Consent Ontology
type: Ontology
version IRI: consent v1
imports: prov.owl
abstract: The General Data Protection Regulations (GDPR) imposes greater restrictions on obtaining valid user consents involving the use of personal data. A semantic model of consent can make the concepts of consent explicit, estab- lish a common understanding and enable re-use of consent. Therefore, forming a semantic model of consent will satisfy the GDPR requirements of specificity and unambiguity and is an important step towards ensuring compliance. In this paper, we discuss obtaining an open vocabulary of expressing consent leverag- ing existing semantic models of provenance, processes, permission and obliga- tions. We also present a reference architecture for the management of data pro- cessing according to consent permission. This data management model utilizes the open vocabulary of consent and incorporates the change of context into the data processing activity. By identifying and incorporating changes to the rela- tional context between data controllers and data subjects into the data pro- cessing model, it aims to improve the integration of data management across different information systems specifically adhering to the GDPR and helping controllers to demonstrate compliance.
created: 2017-08-01
license: https://creativecommons.org/licenses/by/4.0/
modified: 2017-10-21
preferred namespace prefix: Consent Ontology
preferred namespace prefix: consent
comment: The consent ontology presents a way to define and describe consent in terms relevant to the GDPR.

activity has purpose
type: ObjectProperty
domain: action
range: purpose

consent given at
type: ObjectProperty
domain: consent
range: 'Context'

consent given by
type: ObjectProperty
domain: consent
range: consenting party

consent given for
type: ObjectProperty
domain: consent
range: permission

data has a category
type: ObjectProperty
domain: data
range: category

data has a format
type: ObjectProperty
domain: data
range: consent format

permission given for activity
type: ObjectProperty
domain: permission
range: action

permission given for condition
type: ObjectProperty
domain: permission
range: condition

permission given for data
type: ObjectProperty
domain: permission
range: data

permission given to
type: ObjectProperty
domain: permission
range: allowed party

action
type: Class
subclass of: permission
comment: 'action' is used to identify what action is permitted by the consent.
definition: 'action' defines what action is permitted by the consent.

activity
type: Class
subclass of: consent obligation
comment: This term 'activity' is used to define what to do when some 'event' occures related to consent. For example, when the consent expires (event), then re-solicit consent (activity) or when the consent is revoked (event) then stop processing (activity).
definition: 'Activity' defines what activiy is required to do when an event occures due to Consent Obligation has an event and an activity. When that even occures that activity is required to be executed by the 'Consent Obligation'

agreegated analysis
type: Class
subclass of: purpose
definition: 'agreegated analysis' is a subtype of 'purpose'. It means the data are allowed for analysis and the analysis can agreegate data from other sources as well.

allowed party
type: Class
subclass of: Agent
comment: 'Allowed party' is used to indicate who the party (person or organisation) is that is allowed (or denied )to perform certain action on the particular data by this consent.
definition: 'Allowed party' defines the party (person or organisation) that is allowed (or denied )to perform certain action on the particular data by this consent.

mobile application based
type: Class
subclass of: consent format
comment: It identifies if the consent is taken in the form of mobile application.
definition: It defines if the consent is taken in the form of mobile application.

audio
type: Class
subclass of: consent format
comment: It is used to identify if the consent is taken in the form of audio.
definition: It identifies if the consent is taken in the form of audio.

audio data
type: Class
subclass of: single format data
definition: 'audio data' defines the format of data is audio.

business type
type: Class
subclass of: share with
comment: 'business type' indicates the type of business the data is permitted to share by this consent.
definition: 'business type' defines with what type of business the data is permitted to share by this consent.

category
type: Class
subclass of: data
comment: 'category' identifies the category of data such as personal data (sensitive or non sensitive) / non personal data etc.
definition: 'category' defines the category of data on which this consent applies.

collect
type: Class
subclass of: permitted action
comment: 'collect' indicates the action to collect data. This is used to identify if data collection is allowed by the consent's permission.
definition: 'collect' defines the action to collect data.

