The Legal extension uses the following concepts and properties to define laws, authorities, and jurisdictions.
This page provides the following legal concepts:
Copyright © 2024 the Contributors to the Legal Concepts for United States of America (USA) Specification, published by the Data Privacy Vocabularies and Controls Community Group under the W3C Community Final Specification Agreement (FSA). A human-readable summary is available.
The LEGAL-US extension extends the Data Privacy Vocabulary (DPV) Specification to represent laws, authorities, and other legal concepts in US jurisdiction.
The canonical URL for LEGAL-US extension is https://w3id.org/dpv/legal/us, the namespace is https://w3id.org/dpv/legal/us#, the suggested prefix is legal-us, and this document along with source and releases are available at https://github.com/w3c/dpv.
This specification was published by the Data Privacy Vocabularies and Controls Community Group. It is not a W3C Standard nor is it on the W3C Standards Track. Please note that under the W3C Community Final Specification Agreement (FSA) other conditions apply. Learn more about W3C Community and Business Groups.
Contributing: The DPVCG welcomes participation to improve the DPV and associated resources, including expansion or refinement of concepts, requesting information and applications, and addressing open issues. See contributing guide for further information.
GitHub Issues are preferred for discussion of this specification.
Data Privacy Vocabulary (DPV) Specification: is the base/core specification for the 'Data Privacy Vocabulary', which is extended for Personal Data [PD], Locations [LOC], Risk Management [RISK], Technology [TECH], and [AI]. Specific [LEGAL] extensions are also provided which model jurisdiction specific regulations and concepts . To support understanding and applications of [DPV], various guides and resources [GUIDES] are provided, including a [PRIMER]. A Search Index of all concepts from DPV and extensions is available.
[DPV] and related resources are published on GitHub. For a general overview of the Data Protection Vocabularies and Controls Community Group [DPVCG], its history, deliverables, and activities - refer to DPVCG Website. For meetings, see the DPVCG calendar.
The peer-reviewed article “Creating A Vocabulary for Data Privacy” presents a historical overview of the DPVCG, and describes the methodology and structure of the DPV along with describing its creation. An open-access version can be accessed here, here, and here. The article Data Privacy Vocabulary (DPV) - Version 2, accepted for presentation at the 23rd International Semantic Web Conference (ISWC 2024), describes the changes made in DPV v2.
The Legal extension uses the following concepts and properties to define laws, authorities, and jurisdictions.
This page provides the following legal concepts:
Laws are represented as instances of dpv:Law, and are associated with their jurisdictions using the [LOC] taxonomy and dpv:hasJurisdiction relation. The webpage for the law, if available, is indicated using foaf:homepage, and the temporal start and end if available, is represented using dct:temporal relation with an instance of time:ProperInterval.
| ID | Name | Jurisdictions | Authorities | Webpage | Start/End |
|---|---|---|---|---|---|
law-CA-CCPA
|
California Consumer Privacy Act (CCPA) | California, United States of America | legal-us:DPA-US-CA | link | 2020-01-01/ongoing |
law-CA-CPRA
|
California Privacy Rights Act (CPRA) | California, United States of America | legal-us:DPA-US-CA | link | 2023-01-01/ongoing |
law-CO-CPA
|
