PREFIX gdprtext: PREFIX rdf: PREFIX rdfs: PREFIX xsd: a rdfs:Class ; rdfs:label "Unlawful Processing" ; rdfs:comment "Processing of personal data that is termed to be unlawful in the context of the GDPR or other relevant laws and regulations" ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "National Security" ; rdfs:comment "The stated obligation could not be completed as it concerns national security."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Not further processed" ; rdfs:comment "This obligation specifies that the collected personal data should not be processed beyond the purpose for which it was originally collected without an updated consent for the proposed purposes."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Historic, Statistical, or Scientific purposes" ; rdfs:comment "Lawful basis if provided by the GDPR for processing related to historic, statistical, or scientific purposes."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Processor Obligations" ; rdfs:comment "These are the obligations specified by the GDPR in the context of Processors"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Certification" ; rdfs:comment "A certification pertaining to GDPR compliance"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Use Data" ; rdfs:comment "An activity that uses personal data" ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Provide information for compliance" ; rdfs:comment "The processor must provide the controller with the information necessary to demonstrate compliance"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Assist in complying with rights" ; rdfs:comment "Processors must assist Controllers in complying with the various rights provided by the GDPR to data subjects which can be exercised at any time."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Nature of data involved" ; rdfs:comment "The nature of the personal data involved, whether it is sensitive or confidential."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Health data" ; rdfs:comment "Personal data related to the physical or mental health of a natural person, including the provision of health care services, which reveal information about his or her health status."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Report data breach to Controller" ; rdfs:comment "The occurence of a data breach must be reported to the Controller."@en ; rdfs:subClassOf , . a rdfs:Class ; rdfs:label "Joint Controller" ; rdfs:comment "A joint controller is two or more controllers jointly determine the purposes and means of processing."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Rectify Data" ; rdfs:comment "An activity that rectifies data" ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Right to Access Personal Data" ; rdfs:comment "The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data along with additional information about it."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Store Data" ; rdfs:comment "An activity where personal data is being stored" ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Principle of Lawfulness, Fairness, and Transparency" ; rdfs:comment "The principle of lawfulness, fairness, and transparency states that personal data must be processed lawfully, fairly and in a transparent manner in relation to the data subject."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Factors for Impact Assessment" ; rdfs:comment "These are the factors stated by the GDPR for Impact Assessment."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Vital Interests" ; rdfs:comment "These are obligations pertaining to the vital interests of the data subjects"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Specified purpose" ; rdfs:comment "This obligation states that the collection of personal data should happen only for the specified purposes (for which the data subject has consented)."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Record security measures" ; rdfs:comment "This obligation requires Controllers to record the measures taken to ensure adequate safety measures of personal data and the involved activities."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Freedoms protection" ; rdfs:comment "The stated obligation could not be completed as it concerns freedoms protection."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Consent Activity" ; rdfs:comment "An activity involving data subject's consent." ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Data Retention" ; rdfs:comment "These are the obligations specified by the GDPR on the retention of personal data"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Direct Marketing" ; rdfs:comment "Type of Marketing that reaches data subjects directly by communications directly addressed to the data subject." ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Liability of Joint-Controllers" ; rdfs:comment "These specify the liability of Joint Controllers, i.e. cases where more than one Controller share the responsiblity."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Automatic decision making with significant effect" ; rdfs:comment "Automated decision making with significant effect" ; rdfs:subClassOf , . a rdfs:Class ; rdfs:label "Accuracy is contested" ; rdfs:comment "The data subject can exercise the right to restrict processing of their personal data when the accuracy of personal data is contested"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Report Data Breach" ; rdfs:comment "The act of reporting a data breach to entities mentioned within the GDPR. These are the Data Protection Authority (DPA), and in the case of Processors, the Controller they have an agreement with."@en ; rdfs:subClassOf , , . a rdfs:Class ; rdfs:label "Co-operate with DPA" ; rdfs:comment "This obligation specifies the Controller/Processor must co-operate with the Data Protection Authority (DPA)."@en ; rdfs:subClassOf , . a rdfs:Class ; rdfs:label "Information about categories of recipients" ; rdfs:comment "The right to access personal data also includes information about the categories of recipients the data is shared with."