
Harshvardhan J. Pandit (ADAPT Centre, Dublin City University)
Beatriz Esteves (IDLab, IMEC, Ghent University)
Authors:
Beatriz Esteves (IDLab, IMEC, Ghent University)
Georg P. Krog (Signatu AS)
Harshvardhan J. Pandit (ADAPT Centre, Dublin City University)
Feedback:
GitHub w3c/dpv (pull requests, new issue, open issues)
This Release
https://w3id.org/dpv/2.0/legal/eu/dga
Key Publications
Data Privacy Vocabulary (DPV) -- Version 2 (2024)
Semantics for Implementing Data Reuse and Altruism under EU's Data Governance Act (2023)

Abstract

The EU-DGA extension extends the Data Privacy Vocabulary (DPV) Specification to provide concepts such as entities, rights, and other relevant concepts based on the Data Governance Act (DGA). The canonical URL for the EU-DGA extension is https://w3id.org/dpv/legal/eu/dga, the namespace for EU-DGA terms is https://w3id.org/dpv/legal/eu/dga#, the suggested prefix is eu-dga, and this document along with source and releases are available at https://github.com/w3c/dpv.

This work was first presented in the article "Semantics for Implementing Data Reuse and Altruism under EU's Data Governance Act" by Beatriz Esteves, Victor Rodriguez Doncel, Harshvardhan J. Pandit, and Dave Lewis.

Status of This Document

This specification was published by the Data Privacy Vocabularies and Controls Community Group. It is not a W3C Standard nor is it on the W3C Standards Track. Please note that under the W3C Community Final Specification Agreement (FSA) other conditions apply. Learn more about W3C Community and Business Groups.

Contributing: The DPVCG welcomes participation to improve the DPV and associated resources, including expansion or refinement of concepts, requesting information and applications, and addressing open issues. See contributing guide for further information.

GitHub Issues are preferred for discussion of this specification.

Data Privacy Vocabulary (DPV) Specification: is the base/core specification for the 'Data Privacy Vocabulary', which is extended for Personal Data [PD], Locations [LOC], Risk Management [RISK], Technology [TECH], and [AI]. Specific [LEGAL] extensions are also provided which model jurisdiction specific regulations and concepts . To support understanding and applications of [DPV], various guides and resources [GUIDES] are provided, including a [PRIMER]. A Search Index of all concepts from DPV and extensions is available.

[DPV] and related resources are published on GitHub. For a general overview of the Data Protection Vocabularies and Controls Community Group [DPVCG], its history, deliverables, and activities - refer to DPVCG Website. For meetings, see the DPVCG calendar.

The peer-reviewed article “Creating A Vocabulary for Data Privacy” presents a historical overview of the DPVCG, and describes the methodology and structure of the DPV along with describing its creation. An open-access version can be accessed here, here, and here. The article Data Privacy Vocabulary (DPV) - Version 2, accepted for presentation at the 23rd International Semantic Web Conference (ISWC 2024), describes the changes made in DPV v2.

2. Introduction

This extension provides concepts relevant for the implementation of EU's Data Governance Act (DGA). The DGA promotes availability of data and encourages its sharing and reuse through novel mechanisms such as 'data intermediaries' and 'data altruism'. It also provides specific rights, and requires implementation details such as specific technical measures in order to ensure such sharing and altruistic (re-)uses of data are compliant with existing regulations, such as [GDPR], and respect rights and freedoms.

Note: Extending the DGA vocabulary

This extension provides the following concepts defined or required by the DGA:

3. Entities

Entities in the [DGA] are defined by extending the dpv:LegalEntity concept, and are associated with using the relation dpv:hasEntity. DGA's entities are different from 'legal roles' in GDPR's use of 'controllers' and 'processors' as the DGA entities are established with a specific role and purpose. For example, a 'Data Co-operative' is a legal entity which is established to provide the data co-operative services - namely for intermediation and exercise of rights.

Note: Associating entities in context

6. Services

The [DGA] defines and regulates several 'services', such as those for data intermediation and altruism. To represent these, the concept dpv:Service is extended. Services can be associated using the relation dpv:hasService.

7. Registers

The [DGA] requires the creation and maintenance of specific registers or registries, such as those for data altruistic organisations. These are represented by extending the concept dpv:PublicRegisterOfEntities. Membership of the registry can be expressed using the concept dpv:hasEntity, or even through use of [SKOS] collections.

8. Tech/Org Measures

The specific technical and organisational measures defined or implied in the [DGA] are defined by extending the dpv:TechnicalOrganisationalMeasure concepts. These can be associated by using the relations dpv:hasTechnicalMeasure and dpv:hasOrganisationalMeasure. In addition to these, if a measure has legal enforcement, then the concept dpv:LegalMeasure and relation dpv:hasLegalMeasure can be used.