condition
type: Class
subclass of: permission
comment: 'condition' is used to mention if there is any condition based on which the permission mentioned in the consent will be applicable. In other words the permission mentioned in the consent is applicable only when the conditions are met.
definition: 'condition' defines based on what condition the permission is applicable.

consent
type: Class
subclass of: Entity
is defined by: ‘consent’ of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;

consent format
type: Class
subclass of: 'Context'
comment: It is used to record at what format the consent was obtained.
definition: 'consent format' defines the format was used to obtain the consent.

consent obligation
type: Class
subclass of: Entity
definition: Obligations are the actions to be performated when an event occures. 'consent obligation' defines the obligation related to consent, i.e. it defines what action to perform when an event related to consent occures. For example, when the consent expires (event), then re-solicit consent (activity) or when the consent is revoked (event) then stop processing (activity).

consenting party
type: Class
subclass of: Agent
definition: 'consenting party' is the person who is giving the consent.

'Context'
type: Class
subclass of: Entity
comment: Context is used to keep track of the contextual information while giving, modifying or revoking consent.
definition: It defines at what context the consent was given.

data
type: Class
subclass of: permission
comment: 'data' identifies to what data this consent is applicable.
definition: 'data' defines what data is premitted by this consent.

data format
type: Class
subclass of: data
comment: 'data format' identifies the format data for which this consent is applicable.
definition: 'data format' defines the format of data for which this consent is applicable.

data subject
type: Class
subclass of: consenting party
definition: 'data subject' is the person who is identified by the personal data or the data is about that person.

data subject's representative
type: Class
subclass of: consenting party
definition: 'data subject's representative' is the person who is consenting on behalf of the data subject.

denied action
type: Class
subclass of: action
comment: 'denied action' indicates the action that is denied by the consent.
definition: 'denied action' defines what action is denied by the consent.

email marketing
type: Class
subclass of: marketing
definition: 'email marketing' is a subtype of purpose 'marketing.'

event
type: Class
subclass of: consent obligation
definition: 'event' defines the event based on which an activity is required to do. Consent Obligation has an event and an activity. When that even occures that activity is required to be executed by the 'Consent Obligation'

examine
type: Class
subclass of: use
definition: 'examine' is a subtype of action 'use'.

for profit
type: Class
subclass of: business type
definition: 'for profit' defines the business type of the organisation with whom the data is permitted to share is for profit.

genetic data
type: Class
subclass of: personal data
comment: 'genetic data' is a subtype of 'personal data'.
definition: 'genetic data' identifies the of 'category' of data applicable by this consent is genetic data.

granting context
type: Class
subclass of: 'Context'
comment: 'granting context' says at what context the consent was given.
definition: 'granting context' defines at what context the consent was given.

health data
type: Class
subclass of: personal data
comment: 'health data' identifies the of 'category' of data applicable by this consent is health data.
comment: 'health data' is a subtype of 'personal data'.

information exchanged
type: Class
subclass of: 'Context'
comment: 'information exchanged' says what information was provided while the consent was given.
definition: 'information exchanged' is used to note the information that was provided while the consent was given.

legal representative of data subject
type: Class
subclass of: data subject's representative
definition: 'legal representative of data subject' is the person who is legally consenting on behalf of the data subject.

location
type: Class
subclass of: 'Context'
comment: 'location' says where the consent is given.
definition: 'location' defines the context of where the consent is given.

marketing
type: Class
subclass of: purpose
definition: 'marketing' is a subtype of purpose.

phone marketing
type: Class
subclass of: marketing
definition: 'phone marketing' is a subtype of purpose 'marketing.'

marketing by post
type: Class
subclass of: marketing
definition: 'marketing by post' is a subtype of purpose marketing.

marketing by text
type: Class
subclass of: marketing
definition: 'marketing by text' is a subtype of purpose marketing.

mixed format data
type: Class
subclass of: data format
comment: 'mixed format data' indicates if the data being consented has a mixed format i.e. the data comtains various format. An example of mixed format data can be a combination of data of both audio and text format of data.
definition: 'mixed format data' defines if the data being consented has a mixed format. mixed format data combines the data of various format.

modification context
type: Class
subclass of: 'Context'
comment: 'modification context' is used to indicate at what context the consent is modified.
definition: 'modification context' defines at what context the consent is modified.

