Contributors: (ordered alphabetically) Harshvardhan J. Pandit (ADAPT Centre, Dublin City University), Jonathan Bowker (No affiliation provided). NOTE: The affiliations are informative, do not represent formal endorsements, and may be outdated as this list is generated automatically from existing data.

The LEGAL-US extension extends the [[[DPV]]] to represent laws, authorities, and other legal concepts in US jurisdiction.

The canonical URL for LEGAL-US extension is https://w3id.org/dpv/legal/us, the namespace is https://w3id.org/dpv/legal/us#, the suggested prefix is legal-us, and this document along with source and releases are available at https://github.com/w3c/dpv.

DPV Specifications: The [[DPV]] is the core specification within the DPV family, with the following extensions: Personal Data [[PD]], Locations [[LOC]], Risk Management [[RISK]], Technology [[TECH]] and [[AI]], [[JUSTIFICATIONS]], [[SECTOR]] specific extensions, and [[LEGAL]] extensions modelling specific jurisdictions and regulations. A [[PRIMER]] introduces the concepts and modelling of DPV specifications, and [[GUIDES]] describe application of DPV for specific applications and use-cases. The Search Index page provides a searchable hierarchy of all concepts. The Data Privacy Vocabularies and Controls Community Group (DPVCG) develops and manages these specifications through GitHub. For meetings, see the DPVCG calendar.

To cite and understand the structure of DPV, the article "Data Privacy Vocabulary (DPV) - Version 2.0" (2024) describes the current state of DPV and extensions from version 2.0 onwards (open access version here). The earlier article "Creating A Vocabulary for Data Privacy" (2019) describes how the DPV was developed (open access versions here, here, and here).

Contributing: The DPVCG welcomes participation to improve the DPV and associated resources, including expansion or refinement of concepts, requesting information and applications, and addressing open issues. See contributing guide for further information.

Laws

Laws are represented as instances of dpv:Law, and are associated with their jurisdictions using the [[LOC]] taxonomy and dpv:hasJurisdiction relation. The webpage for the law, if available, is indicated using foaf:homepage, and the temporal start and end if available, is represented using dct:temporal relation with an instance of time:ProperInterval.

ID Name Jurisdictions Authorities Webpage Start/End
law-CA-CCPA California Consumer Privacy Act (CCPA) California, United States of America legal-us:DPA-US-CA link 2020-01-01/ongoing
law-CA-CPRA California Privacy Rights Act (CPRA) California, United States of America legal-us:DPA-US-CA link 2023-01-01/ongoing
law-CO-CPA Colorado Privacy Act (CPA) Colorado, United States of America legal-us:DPA-US-CO link 2024-01-07/ongoing
law-CT-CTPA Connecticut Data Privacy Act (CTPA) Connecticut, United States of America legal-us:DPA-US-CT link 2023-01-07/ongoing
law-NV-NPICICA Nevada Privacy of Information Collected on the Internet from Consumers Act (NPICICA) Nevada, United States of America legal-us:DPA-US-NV link 2021-01-10/ongoing
law-UT-UCPA Utah Consumer Privacy Act (UCPA) Utah, United States of America legal-us:DPA-US-UT link 2023-12-31/ongoing
law-VA-VCDPA Virginia Consumer Data Protection Act (VCDPA) Virginia, United States of America legal-us:DPA-US-VA link 2023-01-01/ongoing

Authorities

Authorities are represented as instances of dpv:Authority, and are associated with specific jurisdictions using dpv:hasJurisdiction. The law which the authorities enforce is indicated by dpv:hasApplicableLaw. The webpage for the authority, if available, is indicated using foaf:homepage.

