The GDPR Provenance ontology
type: Ontology
version IRI: gdprov v0.7.owl
imports: p-plan#
imports: prov-o-20130430
abstract: The General Data Protection Regulation (GDPR) is an European law governing the use of consent and personal data. Some of its obligations involve concepts related to the lifecycles of consent and personal data. Such obligations are concerned with how the collection, use, processing, sharing, and storing of consent and personal data takes place and provides the motivation for a form of documentation that can demonstrate the required information towards compliance. GDPRov is an OWL2 ontology for representing this information as provenance metadata using terms relevant to the GDPR. It extends PROV-O and P-Plan to represent the lifecyles as an abstract model of how things should happen or will happen (future) as well as instance of what has happened (past). The ontology is being developed as part of contributions towards PhD research by its primary author.
created: 2017-08-01
creator: http://purl.org/adaptcentre/people/dave_lewis
creator: http://purl.org/adaptcentre/people/harshvardhan_pandit
description: GDPRov is an OWL2 ontology to express provenance metadata of consent and data lifecycles towards documenting compliance for GDPR.
license: https://creativecommons.org/licenses/by/4.0/
modified: 2018-04-06
preferred namespace prefix: gdprov
preferred namespace uri: https://w3id.org/GDPRov#
comment: GDPRov is an ontology for expressing provenance metadata in the context of the General Data Protection Regulation (GDPR) and its compliance. It extends PROV-O and P-Plan. PROV-O is the ontology based on the PROV model, a W3C recommendation, while P-Plan is an extension of PROV-O. PROV is used to define terms or 'instances' of what has happened in the past, while P-Plan is used to define the abstract model or 'Plan' of things to happen. GDPRov uses P-Plan to create a template/model/plan as an abstract or model representation of a system which is then recorded using PROV-O instances to show something has happened. The aim of the ontology is to enable representation of consent and personal data lifecycles using terms relevant to GDPR and to facilitate expression of this information towards documentation related to compliance.
version IRI: https://openscience.adaptcentre.ie/ontologies/gdprov/v/gdprov.0.7.owl
version info: 0.7

anonymity level
type: ObjectProperty
domain: Data Entity
range: AnonymityLevel
deprecated: true

archives consent as
type: ObjectProperty
sub property of: hasOutputVar
domain: Consent Archival Step
range: ConsentAgreement
comment: Archives the consent into some entity

collectsData
type: ObjectProperty
sub property of: hasOutputVar
inverse of: isDataCollectedByStep
domain: Data Step
range: Data
comment: Links data obtained (collected) by the step/activity that acquired it

generatesAnonymisedData
type: ObjectProperty
sub property of: generatesData
inverse of: isAnonymisedByStep
domain: Data Anonymisation Step
range: AnonymisedData
comment: Indicates that an DataAnonymisationStep transforms a Data object into AnonymisedData

generatesConsentAgreement
type: ObjectProperty
sub property of: hasOutputVar
inverse of: isGeneratedByStep
domain: Consent Step
range: ConsentAgreement
comment: Generates ConsentAgreement which is a the consent granted by the user based on the ConsentAgreementTemplate through a ConsentAcquisitionStep

generatesData
type: ObjectProperty
sub property of: hasOutputVar
inverse of: isDataGeneratedByStep
domain: Data Step
range: Data
comment: produces data

hasAnonymityLevel
type: ObjectProperty
domain: PersonalData
range: AnonymityLevel
comment: Indicates the anonymity level of an AnonymisedData object using instances of the AnonymityLevel class

hasLegalBasis
type: ObjectProperty
range: Lawful basis for Processing

has legal justification
type: ObjectProperty
domain: Activity
range: Lawful basis for Processing
deprecated: true

hasSharedDataWith
type: ObjectProperty
domain: Data Sharing Activity
range: Agent

isAnonymisedByStep
type: ObjectProperty
sub property of: isDataGeneratedByStep

isConsentAgreementTemplateForStep
type: ObjectProperty
sub property of: isInputVarOf
inverse of: usesConsentAgreementTemplate

isDataCollectedByStep
type: ObjectProperty
sub property of: isOutputVarOf

isDataGeneratedByStep
type: ObjectProperty
sub property of: isOutputVarOf

isGeneratedByStep
type: ObjectProperty
sub property of: isOutputVarOf

isJustificationForDataStep
type: ObjectProperty
sub property of: isInputVarOf
inverse of: isJustifiedUsingConsentAgreement