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Regulation" ; rdfs:comment "Regulation in GDPR text" ; rdfs:subClassOf . a rdf:Property ; rdfs:label "is part of Section" ; rdfs:comment "represents a legal resource subdivision to be part of a section" ; rdfs:domain ; rdfs:range ; rdfs:subPropertyOf . a rdf:Property ; rdfs:label "is part of Point" ; rdfs:comment "represents a legal resource subdivision to be part of a point" ; rdfs:domain ; rdfs:range ; rdfs:subPropertyOf . a rdf:Property ; rdfs:label "has Section" ; rdfs:comment "indicates the legal resource has the Section" ; rdfs:domain ; rdfs:range ; rdfs:subPropertyOf . a rdf:Property ; rdfs:label "is part of Chapter" ; rdfs:comment "represents a legal resource subdivision to be part of a chapter" ; rdfs:domain ; rdfs:range ; rdfs:subPropertyOf . a rdf:Property ; rdfs:label "has Point" ; rdfs:comment "indicates the legal resource has the Point" ; rdfs:domain ; rdfs:range ; rdfs:subPropertyOf . a rdf:Property ; rdfs:label "has Recital" ; rdfs:comment "indicates the legal resource has the Recital" ; rdfs:domain ; rdfs:range ; rdfs:subPropertyOf . a rdf:Property ; rdfs:label "has Article" ; rdfs:comment "indicates the legal resource has the Article" ; rdfs:domain ; rdfs:range ; rdfs:subPropertyOf . a rdf:Property ; rdfs:label "has Citation" ; rdfs:comment "indicates that the legal resource has the referenced citation" ; rdfs:domain ; rdfs:range ; rdfs:subPropertyOf . a rdf:Property ; rdfs:label "has SubPoint" ; rdfs:comment "indicates the legal resource has the SubPoint" ; rdfs:domain ; rdfs:range ; rdfs:subPropertyOf . a rdf:Property ; rdfs:label "is part of Article" ; rdfs:comment "represents a legal resource subdivision to be part of a article" ; rdfs:domain ; rdfs:range ; rdfs:subPropertyOf . a rdfs:Class ; rdfs:label "Informed" ; rdfs:comment "GDPR obligation that specifies consent must be informed for it be valid."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Legal Obligations" ; rdfs:comment "Lawful basis for processing is covered by legal obligation(s)."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Identifiable for required processing" ; rdfs:comment "Retention of personal data should be identifiable for the requried processing"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Consent" ; rdfs:comment "Consent in the context of the GDPR refers to the assent or agreement by the data subject in relation to their personal data for the proposed processing activities associated with one or more organisations."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Explicit Purpose" ; rdfs:comment "This obligation specifies that the collected (or collection) of personal data should be for/with explicit purposes."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Data protection by design and default" ; rdfs:comment "This obligation requires Controllers to follow data protection by design and by default."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Right to object direct marketting" ; rdfs:comment "The data subject has a right to object to direct marketting based on their personal data"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Awarding Seals and Certifications" ; rdfs:comment "GDPR mentions some conditions or criterion for the creation and issuing of seals and certifications pertaining to GDPR compliance"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Confirming or matching datasets" ; rdfs:comment "This type of processing involves matching data subject's identity or personal data in different datasets."@en ; rdfs:subClassOf , . a rdfs:Class ; rdfs:label "Seals and Certifications" ; rdfs:comment "GDPR provides for the creation and provision of seals and certificates pertaining to compliance or related activities"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Obtaining Consent from Data Subject" ; rdfs:comment "The act of getting a data subject's consent."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Processor" ; rdfs:comment "A natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Impose confidentiality obligations on personnel" ; rdfs:comment "The processor must impose confidentiality agreements on its personnel in relation to handling of personal data"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Harm was remote" ; rdfs:comment "The data subjects were not notified about the data breach because the harm was deemed to be remote."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Lnk between new and old processing" ; rdfs:comment "Whether there is a link between the new and old purposes of processing"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Concise" ; rdfs:comment "The information provided under the right to transparency should be concise"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Right of Erasure" ; rdfs:comment "The data subject has the right to obtain erasure of their personal data"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Certification Body" ; rdfs:comment "A Certification Body is an entity that can award/issue/renew a certification pertaining to compliance towards the GDPR." ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Automated Processing" ; rdfs:comment "This is automated processing of data subject's personal data."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Demonstrable" ; rdfs:comment "Obtained consent should be in a demonstrable form"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Maintain records for processing" ; rdfs:comment "This obligation requires the Controller/Processor to maintain adequate records about their processing activities."@en ; rdfs:subClassOf , . a rdfs:Class ; rdfs:label "Racial origin data" ; rdfs:comment "Personal data revealing racial or ethnic origin."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Information about third parties" ; rdfs:comment "The right to basic information also provides data subject's with information about third parties involved in the processing."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Point" ; rdfs:comment "Point in GDPR text" ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Genetic Data" ; rdfs:comment "Personal data relating to the inherited or acquired genetic characteristics of a natural person which result from the analysis of a biological sample from the natural person in question, in particular chromosomal, deoxyribonucleic acid (DNA) or ribonucleic acid (RNA) analysis, or from the analysis of another element enabling equivalent information to be obtained."