ID Name Jurisdictions Laws Webpage
DPA-US-CA California Privacy Protection Agency (CPPA) California, United States of America legal-us:law-CA-CCPA
legal-us:law-CA-CPRA 		link
DPA-US-CO Colorado Attorney General Colorado, United States of America legal-us:law-CO-CPA link
DPA-US-CT Connecticut Attorney General Connecticut, United States of America legal-us:law-CT-CTPA link
DPA-US-NV Nevada Attorney General Nevada, United States of America legal-us:law-NV-NPICICA link
DPA-US-UT Utah Attorney General Utah, United States of America legal-us:law-UT-UCPA link
DPA-US-VA Virginia Attorney General Virginia, United States of America legal-us:law-VA-VCDPA link

Vocabulary Index

Classes

California Privacy Protection Agency (CPPA)

Term DPA-US-CA Prefix legal-us
Label California Privacy Protection Agency (CPPA)
IRI https://w3id.org/dpv/legal/us#DPA-US-CA
Type rdfs:Class, skos:Concept, dpv:DataProtectionAuthority
Broader/Parent types dpv:DataProtectionAuthority → dpv:Authority → dpv:GovernmentalOrganisation → dpv:Organisation → dpv:LegalEntity → dpv:Entity
Broader/Parent types dpv:Law
Object of relation dpv:hasActiveEntity, dpv:hasApplicableLaw, dpv:hasAuthority, dpv:hasEntity, dpv:hasNonInvolvedEntity, dpv:hasParty, dpv:hasPassiveEntity, dpv:hasResponsibleEntity, dpv:hasSubsidiary, dpv:isDeterminedByEntity, dpv:isImplementedByEntity, dpv:isIndicatedBy, dpv:isOrganistionalUnitOf, dpv:isRepresentativeFor, dpv:isSubsidiaryOf
Date Created 2023-12-13
has applicable law California Consumer Privacy Act (CCPA) , California Privacy Rights Act (CPRA)
has jurisdiction California
See More: section LEGAL in LEGAL-US

Colorado Attorney General

Term DPA-US-CO Prefix legal-us
Label Colorado Attorney General
IRI https://w3id.org/dpv/legal/us#DPA-US-CO
Type rdfs:Class, skos:Concept, dpv:DataProtectionAuthority
Broader/Parent types dpv:DataProtectionAuthority → dpv:Authority → dpv:GovernmentalOrganisation → dpv:Organisation → dpv:LegalEntity → dpv:Entity
Broader/Parent types dpv:Law
Object of relation dpv:hasActiveEntity, dpv:hasApplicableLaw, dpv:hasAuthority, dpv:hasEntity, dpv:hasNonInvolvedEntity, dpv:hasParty, dpv:hasPassiveEntity, dpv:hasResponsibleEntity, dpv:hasSubsidiary, dpv:isDeterminedByEntity, dpv:isImplementedByEntity, dpv:isIndicatedBy, dpv:isOrganistionalUnitOf, dpv:isRepresentativeFor, dpv:isSubsidiaryOf
Date Created 2022-11-23
Contributors Jonathan Bowker
has applicable law Colorado Privacy Act (CPA)
has jurisdiction Colorado
See More: section LEGAL in LEGAL-US

Connecticut Attorney General

Term DPA-US-CT Prefix legal-us
Label Connecticut Attorney General
IRI https://w3id.org/dpv/legal/us#DPA-US-CT
Type rdfs:Class, skos:Concept, dpv:DataProtectionAuthority
Broader/Parent types dpv:DataProtectionAuthority → dpv:Authority → dpv:GovernmentalOrganisation → dpv:Organisation → dpv:LegalEntity → dpv:Entity
Broader/Parent types dpv:Law
Object of relation dpv:hasActiveEntity, dpv:hasApplicableLaw, dpv:hasAuthority, dpv:hasEntity, dpv:hasNonInvolvedEntity, dpv:hasParty, dpv:hasPassiveEntity, dpv:hasResponsibleEntity, dpv:hasSubsidiary, dpv:isDeterminedByEntity, dpv:isImplementedByEntity, dpv:isIndicatedBy, dpv:isOrganistionalUnitOf, dpv:isRepresentativeFor, dpv:isSubsidiaryOf
Date Created 2022-11-23
Contributors Jonathan Bowker
has applicable law Connecticut Data Privacy Act (CTPA)
has jurisdiction Connecticut
See More: section LEGAL in LEGAL-US