isJustifiedUsingConsentAgreement
type: ObjectProperty
sub property of: hasInputVar
domain: Data Step
range: ConsentAgreement
comment: justifies use of data by step through specified consent agreement

isPartOfProcess
type: ObjectProperty
sub property of: isStepOfPlan

isTermsAndConditionsForStep
type: ObjectProperty
sub property of: isInputVarOf
inverse of: usesTermsAndConditions

isUsedByStep
type: ObjectProperty
sub property of: isInputVarOf
inverse of: usesData

sharesData
type: ObjectProperty
sub property of: hasInputVar
inverse of: wasSharedBy
domain: Data Sharing Step
range: Data
comment: Indicates sharing of Data through a DataStep

sharesDataWith
type: ObjectProperty
domain: Data Sharing Step
range: Agent

sharesDataWithThirdParty
type: ObjectProperty
sub property of: topObjectProperty
domain: Data Sharing Step
range: ThirdParty
comment: Shares data with a third party
deprecated: true

transferredDataToRegion
type: ObjectProperty
domain: Cross Border Transfer Activity

transfersDataToRegion
type: ObjectProperty
domain: Cross-border Data Transfer Step

uses Consent Agreement
type: ObjectProperty
sub property of: hasInputVar
domain: Consent Step
range: ConsentAgreement
comment: uses Consent Agreement entity

usesConsentAgreementTemplate
type: ObjectProperty
sub property of: hasInputVar
domain: Consent Acquisition Step
range: ConsentAgreementTemplate
comment: links a Consent Acquisition Step with the Consent Agreement Template used to acquire consent

usesData
type: ObjectProperty
sub property of: hasInputVar
domain: Data Step
range: Data
comment: links step with data used

usesTermsAndConditions
type: ObjectProperty
sub property of: hasInputVar
domain: Consent Acquisition Step
range: TermsAndConditions
comment: Links a Consent Acquisition Step with the Terms and Conditions presented to the user when acquiring Consent

Acquire Consent Activity
type: Class
subclass of: Consent Activity
comment: Is an activity that acquires consent.
corresponding step: Consent Acquisition Step

Anonymisation Activity
type: Class
subclass of: Data Transformation Activity
comment: Is an activity that anonymises data.
corresponding step: Data Anonymisation Step

AnonymisedData
type: Class
subclass of: PersonalData
subclass of: Restriction
  on property: hasAnonymityLevel
  some values from: AnonymityLevel
comment: Represents data that has been Anonymised at some level reflected by the hasAnonymityLevel object property
corresponding entity: Anonymised Data Entity

Anonymised Data Entity
type: Class
subclass of: Personal Data Entity
comment: Is an entity where personal data has been anonymised to some extent.
corresponding variable: AnonymisedData

AnonymityLevel
type: Class
comment: Provides a way to express the Anonymity Level of AnonymisedData objects through the object property hasAnonymityLevel. There are four levels defined within the GDPR, each represented by an instance in the ontology. The levels are: (completely) anonymous, pseudo-anonymous where the organisation does not have data required to de-anonymise, pseudo-anonymous where the organisation has data to de-anonymise, and not-anonymised.

Appoint Processor
type: Class
subclass of: Process
comment: Reflects the process(es) used to appoint processors

Archive Consent Activity
type: Class
subclass of: Consent Activity
comment: An activity that archives given/acquired consent for storage.
corresponding step: Consent Archival Step

Automated Activity
type: Class
subclass of: Activity
comment: An activity that is automated.
corresponding step: AutomatedStep

AutomatedStep
type: Class
subclass of: Step
comment: A Step that is Automated, or involves automation in processing operations.
corresponding activity: Automated Activity

Consent Acquisition Step
type: Class
subclass of: Consent Step
comment: ConsentAcquisitionStep deals with acquiring consent. If consent is obtained from the user, the relevant Terms and Conditions along with the appropriate Consent Model (template) can be associated with the step. The output of this step is the consent agreed upon by the user.
corresponding activity: Acquire Consent Activity

Consent Activity
type: Class
subclass of: Activity
comment: Is an activity dealing with consent.
corresponding step: Consent Step

