From ecbb0df026e4dd8cd1ae1bb4dbfcbdfc51e3a639 Mon Sep 17 00:00:00 2001 From: Harshvardhan Pandit Date: Sun, 22 Dec 2024 11:42:24 +0000 Subject: [PATCH] Adds mapping table to EU-GDPR for GDPR -> DPV - Adds mapping table to EU-GDPR HTML showing mapping from GDPR concepts to DPV concepts - Mapping is limited to concepts from GDPR Art.4 and is represented as a draft table in the HTML - Adds a Misc. concepts module to EU-GDPR containing concepts that don't fit other modules, and which are part of the mapping - Includes changes to EU-GDPR concepts to use the Art.4 definitions - See #186 --- 2.1-dev/legal/eu/gdpr/eu-gdpr-en.html | 2498 ++++- 2.1-dev/legal/eu/gdpr/eu-gdpr-owl.html | 2374 ++++- 2.1-dev/legal/eu/gdpr/eu-gdpr-owl.jsonld | 8241 ++++++++------- 2.1-dev/legal/eu/gdpr/eu-gdpr-owl.n3 | 250 +- 2.1-dev/legal/eu/gdpr/eu-gdpr-owl.rdf | 4399 ++++---- 2.1-dev/legal/eu/gdpr/eu-gdpr-owl.ttl | 250 +- 2.1-dev/legal/eu/gdpr/eu-gdpr.csv | 87 +- 2.1-dev/legal/eu/gdpr/eu-gdpr.html | 2498 ++++- 2.1-dev/legal/eu/gdpr/eu-gdpr.jsonld | 9109 +++++++++-------- 2.1-dev/legal/eu/gdpr/eu-gdpr.n3 | 284 +- 2.1-dev/legal/eu/gdpr/eu-gdpr.rdf | 4288 ++++---- 2.1-dev/legal/eu/gdpr/eu-gdpr.ttl | 284 +- 2.1-dev/legal/eu/gdpr/index-en.html | 2498 ++++- 2.1-dev/legal/eu/gdpr/index.html | 2498 ++++- .../eu/gdpr/modules/compliance-owl.jsonld | 358 +- .../legal/eu/gdpr/modules/compliance-owl.rdf | 204 +- .../legal/eu/gdpr/modules/compliance.jsonld | 458 +- 2.1-dev/legal/eu/gdpr/modules/compliance.rdf | 132 +- .../eu/gdpr/modules/data_breach-owl.jsonld | 956 +- .../legal/eu/gdpr/modules/data_breach-owl.n3 | 2 +- .../legal/eu/gdpr/modules/data_breach-owl.rdf | 584 +- .../legal/eu/gdpr/modules/data_breach-owl.ttl | 2 +- 2.1-dev/legal/eu/gdpr/modules/data_breach.csv | 8 +- .../legal/eu/gdpr/modules/data_breach.jsonld | 1112 +- 2.1-dev/legal/eu/gdpr/modules/data_breach.n3 | 2 +- 2.1-dev/legal/eu/gdpr/modules/data_breach.rdf | 456 +- 2.1-dev/legal/eu/gdpr/modules/data_breach.ttl | 2 +- .../eu/gdpr/modules/data_transfers-owl.jsonld | 710 +- .../eu/gdpr/modules/data_transfers-owl.n3 | 13 +- .../eu/gdpr/modules/data_transfers-owl.rdf | 351 +- .../eu/gdpr/modules/data_transfers-owl.ttl | 13 +- .../legal/eu/gdpr/modules/data_transfers.csv | 2 +- .../eu/gdpr/modules/data_transfers.jsonld | 670 +- .../legal/eu/gdpr/modules/data_transfers.n3 | 13 +- .../legal/eu/gdpr/modules/data_transfers.rdf | 293 +- .../legal/eu/gdpr/modules/data_transfers.ttl | 13 +- 2.1-dev/legal/eu/gdpr/modules/dpia-owl.jsonld | 1172 +-- 2.1-dev/legal/eu/gdpr/modules/dpia-owl.rdf | 616 +- 2.1-dev/legal/eu/gdpr/modules/dpia.jsonld | 1224 +-- 2.1-dev/legal/eu/gdpr/modules/dpia.rdf | 520 +- .../legal/eu/gdpr/modules/entities-owl.jsonld | 1044 +- 2.1-dev/legal/eu/gdpr/modules/entities-owl.n3 | 83 +- .../legal/eu/gdpr/modules/entities-owl.rdf | 470 +- .../legal/eu/gdpr/modules/entities-owl.ttl | 83 +- 2.1-dev/legal/eu/gdpr/modules/entities.csv | 13 +- 2.1-dev/legal/eu/gdpr/modules/entities.jsonld | 1096 +- 2.1-dev/legal/eu/gdpr/modules/entities.n3 | 97 +- 2.1-dev/legal/eu/gdpr/modules/entities.rdf | 418 +- 2.1-dev/legal/eu/gdpr/modules/entities.ttl | 97 +- .../eu/gdpr/modules/legal_basis-owl.jsonld | 1043 +- .../legal/eu/gdpr/modules/legal_basis-owl.n3 | 27 +- .../legal/eu/gdpr/modules/legal_basis-owl.rdf | 615 +- .../legal/eu/gdpr/modules/legal_basis-owl.ttl | 27 +- 2.1-dev/legal/eu/gdpr/modules/legal_basis.csv | 15 +- .../legal/eu/gdpr/modules/legal_basis.jsonld | 1034 +- 2.1-dev/legal/eu/gdpr/modules/legal_basis.n3 | 32 +- 2.1-dev/legal/eu/gdpr/modules/legal_basis.rdf | 482 +- 2.1-dev/legal/eu/gdpr/modules/legal_basis.ttl | 32 +- .../legal_basis_data_transfer-owl.jsonld | 1077 +- .../modules/legal_basis_data_transfer-owl.n3 | 9 +- .../modules/legal_basis_data_transfer-owl.rdf | 633 +- .../modules/legal_basis_data_transfer-owl.ttl | 9 +- .../modules/legal_basis_data_transfer.csv | 8 +- .../modules/legal_basis_data_transfer.jsonld | 983 +- .../gdpr/modules/legal_basis_data_transfer.n3 | 9 +- .../modules/legal_basis_data_transfer.rdf | 507 +- .../modules/legal_basis_data_transfer.ttl | 9 +- .../legal_basis_rights_mapping-owl.jsonld | 862 +- .../legal_basis_rights_mapping-owl.rdf | 334 +- .../modules/legal_basis_rights_mapping.jsonld | 686 +- .../modules/legal_basis_rights_mapping.rdf | 232 +- .../modules/legal_basis_special-owl.jsonld | 863 +- .../gdpr/modules/legal_basis_special-owl.n3 | 7 +- .../gdpr/modules/legal_basis_special-owl.rdf | 395 +- .../gdpr/modules/legal_basis_special-owl.ttl | 7 +- .../eu/gdpr/modules/legal_basis_special.csv | 2 +- .../gdpr/modules/legal_basis_special.jsonld | 793 +- .../eu/gdpr/modules/legal_basis_special.n3 | 7 +- .../eu/gdpr/modules/legal_basis_special.rdf | 319 +- .../eu/gdpr/modules/legal_basis_special.ttl | 7 +- .../eu/gdpr/modules/misc_concepts-owl.jsonld | 902 ++ .../eu/gdpr/modules/misc_concepts-owl.n3 | 223 + .../eu/gdpr/modules/misc_concepts-owl.rdf | 239 + .../eu/gdpr/modules/misc_concepts-owl.ttl | 223 + .../legal/eu/gdpr/modules/misc_concepts.csv | 10 + .../eu/gdpr/modules/misc_concepts.jsonld | 945 ++ .../legal/eu/gdpr/modules/misc_concepts.n3 | 232 + .../legal/eu/gdpr/modules/misc_concepts.rdf | 249 + .../legal/eu/gdpr/modules/misc_concepts.ttl | 232 + .../eu/gdpr/modules/principles-owl.jsonld | 612 +- .../legal/eu/gdpr/modules/principles-owl.rdf | 280 +- .../legal/eu/gdpr/modules/principles.jsonld | 614 +- 2.1-dev/legal/eu/gdpr/modules/principles.rdf | 168 +- .../legal/eu/gdpr/modules/rights-owl.jsonld | 894 +- 2.1-dev/legal/eu/gdpr/modules/rights-owl.rdf | 502 +- 2.1-dev/legal/eu/gdpr/modules/rights.jsonld | 940 +- 2.1-dev/legal/eu/gdpr/modules/rights.rdf | 402 +- .../eu/gdpr/modules/rights_impacts-owl.jsonld | 1070 +- .../eu/gdpr/modules/rights_impacts-owl.rdf | 574 +- .../legal/eu/gdpr/modules/rights_impacts.csv | 40 +- .../eu/gdpr/modules/rights_impacts.jsonld | 888 +- .../legal/eu/gdpr/modules/rights_impacts.rdf | 430 +- 2.1-dev/search.html | 4 +- code/100_download_CSV.py | 1 + .../template_legal_eu_gdpr.jinja2 | 137 + code/vocab_csv/GDPR_DataBreach.csv | 2 +- code/vocab_csv/GDPR_DataTransfers.csv | 2 +- code/vocab_csv/GDPR_LegalBasis.csv | 7 +- .../GDPR_LegalBasis_DataTransfer.csv | 4 +- .../GDPR_LegalBasis_SpecialCategory.csv | 2 +- code/vocab_csv/GDPR_MiscConcepts.csv | 10 + code/vocab_csv/GDPR_entities.csv | 16 +- code/vocab_csv/eu-gdpr.xlsx | Bin 86223 -> 95004 bytes code/vocab_management.py | 4 + 114 files changed, 46137 insertions(+), 28631 deletions(-) create mode 100644 2.1-dev/legal/eu/gdpr/modules/misc_concepts-owl.jsonld create mode 100644 2.1-dev/legal/eu/gdpr/modules/misc_concepts-owl.n3 create mode 100644 2.1-dev/legal/eu/gdpr/modules/misc_concepts-owl.rdf create mode 100644 2.1-dev/legal/eu/gdpr/modules/misc_concepts-owl.ttl create mode 100644 2.1-dev/legal/eu/gdpr/modules/misc_concepts.csv create mode 100644 2.1-dev/legal/eu/gdpr/modules/misc_concepts.jsonld create mode 100644 2.1-dev/legal/eu/gdpr/modules/misc_concepts.n3 create mode 100644 2.1-dev/legal/eu/gdpr/modules/misc_concepts.rdf create mode 100644 2.1-dev/legal/eu/gdpr/modules/misc_concepts.ttl create mode 100644 code/vocab_csv/GDPR_MiscConcepts.csv diff --git a/2.1-dev/legal/eu/gdpr/eu-gdpr-en.html b/2.1-dev/legal/eu/gdpr/eu-gdpr-en.html index acc10c3e2..2a23ee19c 100644 --- a/2.1-dev/legal/eu/gdpr/eu-gdpr-en.html +++ b/2.1-dev/legal/eu/gdpr/eu-gdpr-en.html @@ -405,6 +405,137 @@