Nevada Attorney General

Term DPA-US-NV Prefix legal-us
Label Nevada Attorney General
IRI https://w3id.org/dpv/legal/us#DPA-US-NV
Type rdfs:Class, skos:Concept, dpv:DataProtectionAuthority
Broader/Parent types dpv:DataProtectionAuthority → dpv:Authority → dpv:GovernmentalOrganisation → dpv:Organisation → dpv:LegalEntity → dpv:Entity
Broader/Parent types dpv:Law
Object of relation dpv:hasActiveEntity, dpv:hasApplicableLaw, dpv:hasAuthority, dpv:hasEntity, dpv:hasNonInvolvedEntity, dpv:hasParty, dpv:hasPassiveEntity, dpv:hasResponsibleEntity, dpv:hasSubsidiary, dpv:isDeterminedByEntity, dpv:isImplementedByEntity, dpv:isIndicatedBy, dpv:isOrganistionalUnitOf, dpv:isRepresentativeFor, dpv:isSubsidiaryOf
Date Created 2022-11-23
Contributors Jonathan Bowker
has applicable law Nevada Privacy of Information Collected on the Internet from Consumers Act (NPICICA)
has jurisdiction Nevada
See More: section LEGAL in LEGAL-US

Utah Attorney General

Term DPA-US-UT Prefix legal-us
Label Utah Attorney General
IRI https://w3id.org/dpv/legal/us#DPA-US-UT
Type rdfs:Class, skos:Concept, dpv:DataProtectionAuthority
Broader/Parent types dpv:DataProtectionAuthority → dpv:Authority → dpv:GovernmentalOrganisation → dpv:Organisation → dpv:LegalEntity → dpv:Entity
Broader/Parent types dpv:Law
Object of relation dpv:hasActiveEntity, dpv:hasApplicableLaw, dpv:hasAuthority, dpv:hasEntity, dpv:hasNonInvolvedEntity, dpv:hasParty, dpv:hasPassiveEntity, dpv:hasResponsibleEntity, dpv:hasSubsidiary, dpv:isDeterminedByEntity, dpv:isImplementedByEntity, dpv:isIndicatedBy, dpv:isOrganistionalUnitOf, dpv:isRepresentativeFor, dpv:isSubsidiaryOf
Date Created 2022-11-22
Contributors Jonathan Bowker
has applicable law Utah Consumer Privacy Act (UCPA)
has jurisdiction Utah
See More: section LEGAL in LEGAL-US

Virginia Attorney General

Term DPA-US-VA Prefix legal-us
Label Virginia Attorney General
IRI https://w3id.org/dpv/legal/us#DPA-US-VA
Type rdfs:Class, skos:Concept, dpv:DataProtectionAuthority
Broader/Parent types dpv:DataProtectionAuthority → dpv:Authority → dpv:GovernmentalOrganisation → dpv:Organisation → dpv:LegalEntity → dpv:Entity
Broader/Parent types dpv:Law
Object of relation dpv:hasActiveEntity, dpv:hasApplicableLaw, dpv:hasAuthority, dpv:hasEntity, dpv:hasNonInvolvedEntity, dpv:hasParty, dpv:hasPassiveEntity, dpv:hasResponsibleEntity, dpv:hasSubsidiary, dpv:isDeterminedByEntity, dpv:isImplementedByEntity, dpv:isIndicatedBy, dpv:isOrganistionalUnitOf, dpv:isRepresentativeFor, dpv:isSubsidiaryOf
Date Created 2022-11-23
Contributors Jonathan Bowker
has applicable law Virginia Consumer Data Protection Act (VCDPA)
has jurisdiction Virginia
See More: section LEGAL in LEGAL-US

California Consumer Privacy Act (CCPA)

Term law-CA-CCPA Prefix legal-us
Label California Consumer Privacy Act (CCPA)
IRI https://w3id.org/dpv/legal/us#law-CA-CCPA
Type rdfs:Class, skos:Concept, dpv:Law
Broader/Parent types dpv:Law
Object of relation dpv:hasApplicableLaw
Date Created 2022-03-30
Contributors Harshvardhan J. Pandit
has authority California Privacy Protection Agency (CPPA)
has jurisdiction California
See More: section LEGAL in LEGAL-US

California Privacy Rights Act (CPRA)