ConsentAgreement
type: Class
subclass of: Variable
disjoint with: ConsentAgreementTemplate
disjoint with: Data
disjoint with: TermsAndConditions
comment: ConsentAgreement reflects the consent provided by the user based on the provided Terms and Conditions and Consent Agreement Templates. It is the set of permissions the user has specifically provided or refused to provide with respect to processing their personal data. This consent is useful to provide justification of activities that use user data.
corresponding entity: Given Consent

ConsentAgreementTemplate
type: Class
subclass of: Variable
disjoint with: Data
disjoint with: TermsAndConditions
comment: This is a template for consent requested from the user. The template is the generic options provided to all data subjects to obtain their consent.
corresponding entity: Consent Template

Consent Archival Step
type: Class
subclass of: Consent Step
comment: ConsentArchivalStep archives acquired consent to form a record of the consent given by the user.
corresponding activity: Archive Consent Activity

Consent Modification Step
type: Class
subclass of: Consent Step
comment: ConsentModificationStep deals with modifications to the consent. It invalidates the previous consent object and produces a new updated consent object that represents the modified consent.
corresponding activity: Modify Consent Activity

Consent Step
type: Class
subclass of: Step
comment: A ConsentStep acts/interacts with/uses Consent
corresponding activity: Consent Activity

Consent Template
type: Class
subclass of: Entity
comment: Is the template used to obtain the given consent.
corresponding variable: ConsentAgreementTemplate

Consent Withdrawal Process
type: Class
subclass of: Process
comment: A ConsentWithdrawalProcess deals with the withdrawal of consent by the user and the corresponding activity carried out within the system

Consent Withdrawal Step
type: Class
subclass of: Consent Modification Step
comment: ConsentWithdrawalStep deals with withdrawal of consent
corresponding activity: Withdraw Consent Activity

Controller
type: Class
subclass of: Agent
comment: A ThirdPartyDataController is a Third Party entity that acts as a Data Controller

Controller Representative
type: Class
subclass of: Agent
comment: A Representative of the Controller

Cross-border Data Transfer Step
type: Class
subclass of: Data Step
comment: A step that involves cross-border transfer of data
corresponding activity: Cross Border Transfer Activity

Cross Border Transfer Activity
type: Class
subclass of: Data Activity
comment: Is an activity that transfer data across borders (as defined in the GDPR).
corresponding step: Cross-border Data Transfer Step

Data Protection Officer (DPO)
type: Class
subclass of: Agent
comment: The Data Protection Officer appointed to an organisation.

Data
type: Class
subclass of: Variable
disjoint with: TermsAndConditions
comment: Represents class of data collected or generated through various activities
corresponding entity: Data Entity

Data Access Process
type: Class
subclass of: Process
comment: A DataAccessProcess corresponds to the request made by an user for access to their data within the system. This process is responsible for handling the request process and providing the appropriate data to the end user.

Data Activity
type: Class
subclass of: Activity
comment: Is an activity involving data.
corresponding step: Data Step

Data Anonymisation Step
type: Class
subclass of: Data Transformation Step
comment: DataAnonymisationStep anonymises data by transforming it from one form to another along the anonymisation chain (not-anonymised --> pseudo-anonymised --> anonymised). Anonymisation can be represented as a spectrum going from raw user data to pseudo-anonymised data that can be de-anonymised by the same agent/organisation to pseudo-anonymous data that cannot be deanonymised internally, but may be done by external agents who have access to other data, and finally to completely anonymised data.
corresponding activity: Anonymisation Activity

Data Archival Activity
type: Class
subclass of: Data Storage Activity
subclass of: Data Transformation Activity
comment: Is an activity that archives data. Archival is transformation of data into some form for storage.
corresponding step: Data Archival Step

Data Archival Process
type: Class
subclass of: Process
comment: A DataArchivalProcess describes the process of data archival

Data Archival Step
type: Class
subclass of: Data Storage Step
subclass of: Data Transformation Step
comment: DataArchivalStep archives data by transforming it and storing it
corresponding activity: Data Archival Activity

Data Breach Activity
type: Class
subclass of: Activity
comment: Is an activity dealing with data breach.
corresponding step: Data Breach Step

Data Breach Record
type: Class
subclass of: Variable
comment: A record of a data breach.
corresponding entity: Data Breach Record Entity

Data Breach Record Entity
type: Class
subclass of: Entity
comment: A record of a Data Breach that took place.
corresponding variable: Data Breach Record

Data Breach Step
type: Class
subclass of: Step
comment: Step representing an action associated with data breach.
corresponding activity: Data Breach Activity