Introduction

  • Compliance to express whether the specific process or context is compliant with the GDPR
  • + +
    +

    Mapping GDPR concepts to DPV

    + + +

    This mapping table shows which concepts from the GDPR are covered within the EU-GDPR and DPV extensions.

    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    GDPR conceptEU-GDPR conceptParent concept
    Personal Data[=PersonalData=]`dpv:PersonalData`
    Data Subject[=DataSubject=]`dpv:DataSubject`
    Processing[=Processing=]`dpv:Processing`
    Profiling[=Profiling=]`dpv:Profiling`
    Pseudonymisation[=Pseudonymisation=]`dpv:Pseudonymisation`
    Controller[=Controller=]`dpv:DataController`
    Processor[=Processor=]`dpv:DataProcessor`
    Recipient[=Recipient=]`dpv:Recipient`
    Third Party[=ThirdParty=]`dpv:ThirdParty`
    Consent[=Consent=]`dpv:Consent`
    Personal Data Breach[=DataBreach=]`risk:DataBreach`
    Genetic Data[=GeneticData=]`pd:Genetic`
    Biometric Data[=BiometricData=]`pd:Biometric`
    Health Data[=HealthData=]`pd:MedicalHealth`
    Main Establishment[=MainEstablishment=]`dpv:Organisation`
    Representative[=Representative=]`dpv:Representative`
    Binding Corporate Rules[=BindingCorporateRules=]`dpv:OrganisationMeasure`
    Supervisory Authority[=DataProtectionAuthority=]`dpv:DataProtectionAuthority`
    Concerned Supervisory Authority[=ConcernedSupervisoryAuthority=]`dpv:DataProtectionAuthority`
    Cross Border Processing[=CrossBorderProcessing=]`dpv:Processing`
    Information Society Service[=InformationSocietyService=]`dpv:Service`
    International Organisation[=InternationalOrganisation=]`dpv:InternationalOrganisation`
    +
    + @@ -626,7 +773,7 @@

    Data Transfer (Art.45-49)

  • - eu-gdpr:A46-2-b: Binding corporate rules + eu-gdpr:A46-2-b: ‘Binding Corporate Rules’ means personal data protection policies which are adhered to by a controller or processor established on the territory of a Member State for transfers or a set of transfers of personal data to a controller or processor in one or more third countries within a group of undertakings, or group of enterprises engaged in a joint economic activity go to full definition
  • @@ -1085,7 +1232,7 @@

    Data Transfer Tools

  • - eu-gdpr:BindingCorporateRules: Binding corporate rules (BCR) are data protection policies adhered to by companies established in the EU for transfers of personal data outside the EU within a group of undertakings or enterprises. + eu-gdpr:BindingCorporateRules: ‘Binding Corporate Rules’ means personal data protection policies which are adhered to by a controller or processor established on the territory of a Member State for transfers or a set of transfers of personal data to a controller or processor in one or more third countries within a group of undertakings, or group of enterprises engaged in a joint economic activity go to full definition
  • @@ -1278,7 +1425,7 @@

    Data Breach

    GDPR also requires carrying out an impact assessment to determine the level of risk associated with the data breach, in particular on the processing of personal data and on the rights and freedoms of the data subjects. To represent this, the concept [=DBIARiskStatus=] is provided with specific outcomes. For example, [=DBIAIndicatesHighRisk=] indicates the data breach has a 'high-risk' status.