9. Vocabulary Index

9.1 Classes

9.1.1 Art 12(e) Data Exchange Approval

Term A12-e-Exchange-Approval Prefix eu-dga
Label Art 12(e) Data Exchange Approval
IRI https://w3id.org/dpv/legal/eu/dga#A12-e-Exchange-Approval
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition Explicit request or approval of the data subject or data holder to utilise additional specific tools for the purposes of facilitating exchange of data
Source DGA 12.e
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section LEGAL-BASIS in EU-DGA

9.1.2 Art 2(6) Permission

Term A2-6-Permission Prefix eu-dga
Label Art 2(6) Permission
IRI https://w3id.org/dpv/legal/eu/dga#A2-6-Permission
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition The legal basis justifying processing of non-personal data based on the permission of an entity
Source DGA 2.6
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section LEGAL-BASIS in EU-DGA

9.1.3 Art 31(2) Data Transfer International Agreement

Term A31-2-Transfer-Agreement Prefix eu-dga
Label Art 31(2) Data Transfer International Agreement
IRI https://w3id.org/dpv/legal/eu/dga#A31-2-Transfer-Agreement
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:DataTransferLegalBasisdpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition Data Transfer International Agreement
Source DGA 31.2
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section LEGAL-BASIS in EU-DGA

9.1.4 Art 31(3) Data Transfer Third Country Judgement

Term A31-3-Third-Country-Judgement Prefix eu-dga
Label Art 31(3) Data Transfer Third Country Judgement
IRI https://w3id.org/dpv/legal/eu/dga#A31-3-Third-Country-Judgement
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:DataTransferLegalBasisdpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition Data Transfer Third Country Judgement
Source DGA 31.3
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section LEGAL-BASIS in EU-DGA

9.1.5 Art 5(11) Model Contractual Clauses

Term A5-11-MCC Prefix eu-dga
Label Art 5(11) Model Contractual Clauses
IRI https://w3id.org/dpv/legal/eu/dga#A5-11-MCC
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:DataTransferLegalBasisdpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition Model Contractual Clauses
Source DGA 5.11
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section LEGAL-BASIS in EU-DGA

9.1.6 Art 5(12) Adequacy Decision

Term A5-12-Adequacy-Decision Prefix eu-dga
Label Art 5(12) Adequacy Decision
IRI https://w3id.org/dpv/legal/eu/dga#A5-12-Adequacy-Decision
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:DataTransferLegalBasisdpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition Adequacy Decision permitting the transfer of data
Source DGA 5.12
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section LEGAL-BASIS in EU-DGA

9.1.7 Art 5(9) Permission for Transfer

Term A5-9-Transfer-Permission Prefix eu-dga
Label Art 5(9) Permission for Transfer
IRI https://w3id.org/dpv/legal/eu/dga#A5-9-Transfer-Permission
Type rdfs:Class, skos:Concept, dpv:LegalBasis
Broader/Parent types dpv:DataTransferLegalBasisdpv:LegalBasis
Object of relation dpv:hasLegalBasis
Definition The legal basis justifying processing of non-personal data based on the permission of an entity to transfer data
Source DGA 5.9
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section LEGAL-BASIS in EU-DGA

9.1.8 Public Register of Data Altruism Organisations

Term DAORegister Prefix eu-dga
Label Public Register of Data Altruism Organisations
IRI https://w3id.org/dpv/legal/eu/dga#DAORegister
Type rdfs:Class, skos:Concept, dpv:PublicRegisterOfEntities
Broader/Parent types dpv:PublicRegisterOfEntities
Definition Registry containing list of recognised data altruism organisations
Source
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section REGISTERS in EU-DGA

9.1.9 EU's Public Register of Data Altruism Organisations

Term DAORegisterEU Prefix eu-dga
Label EU's Public Register of Data Altruism Organisations
IRI https://w3id.org/dpv/legal/eu/dga#DAORegisterEU
Type rdfs:Class, skos:Concept, dpv:PublicRegisterOfEntities
Broader/Parent types dpv:PublicRegisterOfEntities
Definition Registry maintained by EU containing list of recognised data altruism organisations
Source
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section REGISTERS in EU-DGA

9.1.10 National Public Register of Data Altruism Organisations

Term DAORegisterNational Prefix eu-dga
Label National Public Register of Data Altruism Organisations
IRI https://w3id.org/dpv/legal/eu/dga#DAORegisterNational
Type rdfs:Class, skos:Concept, dpv:PublicRegisterOfEntities
Broader/Parent types dpv:PublicRegisterOfEntities
Definition Registry maintained at National level containing list of recognised data altruism organisations
Source
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section REGISTERS in EU-DGA

9.1.11 Data Altruism Annual Activity Report

Term DataAltruismAnnualReport Prefix eu-dga
Label Data Altruism Annual Activity Report
IRI https://w3id.org/dpv/legal/eu/dga#DataAltruismAnnualReport
Type rdfs:Class, skos:Concept, dpv:OrganisationalMeasure
Broader/Parent types dpv:RecordsOfActivitiesdpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Object of relation dpv:hasOrganisationalMeasure, dpv:hasRecordOfActivity, dpv:hasTechnicalOrganisationalMeasure
Definition Document containing the annual activities reported by a Data Altruism organisation
Source
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section TOMS in EU-DGA

9.1.12 Data Altruism Authority

Term DataAltruismAuthority Prefix eu-dga
Label Data Altruism Authority
IRI https://w3id.org/dpv/legal/eu/dga#DataAltruismAuthority
Type rdfs:Class, skos:Concept
Broader/Parent types dpv:Authoritydpv:GovernmentalOrganisationdpv:Organisationdpv:LegalEntitydpv:Entity
Object of relation dpv:hasAuthority, dpv:hasEntity, dpv:hasResponsibleEntity, dpv:hasSubsidiary, dpv:isDeterminedByEntity, dpv:isImplementedByEntity, dpv:isIndicatedBy, dpv:isOrganistionalUnitOf, dpv:isRepresentativeFor, dpv:isSubsidiaryOf, eu-gdpr:hasEstablishment, eu-gdpr:hasMainEstablishment, eu-gdpr:isMainEstablishmentFor
Definition An authority tasked with overseeing the activity of data altruism organisations and maintaining a public register of said entities
Source
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section ENTITIES in EU-DGA