Data Collection Activity
type: Class
subclass of: Data Activity
comment: Is an activity that collects or acquires data.
corresponding step: Data Collection Step

Data Collection Step
type: Class
subclass of: Data Step
comment: DataCollectionStep collects data from the user
corresponding activity: Data Collection Activity

Data Deanonymisation Step
type: Class
subclass of: Data Transformation Step
comment: DataDeanonymisationStep deanonymises data by transforming it from one form to another along the anonymisation chain (anonymised --> pseudo-anonymised --> not-anonymised)
corresponding activity: DeAnonymisation Activity

Data Deletion Activity
type: Class
subclass of: Data Activity
comment: Is an activity that deletes or erases data.
corresponding step: Data Deletion Step

Data Deletion Step
type: Class
subclass of: Data Step
comment: DataDeletionStep deletes personal data from within the system; The deletion is expressed as prov:invalidated over the dataset. Note that deletion is not the same as erasure. Deletion denotes removal of data, whereas erasure implies destruction.
corresponding activity: Data Deletion Activity

Data Entity
type: Class
subclass of: Entity
comment: Represents a data entity.
corresponding variable: Data

Data Erasure Activity
type: Class
subclass of: Data Deletion Activity
comment: An activity that erases data.
corresponding step: Data Erasure Step

Data Erasure Process
type: Class
subclass of: Process
comment: A DataErasureProcess is responsible for handling the data erasure of a data subject.

Data Erasure Step
type: Class
subclass of: Data Deletion Step
comment: DataDeletionStep erases personal data from within the system; The deletion is expressed as prov:invalidated over the dataset. Note that deletion is not the same as erasure. Deletion denotes removal of data, whereas erasure implies destruction.
corresponding activity: Data Erasure Activity

Data Rectification Process
type: Class
subclass of: Process
comment: A DataRectificationProcess describes the process of data rectification, which is the correction of data already present within the system

Data Sharing Activity
type: Class
subclass of: Data Activity
comment: Is an activity that shares data.
corresponding step: Data Sharing Step

Data Sharing Step
type: Class
subclass of: Data Step
comment: DataSharingStep shares data with another agent/organisation which act as a third party. In this context, sharing is a synonym for disclose, give, provide, or access (by third party).
corresponding activity: Data Sharing Activity

Data Step
type: Class
subclass of: Step
comment: A DataStep involving with personal data
corresponding activity: Data Activity

Data Step without Provenance
type: Class
subclass of: Data Step
comment: A step that involves personal data but whose records are not available or will not be kept. This allows explicit declaration of an activity without any logs or records.

Data Storage Activity
type: Class
subclass of: Data Activity
comment: Is an activity that stores data.
corresponding step: Data Storage Step

Data Storage Step
type: Class
subclass of: Data Step
comment: DataStorageStep stores data within the system
corresponding activity: Data Storage Activity

Data Subject
type: Class
subclass of: Agent
comment: An individual or entity

Data Transfer Activity
type: Class
subclass of: Data Activity
comment: Activity that involves data transfer.
corresponding step: DataTransferStep

DataTransferStep
type: Class
subclass of: Data Step
comment: This step involves transfer of data to another location or organisation (that is not a third party). Note that transfer and sharing are separate terms. GDPRov uses the technical definition of transfer - to move or copy data from one place to another. If data is being "transfered"@en .o another organisation, it should be represented using DataSharingStep.
corresponding activity: Data Transfer Activity

Data Transformation Activity
type: Class
subclass of: Data Activity
comment: Is an activity that transforms data.
corresponding step: Data Transformation Step

Data Transformation Step
type: Class
subclass of: Data Step
comment: DataTransformationStep transforms data from one form into another.
corresponding activity: Data Transformation Activity

Data Usage Activity
type: Class
subclass of: Data Activity
comment: Is an activity that uses data. Can also be termed as 'Processing' of data.
corresponding step: Data Usage Step

Data Usage Step
type: Class
subclass of: Data Step
comment: A DataUsageStep is a DataStep that uses existing or available personal data present within the system
corresponding activity: Data Usage Activity

DeAnonymisation Activity
type: Class
subclass of: Data Transformation Activity
comment: Is an activity that deanonymises data.
corresponding step: Data Deanonymisation Step

Direct Marketing
type: Class
subclass of: Marketing
comment: Direct Marketing where the marketing is done directly to the data subject.