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Information about automated processing with significant effects" ; rdfs:comment "The right to access personal data also includes information about automated processing that has significant effects on the data subject."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Controller Responsibility" ; rdfs:comment "These obligations specify the responsiblity of the Controller"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Privacy by Design" ; rdfs:comment "Privacy by Design is the approach of taking privacy into consideration throughout the whole planning and execution processes."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "DPO" ; rdfs:comment "The Data Protection Officer (DPO) is an individual(s) appointed by the organisation to monitor compliance and assist in complying with the GDPR."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "No charges levied" ; rdfs:comment "The right to access personal data should not incur any undue charge levied on the data subject for exercising their right"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Information about storage period" ; rdfs:comment "The right to access personal data also includes information about the storage period of the data subject's personal data"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Record data retention periods" ; rdfs:comment "This obligation requires Controllers to record the data retention period of personal data."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Is impossible" ; rdfs:comment "The obligation or activity could not be completed as it was deemed to be impossible."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Limited for processing" ; rdfs:comment "Personal data retained should be limited in its use only for the requried processing"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Data no longer needed for original purpose" ; rdfs:comment "The data subject can exercise the right to restrict processing of their personal data when the personal data is no longer required for the original purpose it was collected under"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Entity" ; rdfs:comment "A general term for any institution, company, corporation, partnership, government agency, university, or any other organization including individuals."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Exlcusions and Exceptions" ; rdfs:comment "Exclusions and Exemptions provided by the GDPR for not complying with the specified obligations."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Share Personal Data with Third Party" ; rdfs:comment "This activity represents the sharing of data subject's personal data with a third party."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Inform Controller of conflict with law" ; rdfs:comment "In case of conflict with the controller's intructions and the law, the processor must immediately inform the controller of this conflict"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Right to basic information about processing of personal data" ; rdfs:comment "The right to basic information about processing provides data subjects with information about the processing activities involving their personal data"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Data Subject's Rights" ; rdfs:comment "The GDPR provides several rights to the data subjects which may be exercised at any time by the data subject and which are mandatory for the organisation to provide, comply with, and inform the data subject about."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Regulatory Authority" ; rdfs:comment "The authority responsible for regulating data protection laws."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Erase if conesnt was withdrawn" ; rdfs:comment "The right of erasure applies when the data subject withdraws given consent"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Consequences for data subjects" ; rdfs:comment "The possible consequences of the change in processing for the data subject"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Principle of Data Minimisation" ; rdfs:comment "The principle of data minimisation states that personal data must be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Not-for-profit organisation" ; rdfs:comment "Lawful basis is provided by the GDPR for activities of/for not-for-profit organisations"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Appointment of Processors" ; rdfs:comment "These are the obligations specified by the GDPR for the appointment of Processors by Controllers."@en ; rdfs:subClassOf , . a rdfs:Class ; rdfs:label "Data inferred or derived" ; rdfs:comment "The obligation or activity coult not be completed because the data was inferred or derived, and therefore did not come from the data subject or other sources."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Regulation (EC) No 45/2001" ; rdfs:comment "Related to Regulation (EC) No. 45/2001"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Adequate for processing" ; rdfs:comment "Only the personal data adequat for required processing should be maintained"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Protection against destruction" ; rdfs:comment "Protection of data subject's personal data against destruction of data."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Clear explanation" ; rdfs:comment "Obtaining consent must provide clear explanations of the processing involved over the personal data"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Record cross-border transfers" ; rdfs:comment "This obligation requires Controllers to record the cross-border data transfers."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "If and where Controller is processing" ; rdfs:comment "The right to access personal data also includes information about whether and where the controller is processing the data subject's personal data"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Processing" ; rdfs:comment "Processing here refers to an Activity that acts on the Data Subject's personal information."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Controller Obligation" ; rdfs:comment "These are the obligations specified by the GDPR as being specifically the responsbility of the Controller."