Colorado Privacy Act (CPA) | Colorado, United States of America | legal-us:DPA-US-CO | link | 2024-01-07/ongoing |
law-CT-CTPA
|
Connecticut Data Privacy Act (CTPA) | Connecticut, United States of America | legal-us:DPA-US-CT | link | 2023-01-07/ongoing |
law-NV-NPICICA
|
Nevada Privacy of Information Collected on the Internet from Consumers Act (NPICICA) | Nevada, United States of America | legal-us:DPA-US-NV | link | 2021-01-10/ongoing |
law-UT-UCPA
|
Utah Consumer Privacy Act (UCPA) | Utah, United States of America | legal-us:DPA-US-UT | link | 2023-12-31/ongoing |
law-VA-VCDPA
|
Virginia Consumer Data Protection Act (VCDPA) | Virginia, United States of America | legal-us:DPA-US-VA | link | 2023-01-01/ongoing |
| Term | DPA-US-CA | Prefix | legal-us |
|---|---|---|---|
| Label | California Privacy Protection Agency (CPPA) | ||
| IRI | https://w3id.org/dpv/legal/us#DPA-US-CA | ||
| Type | rdfs:Class, skos:Concept, dpv:DataProtectionAuthority | ||
| Broader/Parent types | dpv:DataProtectionAuthority → dpv:Authority → dpv:GovernmentalOrganisation → dpv:Organisation → dpv:LegalEntity → dpv:Entity | ||
| Broader/Parent types | dpv:Law | ||
| Object of relation | dpv:hasApplicableLaw, dpv:hasAuthority, dpv:hasEntity, dpv:hasResponsibleEntity, dpv:hasSubsidiary, dpv:isDeterminedByEntity, dpv:isImplementedByEntity, dpv:isIndicatedBy, dpv:isOrganistionalUnitOf, dpv:isRepresentativeFor, dpv:isSubsidiaryOf | ||
| Date Created | 2023-12-13 | ||
| has applicable law | California Consumer Privacy Act (CCPA) , California Privacy Rights Act (CPRA) | ||
| has jurisdiction | California | ||
| See More: | section LEGAL in LEGAL-US |
| Term | DPA-US-CO | Prefix | legal-us |
|---|---|---|---|
| Label | Colorado Attorney General | ||
| IRI | https://w3id.org/dpv/legal/us#DPA-US-CO | ||
| Type | rdfs:Class, skos:Concept, dpv:DataProtectionAuthority | ||
| Broader/Parent types | dpv:DataProtectionAuthority → dpv:Authority → dpv:GovernmentalOrganisation → dpv:Organisation → dpv:LegalEntity → dpv:Entity | ||
| Broader/Parent types | dpv:Law | ||
| Object of relation | dpv:hasApplicableLaw, dpv:hasAuthority, dpv:hasEntity, dpv:hasResponsibleEntity, dpv:hasSubsidiary, dpv:isDeterminedByEntity, dpv:isImplementedByEntity, dpv:isIndicatedBy, dpv:isOrganistionalUnitOf, dpv:isRepresentativeFor, dpv:isSubsidiaryOf | ||
| Date Created | 2022-11-23 | ||
| Contributors | Jonathan Bowker | ||
| has applicable law | Colorado Privacy Act (CPA) | ||
| has jurisdiction | Colorado | ||
| See More: | section LEGAL in LEGAL-US |
| Term | DPA-US-CT | Prefix | legal-us |
|---|---|---|---|
| Label | Connecticut Attorney General | ||
| IRI | https://w3id.org/dpv/legal/us#DPA-US-CT | ||
| Type | rdfs:Class, skos:Concept, dpv:DataProtectionAuthority | ||
| Broader/Parent types | dpv:DataProtectionAuthority → dpv:Authority → dpv:GovernmentalOrganisation → dpv:Organisation → dpv:LegalEntity → dpv:Entity | ||
| Broader/Parent types | dpv:Law | ||
| Object of relation | dpv:hasApplicableLaw, dpv:hasAuthority, dpv:hasEntity, dpv:hasResponsibleEntity, dpv:hasSubsidiary, dpv:isDeterminedByEntity, dpv:isImplementedByEntity, dpv:isIndicatedBy, dpv:isOrganistionalUnitOf, dpv:isRepresentativeFor, dpv:isSubsidiaryOf | ||
| Date Created | 2022-11-23 | ||
| Contributors | Jonathan Bowker | ||
| has applicable law | Connecticut Data Privacy Act (CTPA) | ||
| has jurisdiction | Connecticut | ||
| See More: | section LEGAL in LEGAL-US |
| Term | DPA-US-NV | Prefix | legal-us |
|---|---|---|---|
| Label | Nevada Attorney General | ||
| IRI | https://w3id.org/dpv/legal/us#DPA-US-NV | ||
| Type | rdfs:Class, skos:Concept, dpv:DataProtectionAuthority | ||