9.1.13 Data Altruism Notice

Term DataAltruismNotice Prefix eu-dga
Label Data Altruism Notice
IRI https://w3id.org/dpv/legal/eu/dga#DataAltruismNotice
Type rdfs:Class, skos:Concept, dpv:OrganisationalMeasure
Broader/Parent types dpv:Noticedpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Object of relation dpv:hasNotice, dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure
Definition Notice providing information regarding the processing of data for data altruistic purposes
Source
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section TOMS in EU-DGA

9.1.14 Data Altruism Organisation

Term DataAltruismOrganisation Prefix eu-dga
Label Data Altruism Organisation
IRI https://w3id.org/dpv/legal/eu/dga#DataAltruismOrganisation
Type rdfs:Class, skos:Concept
Broader/Parent types dpv:NonProfitOrganisationdpv:Organisationdpv:LegalEntitydpv:Entity
Object of relation dpv:hasEntity, dpv:hasResponsibleEntity, dpv:hasSubsidiary, dpv:isDeterminedByEntity, dpv:isImplementedByEntity, dpv:isIndicatedBy, dpv:isOrganistionalUnitOf, dpv:isRepresentativeFor, dpv:isSubsidiaryOf, eu-dga:hasDAO, eu-gdpr:hasEstablishment, eu-gdpr:hasMainEstablishment, eu-gdpr:isMainEstablishmentFor
Definition An non-profit organisation who collects and shares data for altruistic purposes
Source
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section ENTITIES in EU-DGA

9.1.15 Record of Data Altruism Activity

Term DataAltruismRecord Prefix eu-dga
Label Record of Data Altruism Activity
IRI https://w3id.org/dpv/legal/eu/dga#DataAltruismRecord
Type rdfs:Class, skos:Concept, dpv:OrganisationalMeasure
Broader/Parent types dpv:RecordsOfActivitiesdpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Object of relation dpv:hasOrganisationalMeasure, dpv:hasRecordOfActivity, dpv:hasTechnicalOrganisationalMeasure
Definition Document that logs the activity of the data altruism organisation
Source
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section TOMS in EU-DGA

9.1.16 Data Asset List

Term DataAssetList Prefix eu-dga
Label Data Asset List
IRI https://w3id.org/dpv/legal/eu/dga#DataAssetList
Type rdfs:Class, skos:Concept, dpv:OrganisationalMeasure
Broader/Parent types dpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Object of relation dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure
Definition Searchable asset list which contains available data resources including their data format and size and the conditions for their re-use
Source
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section TOMS in EU-DGA

9.1.17 Data Cooperative

Term DataCooperative Prefix eu-dga
Label Data Cooperative
IRI https://w3id.org/dpv/legal/eu/dga#DataCooperative
Type rdfs:Class, skos:Concept
Broader/Parent types eu-dga:DISPdpv:LegalEntitydpv:Entity
Object of relation dpv:hasEntity, dpv:hasResponsibleEntity, dpv:isDeterminedByEntity, dpv:isImplementedByEntity, dpv:isIndicatedBy, dpv:isOrganistionalUnitOf, dpv:isRepresentativeFor, eu-dga:hasDISP, eu-gdpr:hasEstablishment, eu-gdpr:hasMainEstablishment, eu-gdpr:isMainEstablishmentFor
Definition An entity constituted by data subjects, one-person undertakings or SMEs who provides data intermediation services and supports its members in the exercise of their data-related rights
Source
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section ENTITIES in EU-DGA

9.1.18 Data Cooperative Service

Term DataCooperativeService Prefix eu-dga
Label Data Cooperative Service
IRI https://w3id.org/dpv/legal/eu/dga#DataCooperativeService
Type rdfs:Class, skos:Concept
Broader/Parent types eu-dga:DataIntermediationServicedpv:Servicedpv:Process
Object of relation dpv:hasProcess, dpv:hasService
Definition Service provided by a data cooperative
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section SERVICES in EU-DGA

9.1.19 Data Holder

Term DataHolder Prefix eu-dga
Label Data Holder
IRI https://w3id.org/dpv/legal/eu/dga#DataHolder
Type rdfs:Class, skos:Concept
Broader/Parent types dpv:LegalEntitydpv:Entity
Object of relation dpv:hasEntity, dpv:hasResponsibleEntity, dpv:isDeterminedByEntity, dpv:isImplementedByEntity, dpv:isIndicatedBy, dpv:isOrganistionalUnitOf, dpv:isRepresentativeFor, eu-dga:hasDataHolder, eu-gdpr:hasEstablishment, eu-gdpr:hasMainEstablishment, eu-gdpr:isMainEstablishmentFor
Definition An entity who has the right to grant access to or to share certain personal data or non-personal data
Source
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section ENTITIES in EU-DGA