modify
type: Class
subclass of: use
definition: 'modify' is a subtype of action 'use'.

name of controller
type: Class
subclass of: information exchanged

non personal data
type: Class
subclass of: category
comment: 'non personal data' is a subtype of 'category' of data.
definition: 'non personal data' identifies the of 'category' of data applicable by this consent is not personal data.

non profit
type: Class
subclass of: business type
definition: 'non profit' defines the business type of the organisation with whom the data is permitted to share is non profit.

online form
type: Class
subclass of: consent format
definition: It identifies if the consent is taken in the form of online form.

online opt in option
type: Class
subclass of: consent format
definition: It identifies if the consent is taken as an online opt-in option.

organisation
type: Class
subclass of: share with
definition: 'organisation' identifies the organisation with whom the data is permitted to share.

organisation's location
type: Class
subclass of: organisation
definition: 'organisation's location' identifies the location of the organisation that is permitted by the consent.

organisation's name
type: Class
subclass of: organisation
definition: 'organisation's name' identifies the name of the organisation that is permitted by the consent.

paper
type: Class
subclass of: consent format
definition: It identifies if the consent is taken on paper.

parent of data subject
type: Class
subclass of: data subject's representative
definition: 'parent of data subject' is the person who is the parent of data subject and consenting on behalf of the data subject where the data subject is a child.

party to share data with
type: Class
subclass of: information exchanged

permission
type: Class
subclass of: Entity
comment: 'permission' is used to identify the authorisation granted by the consent.
definition: 'permission' defines the authorisation granted by the consent.

permitted action
type: Class
subclass of: action
comment: 'permitted action' indicates the action that is allowed by the consent.
definition: 'permitted action' defines the action that is allowed by the consent.

personal data
type: Class
subclass of: category
comment: 'personal data' is a subtype of 'category' of data.
definition: 'personal data' identifies the of 'category' of data applicable by this consent is personal data.

picture data
type: Class
subclass of: single format data
definition: 'picture data' defines the format of data is image.

purpose
type: Class
subclass of: action
definition: 'purpose' indicates for what purpose the action is allowed by the consent on the data

read
type: Class
subclass of: use
definition: 'read' is a subtype of action 'use'.

retention time
type: Class
subclass of: information exchanged

revoking context
type: Class
subclass of: 'Context'
comment: 'revoking context' is used to indicate at what context the consent is revoked.
definition: 'revoking context' defines at what context the consent is revoked.

scientific purpose
type: Class
subclass of: purpose
definition: 'scientific purpose' is a subtype of purpose.

share with
type: Class
subclass of: permitted action
comment: 'share with' identifies who is allowed to share the data with by the consent.
definition: 'share with' defines with whom the consent permits to share data.

single format data
type: Class
subclass of: data format
comment: 'singe format data' indicates if the data being consented has a single format. An example of mixed format data can be a combination of data of either audio and text format of data, not a combination of these.
definition: 'single format data' defines if the data being consented has a single format.

solo analysis
type: Class
subclass of: purpose
definition: 'solo analysis' is a subtype of 'purpose'. It means the data are allowed for analysis from this single source only, it can not be agreegate with data from other sources.

store
type: Class
subclass of: permitted action
comment: 'store' indicates the action to store data. This is used to identify if data storage is allowed by the consent's permission.
definition: 'store' defines the action to store data.

text data
type: Class
subclass of: single format data
definition: 'text data' defines the format of data is text.

time
type: Class
subclass of: 'Context'
comment: 'time' says when the consent is given.
definition: 'time' defines the context of when the consent is given.

use
type: Class
subclass of: permitted action
comment: 'use' indicates the action to use data. This is used to identify if data use is allowed by the consent's permission.
definition: 'use' indicates the action to use data.

validity time
type: Class
subclass of: permission
definition: 'validity time' defines the validity time of consent. The consent is valid only within this validity time.

video
type: Class
subclass of: consent format
definition: It identifies if the consent is taken in the form of video.

video data
type: Class
subclass of: single format data
definition: 'video data' defines the format of data is video.