Given Consent
type: Class
subclass of: Entity
comment: Represents the given consent by the data subject.
corresponding variable: ConsentAgreement

Handle Data Breach Process
type: Class
subclass of: Process
comment: A process that defines the actions that should be undertaken in event of a data breach

Handle Right of Data Portability
type: Class
subclass of: Process
comment: The process or series of steps that handle the right of data portability.

Handle Right of Erasure
type: Class
subclass of: Process
comment: The process or series of steps that handle the right of erasure.

Handle Right to access Personal Data
type: Class
subclass of: Process
comment: The process or series of steps that handle the right to access personal data.

Handle Right to basic information about Processing
type: Class
subclass of: Process
comment: The process or series of steps that handle the right to basic information about processing.

Handle Right to not be evaluated through Automated Processing
type: Class
subclass of: Process
comment: The process or series of steps that handle the right to not be processed automatically.

Handle Right to Object to Direct Marketing
type: Class
subclass of: Process
comment: The process or series of steps that handle the right to object to direct marketing.

Handle Right to Object to Processing
type: Class
subclass of: Process
comment: The process or series of steps that handle the right to object to processing.

Handle Right to Rectification
type: Class
subclass of: Process
comment: The process or series of steps that handle the right to rectification of personal data.

Handle Right to restrict Processing
type: Class
subclass of: Process
comment: The process or series of steps that handle the right to restrict processing.

Handle Right to Transparency
type: Class
subclass of: Process
comment: The process or series of steps that handle the right to transparency.

Handle Subject Access Requests
type: Class
subclass of: Process
comment: Handle Subject Access Requests made by the Data Subject

Impact Assessment
type: Class
subclass of: Process
comment: Represents the process or collection of steps representing the Impact Assessment.

Joint Controller(s)
type: Class
subclass of: Agent
comment: A Joint Controller is where two or more controllers jointly determine the purposes and means of processing.

Marketing
type: Class
subclass of: Process
comment: Marketing as a process or collection of steps.

Modify Consent Activity
type: Class
subclass of: Consent Activity
comment: Is an activity that modifies given consent.
corresponding step: Consent Modification Step

Monitor Compliance
type: Class
subclass of: Process
comment: The process of monitoring compliance as mandated by the GDPR.

Notify Controller Activity
type: Class
subclass of: Data Breach Activity
comment: Is an activity that notifies controller about data breach
corresponding step: Notify Controller Step

Notify Controller Step
type: Class
subclass of: Data Breach Step
comment: Step that notifies relevant controller(s) about the data breach.
corresponding activity: Notify Controller Activity

Notify DPA Activity
type: Class
subclass of: Data Breach Activity
comment: Is an activity that notifies data protection authorities about data breach
corresponding step: Notify Data Protection Authority Step

Notify Data Protection Authority Step
type: Class
subclass of: Data Breach Step
comment: Step that notifies the Data Protection Authorities of a data breach.
corresponding activity: Notify DPA Activity

Notify Data Subject Activity
type: Class
subclass of: Data Breach Activity
comment: Is an activity that notifies data subjects about data breach
corresponding step: Notify Data Subject Step

Notify Data Subject Step
type: Class
subclass of: Data Breach Step
comment: Step that notifies the data subject about the data breach.
corresponding activity: Notify Data Subject Activity

PersonalData
type: Class
subclass of: Data
comment: PersonalData is any data pertaining to the user which can contain personally identifiable information or a data set generated by the system using personally identifiable information acquired through direct or indirect means
corresponding entity: Personal Data Entity

Personal Data Entity
type: Class
subclass of: Data Entity
comment: Represents a personal data entity.
corresponding variable: PersonalData

Privacy Policy
type: Class
subclass of: Variable
comment: Privacy Policy for usage of personal data as provided to the user in agreement of provided service
corresponding entity: Privacy Policy Entity

Privacy Policy Entity
type: Class
subclass of: Entity
comment: A Privacy Policy for usage of personal data for data processing.
corresponding variable: Privacy Policy

Process
type: Class
subclass of: Plan
comment: A Process describes a 'Plan' of action for carrying out a particular activity that uses or is related to Data or Consent

Processor
type: Class
subclass of: Agent
comment: A ThirdPartyDataProcessor is a Third Party entity that acts as a Data Processor

Processor Representative
type: Class
subclass of: Agent
comment: A representative of the Processor.