9.1.20 Data Intermediation Authority

Term DataIntermediationAuthority Prefix eu-dga
Label Data Intermediation Authority
IRI https://w3id.org/dpv/legal/eu/dga#DataIntermediationAuthority
Type rdfs:Class, skos:Concept
Broader/Parent types dpv:Authoritydpv:GovernmentalOrganisationdpv:Organisationdpv:LegalEntitydpv:Entity
Object of relation dpv:hasAuthority, dpv:hasEntity, dpv:hasResponsibleEntity, dpv:hasSubsidiary, dpv:isDeterminedByEntity, dpv:isImplementedByEntity, dpv:isIndicatedBy, dpv:isOrganistionalUnitOf, dpv:isRepresentativeFor, dpv:isSubsidiaryOf, eu-gdpr:hasEstablishment, eu-gdpr:hasMainEstablishment, eu-gdpr:isMainEstablishmentFor
Definition An authority tasked with overseeing the activity of data intermediation service providers and maintaining a public register of said entities
Source
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section ENTITIES in EU-DGA

9.1.21 Record of Data Intermediation Activity

Term DataIntermediationRecord Prefix eu-dga
Label Record of Data Intermediation Activity
IRI https://w3id.org/dpv/legal/eu/dga#DataIntermediationRecord
Type rdfs:Class, skos:Concept, dpv:OrganisationalMeasure
Broader/Parent types dpv:RecordsOfActivitiesdpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Object of relation dpv:hasOrganisationalMeasure, dpv:hasRecordOfActivity, dpv:hasTechnicalOrganisationalMeasure
Definition Document that logs the activity of the data intermediation service provider
Source
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section TOMS in EU-DGA

9.1.22 Data Intermediation Service

Term DataIntermediationService Prefix eu-dga
Label Data Intermediation Service
IRI https://w3id.org/dpv/legal/eu/dga#DataIntermediationService
Type rdfs:Class, skos:Concept
Broader/Parent types dpv:Servicedpv:Process
Object of relation dpv:hasProcess, dpv:hasService
Definition Service of data intermediation which aims to facilitate the sharing of data between Data Subjects, Data Holders and Data Users
Source
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section SERVICES in EU-DGA

9.1.23 Data Intermediation Service between Data Holders and Data Users

Term DataIntermediationServiceBetweenHoldersUsers Prefix eu-dga
Label Data Intermediation Service between Data Holders and Data Users
IRI https://w3id.org/dpv/legal/eu/dga#DataIntermediationServiceBetweenHoldersUsers
Type rdfs:Class, skos:Concept
Broader/Parent types eu-dga:DataIntermediationServicedpv:Servicedpv:Process
Object of relation dpv:hasProcess, dpv:hasService
Definition Data intermediation service for data shared between Data Holders and Data Users
Source
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section SERVICES in EU-DGA

9.1.24 Data Intermediation Service between Data Subjects and Data Users

Term DataIntermediationServiceBetweenSubjectsUsers Prefix eu-dga
Label Data Intermediation Service between Data Subjects and Data Users
IRI https://w3id.org/dpv/legal/eu/dga#DataIntermediationServiceBetweenSubjectsUsers
Type rdfs:Class, skos:Concept
Broader/Parent types eu-dga:DataIntermediationServicedpv:Servicedpv:Process
Object of relation dpv:hasProcess, dpv:hasService
Definition Data intermediation service for data shared between Data Subjects, Natural Persons who are Data Holders and Data Users
Source
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section SERVICES in EU-DGA

9.1.25 Data Reuse Assistant

Term DataReuseAssistant Prefix eu-dga
Label Data Reuse Assistant
IRI https://w3id.org/dpv/legal/eu/dga#DataReuseAssistant
Type rdfs:Class, skos:Concept
Broader/Parent types dpv:Entity
Object of relation dpv:hasEntity, dpv:hasResponsibleEntity, dpv:isDeterminedByEntity, dpv:isImplementedByEntity, dpv:isIndicatedBy, dpv:isOrganistionalUnitOf, dpv:isRepresentativeFor, eu-dga:hasDataReuseAssistant
Definition An entity designated by the Member State to provide technical support and guidance to public sector bodies regarding access and reuse of data and for requesting consent and permissions
Source
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section ENTITIES in EU-DGA

9.1.26 Data Reuse Request

Term DataReuseRequest Prefix eu-dga
Label Data Reuse Request
IRI https://w3id.org/dpv/legal/eu/dga#DataReuseRequest
Type rdfs:Class, skos:Concept, dpv:OrganisationalMeasure
Broader/Parent types dpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Object of relation dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure
Definition Procedure to handle requests and provide data for reuse via single information point
Source
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section TOMS in EU-DGA

9.1.27 Data User

Term DataUser Prefix eu-dga
Label Data User
IRI https://w3id.org/dpv/legal/eu/dga#DataUser
Type rdfs:Class, skos:Concept
Broader/Parent types dpv:LegalEntitydpv:Entity
Object of relation dpv:hasEntity, dpv:hasResponsibleEntity, dpv:isDeterminedByEntity, dpv:isImplementedByEntity, dpv:isIndicatedBy, dpv:isOrganistionalUnitOf, dpv:isRepresentativeFor, eu-dga:hasDataUser, eu-gdpr:hasEstablishment, eu-gdpr:hasMainEstablishment, eu-gdpr:isMainEstablishmentFor
Definition An entity who has access and the right to use personal or non-personal data for commercial or non-commercial purposes
Source
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section ENTITIES in EU-DGA