    @@ -626,7 +773,7 @@

    Data Transfer (Art.45-49)

  • - eu-gdpr:A46-2-b: Binding corporate rules + eu-gdpr:A46-2-b: ‘Binding Corporate Rules’ means personal data protection policies which are adhered to by a controller or processor established on the territory of a Member State for transfers or a set of transfers of personal data to a controller or processor in one or more third countries within a group of undertakings, or group of enterprises engaged in a joint economic activity go to full definition
  • @@ -1085,7 +1232,7 @@

    Data Transfer Tools

  • - eu-gdpr:BindingCorporateRules: Binding corporate rules (BCR) are data protection policies adhered to by companies established in the EU for transfers of personal data outside the EU within a group of undertakings or enterprises. + eu-gdpr:BindingCorporateRules: ‘Binding Corporate Rules’ means personal data protection policies which are adhered to by a controller or processor established on the territory of a Member State for transfers or a set of transfers of personal data to a controller or processor in one or more third countries within a group of undertakings, or group of enterprises engaged in a joint economic activity go to full definition
  • @@ -1278,7 +1425,7 @@

    Data Breach

    GDPR also requires carrying out an impact assessment to determine the level of risk associated with the data breach, in particular on the processing of personal data and on the rights and freedoms of the data subjects. To represent this, the concept [=DBIARiskStatus=] is provided with specific outcomes. For example, [=DBIAIndicatesHighRisk=] indicates the data breach has a 'high-risk' status.

    @@ -626,7 +773,7 @@

    Data Transfer (Art.45-49)

  • - eu-gdpr:A46-2-b: Binding corporate rules + eu-gdpr:A46-2-b: ‘Binding Corporate Rules’ means personal data protection policies which are adhered to by a controller or processor established on the territory of a Member State for transfers or a set of transfers of personal data to a controller or processor in one or more third countries within a group of undertakings, or group of enterprises engaged in a joint economic activity go to full definition
  • @@ -1085,7 +1232,7 @@

    Data Transfer Tools

  • - eu-gdpr:BindingCorporateRules: Binding corporate rules (BCR) are data protection policies adhered to by companies established in the EU for transfers of personal data outside the EU within a group of undertakings or enterprises. + eu-gdpr:BindingCorporateRules: ‘Binding Corporate Rules’ means personal data protection policies which are adhered to by a controller or processor established on the territory of a Member State for transfers or a set of transfers of personal data to a controller or processor in one or more third countries within a group of undertakings, or group of enterprises engaged in a joint economic activity go to full definition
  • @@ -1278,7 +1425,7 @@

    Data Breach

    GDPR also requires carrying out an impact assessment to determine the level of risk associated with the data breach, in particular on the processing of personal data and on the rights and freedoms of the data subjects. To represent this, the concept [=DBIARiskStatus=] is provided with specific outcomes. For example, [=DBIAIndicatesHighRisk=] indicates the data breach has a 'high-risk' status.

    @@ -626,7 +773,7 @@

    Data Transfer (Art.45-49)

  • - eu-gdpr:A46-2-b: Binding corporate rules + eu-gdpr:A46-2-b: ‘Binding Corporate Rules’ means personal data protection policies which are adhered to by a controller or processor established on the territory of a Member State for transfers or a set of transfers of personal data to a controller or processor in one or more third countries within a group of undertakings, or group of enterprises engaged in a joint economic activity go to full definition
  • @@ -1085,7 +1232,7 @@

    Data Transfer Tools

  • - eu-gdpr:BindingCorporateRules: Binding corporate rules (BCR) are data protection policies adhered to by companies established in the EU for transfers of personal data outside the EU within a group of undertakings or enterprises. + eu-gdpr:BindingCorporateRules: ‘Binding Corporate Rules’ means personal data protection policies which are adhered to by a controller or processor established on the territory of a Member State for transfers or a set of transfers of personal data to a controller or processor in one or more third countries within a group of undertakings, or group of enterprises engaged in a joint economic activity go to full definition
  • @@ -1278,7 +1425,7 @@

    Data Breach

    GDPR also requires carrying out an impact assessment to determine the level of risk associated with the data breach, in particular on the processing of personal data and on the rights and freedoms of the data subjects. To represent this, the concept [=DBIARiskStatus=] is provided with specific outcomes. For example, [=DBIAIndicatesHighRisk=] indicates the data breach has a 'high-risk' status.