Add DGA concepts

[besteves4]

Hey,

In the context of the PROTECT project, we defined a list of new entities coming from the Data Governance Act (DGA) and the eIDAS regulation.

The entities we are proposing to add to DPV are:

• Data Sharing Entity
  -Definition: A legal or natural person that can be a data intermediary, data holder or data user
  -Subclass of: dpv:LegalEntity

• Data Intermediary
  -Definition: A legal person that engages in intermediation services between data holders which are legal persons and potential data users, including making available the technical or other means to enable such services
  -Source: DGA, Art. 10.1
  -Subclass of: Data Sharing Entity

• Data Sharing Service Provider
  -Definition: A legal person that engages in intermediation services between data subjects that seek to make their personal data available and potential data users, including making available the technical or other means to enable such services, in the exercise of the rights provided in Regulation (EU) 2016/679
  -Source: DGA, Art. 10.2
  -Subclass of: Data Intermediary

• Data Altruism Organisation
  -Definition: A legal person that performs activities related to data altruism
  -Source: DGA, Art. 17-19
  -Subclass of: Data Intermediary

• Data Holder
  -Definition: A legal person or data subject who has the right to grant / share access to data under its control
  -Source: DGA, Art. 2.8
  -Subclass of: Data Sharing Entity

• Data User
  -Definition: A natural or legal person who has lawful access to data and is authorised to use it
  -Source: DGA, Art. 2.9
  -Subclass of: Data Sharing Entity

• Data Trust Provider
  -Definition: A natural or a legal person who provides one or more trust services either as a qualified or as a non-qualified trust service provider
  -Source: EIDAS, Art. 3.19
  -Subclass of: dpv:LegalEntity

EDIT (harsh AUG-24-2023): this issue has been repurposed for DGA; a new issue should be created for discussing eIDAS concepts

[coolharsh55]

Hi. Thanks for the concepts.

1. If you know - Are these extensive i.e. all possible entities from DGA? Or are there some that are not listed here?
2. To understand extent - Have you also worked on other relevant concepts from DGA (besides entities)?
3. Have you discussed or have a proposal for how to integrate these? E.g. these go into separate extension such as dpv-dga ? Or should this be taken up in DPVCG?
4. Whom should we attribute as contributors for these concepts (other than you)?

[besteves4]

Hi,
Here it is an updated list of classes and properties modelled from the DGA that goes beyond entities: https://github.com/besteves4/dgaterms/tree/main/vocabulary-terms

[coolharsh55]

Discussed in Meeting 2023-06-22. Major changes proposed to (core) DPV - an impact assessment is therefore to be undertaken in parallel with discussion of the DGA concepts.

[coolharsh55]

@besteves4 shall we move the proposed terms under the w3c/dpv repo and continue work here or do you want to keep them separate as draft/proposed for now?

[besteves4]

no problem, should I do a PR?

[coolharsh55]

Yes, please. I can accept and make changes if required.

[coolharsh55]

The analysis of DGA concepts has been completed. Concepts in DGA extension are in a new spreadsheet: https://docs.google.com/spreadsheets/d/1wKsf0Vqr0Gg1C91MqshtI5tjGXmQvXu4p4xF0yK0KaA/edit#gid=1615775188

Concepts to be added to DPV and extensions are as follows:

Processing

1. Aggregate
2. Display
3. Download
4. Export
5. Reuse
6. ConvertFormat

 

Entities

1. CharityOrganisation
2. PrivateSectorBody
3. PublicSectorBody
4. SMEOrganisation
5. StartupOrganisation

Data

1. CommerciallyConfidentialData
2. ConfidentialData
3. IntellectualProperty
4. SensitiveData
5. SensitiveNonPersonalData
6. StatisticallyConfidentialData

 

Purpose

1. DataAltruism
2. CombatClimateChange
3. ImproveHealthcare
4. ImprovePublicServices
5. ImproveTransportMobility
6. ProvideOfficialStatistics
7. PublicPolicyMaking
8. ScientificResearch
9. ProtectionOfIPR
10. ProtectionOfNationalSecurity
11. ProtectionOfPublicSecurity
12. CommercialPurpose
13. NonCommercialPurpose
14. EnhanceDataInteroperability
15. EnsureDataHarmonisationWithStandards
16. ExchangeViewsOnDataProcessing
17. FacilitateDataExchange
18. MisusePreventionAndDetection
19. NegotiateContractualAgreements
20. SupportInformedConsentChoices

Standards

1. CommonlyUsedOpenStandard
2. CommonlyUsedStandard
3. OpenStandard
4. InternationalStandard
5. Standard

TOMs

1. CommercialConfidentialityAgreement
2. ConsentManagement
3. DataSubjectRightsManagement
4. PermissionManagement
5. IntellectualPropertyRightsManagement
6. DataBreachNotification
7. DataTransferNotice
8. EnforceTransferControl
9. LegalMeasure
10. Licence
11. PermissionManagement
12. ThirdCountryTransferNotice
13. StatisticalConfidentialityAgreement
14. DataReusePolicy
15. SecureProcessingEnvironment

RISK

1. Compensation
2. Reward
3. Payment
4. Fee
5. Renumeration
6. ReIdentification

TECH

1. TechnologyDesigner
2. TechnologyInstaller
3. TechnologyMaintainer
4. TechnologyManufacturer
5. TechnologyOwner
6. TechnologyPurchaser
7. TechnologySupplier
8. DataIntermediationTechnology

DPV

1. PublicRegister
2. RegisterOfEntities

[ghurlbot]

Comment by @coolharsh55 via IRC channel #dpvcg on irc.w3.org

concepts have been accepted in today's meeting, and are to be integrated into the DPV taxonomies

[coolharsh55]

• HTML page is live at https://w3c.github.io/dpv/dpv-dga/
• RDF added to repo
• PURL will be https://w3id.org/dpv/dpv-dga
• PR open at /dpv: adds dpv-dga perma-id/w3id.org#3585