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Processing using untested technologies" ; rdfs:comment "This type of processing uses technologies that are new or have not yet been deemed to be fit or stable for usage."@en ; rdfs:subClassOf , . a rdfs:Class ; rdfs:label "Information about processing" ; rdfs:comment "The right to access personal data also includes information about the processing of personal data of the data subject"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Data Breach" ; rdfs:comment "A data breach is the intentional or unintentional release of secure or private/confidential information to an untrusted environment."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Shoud support reuse" ; rdfs:comment "The provided copy of personal data should support reuse"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Distinguishable from other matters" ; rdfs:comment "Obtained consent should be distinguishable from other related matters (in the context of the process)"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Notification requires disproportionate efforts" ; rdfs:comment "The data subjects were not notified about the data breach because it required disproportionate efforts."@en ; rdfs:subClassOf , . a rdfs:Class ; rdfs:label "Should be structured" ; rdfs:comment "The provided copy of personal data should be structured"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Only act on Controller instructions" ; rdfs:comment "The processor must only act on the intructions provided and documented by the controller"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Identification of Data Subject" ; rdfs:comment "Activity where the data subject is explicitly identified through direct or indirect means." ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Security of Personal Data" ; rdfs:comment "This activity refers to security of data subject's personal data."@en ; rdfs:subClassOf , . a rdfs:Class ; rdfs:label "Compliance with Controller's instructions" ; rdfs:comment "The processor has an obligation to comply with the controller's instructions"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Rights protection" ; rdfs:comment "The stated obligation could not be completed as it concerns rights protection."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Notify about DPO" ; rdfs:comment "Affected data subjects must be notified with the name and contact of the DPO responsible/handling for the data breach."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Section" ; rdfs:comment "Section in GDPR text" ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Personal or Household activity" ; rdfs:comment "Exempted as the GDPR does not apply to personal or household activity that does not have a professional or commercial activity associated with it."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Controller has taken action" ; rdfs:comment "The data subjects were not notified about the data breach because the controller had already taken action regarding the data breach."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Withdrawing Given Consent" ; rdfs:comment "This activity represents the data subject withdrawing given consent."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Written consent of Controller" ; rdfs:comment "Appointing a sub-processor requires the written consent of the controller specifying permission or consent"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Personal Data" ; rdfs:comment "Personal data means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Right to rectify" ; rdfs:comment "The data subject has a right to recitify their personal data"@en ; rdfs:subClassOf . a rdfs:Class . a rdf:Property ; rdfs:label "has Chapter" ; rdfs:comment "indicates the legal resource has the Chapter" ; rdfs:domain ; rdfs:range ; rdfs:subPropertyOf . a rdfs:Class ; rdfs:label "Sub-Processor" ; rdfs:comment "A sub-processor is a processor acting under another processor."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Categories of data subjects and personal data" ; rdfs:comment "This obligation requires Controllers to record the categories of data subjects and the personal data involved in processing/activities."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Activity" ; rdfs:comment "An Activity signifies some process(es) or step(s) towards specific deed(s), action(s), function(s), or sphere(s) of action."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Exempted by National Law" ; rdfs:comment "Lawful basis for processing is provided by National Law"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Crime data" ; rdfs:comment "Personal data related to criminal convictions and offences."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Right to object processing" ; rdfs:comment "The data subject has the right to object to processing of their personal data"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Protection against unlawful processing" ; rdfs:comment "Protection of data subject's personal data against unlawful processing of data."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Covered by Directive (EU) 2016/680" ; rdfs:comment "Exempted as it involves areas covered by Directive (EU) 2016/680"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Marketing" ; rdfs:comment "The process or technique of promoting, selling, and distributing a product or service." ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Article" ; rdfs:comment "Article in GDPR text" ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Principle" ; rdfs:comment "A Principle is a rule or standard defined by the GDPR which is essential to be followed for compliance"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Freely given" ; rdfs:comment "GDPR obligation that specifies consent must be freely given by the data subject for it to be valid."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Principle of Purpose Limitation" ; rdfs:comment "The principle of purpose limitation states that personal data must be collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, in accordance with Article 89(1) of the GDPR, not be considered to be incompatible with the initial purposes."