Consent Ontology
type: Ontology
version IRI: consent v2
abstract: The General Data Protection Regulations (GDPR) imposes greater restrictions on obtaining valid user consents involving the use of personal data. A semantic model of consent can make the concepts of consent explicit, estab- lish a common understanding and enable re-use of consent. Therefore, forming a semantic model of consent will satisfy the GDPR requirements of specificity and unambiguity and is an important step towards ensuring compliance. In this paper, we discuss obtaining an open vocabulary of expressing consent leverag- ing existing semantic models of provenance, processes, permission and obliga- tions. We also present a reference architecture for the management of data pro- cessing according to consent permission. This data management model utilizes the open vocabulary of consent and incorporates the change of context into the data processing activity. By identifying and incorporating changes to the rela- tional context between data controllers and data subjects into the data pro- cessing model, it aims to improve the integration of data management across different information systems specifically adhering to the GDPR and helping controllers to demonstrate compliance.
created: 2017-08-01
creator: Harshvardhan J. Pandit
creator: Kaniz Fatema
license: https://creativecommons.org/licenses/by/4.0/
modified: 2018-08-09
preferred namespace prefix: consent
comment: The consent ontology presents a way to define and describe consent in terms relevant to the GDPR.

activity_has_purpose
type: ObjectProperty
domain: Action
range: Purpose

consent_given_at
type: ObjectProperty
domain: Consent
range: Context

consent_given_by
type: ObjectProperty
domain: Consent
range: ConsentingParty

consent_given_for
type: ObjectProperty
domain: Consent
range: Permission

data_has_a_category
type: ObjectProperty
domain: Data
range: Category

data_has_a_format
type: ObjectProperty
domain: Data
range: ConsentFormat

permission_given_for_activity
type: ObjectProperty
domain: Permission
range: Action

permission_given_for_condition
type: ObjectProperty
domain: Permission
range: Condition

permission_given_for_data
type: ObjectProperty
domain: Permission
range: Data

permission_given_to
type: ObjectProperty
domain: Permission
range: AllowedParty

Action
type: Class
subclass of: Permission
comment: 'action' is used to identify what action is permitted by the consent.
definition: 'action' defines what action is permitted by the consent.

Activity
type: Class
subclass of: ConsentObligation
comment: This term 'activity' is used to define what to do when some 'event' occures related to consent. For example, when the consent expires (event), then re-solicit consent (activity) or when the consent is revoked (event) then stop processing (activity).
definition: 'Activity' defines what activiy is required to do when an event occures due to Consent Obligation has an event and an activity. When that even occures that activity is required to be executed by the 'Consent Obligation'

AggregatedAnalysis
type: Class
subclass of: Purpose
definition: 'aggregated analysis' is a subtype of 'purpose'. It means the data are allowed for analysis and the analysis can aggregated data from other sources as well.

AllowedParty
type: Class
subclass of: Party
comment: 'Allowed party' is used to indicate who the party (person or organisation) is that is allowed (or denied )to perform certain action on the particular data by this consent.
definition: 'Allowed party' defines the party (person or organisation) that is allowed (or denied )to perform certain action on the particular data by this consent.

AppBased
type: Class
subclass of: ConsentFormat
comment: It identifies if the consent is taken in the form of mobile application.
definition: It defines if the consent is taken in the form of mobile application.

Audio
type: Class
subclass of: ConsentFormat
comment: It is used to identify if the consent is taken in the form of audio.
definition: It identifies if the consent is taken in the form of audio.

AudioData
type: Class
subclass of: SingleFormatData
definition: 'audio data' defines the format of data is audio.

BusinessType
type: Class
subclass of: ShareWith
comment: 'business type' indicates the type of business the data is permitted to share by this consent.
definition: 'business type' defines with what type of business the data is permitted to share by this consent.

Category
type: Class
subclass of: Data
comment: 'category' identifies the category of data such as personal data (sensitive or non sensitive) / non personal data etc.
definition: 'category' defines the category of data on which this consent applies.

Collect
type: Class
subclass of: PermittedAction
comment: 'collect' indicates the action to collect data. This is used to identify if data collection is allowed by the consent's permission.
definition: 'collect' defines the action to collect data.