Term law-CA-CPRA Prefix legal-us
Label California Privacy Rights Act (CPRA)
IRI https://w3id.org/dpv/legal/us#law-CA-CPRA
Type rdfs:Class, skos:Concept, dpv:Law
Broader/Parent types dpv:Law
Object of relation dpv:hasApplicableLaw
Date Created 2022-03-30
Contributors Harshvardhan J. Pandit
has authority California Privacy Protection Agency (CPPA)
has jurisdiction California
See More: section LEGAL in LEGAL-US

Colorado Privacy Act (CPA)

Term law-CO-CPA Prefix legal-us
Label Colorado Privacy Act (CPA)
IRI https://w3id.org/dpv/legal/us#law-CO-CPA
Type rdfs:Class, skos:Concept, dpv:Law
Broader/Parent types dpv:Law
Object of relation dpv:hasApplicableLaw
Date Created 2022-11-23
Contributors Jonathan Bowker
has authority Colorado Attorney General
has jurisdiction Colorado
See More: section LEGAL in LEGAL-US

Connecticut Data Privacy Act (CTPA)

Term law-CT-CTPA Prefix legal-us
Label Connecticut Data Privacy Act (CTPA)
IRI https://w3id.org/dpv/legal/us#law-CT-CTPA
Type rdfs:Class, skos:Concept, dpv:Law
Broader/Parent types dpv:Law
Object of relation dpv:hasApplicableLaw
Date Created 2022-11-23
Contributors Jonathan Bowker
has authority Connecticut Attorney General
has jurisdiction Connecticut
See More: section LEGAL in LEGAL-US

Nevada Privacy of Information Collected on the Internet from Consumers Act (NPICICA)

Term law-NV-NPICICA Prefix legal-us
Label Nevada Privacy of Information Collected on the Internet from Consumers Act (NPICICA)
IRI https://w3id.org/dpv/legal/us#law-NV-NPICICA
Type rdfs:Class, skos:Concept, dpv:Law
Broader/Parent types dpv:Law
Object of relation dpv:hasApplicableLaw
Date Created 2022-11-23
Contributors Jonathan Bowker
has authority Nevada Attorney General
has jurisdiction Nevada
See More: section LEGAL in LEGAL-US

Utah Consumer Privacy Act (UCPA)

Term law-UT-UCPA Prefix legal-us
Label Utah Consumer Privacy Act (UCPA)
IRI https://w3id.org/dpv/legal/us#law-UT-UCPA
Type rdfs:Class, skos:Concept, dpv:Law
Broader/Parent types dpv:Law
Object of relation dpv:hasApplicableLaw
Date Created 2022-11-22
Contributors Jonathan Bowker
has authority Utah Attorney General
has jurisdiction Utah
See More: section LEGAL in LEGAL-US

Virginia Consumer Data Protection Act (VCDPA)

Term law-VA-VCDPA Prefix legal-us
Label Virginia Consumer Data Protection Act (VCDPA)
IRI https://w3id.org/dpv/legal/us#law-VA-VCDPA
Type rdfs:Class, skos:Concept, dpv:Law
Broader/Parent types dpv:Law
Object of relation dpv:hasApplicableLaw
Date Created 2022-11-23
Contributors Jonathan Bowker
has authority Virginia Attorney General
has jurisdiction Virginia
See More: section LEGAL in LEGAL-US

Properties

DPV uses the following terms from [[RDF]] and [[RDFS]] with their defined meanings:

The following external concepts are re-used within DPV:

External

Future Work

Funding Acknowledgements

Funding Sponsors

The DPVCG was established as part of the SPECIAL H2020 Project, which received funding from the European Union’s Horizon 2020 research and innovation programme under grant agreement No. 731601 from 2017 to 2019.

Harshvardhan J. Pandit was funded to work on DPV from 2020 to 2022 by the Irish Research Council's Government of Ireland Postdoctoral Fellowship Grant#GOIPD/2020/790.

The ADAPT SFI Centre for Digital Media Technology is funded by Science Foundation Ireland through the SFI Research Centres Programme and is co-funded under the European Regional Development Fund (ERDF) through Grant#13/RC/2106 (2018 to 2020) and Grant#13/RC/2106_P2 (2021 onwards).

Funding Acknowledgements for Contributors

The contributions of Harshvardhan J. Pandit have been made with the financial support of Science Foundation Ireland under Grant Agreement No. 13/RC/2106_P2 at the ADAPT SFI Research Centre.