Privacy Rights Expression Language (PrivacyREL) Overview

Welcome to the section on Privacy Rights Expression Language (PrivacyREL), which utilizes the W3C Data Privacy Vocabulary (DPV) to describe privacy rights and permissions in a machine-readable format. This guide details how these principles are applied to manage personal data, ensuring compliance and interoperability across digital platforms.

Key Concepts and DPV Mapping

• Personal Data (DPV: PersonalData) – Information relating to an identified or identifiable natural person.
• Privacy Policy (DPV: DataHandlingPolicy) – A document detailing the terms under which personal data is processed.
• Jurisdiction (DPV: Jurisdiction) – The legal domain where the privacy policy is enforceable.

Rights and Restrictions (DPV: Processing categories)

Permissions (DPV: Permission)

• Access (DPV: AccessPersonalData) – Permission for individuals to access their personal data.
• Correction (DPV: RectifyPersonalData) – Permission to correct inaccurate or incomplete data.
• Deletion (DPV: ErasePersonalData) – Permission to delete personal data under certain conditions.

Requirements (DPV: Obligation)

• Transparency (DPV: Transparency) – Requirement to provide clear and accessible information about data usage.
• Accountability (DPV: Accountability) – Requirement for data controllers to demonstrate compliance with the privacy policy.
• Consent (DPV: Consent) – Requirement to obtain explicit consent from the data subject before processing data.

Prohibitions (DPV: Prohibition)

• Unauthorized Sharing (DPV: DoNotShare) – Prohibition against sharing personal data without explicit consent.
• Surveillance (DPV: DoNotTrack) – Prohibition against undisclosed surveillance or tracking activities.

Properties of Privacy Policies and Personal Data

Privacy Policy Properties:

• Permits: (DPV: permits) – Actions the policy allows concerning personal data.
• Requires: (DPV: requires) – Obligations imposed by the policy on data handlers.
• Prohibits: (DPV: prohibits) – Actions forbidden by the policy regarding personal data.
• Jurisdiction: (DPV: jurisdiction) – Legal area where the policy applies.
• Legal Code: (DPV: legalCode) – URL where the full text of the privacy policy can be found.

Personal Data Properties:

• Privacy Policy: (DPV: hasPolicy) – The specific privacy policy applied to the data.
• Data Controller: (DPV: DataController) – The entity determining the purposes and means of processing personal data.
• Data Processor: (DPV: DataProcessor) – The entity processing personal data on behalf of the controller.

RDF Schema for Developers

For developers implementing PrivacyREL using RDF, a machine-readable RDF schema aligned with the DPV is provided here. This schema supports embedding privacy terms directly into datasets or digital platforms to enhance compliance and operational interoperability.

Licensing

Content on this site, except where otherwise noted, is licensed under Creative Commons Attribution 4.0.