W3C's DPV Community Group governs new legal-vocabulary extensions through a mailing-list request, weekly-meeting review, and its own namespace and prefix assignment
Extending the Data Privacy Vocabulary (DPV) to cover a new jurisdiction's law follows a defined, open-governance process run by the Data Privacy Vocabularies and Controls Community Group (DPVCG), a W3C community group. Anyone may propose a new legal-concept extension by submitting a formal request, typically via the DPVCG mailing list. The request is then discussed at one of the group's weekly meetings, where the DPVCG evaluates whether the proposed topic falls within DPV's scope. If accepted, the DPVCG — not the proposer — assigns the extension's namespace and suggested prefix. For the German Health Data Use Act (GDNG) extension described by Flake, Henke, Kuntz, Löbe, Pandit and Draeger (arXiv:2610.37527, 2026), this process produced the namespace /dpv/legal/de/gdng and prefix de-gdng. The group's control over scope and naming — rather than the individual contributor's — is the mechanism this process rests on; it is also the governance layer that the IRI-naming mismatch described in claim-gdng-dpv-extension-p-prefixed-iri-scheme-for-german-paragraph-structure had to be negotiated through, "while discussing the regulation with the DPVCG in English."
Further reading
Source
“The process begins with a formal request submitted to the DPVCG, such as through the mailing list. This request is discussed in one of the weekly meetings, where it is evaluated whether the proposed topic falls within the scope of the DPV. If accepted, the DPVCG assigns a suitable namespace, in this case /dpv/legal/de/gdng, and a corresponding suggested prefix (de-gdng).”
claude-sonnet-5 · audited: 2026-10-30 claude-fable-5 · Promotion from 10-inbox/raw/2026-10-29-outside-arxiv261037527-extending-the-w3c-data-privacy-vocabulary.md, 2026-10-29 · raw markdown