9.1.28 Data Intermediation Service Provider

Term DISP Prefix eu-dga
Label Data Intermediation Service Provider
IRI https://w3id.org/dpv/legal/eu/dga#DISP
Type rdfs:Class, skos:Concept
Broader/Parent types dpv:LegalEntitydpv:Entity
Object of relation dpv:hasEntity, dpv:hasResponsibleEntity, dpv:isDeterminedByEntity, dpv:isImplementedByEntity, dpv:isIndicatedBy, dpv:isOrganistionalUnitOf, dpv:isRepresentativeFor, eu-dga:hasDISP, eu-gdpr:hasEstablishment, eu-gdpr:hasMainEstablishment, eu-gdpr:isMainEstablishmentFor
Definition An entity who establishes commercial relationships for the data sharing between data subjects and data holders on the one hand and data users on the other
Source
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section ENTITIES in EU-DGA

9.1.29 EU Approval for Data Intermediation Service Provider

Term DISPEUApproval Prefix eu-dga
Label EU Approval for Data Intermediation Service Provider
IRI https://w3id.org/dpv/legal/eu/dga#DISPEUApproval
Type rdfs:Class, skos:Concept, dpv:OrganisationalMeasure
Broader/Parent types dpv:CertificationSealdpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Object of relation dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure
Definition Confirmation and approval by a competent authority for the Data Intermediation Service Provider's compliance with Article 11 and Article 12 of the DGA
Source
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section TOMS in EU-DGA

9.1.30 Data Intermediation Service Provider for Data Holder

Term DISPForDataHolder Prefix eu-dga
Label Data Intermediation Service Provider for Data Holder
IRI https://w3id.org/dpv/legal/eu/dga#DISPForDataHolder
Type rdfs:Class, skos:Concept
Broader/Parent types eu-dga:DISPdpv:LegalEntitydpv:Entity
Object of relation dpv:hasEntity, dpv:hasResponsibleEntity, dpv:isDeterminedByEntity, dpv:isImplementedByEntity, dpv:isIndicatedBy, dpv:isOrganistionalUnitOf, dpv:isRepresentativeFor, eu-dga:hasDISP, eu-gdpr:hasEstablishment, eu-gdpr:hasMainEstablishment, eu-gdpr:isMainEstablishmentFor
Definition An entity who makes data holders' data available for potential data users, including bilateral or multilateral exchanges of data and platforms and databases for the joint exploitation of data
Source
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section ENTITIES in EU-DGA

9.1.31 Data Intermediation Service Provider for Data Subject

Term DISPForDataSubject Prefix eu-dga
Label Data Intermediation Service Provider for Data Subject
IRI https://w3id.org/dpv/legal/eu/dga#DISPForDataSubject
Type rdfs:Class, skos:Concept
Broader/Parent types eu-dga:DISPdpv:LegalEntitydpv:Entity
Object of relation dpv:hasEntity, dpv:hasResponsibleEntity, dpv:isDeterminedByEntity, dpv:isImplementedByEntity, dpv:isIndicatedBy, dpv:isOrganistionalUnitOf, dpv:isRepresentativeFor, eu-dga:hasDISP, eu-gdpr:hasEstablishment, eu-gdpr:hasMainEstablishment, eu-gdpr:isMainEstablishmentFor
Definition An entity who makes data subjects' personal data available for potential data users
Source
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section ENTITIES in EU-DGA

9.1.32 Data Intermediation Service Notification

Term DISPNotice Prefix eu-dga
Label Data Intermediation Service Notification
IRI https://w3id.org/dpv/legal/eu/dga#DISPNotice
Type rdfs:Class, skos:Concept, dpv:OrganisationalMeasure
Broader/Parent types dpv:Noticedpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Object of relation dpv:hasNotice, dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure
Definition Notification by a Data Intermediation Service Provider to a competent authority concerning changes to details regarding its Data Intermediation Service
Source
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section TOMS in EU-DGA

9.1.33 Public Register of Data Intermediation Service Providers

Term DISPRegister Prefix eu-dga
Label Public Register of Data Intermediation Service Providers
IRI https://w3id.org/dpv/legal/eu/dga#DISPRegister
Type rdfs:Class, skos:Concept, dpv:PublicRegisterOfEntities
Broader/Parent types dpv:PublicRegisterOfEntities
Definition Document that contains a publicly available list of data intermediation service providers
Source
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section REGISTERS in EU-DGA
Term EUDataAltruismConsentForm Prefix eu-dga
Label European Data Altruism Consent Form
IRI https://w3id.org/dpv/legal/eu/dga#EUDataAltruismConsentForm
Type rdfs:Class, skos:Concept, dpv:OrganisationalMeasure
Broader/Parent types dpv:ConsentManagementdpv:PermissionManagementdpv:RightsManagementdpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Object of relation dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure
Definition A form provided by the European Commission for collecting consent
Source
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section TOMS in EU-DGA

9.1.35 European Data Innovation Board

Term EuropeanDataInnovationBoard Prefix eu-dga
Label European Data Innovation Board
IRI https://w3id.org/dpv/legal/eu/dga#EuropeanDataInnovationBoard
Type rdfs:Class, skos:Concept
Broader/Parent types dpv:SupraNationalAuthoritydpv:Authoritydpv:GovernmentalOrganisationdpv:Organisationdpv:LegalEntitydpv:Entity
Object of relation dpv:hasAuthority, dpv:hasEntity, dpv:hasResponsibleEntity, dpv:hasSubsidiary, dpv:isDeterminedByEntity, dpv:isImplementedByEntity, dpv:isIndicatedBy, dpv:isOrganistionalUnitOf, dpv:isRepresentativeFor, dpv:isSubsidiaryOf, eu-gdpr:hasEstablishment, eu-gdpr:hasMainEstablishment, eu-gdpr:isMainEstablishmentFor
Definition An authority tasked with overseeing the activities of data intermediation service providers and data altruism organisations
Source
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section ENTITIES in EU-DGA