Condition
type: Class
subclass of: Permission
comment: 'condition' is used to mention if there is any condition based on which the permission mentioned in the consent will be applicable. In other words the permission mentioned in the consent is applicable only when the conditions are met.
definition: 'condition' defines based on what condition the permission is applicable.

Consent
type: Class
definition: consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;

ConsentFormat
type: Class
subclass of: Context
comment: It is used to record at what format the consent was obtained.
definition: 'consent format' defines the format was used to obtain the consent.

ConsentObligation
type: Class
definition: Obligations are the actions to be performated when an event occures. 'consent obligation' defines the obligation related to consent, i.e. it defines what action to perform when an event related to consent occures. For example, when the consent expires (event), then re-solicit consent (activity) or when the consent is revoked (event) then stop processing (activity).

ConsentingParty
type: Class
subclass of: Party
definition: 'consenting party' is the person who is giving the consent.

Context
type: Class
comment: Context is used to keep track of the contextual information while giving, modifying or revoking consent.
definition: It defines at what context the consent was given.

Data
type: Class
subclass of: Permission
comment: 'data' identifies to what data this consent is applicable.
definition: 'data' defines what data is premitted by this consent.

DataFormat
type: Class
subclass of: Data
comment: 'data format' identifies the format data for which this consent is applicable.
definition: 'data format' defines the format of data for which this consent is applicable.

DataSubject
type: Class
subclass of: ConsentingParty
definition: 'data subject' is the person who is identified by the personal data or the data is about that person.

DataSubjectRepresentative
type: Class
subclass of: ConsentingParty
definition: 'data subject's representative' is the person who is consenting on behalf of the data subject.

DeniedAction
type: Class
subclass of: Action
comment: 'denied action' indicates the action that is denied by the consent.
definition: 'denied action' defines what action is denied by the consent.

EmailMarketing
type: Class
subclass of: Marketing
definition: 'email marketing' is a subtype of purpose 'marketing.'

Event
type: Class
subclass of: ConsentObligation
definition: 'event' defines the event based on which an activity is required to do. Consent Obligation has an event and an activity. When that even occures that activity is required to be executed by the 'Consent Obligation'

Examine
type: Class
subclass of: Use
definition: 'examine' is a subtype of action 'use'.

ForProfit
type: Class
subclass of: BusinessType
definition: 'for profit' defines the business type of the organisation with whom the data is permitted to share is for profit.

GeneticData
type: Class
subclass of: PersonalData
comment: 'genetic data' is a subtype of 'personal data'.
definition: 'genetic data' identifies the of 'category' of data applicable by this consent is genetic data.

GrantingContext
type: Class
subclass of: Context
comment: 'granting context' says at what context the consent was given.
definition: 'granting context' defines at what context the consent was given.

HealthData
type: Class
subclass of: PersonalData
comment: 'health data' identifies the of 'category' of data applicable by this consent is health data.
comment: 'health data' is a subtype of 'personal data'.

InformationExchanged
type: Class
subclass of: Context
comment: 'information exchanged' says what information was provided while the consent was given.
definition: 'information exchanged' is used to note the information that was provided while the consent was given.

LegalRepresentativeOfDataSubject
type: Class
subclass of: DataSubjectRepresentative
definition: 'legal representative of data subject' is the person who is legally consenting on behalf of the data subject.

Location
type: Class
subclass of: Context
comment: 'location' says where the consent is given.
definition: 'location' defines the context of where the consent is given.

Marketing
type: Class
subclass of: Purpose
definition: 'marketing' is a subtype of purpose.

MarketingViaPhone
type: Class
subclass of: Marketing
definition: 'phone marketing' is a subtype of purpose 'marketing.'

MarketingViaPost
type: Class
subclass of: Marketing
definition: 'marketing by post' is a subtype of purpose marketing.

MarketingViaText
type: Class
subclass of: Marketing
definition: 'marketing by text' is a subtype of purpose marketing.

MixedFormatData
type: Class
subclass of: DataFormat
comment: 'mixed format data' indicates if the data being consented has a mixed format i.e. the data comtains various format. An example of mixed format data can be a combination of both audio and text format of data.
definition: 'mixed format data' defines if the data being consented has a mixed format. mixed format data combines the data of various format.

ModificationContext
type: Class
subclass of: Context
comment: 'modification context' is used to indicate at what context the consent is modified.
definition: 'modification context' defines at what context the consent is modified.