| Broader/Parent types | dpv:DataProtectionAuthority → dpv:Authority → dpv:GovernmentalOrganisation → dpv:Organisation → dpv:LegalEntity → dpv:Entity | ||
| Broader/Parent types | dpv:Law | ||
| Object of relation | dpv:hasApplicableLaw, dpv:hasAuthority, dpv:hasEntity, dpv:hasResponsibleEntity, dpv:hasSubsidiary, dpv:isDeterminedByEntity, dpv:isImplementedByEntity, dpv:isIndicatedBy, dpv:isOrganistionalUnitOf, dpv:isRepresentativeFor, dpv:isSubsidiaryOf | ||
| Date Created | 2022-11-23 | ||
| Contributors | Jonathan Bowker | ||
| has applicable law | Nevada Privacy of Information Collected on the Internet from Consumers Act (NPICICA) | ||
| has jurisdiction | Nevada | ||
| See More: | section LEGAL in LEGAL-US |
| Term | DPA-US-UT | Prefix | legal-us |
|---|---|---|---|
| Label | Utah Attorney General | ||
| IRI | https://w3id.org/dpv/legal/us#DPA-US-UT | ||
| Type | rdfs:Class, skos:Concept, dpv:DataProtectionAuthority | ||
| Broader/Parent types | dpv:DataProtectionAuthority → dpv:Authority → dpv:GovernmentalOrganisation → dpv:Organisation → dpv:LegalEntity → dpv:Entity | ||
| Broader/Parent types | dpv:Law | ||
| Object of relation | dpv:hasApplicableLaw, dpv:hasAuthority, dpv:hasEntity, dpv:hasResponsibleEntity, dpv:hasSubsidiary, dpv:isDeterminedByEntity, dpv:isImplementedByEntity, dpv:isIndicatedBy, dpv:isOrganistionalUnitOf, dpv:isRepresentativeFor, dpv:isSubsidiaryOf | ||
| Date Created | 2022-11-22 | ||
| Contributors | Jonathan Bowker | ||
| has applicable law | Utah Consumer Privacy Act (UCPA) | ||
| has jurisdiction | Utah | ||
| See More: | section LEGAL in LEGAL-US |
| Term | DPA-US-VA | Prefix | legal-us |
|---|---|---|---|
| Label | Virginia Attorney General | ||
| IRI | https://w3id.org/dpv/legal/us#DPA-US-VA | ||
| Type | rdfs:Class, skos:Concept, dpv:DataProtectionAuthority | ||
| Broader/Parent types | dpv:DataProtectionAuthority → dpv:Authority → dpv:GovernmentalOrganisation → dpv:Organisation → dpv:LegalEntity → dpv:Entity | ||
| Broader/Parent types | dpv:Law | ||
| Object of relation | dpv:hasApplicableLaw, dpv:hasAuthority, dpv:hasEntity, dpv:hasResponsibleEntity, dpv:hasSubsidiary, dpv:isDeterminedByEntity, dpv:isImplementedByEntity, dpv:isIndicatedBy, dpv:isOrganistionalUnitOf, dpv:isRepresentativeFor, dpv:isSubsidiaryOf | ||
| Date Created | 2022-11-23 | ||
| Contributors | Jonathan Bowker | ||
| has applicable law | Virginia Consumer Data Protection Act (VCDPA) | ||
| has jurisdiction | Virginia | ||
| See More: | section LEGAL in LEGAL-US |
| Term | law-CA-CCPA | Prefix | legal-us |
|---|---|---|---|
| Label | California Consumer Privacy Act (CCPA) | ||
| IRI | https://w3id.org/dpv/legal/us#law-CA-CCPA | ||
| Type | rdfs:Class, skos:Concept, dpv:Law | ||
| Broader/Parent types | dpv:Law | ||
| Object of relation | dpv:hasApplicableLaw | ||
| Date Created | 2022-03-30 | ||
| Contributors | Harshvardhan J. Pandit | ||
| has authority | California Privacy Protection Agency (CPPA) | ||
| has jurisdiction | California | ||
| See More: | section LEGAL in LEGAL-US |
| Term | law-CA-CPRA | Prefix | legal-us |
|---|---|---|---|
| Label | California Privacy Rights Act (CPRA) | ||
| IRI | https://w3id.org/dpv/legal/us#law-CA-CPRA | ||
| Type | rdfs:Class, skos:Concept, dpv:Law | ||
| Broader/Parent types | dpv:Law | ||
| Object of relation | dpv:hasApplicableLaw | ||
| Date Created | 2022-03-30 | ||
| Contributors | Harshvardhan J. Pandit | ||
| has authority | California Privacy Protection Agency (CPPA) | ||
| has jurisdiction | California | ||
| See More: | section LEGAL in LEGAL-US |
| Term | law-CO-CPA | Prefix | legal-us |
|---|---|---|---|
| Label | Colorado Privacy Act (CPA) | ||
| IRI | https://w3id.org/dpv/legal/us#law-CO-CPA | ||
