DPV is a vocabulary for representing data privacy concepts (personal data categories, purposes, processing, legal bases, technical and organisational measures, risks), with sector-specific and legal extensions covering more than 40 jurisdictions. It is developed by the W3C Data Privacy Vocabularies and Controls Community Group (DPVCG).
Data Privacy Vocabulary (DPV)
DPV gives privacy a shared vocabulary: the categories of personal data, the purposes they are processed for, the legal basis, the recipients, and the measures taken. A core vocabulary is supplemented by extensions for personal data, AI technologies, risk management, and legal concepts across more than 40 jurisdictions. It is a Community Group work, not a W3C Recommendation, and contributions are released under the W3C Software and Document License (2023).
Business layer
DPV is the vocabulary the API Commons privacy-policy schema profiles, so that a provider’s data categories, purposes, retention, subprocessors and residency can be published as data rather than prose. See The Technical Side Translated. The Business Side Did Not.
Industry: privacy
