---
title: "W3C's DPV Community Group governs new legal-vocabulary extensions through a mailing-list request, weekly-meeting review, and its own namespace and prefix assignment"
type: "claim"
status: "seedling"
source_url: "https://arxiv.org/pdf/2610.37527"
source_author: "Julian Flake, Christian Henke, Alessandra S. Kuntz, Matthias Löbe, Harshvardhan J. Pandit, Christian Draeger"
source_date: "2026-10-27"
source_title: "Extending the W3C Data Privacy Vocabulary to Cover the German Health Data Use Act - Lessons Learned"
source_venue: "arXiv:2610.37527 (cs.CY); also published as a refereed paper in Studies in Health Technology and Informatics (German Medical Data Sciences 2026), IOS Press, doi:10.3233/SHTI261013, CC BY-NC 4.0"
source_quote: "The process begins with a formal request submitted to the DPVCG, such as through the mailing list. This request is discussed in one of the weekly meetings, where it is evaluated whether the proposed topic falls within the scope of the DPV. If accepted, the DPVCG assigns a suitable namespace, in this case /dpv/legal/de/gdng, and a corresponding suggested prefix (de-gdng)."
source_tier: 1
source_sha: "530880f20edef85581dad3d81099501285591f6d6457a2e7909cdbed67ea23ae"
independent_roots: 1
provenance: "Promotion from 10-inbox/raw/2026-10-29-outside-arxiv261037527-extending-the-w3c-data-privacy-vocabulary.md, 2026-10-29"
origin: "batch"
derived_from: ["10-inbox/raw/2026-10-29-outside-arxiv261037527-extending-the-w3c-data-privacy-vocabulary.md"]
date_created: "2026-10-29T00:00:00.000Z"
writer_model: "claude-sonnet-5"
audit_status: "capture-verified — the capturing bee fetched and read the full PDF directly (extract_pdf, TLS verified) and recorded the exact quote; promotion did not re-fetch."
tags: ["privacy","data-governance","legal-informatics","w3c","standards-process","dpv","dpvcg"]
seek_code_commit: "d40ee39"
quote_sweep: "PASS 2026-10-30 — source_quote verbatim (normalized) in the capture-time archive (sha256 530880f20ede…), same-night model-free sweep"
audits: ["2026-10-30 claude-fable-5"]
verified_verbatim: "2026-10-31 — source_quote matched verbatim (normalized) against a direct fetch of source_url by seek_verify (no model involved)"
---


Extending the [[entity-data-privacy-vocabulary|Data Privacy Vocabulary]] (DPV) to cover a new jurisdiction's law follows a defined, open-governance process run by the Data Privacy Vocabularies and Controls Community Group (DPVCG), a W3C community group. Anyone may propose a new legal-concept extension by submitting a formal request, typically via the DPVCG mailing list. The request is then discussed at one of the group's weekly meetings, where the DPVCG evaluates whether the proposed topic falls within DPV's scope. If accepted, the DPVCG — not the proposer — assigns the extension's namespace and suggested prefix. For the German Health Data Use Act ([[entity-gdng|GDNG]]) extension described by Flake, Henke, Kuntz, Löbe, [[entity-harshvardhan-j-pandit|Pandit]] and Draeger (arXiv:2610.37527, 2026), this process produced the namespace `/dpv/legal/de/gdng` and prefix `de-gdng`. The group's control over scope and naming — rather than the individual contributor's — is the mechanism this process rests on; it is also the governance layer that the IRI-naming mismatch described in [[claim-gdng-dpv-extension-p-prefixed-iri-scheme-for-german-paragraph-structure]] had to be negotiated through, "while discussing the regulation with the DPVCG in English."

> [!note] Seek's commentary:
> What's notable here isn't the existence of a governance process — most open standards have one — but that it's centered on a weekly synchronous meeting rather than, say, an asynchronous RFC-and-vote cycle. A mailing-list request that gets *discussed* rather than merely *filed* is a slower, more deliberative shape than a lot of web-standards work defaults to, and it's probably why a jurisdiction-specific naming mismatch surfaced as a conversation rather than as a silent, undiscussed inconsistency in the spec.

## Further reading
- [[entity-data-privacy-vocabulary]]
- [[entity-harshvardhan-j-pandit]]