| Type | rdfs:Class, skos:Concept, dpv:Law | ||
| Broader/Parent types | dpv:Law | ||
| Object of relation | dpv:hasApplicableLaw | ||
| Date Created | 2022-11-23 | ||
| Contributors | Jonathan Bowker | ||
| has authority | Colorado Attorney General | ||
| has jurisdiction | Colorado | ||
| See More: | section LEGAL in LEGAL-US |
| Term | law-CT-CTPA | Prefix | legal-us |
|---|---|---|---|
| Label | Connecticut Data Privacy Act (CTPA) | ||
| IRI | https://w3id.org/dpv/legal/us#law-CT-CTPA | ||
| Type | rdfs:Class, skos:Concept, dpv:Law | ||
| Broader/Parent types | dpv:Law | ||
| Object of relation | dpv:hasApplicableLaw | ||
| Date Created | 2022-11-23 | ||
| Contributors | Jonathan Bowker | ||
| has authority | Connecticut Attorney General | ||
| has jurisdiction | Connecticut | ||
| See More: | section LEGAL in LEGAL-US |
| Term | law-NV-NPICICA | Prefix | legal-us |
|---|---|---|---|
| Label | Nevada Privacy of Information Collected on the Internet from Consumers Act (NPICICA) | ||
| IRI | https://w3id.org/dpv/legal/us#law-NV-NPICICA | ||
| Type | rdfs:Class, skos:Concept, dpv:Law | ||
| Broader/Parent types | dpv:Law | ||
| Object of relation | dpv:hasApplicableLaw | ||
| Date Created | 2022-11-23 | ||
| Contributors | Jonathan Bowker | ||
| has authority | Nevada Attorney General | ||
| has jurisdiction | Nevada | ||
| See More: | section LEGAL in LEGAL-US |
| Term | law-UT-UCPA | Prefix | legal-us |
|---|---|---|---|
| Label | Utah Consumer Privacy Act (UCPA) | ||
| IRI | https://w3id.org/dpv/legal/us#law-UT-UCPA | ||
| Type | rdfs:Class, skos:Concept, dpv:Law | ||
| Broader/Parent types | dpv:Law | ||
| Object of relation | dpv:hasApplicableLaw | ||
| Date Created | 2022-11-22 | ||
| Contributors | Jonathan Bowker | ||
| has authority | Utah Attorney General | ||
| has jurisdiction | Utah | ||
| See More: | section LEGAL in LEGAL-US |
| Term | law-VA-VCDPA | Prefix | legal-us |
|---|---|---|---|
| Label | Virginia Consumer Data Protection Act (VCDPA) | ||
| IRI | https://w3id.org/dpv/legal/us#law-VA-VCDPA | ||
| Type | rdfs:Class, skos:Concept, dpv:Law | ||
| Broader/Parent types | dpv:Law | ||
| Object of relation | dpv:hasApplicableLaw | ||
| Date Created | 2022-11-23 | ||
| Contributors | Jonathan Bowker | ||
| has authority | Virginia Attorney General | ||
| has jurisdiction | Virginia | ||
| See More: | section LEGAL in LEGAL-US |
DPV uses the following terms from [RDF] and [RDFS] with their defined meanings:
The following external concepts are re-used within DPV:
The following people have contributed to this vocabulary. The names are ordered alphabetically. The affiliations are informative do not represent formal endorsements. Affiliations may be outdated. The list is generated automatically from the contributors listed for defined concepts.
The DPVCG was established as part of the SPECIAL H2020 Project, which received funding from the European Union’s Horizon 2020 research and innovation programme under grant agreement No. 731601 from 2017 to 2019.
Harshvardhan J. Pandit was funded to work on DPV from 2020 to 2022 by the Irish Research Council's Government of Ireland Postdoctoral Fellowship Grant#GOIPD/2020/790.
The ADAPT SFI Centre for Digital Media Technology is funded by Science Foundation Ireland through the SFI Research Centres Programme and is co-funded under the European Regional Development Fund (ERDF) through Grant#13/RC/2106 (2018 to 2020) and Grant#13/RC/2106_P2 (2021 onwards).
The contributions of Harshvardhan J. Pandit have been made with the financial support of Science Foundation Ireland under Grant Agreement No. 13/RC/2106_P2 at the ADAPT SFI Research Centre.