9.1.36 EU Single Information Point Provider

Term EUSIPProvider Prefix eu-dga
Label EU Single Information Point Provider
IRI https://w3id.org/dpv/legal/eu/dga#EUSIPProvider
Type rdfs:Class, skos:Concept
Broader/Parent types eu-dga:SIPProviderdpv:LegalEntitydpv:Entity
Object of relation dpv:hasEntity, dpv:hasResponsibleEntity, dpv:isDeterminedByEntity, dpv:isImplementedByEntity, dpv:isIndicatedBy, dpv:isOrganistionalUnitOf, dpv:isRepresentativeFor, eu-gdpr:hasEstablishment, eu-gdpr:hasMainEstablishment, eu-gdpr:isMainEstablishmentFor
Definition An entity who is responsible for receiving and transmitting requests for the reuse of public data in the EU
Source
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section ENTITIES in EU-DGA

9.1.37 Local Single Information Point Provider

Term LocalSIPProvider Prefix eu-dga
Label Local Single Information Point Provider
IRI https://w3id.org/dpv/legal/eu/dga#LocalSIPProvider
Type rdfs:Class, skos:Concept
Broader/Parent types eu-dga:SIPProviderdpv:LegalEntitydpv:Entity
Object of relation dpv:hasEntity, dpv:hasResponsibleEntity, dpv:isDeterminedByEntity, dpv:isImplementedByEntity, dpv:isIndicatedBy, dpv:isOrganistionalUnitOf, dpv:isRepresentativeFor, eu-gdpr:hasEstablishment, eu-gdpr:hasMainEstablishment, eu-gdpr:isMainEstablishmentFor
Definition A local entity who is responsible for receiving and transmitting requests for the reuse of public data
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section ENTITIES in EU-DGA

9.1.38 National Data Altruism Policy

Term NationalDataAltruismPolicy Prefix eu-dga
Label National Data Altruism Policy
IRI https://w3id.org/dpv/legal/eu/dga#NationalDataAltruismPolicy
Type rdfs:Class, skos:Concept, dpv:OrganisationalMeasure
Broader/Parent types dpv:Policydpv:GovernanceProceduresdpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Object of relation dpv:hasOrganisationalMeasure, dpv:hasPolicy, dpv:hasTechnicalOrganisationalMeasure
Definition A Policy established at National level regarding Data Altruism
Source
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section TOMS in EU-DGA

9.1.39 National Single Information Point Provider

Term NationalSIPProvider Prefix eu-dga
Label National Single Information Point Provider
IRI https://w3id.org/dpv/legal/eu/dga#NationalSIPProvider
Type rdfs:Class, skos:Concept
Broader/Parent types eu-dga:SIPProviderdpv:LegalEntitydpv:Entity
Object of relation dpv:hasEntity, dpv:hasResponsibleEntity, dpv:isDeterminedByEntity, dpv:isImplementedByEntity, dpv:isIndicatedBy, dpv:isOrganistionalUnitOf, dpv:isRepresentativeFor, eu-gdpr:hasEstablishment, eu-gdpr:hasMainEstablishment, eu-gdpr:isMainEstablishmentFor
Definition A national entity who is responsible for receiving and transmitting requests for the reuse of public data
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section ENTITIES in EU-DGA

9.1.40 Personal Data Reuse Notice

Term PersonalDataReuseNotice Prefix eu-dga
Label Personal Data Reuse Notice
IRI https://w3id.org/dpv/legal/eu/dga#PersonalDataReuseNotice
Type rdfs:Class, skos:Concept, dpv:OrganisationalMeasure
Broader/Parent types dpv:ConsentNoticedpv:PrivacyNoticedpv:Noticedpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Object of relation dpv:hasNotice, dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure
Definition Notice for data subjects to provide consent based on information and advise regarding intended use of data, exercise of rights, and applicable terms and conditions
Source
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section TOMS in EU-DGA

9.1.41 Regional Single Information Point Provider

Term RegionalSIPProvider Prefix eu-dga
Label Regional Single Information Point Provider
IRI https://w3id.org/dpv/legal/eu/dga#RegionalSIPProvider
Type rdfs:Class, skos:Concept
Broader/Parent types eu-dga:SIPProviderdpv:LegalEntitydpv:Entity
Object of relation dpv:hasEntity, dpv:hasResponsibleEntity, dpv:isDeterminedByEntity, dpv:isImplementedByEntity, dpv:isIndicatedBy, dpv:isOrganistionalUnitOf, dpv:isRepresentativeFor, eu-gdpr:hasEstablishment, eu-gdpr:hasMainEstablishment, eu-gdpr:isMainEstablishmentFor
Definition A regional entity who is responsible for receiving and transmitting requests for the reuse of public data
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section ENTITIES in EU-DGA