Provide Copy of Data Activity
type: Class
subclass of: Data Activity
comment: Activity that provides a copy of personal data (to a data subject).
corresponding step: Provide copy of Personal Data Step

Provide copy of Personal Data Step
type: Class
subclass of: Data Step
comment: A step that provides (the data subject or other agent) with a copy of personal data.
corresponding activity: Provide Copy of Data Activity

Rectify Data Activity
type: Class
subclass of: Data Activity
comment: Is an activity that recitifies data.
corresponding step: Rectify Data Step

Rectify Data Step
type: Class
subclass of: Data Step
comment: Rectifies existing data. Rectify means to change with the intention of correction or removal of errors.
corresponding activity: Rectify Data Activity

Report Data Breach
type: Class
subclass of: Handle Data Breach Process
comment: The process of reporting after a data breach has taken place.

Sensitive Personal Data
type: Class
subclass of: PersonalData
comment: Personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation.
corresponding entity: Sensitive Data Entity

Sensitive Data Entity
type: Class
subclass of: Personal Data Entity
comment: Is an entity containing sensitive personal information.
corresponding variable: Sensitive Personal Data

Sub-Processor
type: Class
subclass of: Processor
comment: A Processor appointed under or by another Processor is a Sub-Processor.

TermsAndConditions
type: Class
subclass of: Variable
comment: Terms and Conditions of usage as provided to the user in agreement of provided service
corresponding entity: Terms and Conditions Entity

Terms and Conditions Entity
type: Class
subclass of: Entity
comment: Represents the Terms and Conditions entity.
corresponding variable: TermsAndConditions

ThirdParty
type: Class
subclass of: Agent
comment: A ThirdParty is an entity other than the Data Subject and the Data Controller.

UserIdentifier
type: Class
subclass of: PersonalData
comment: An UserIdentifier is a specific way to identify the user through a unique ID or a combination of other attributes
corresponding entity: User Identifier Entity

User Identifier Entity
type: Class
subclass of: Personal Data Entity
comment: Is an entity acting as the user identifier. Or contains an identifier.
corresponding variable: UserIdentifier

User Input Activity
type: Class
subclass of: User Interaction Activity
comment: Activity that involves the user providing an input. The input can be a choice or an action or the provision of some information.
corresponding step: User Input Step

User Input Step
type: Class
subclass of: User Interaction Step
comment: Step that involves the user providing an input. The input can be a choice or an action or the provision of some information.
corresponding activity: User Input Activity

User Interaction Activity
type: Class
subclass of: Activity
comment: Activity that involves interaction with the user.
corresponding step: User Interaction Step

User Interaction Step
type: Class
subclass of: Step
comment: Step that involves interaction from the user.
corresponding activity: User Interaction Activity

User Output Activity
type: Class
subclass of: User Interaction Activity
comment: Activity that involves providing some information (output) to the user. Output can be information given or shown, or a document, or an email, or message.
corresponding step: User Output Step

User Output Step
type: Class
subclass of: User Interaction Step
comment: Step that involves providing some information (output) to the user. Output can be information given or shown, or a document, or an email, or message.
corresponding activity: User Output Activity

Withdraw Consent Activity
type: Class
subclass of: Modify Consent Activity
comment: Is an activity that withdraws given consent. Can also term it so as to depict withdrawal as a modification of consent.
corresponding step: Consent Withdrawal Step

Lawful basis for Processing
type: Class
comment: Represents the class of Lawful basis under the GDPR. There are a total of six lawful basis according to Article 6, each represented by an instance.

Anonymised
type: NamedIndividual
comment: Anonymised represents the Anonymisation level where the data cannot be de-anonymised to retrieve personally identifiable information.

DeAnonymised
type: NamedIndividual
comment: DeAnonymised represents the Anonymisation level where the data is completely de-anonymised and contains directly accessible personally identifiable information.

PseudoAnonymised
type: NamedIndividual
comment: PseudoAnonymised represents the Anonymisation level where the data is anonymised but cannot be de-anonymised without additional data which is NOT accessible to the data-holding organisation to retrieve personally identifiable information.

PseudoOrganisationalOrganised
type: NamedIndividual
comment: PseudoOrganisationalAnonymised represents the Anonymisation level where the data is anonymised but cannot be de-anonymised without additional data which is accessible to the data-holding organisation to recreate the de-anonymised information.