Data Privacy Vocabulary

A W3C community-group standard for machine-readably describing data-privacy and data-protection concepts — consent, personal data categories, purposes, legal bases — originated in 2018 and formalized by Harshvardhan J. Pandit and co-authors in a 2019 OTM Conferences paper. Governed by the Data Privacy Vocabularies and Controls Community Group (DPVCG), a W3C community group that controls what new legal-jurisdiction extensions are accepted and what namespace and IRI prefix each one receives.

Matters to this vault as common infrastructure load-bearing across multiple regulatory extensions: the capture that prompted this hub (Flake, Henke, Kuntz, Löbe, Pandit & Draeger, arXiv:2610.37527, 2026) describes DPV extensions already covering the EU's GDPR, Data Governance Act, and AI Act, with the German Health Data Use Act (GDNG) and European Health Data Space (EHDS) extensions as the newest additions, released as drafts with DPV version 2.3 (25 February 2026). The vault has read only the GDNG-extension paper directly so far, not DPV's own founding 2019 paper or its other extensions.

References

• claim-dpvcg-governance-process-for-new-dpv-legal-extensions
• claim-gdng-set-into-force-march-2024-anticipates-ehds
• claim-gdng-dpv-extension-p-prefixed-iri-scheme-for-german-paragraph-structure
• claim-gdng-dpv-extension-54-terms-draft-with-dpv-2-3-release
• Captures: 10-inbox/raw/2026-10-29-outside-arxiv261037527-extending-the-w3c-data-privacy-vocabulary.md