9.1.42 Right to Data Conversion Opt-out

Term RightToDataConversionOptOut Prefix eu-dga
Label Right to Data Conversion Opt-out
IRI https://w3id.org/dpv/legal/eu/dga#RightToDataConversionOptOut
Type rdfs:Class, skos:Concept, dpv:Right
Broader/Parent types dpv:Right
Object of relation dpv:hasRight
Definition Right of data subjects and data holders to opt-out of data conversions e.g. enhance interoperability or harmonisation with standards
Source
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section LEGAL-RIGHTS in EU-DGA

9.1.43 Right to Impartial Review

Term RightToImpartialReview Prefix eu-dga
Label Right to Impartial Review
IRI https://w3id.org/dpv/legal/eu/dga#RightToImpartialReview
Type rdfs:Class, skos:Concept, dpv:Right
Broader/Parent types dpv:Right
Object of relation dpv:hasRight
Definition Right of data subjects and data holders to get an review by an impartial body with the appropriate expertise
Source
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section LEGAL-RIGHTS in EU-DGA

9.1.44 Right to Lodge Complaint

Term RightToLodgeComplaint Prefix eu-dga
Label Right to Lodge Complaint
IRI https://w3id.org/dpv/legal/eu/dga#RightToLodgeComplaint
Type rdfs:Class, skos:Concept, dpv:Right
Broader/Parent types dpv:Right
Object of relation dpv:hasRight
Definition Right of data subjects and data holders to lodge a complaint
Source
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section LEGAL-RIGHTS in EU-DGA

9.1.45 Sectorial Single Information Point Provider

Term SectorialSIPProvider Prefix eu-dga
Label Sectorial Single Information Point Provider
IRI https://w3id.org/dpv/legal/eu/dga#SectorialSIPProvider
Type rdfs:Class, skos:Concept
Broader/Parent types eu-dga:SIPProviderdpv:LegalEntitydpv:Entity
Object of relation dpv:hasEntity, dpv:hasResponsibleEntity, dpv:isDeterminedByEntity, dpv:isImplementedByEntity, dpv:isIndicatedBy, dpv:isOrganistionalUnitOf, dpv:isRepresentativeFor, eu-gdpr:hasEstablishment, eu-gdpr:hasMainEstablishment, eu-gdpr:isMainEstablishmentFor
Definition An entity who is responsible for receiving and transmitting requests for the reuse of public data for a particular sector
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section ENTITIES in EU-DGA

9.1.46 Secure Processing Environment

Term SecureProcessingEnvironment Prefix eu-dga
Label Secure Processing Environment
IRI https://w3id.org/dpv/legal/eu/dga#SecureProcessingEnvironment
Type rdfs:Class, skos:Concept, dpv:TechnicalMeasure
Broader/Parent types dpv:SecureProcessingEnvironmentdpv:SecurityProceduredpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Object of relation dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure
Definition Physical or virtual environment to ensure compliance with EU law and allow the entity providing the secure processing environment to determine and supervise all data processing actions
Source
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section TOMS in EU-DGA

9.1.47 Single Information Point (SIP)

Term SingleInformationPoint Prefix eu-dga
Label Single Information Point (SIP)
IRI https://w3id.org/dpv/legal/eu/dga#SingleInformationPoint
Type rdfs:Class, skos:Concept
Broader/Parent types dpv:Servicedpv:Process
Object of relation dpv:hasProcess, dpv:hasService
Definition Service responsible for receiving and transmitting requests for the re-use of public data
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section SERVICES in EU-DGA

9.1.48 Single Information Point Provider

Term SIPProvider Prefix eu-dga
Label Single Information Point Provider
IRI https://w3id.org/dpv/legal/eu/dga#SIPProvider
Type rdfs:Class, skos:Concept
Broader/Parent types dpv:LegalEntitydpv:Entity
Object of relation dpv:hasEntity, dpv:hasResponsibleEntity, dpv:isDeterminedByEntity, dpv:isImplementedByEntity, dpv:isIndicatedBy, dpv:isOrganistionalUnitOf, dpv:isRepresentativeFor, eu-gdpr:hasEstablishment, eu-gdpr:hasMainEstablishment, eu-gdpr:isMainEstablishmentFor
Definition An entity who is responsible for receiving and transmitting requests for the reuse of public data
Source
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section ENTITIES in EU-DGA

9.1.49 Third Country Data Request Notice

Term ThirdCountryDataRequestNotice Prefix eu-dga
Label Third Country Data Request Notice
IRI https://w3id.org/dpv/legal/eu/dga#ThirdCountryDataRequestNotice
Type rdfs:Class, skos:Concept, dpv:OrganisationalMeasure
Broader/Parent types dpv:DataTransferNoticedpv:Noticedpv:OrganisationalMeasuredpv:TechnicalOrganisationalMeasure
Object of relation dpv:hasNotice, dpv:hasOrganisationalMeasure, dpv:hasTechnicalOrganisationalMeasure
Definition Notice regarding a request of a third-country administrative authority to access data
Source
Date Created 2024-02-14
Contributors Beatriz Esteves
See More: section TOMS in EU-DGA

9.2 Properties

9.2.1 has data altruism organisation

Term hasDAO Prefix eu-dga
Label has data altruism organisation
IRI https://w3id.org/dpv/legal/eu/dga#hasDAO
Type rdf:Property, skos:Concept
Broader/Parent types dpv:hasEntity
Sub-property of dpv:hasEntity
Range includes eu-dga:DataAltruismOrganisation
Definition Indicates association with data altruism organisation
Date Created 2024-02-14
Contributors Beatriz Esteves, Harshvardhan J. Pandit
See More: section ENTITIES in EU-DGA