Modify
type: Class
subclass of: Use
definition: 'modify' is a subtype of action 'use'.

NameOfController
type: Class
subclass of: InformationExchanged

NonPersonalData
type: Class
subclass of: Category
comment: 'non personal data' is a subtype of 'category' of data.
definition: 'non personal data' identifies that the of 'category' of data applicable by this consent is not personal data.

NonProfit
type: Class
subclass of: BusinessType
definition: 'non profit' defines the business type of the organisation with whom the data is permitted to share is non profit.

OnlineForm
type: Class
subclass of: ConsentFormat
definition: It identifies if the consent is taken in the form of an online form.

OnlineOptInOption
type: Class
subclass of: ConsentFormat
definition: It identifies if the consent is taken as an online opt-in option.

Organisation
type: Class
subclass of: ShareWith
definition: 'organisation' identifies the organisation with whom the data is permitted to share.

OrganisationLocation
type: Class
subclass of: Organisation
definition: 'organisation's location' identifies the location of the organisation that is permitted by the consent.

OrganisationName
type: Class
subclass of: Organisation
definition: 'organisation's name' identifies the name of the organisation that is permitted by the consent.

Paper
type: Class
subclass of: ConsentFormat
definition: It identifies if the consent is taken on paper.

ParentOfDataSubject
type: Class
subclass of: DataSubjectRepresentative
definition: 'parent of data subject' is the person who is the parent of data subject and consenting on behalf of the data subject where the data subject is a child.

PartyToShareDataWith
type: Class
subclass of: InformationExchanged

Permission
type: Class
comment: 'permission' is used to identify the authorisation granted by the consent.
definition: 'permission' defines the authorisation granted by the consent.

PermittedAction
type: Class
subclass of: Action
comment: 'permitted action' indicates the action that is allowed by the consent.
definition: 'permitted action' defines the action that is allowed by the consent.

PersonalData
type: Class
subclass of: Category
comment: 'personal data' is a subtype of 'category' of data.
definition: 'personal data' identifies the of 'category' of data applicable by this consent is personal data.

PictureData
type: Class
subclass of: SingleFormatData
definition: 'picture data' defines the format of data is image.

Purpose
type: Class
subclass of: Action
definition: 'purpose' indicates for what purpose the action is allowed by the consent on the data

Read
type: Class
subclass of: Use
definition: 'read' is a subtype of action 'use'.

RetentionTime
type: Class
subclass of: InformationExchanged

RevokingContext
type: Class
subclass of: Context
comment: 'revoking context' is used to indicate at what context the consent is revoked.
definition: 'revoking context' defines at what context the consent is revoked.

ScientificPurpose
type: Class
subclass of: Purpose
definition: 'scientific purpose' is a subtype of purpose.

ShareWith
type: Class
subclass of: PermittedAction
comment: 'share with' identifies who is allowed to share the data with by the consent.
definition: 'share with' defines with whom the consent permits to share data.

SingleFormatData
type: Class
subclass of: DataFormat
comment: 'singe format data' indicates if the data being consented has a single format. An example of mixed format data can be a combination of data of either audio and text format of data, not a combination of these.
definition: 'single format data' defines if the data being consented has a single format.

SoloAnalysis
type: Class
subclass of: Purpose
definition: 'solo analysis' is a subtype of 'purpose'. It means the data are allowed for analysis from this single source only, it can not be agreegate with data from other sources.

Store
type: Class
subclass of: PermittedAction
comment: 'store' indicates the action to store data. This is used to identify if data storage is allowed by the consent's permission.
definition: 'store' defines the action to store data.

TextData
type: Class
subclass of: SingleFormatData
definition: 'text data' defines the format of data is text.

Time
type: Class
subclass of: Context
comment: 'time' says when the consent is given.
definition: 'time' defines the context of when the consent is given.

Use
type: Class
subclass of: PermittedAction
comment: 'use' indicates the action to use data. This is used to identify if data use is allowed by the consent's permission.
definition: 'use' indicates the action to use data.

ValidityTime
type: Class
subclass of: Permission
definition: 'validity time' defines the validity time of consent. The consent is valid only within this validity time.

Video
type: Class
subclass of: ConsentFormat
definition: It identifies if the consent is taken in the form of video.

VideoData
type: Class
subclass of: SingleFormatData
definition: 'video data' defines the format of data is video.