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Controller" ; rdfs:comment "The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Not from silence or inactivity" ; rdfs:comment "Consent should not be obtained from silence or inactivity of the data subject"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Outside Material Scope" ; rdfs:comment "The activity was deemed to be outside the material scope of the GDPR."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Notify consequences of breach" ; rdfs:comment "Affected data subject's must be notified about the consequences of the data breach."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Data Security" ; rdfs:comment "These are obligations regarding security of data managed by the Controllers."@en ; rdfs:subClassOf , . a rdfs:Class ; rdfs:label "Principle of Accuracy" ; rdfs:comment "The principle of accuracy states that personal data must be accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Compliance" ; rdfs:comment "Represents the act of complying with the obligations and actions specified by the GDPR."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "DPA" ; rdfs:comment "The Data Protection Authority (DPA) is a public institution responsible for monitoring the application of data protection laws."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "DPO Obligation" ; rdfs:comment "These are the obligations specified for the Data Protection Office (DPO) within the GDPR"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Protection against accidental loss" ; rdfs:comment "Protection of data subject's personal data against accidental loss."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Intelligible" ; rdfs:comment "The information provided under the right to transparency should be intelligible"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Rectify Inaccuracies" ; rdfs:comment "Any inaccuracies or discrepancies in the retained data must be rectified"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Adherence" ; rdfs:comment "The seal or certification does not reduce or impact the responsiblity of the controller or processor for compliance with the GDPR"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Archive Data" ; rdfs:comment "An activity where personal data is archived" ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Erase Data" ; rdfs:comment "An activity that erases data" ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Monitor Compliance" ; rdfs:comment "The activity or process of overseeing an organisation's compliance."@en ; rdfs:subClassOf , , . a rdfs:Class ; rdfs:label "Legitimate purpose" ; rdfs:comment "This specifies that the collection (or collected) personal data should be used/specified to be used for legitimate purposes."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Easily Accessible" ; rdfs:comment "The information provided under the right to transparency should be easily accessible"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Processing affected or vulnerable individuals" ; rdfs:comment "This type of processing involves data subjects that are vulnerable, such as children, or people with disabilities."@en ; rdfs:subClassOf , . a rdfs:Class ; rdfs:label "Follow same terms" ; rdfs:comment "Sub-processors must follow the same rules and obligations (or terms) as the agreement between processor and controller."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Context of data collection" ; rdfs:comment "The purpose of new processing should take the context of how the original data was collected into consideration"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Code of Conduct" ; rdfs:comment "A Code of Conduct for the purpose of specifying the application of GDPR which may be monitored, evaluated, or processed by a third party appointed by the organisation."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Legal Claims" ; rdfs:comment "Lawful basis for processing is provided by legal claims."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Lawful Basis" ; rdfs:comment "This provides the basis for lawful processing of personal data."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Record purpose of processing" ; rdfs:comment "This obligation requires Controllers to record the purpose of processing associated with personal data and the given consent."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Legitimate Interests" ; rdfs:comment "Lawful basis for processing is provided through the legitimate interests pursued by the Controller or by a third party"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Valid Consent" ; rdfs:comment "Consent is termed to be valid if it passes all the criteria or obligations laid down by the GDPR."@en ; rdfs:subClassOf , . a rdfs:Class ; rdfs:label "Accurate Collection" ; rdfs:comment "This obligation specifies that the collection of (or collected) personal data should in an accurate form - i.e. the personal data should be accurate."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Collection of Personal Data"@en ; rdfs:comment "Collection of Personal Data is an Activity that deals with acquiring data subject's personal data through some model of interaction."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Pseudo-anonymous data" ; rdfs:comment "Personal data that can no longer be attributed to a specific data subject without the use of additional information."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Voluntary & Opt-in" ; rdfs:comment "Consent must be obtained through the data subject's voluntary action and should be opt-in and not opt-out or by default."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Can be withdrawn easily" ; rdfs:comment "This obligation states that the data subject should be able to withdraw the consent as easily as it was to give it."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Obligation for data collection" ; rdfs:comment "Collection of Personal Data is an Activity that deals with acquiring data subject's personal data through some model of interaction."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Large scale processing" ; rdfs:comment "The processing of personal data at a large scale of quantity or significant proportions."@en ; rdfs:subClassOf , . a rdfs:Class ; rdfs:label "Data Activity" ; rdfs:comment "An activity involving personal data of data subject(s)." ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Public Interest" ; rdfs:comment "Lawful basis is provided by the GDPR as being in the interest of the public"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Notify Data Subject of Breach" ; rdfs:comment "Affected data subjects must be notified of the data breach and its effects."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Processing sensitive data" ; rdfs:comment "This involves processing involving sensitive personal data."@en ; rdfs:subClassOf , . a rdfs:Class ; rdfs:label "SubPoint" ; rdfs:comment "SubPoint in GDPR text" ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Copy should be in a machine readable format" ; rdfs:comment "The provided copy of personal data should be machine readable"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Citation" ; rdfs:comment "Citation in GDPR text" ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Right of Data Portability" ; rdfs:comment "The data subject has the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and has the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Systematic Monitoring" ; rdfs:comment "This activity provides a systematic monitoring or overview of processes/activities taking place within the context of the organisation."@en ; rdfs:subClassOf , . a rdfs:Class ; rdfs:label "Right to not be evaluated through automated processing" ; rdfs:comment "The data subject has a right to not be evaluated through automated processing"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Principle of Integrity and Confidentiality" ; rdfs:comment "The principle of integrity and confidentiality states that personal data must be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Demonstrating Consent" ; rdfs:comment "The act of demonstrating consent is an activity whereby previously acquired consent is provided as sufficient justification for processing activities involving data subject's personal information."@en ; rdfs:subClassOf , . a rdfs:Class ; rdfs:label "Information about rights" ; rdfs:comment "The right to access personal data also includes information about the existence of rights provided by the GDPR to the data subject"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Information about categories of data being processed" ; rdfs:comment "The right to access personal data also includes information about categories of data being processed"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Principle of Storage Limitation" ; rdfs:comment "The principle of storage limitation states that personal data must be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) of the GDPR subject to implementation of the appropriate technical and organisational measures required by this Regulation in order to safeguard the rights and freedoms of the data subject."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Employment Law" ; rdfs:comment "Lawful basis for processing is provided by Employment Law"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Exempted without identity" ; rdfs:comment "The request or activity could not or was not completed because there was no sufficient proof of the data subject's identity."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Return or destroy data" ; rdfs:comment "The processor must return or destroy personal data at the end of term (of its agreement with the controller)"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Exercise Rights" ; rdfs:comment "The activity represents exercising of rights provided by GDPR by the data subject."@en ; rdfs:subClassOf . a rdfs:Class . a rdfs:Class ; rdfs:label "Copy should be in a commonly used format" ; rdfs:comment "The provided copy of personal data should be in a commonly used format"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Implement technical measures" ; rdfs:comment "This obligation requires Controllers to implement the required technical measures necessary for compliance of the GDPR"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Contract with Data Subject" ; rdfs:comment "The lawful basis for processing personal data is provided through a contract with the data subject."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Restrictions on cross-border transfers" ; rdfs:comment "These provide restrictions on cross-border transfers for Processors"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Right to restrict processing" ; rdfs:comment "The data subject has the rights to restrict the processing of their personal data"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Impact Assessment" ; rdfs:comment "The activity wherein the controller carries out an assessment of the impact of the envisaged processing operations on the protection of personal data."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Medical or Diagnostics" ; rdfs:comment "Lawful basis for processing is provided by the GDPR for medical or diagnostics purposes pertaining to the data subject"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Collection Mechanism" ; rdfs:comment "Specifies collection mechanism used to collect personal data" ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Record categories of recipients" ; rdfs:comment "This obligation requires Controllers to record the categories of recipients the personal data was shared with."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Chapter" ; rdfs:comment "Chapter in GDPR text" ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Requires disproportionate efforts" ; rdfs:comment "The stated obligation or activity could not be completed as it requires disproportionate efforts to complete."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Exceptions on reporting data breach" ; rdfs:comment "Exceptions associated with compliance for reporting data breach to the affected data subjects."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Data Subject" ; rdfs:comment "An individual or entity to whom their personal data relates."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Erase if no longer needed for original purpose" ; rdfs:comment "The right to erasure applies where data is no longer needed for original purposes for which it was collected"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Agreement between Processor and Controller" ; rdfs:comment "Signifies the agreement between Controller and Processors for processing of personal data" ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Cross-border Transfer" ; rdfs:comment "Cross-border data transfer refers to data transfer crossing the boundaries of EU (legislative) region."