This action will not modify an asset or create new asset. May link to a Party with the role 'informedParty' function.
Data subject's request for subject access, not getting the content of the Asset
Access
GDPR: Right of subject assess. To read or review existing Asset's subject; informing the data subject.
Data Subject
DS.
Party
DS.
Party
Data Subject
DS.
DS.
Non-Normative
Use a constraint to define under which conditions the Asset must be deleted? The Asset is no longer accessible to the assignees after it has been used.
GDPR: Right to erasure - aka Right to be forgotten. To permanently remove all copies of the Asset after it has been used. To unload and delete the computer program Asset from a storage device and disable its readiness for operation.
Erase
DS.
Data Subject
Party
DS.
The Asset entity can be any form of identifiable resource, such as data/information, content/media, applications, or services. Furthermore, it can be used to represent other Asset entities that are needed to undertake the Policy expression, such as with the Duty entity. To describe more details about the Asset, it is recommended to use Dublin Core [[dcterms]] elements or other content metadata.
A resource or a collection of resources that are the subject of a Rule.
Asset
DS.
Party
DS.
Data Subject
A Policy that grants the assignee a Rule over an Asset from an assigner.
An Agreement Policy MUST contain at least one Permission or Prohibition rule, a Party with Assigner function, and a Party with Assignee function (in the same Permission or Prohibition). The Agreement Policy will grant the terms of the Policy from the Assigner to the Assignee.
Data Shaing Agreement
GDPR: Right to object to procedure. No ODRL equivalent.
Non-Normative
Object
No ODRL equivalent.
Inform
This action will not modify an asset or create new asset. May link to a Party with the role 'informedParty' function.
Data subject's request for information, by getting the content of the Asset
GDPR: right to information. To read or review existing content of the Asset by obtaining its data; informing the data subject.
Party
DS.
Data Subject
DS.
Non-Normative
May be used as a Duty to ensure that the Assigner or a Party is authorized to approve such actions on a case-by-case basis. May link to a Party with the role “consentingParty” function.
GDPR: Right to remove the consent. To remove consent previously given by data subject.
Obtain Consent
DPRL is ODRL profile focusing on permissions and obligations statements to satisfy data subject rights under GDPR.
DPRL Version 1.0
Adapt Centre Trinity College Dublin
David
Ensar
1.0
Dave
This relates to ODRL Version 2.2.
GDPR: Right to rectification. To change existing content of the Asset. A new asset is not created by this action.
Rectify
This action will modify an asset.
Rectify data subject's information, by changing existing content of the Asset
GDPR: Right to restrict access. This action enables the assignee to create policies for the use of the Asset for third parties. The nextPolicy is recommended to be agreed with the third party. Use of temporal constraints is recommended.
This action enables the assignee to create policies for the use of the Asset for third parties. The nextPolicy is recommended to be agreed with the third party. Use of temporal constraints is recommended.
Restrict
Non-Normative
Data Subject
DS.
Party
DS.
Non-Normative
After the Asset has been moved, the original copy must be deleted. ypically used to convert the Asset into a different format for consumption on/transfer to a third party system.
GDPR: Right to data portability. To move the Asset from one digital location to another including deleting the original copy. To convert the Asset into a different format.
Port