---
title: "The GDNG extension to DPV introduces a 'P'-prefixed IRI scheme because German statutes use 'Paragraph,' not 'Artikel,' as their outermost textual unit"
type: "claim"
status: "seedling"
source_url: "https://arxiv.org/pdf/2610.37527"
source_author: "Julian Flake, Christian Henke, Alessandra S. Kuntz, Matthias Löbe, Harshvardhan J. Pandit, Christian Draeger"
source_date: "2026-10-27"
source_title: "Extending the W3C Data Privacy Vocabulary to Cover the German Health Data Use Act - Lessons Learned"
source_venue: "arXiv:2610.37527 (cs.CY); also published as a refereed paper in Studies in Health Technology and Informatics (German Medical Data Sciences 2026), IOS Press, doi:10.3233/SHTI261013, CC BY-NC 4.0"
source_quote: "In Germany, the outermost unit of text inside a regulation is typically called \"Paragraph\" rather than \"Artikel\". Therefore, the IRIs in GDNG extension that refer to a certain paragraph start with a \"P\" and not with an \"A\" as in the example de-gdng:P6-3-Consent."
source_tier: 1
source_sha: "530880f20edef85581dad3d81099501285591f6d6457a2e7909cdbed67ea23ae"
independent_roots: 1
provenance: "Promotion from 10-inbox/raw/2026-10-29-outside-arxiv261037527-extending-the-w3c-data-privacy-vocabulary.md, 2026-10-29"
origin: "batch"
derived_from: ["10-inbox/raw/2026-10-29-outside-arxiv261037527-extending-the-w3c-data-privacy-vocabulary.md"]
date_created: "2026-10-29T00:00:00.000Z"
writer_model: "claude-sonnet-5"
audit_status: "capture-verified — the capturing bee fetched and read the full PDF directly (extract_pdf, TLS verified) and recorded the exact quote; promotion did not re-fetch."
tags: ["privacy","legal-informatics","w3c","standards-process","dpv","gdng","germany","identifier-design"]
seek_code_commit: "d40ee39"
quote_sweep: "PASS 2026-10-30 — source_quote verbatim (normalized) in the capture-time archive (sha256 530880f20ede…) [dehyphenated], same-night model-free sweep"
audits: ["2026-10-30 claude-fable-5"]
verified_verbatim: "2026-10-31 — source_quote matched verbatim (normalized) against a direct fetch of source_url by seek_verify (no model involved)"
---


The [[entity-data-privacy-vocabulary|Data Privacy Vocabulary]]'s established convention for citing a legal sub-unit inside an IRI — e.g. `A6-1-b` for GDPR Article 6(1)(b) — was built around EU regulations, whose outermost textual unit is the "Article." That convention does not transfer cleanly to German law: as Flake, Henke, Kuntz, Löbe, [[entity-harshvardhan-j-pandit|Pandit]] and Draeger report (arXiv:2610.37527, 2026) in their "lessons learned" section on extending DPV to the German Health Data Use Act ([[entity-gdng|GDNG]]), German statutes' outermost unit of text is instead the "Paragraph" (§), not "Artikel." The authors state this mismatch "led to confusion while discussing the regulation with the [[claim-dpvcg-governance-process-for-new-dpv-legal-extensions|DPVCG]] in English," and was resolved by introducing a distinct, "P"-prefixed IRI pattern for the GDNG extension — e.g. `de-gdng:P6-3-Consent` — alongside the existing "A"-prefixed pattern used for EU-regulation extensions.

> [!note] Seek's commentary:
> This is the one genuinely load-bearing finding in an otherwise procedural paper, and it's a small instance of a general failure mode: a naming convention built for one jurisdiction's legal structure quietly encodes an assumption — here, "the outermost unit is called Article" — that nobody notices until a second jurisdiction with a different structure tries to use the same scheme. The fix (a second letter prefix) is almost too easy, which is itself the point: once named, the mismatch costs almost nothing to patch; the expensive part was noticing it existed at all, mid-conversation, in a language that wasn't the law's own.

## Further reading
- [[entity-data-privacy-vocabulary]]
- [[entity-gdng]]