9.2.2 has data holder

Term hasDataHolder Prefix eu-dga
Label has data holder
IRI https://w3id.org/dpv/legal/eu/dga#hasDataHolder
Type rdf:Property, skos:Concept
Broader/Parent types dpv:hasEntity
Sub-property of dpv:hasEntity
Range includes eu-dga:DataHolder
Definition Indicates association with data holder
Date Created 2024-02-14
Contributors Beatriz Esteves, Harshvardhan J. Pandit
See More: section ENTITIES in EU-DGA

9.2.3 has data reuse assistant

Term hasDataReuseAssistant Prefix eu-dga
Label has data reuse assistant
IRI https://w3id.org/dpv/legal/eu/dga#hasDataReuseAssistant
Type rdf:Property, skos:Concept
Broader/Parent types dpv:hasEntity
Sub-property of dpv:hasEntity
Range includes eu-dga:DataReuseAssistant
Definition Indicates association with competent body designated by the Member State to assist Public Bodies in activities related to data reuse
Source
Date Created 2024-02-14
Contributors Beatriz Esteves, Harshvardhan J. Pandit
See More: section ENTITIES in EU-DGA

9.2.4 has data user

Term hasDataUser Prefix eu-dga
Label has data user
IRI https://w3id.org/dpv/legal/eu/dga#hasDataUser
Type rdf:Property, skos:Concept
Broader/Parent types dpv:hasEntity
Sub-property of dpv:hasEntity
Range includes eu-dga:DataUser
Definition Indicates association with data user
Date Created 2024-02-14
Contributors Beatriz Esteves, Harshvardhan J. Pandit
See More: section ENTITIES in EU-DGA

9.2.5 has data intermediation service provider

Term hasDISP Prefix eu-dga
Label has data intermediation service provider
IRI https://w3id.org/dpv/legal/eu/dga#hasDISP
Type rdf:Property, skos:Concept
Broader/Parent types dpv:hasEntity
Sub-property of dpv:hasEntity
Range includes eu-dga:DISP
Definition Indicates association with data intermediation service provider
Date Created 2024-02-14
Contributors Beatriz Esteves, Harshvardhan J. Pandit
See More: section ENTITIES in EU-DGA

9.3 External

DPV uses the following terms from [RDF] and [RDFS] with their defined meanings:

The following external concepts are re-used within DPV:

10. Contributors

The following people have contributed to this vocabulary. The names are ordered alphabetically. The affiliations are informative do not represent formal endorsements. Affiliations may be outdated. The list is generated automatically from the contributors listed for defined concepts.

Funding Acknowledgements

Funding Sponsors

The DPVCG was established as part of the SPECIAL H2020 Project, which received funding from the European Union’s Horizon 2020 research and innovation programme under grant agreement No. 731601 from 2017 to 2019.

Harshvardhan J. Pandit was funded to work on DPV from 2020 to 2022 by the Irish Research Council's Government of Ireland Postdoctoral Fellowship Grant#GOIPD/2020/790.

The ADAPT SFI Centre for Digital Media Technology is funded by Science Foundation Ireland through the SFI Research Centres Programme and is co-funded under the European Regional Development Fund (ERDF) through Grant#13/RC/2106 (2018 to 2020) and Grant#13/RC/2106_P2 (2021 onwards).

Funding Acknowledgements for Contributors

The contributions of Beatriz Esteves have received funding through the PROTECT ITN Project from the European Union’s Horizon 2020 research and innovation programme under the Marie Skłodowska-Curie grant agreement No 813497.

The contributions of Harshvardhan J. Pandit and Dave Lewis have been made with the financial support of Science Foundation Ireland under Grant Agreement No. 13/RC/2106_P2 at the ADAPT SFI Research Centre.

A. References

A.1 Informative references

[AI]
AI Technology concepts for DPV. URL: https://w3id.org/dpv/ai
[DGA]
Data Governance Act (DGA). URL: https://eur-lex.europa.eu/eli/reg/2022/868/oj
[DPV]
Data Privacy Vocabulary (DPV) Specification. URL: https://w3id.org/dpv
[DPVCG]
W3C Data Privacy Vocabularies and Controls Community Group (DPVCG). URL: https://www.w3.org/community/dpvcg/
[GDPR]
General Data Protection Regulation (GDPR). URL: https://eur-lex.europa.eu/eli/reg/2016/679/oj
[GUIDES]
Guides for DPV. URL: https://w3id.org/dpv/guides
Legal Jurisdiction-relevant concepts for DPV. URL: https://w3id.org/dpv/legal
[LOC]
Location and Geo-Political Membership concepts for DPV. URL: https://w3id.org/dpv/loc
[PD]
Personal Data categories for DPV. URL: https://w3id.org/dpv/pd
[PRIMER]
Primer for Data Privacy Vocabulary. URL: https://w3id.org/dpv/primer
[RDF]
RDF 1.1 Concepts and Abstract Syntax. URL: https://www.w3.org/TR/rdf11-concepts/
[RDFS]
RDF Schema 1.1. URL: https://www.w3.org/TR/rdf-schema/
[RISK]
Risk Assessment and Management concepts for DPV. URL: https://w3id.org/dpv/risk
[SKOS]
SKOS Simple Knowledge Organization System. URL: https://www.w3.org/TR/skos-reference/
[TECH]
Technology concepts for DPV. URL: https://w3id.org/dpv/tech