@en ; rdfs:subClassOf , . a rdfs:Class ; rdfs:label "Seal" ; rdfs:comment "A seal pertaining to GDPR compliance"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Provide copy of Personal Data" ; rdfs:comment "The right of data portability requries providing a copy of the data subject's personal data"@en ; rdfs:subClassOf , . a rdfs:Class ; rdfs:label "Maximum validty 3 years" ; rdfs:comment "The maximum validity for all seals and certifications should be 3 years from the date of issue."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Data" ; rdfs:comment "A generic term to refer to Data."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Sensitive Personal Data" ; rdfs:comment "Personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Made Public" ; rdfs:comment "Lawful basis is provided through the data being publicly made available by the data subject"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Appointing Sub-Processors" ; rdfs:comment "These are the obligations for Processors over appointing sub-processors"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Transparent" ; rdfs:comment "The information provided under the right to transparency should be transparent and clear (i.e. not umambigious or vague)"@en ; rdfs:subClassOf . a rdfs:Class . a rdfs:Class ; rdfs:label "Principle of Accountability" ; rdfs:comment "The principle of accountability states that the controller shall be responsible for, and be able to demonstrate compliance with the processing of personal data as defined by the justifications permissible under the GDPR"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Propogate rights to Third Parties" ; rdfs:comment "To propogate a data subject's right once they have been exercised to other third parties that are involved through the data subject's personal data."@en ; rdfs:subClassOf , , . a rdfs:Class ; rdfs:label "Controller Accountability" ; rdfs:comment "These obligations specify the accountability of the Controller."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Specific" ; rdfs:comment "GDPR obligation that specifies consent must be specific for it to be valid."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Existence of safeguards" ; rdfs:comment "The purpose of new processing should take into context the existence of appropriate safeguards"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Relevant for processing" ; rdfs:comment "Any retained personal data must be relevant for subsiquent processing"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Notify measures taken" ; rdfs:comment "Affect data subjets must be notified of the measures taken against the data breach."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:comment "An unconstrained type or object" . a rdfs:Class ; rdfs:label "Purpose of new processing" ; rdfs:comment "These are the obligations over determining the new or changed purposes of processing"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Anonymous Data" ; rdfs:comment "Data is termed to be anonymous if it cannot be connected or associated with individual person or persons that have provided or are associated with it."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Maintain Record of Breach" ; rdfs:comment "GDPR mandates the recording of data breaches and its effects."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Obligation" ; rdfs:comment "These are the obligations specified by the GDPR. Following the obligations is necessary for compliance."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Information about data source" ; rdfs:comment "The right to access personal data also includes information about the source of the personal data"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Evaluation of data subjects" ; rdfs:comment "Whether the proposed activity involves the evaluation of the data subject."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Voluntary accredition" ; rdfs:comment "The seals and certifications should be a voluntary system of accredition"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Right to Transparency" ; rdfs:comment "The right to transparency requires controllers to provide information about the processing activities as well as personal data and its usage in a transparent manner"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Protection against damage" ; rdfs:comment "Protection of data subject's personal data against damage to the data."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Processor Representative" ; rdfs:comment "A natural or legal person established in the Union who, designated by the processor in writing, represents the processor with regard to their respective obligations under the GDPR."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Obligation for obtaining consent" ; rdfs:comment "These are the obligations specified by the GDPR for obtaining consent"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Processing is unlawful" ; rdfs:comment "The data subject can exercise the right to restrict processing of their personal data when the processing is unlawful"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Report breach to DPA within 72 hours" ; rdfs:comment "The occurence of a data breach must be reported to the Data Protection Authority (DPA) within 72 hours"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Kept up to date" ; rdfs:comment "Retained personal data must be kept up-to-date"@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Controller Representative" ; rdfs:comment "A natural or legal person established in the Union who, designated by the controllerin writing, represents the controller with regard to their respective obligations under the GDPR."@en ; rdfs:subClassOf . a rdfs:Class ; rdfs:label "Given Consent" ; rdfs:comment "Given Consent refers specifically to the form of consent given by the data subject in relation to their personal data and the proposed usage by activities."@en ; rdfs:subClassOf , . a rdf:Property ; rdfs:range . a rdf:Property ; rdfs:range . a rdf:Property ; rdfs:label "involves" ; rdfs:comment "It signifies that two concepts are related within the context of the GDPR." ; rdfs:range xsd:string .