   An OWL2 ontology describing obligations based on draft version of GDPR

Data Protection Ontology

OWL ontology defining data protection concepts and obligations based on draft of GDPR. Aligned to BPMN as implementation of obligations and representation (see publications)

domain: legal, data protection, regulatory compliance
creators/authors/publishers: Cesare Bartolini, Robert Muthur
license: CC-by-3.0
url link: https://bitbucket.org/guerret/lu.uni.eclipse.bpmn2/src/3ca749d36cf193b9af8808c0fdf24858cdfeb21e/resources/dataprotection-rdf.owl?at=master&fileviewer=file-view-default
documentation: N/A (refer to publication)
publications:
- Bartolini, C., Muthuri, R.: Reconciling Data Protection Rights and Obligations: An Ontology of the Forthcoming EU Regulation. Presented at the Workshop on Language and Semantic Technology for Legal Domain (2015).
- Bartolini, C., Muthuri, R., Cristiana, S.: Using ontologies to model data protection requirements in workflows. (2015).

Relevance

Origin: N/A
Developed since: 2015
Latest version: N/A

Covered Requirements

Taxonomy of regulatory privacy terms (including all GDPR terms) : applicable as ontology uses GDPR relevant terms
Taxonomy for personal data : applicable as ontology uses GDPR relevant terms
Taxonomy of purposes. : applicable as ontology uses GDPR relevant terms
Taxonomy of disclosure. : N/A
Metadata related to the details of anonymisation. : N/A
Log vocabularies for immutably and securely recording: : N/A
- disclosure of consent
- revocation of consent
- policy changes
- transparency
Taxonomy of linkage operations. : N/A
Taxonomies of human behavior. : N/A

Uptake and Covered Use-cases

The ontology is based on the draft version of the GDPR, and therefore some of the links (definitions) are incorrect w.r.t text of the legislation. The terms however reflect concepts useful for obligations and compliance.

SPECIAL/Proximus use case - personalized touristic recommendations : pending documentation of use-case
SPECIAL/DT use case - mobile network quality measurements : pending documentation of use-case
SPECIAL/TR use case - ‘Know Your Customer’ (finance, anti-money-laundering) : pending documentation of use-case

Terms and Concepts

pending