search

w3c / dpv

Data Privacy Vocabularies and Controls CG (DPVCG)
https://w3id.org/dpv
Other
42 stars 25 forks source link

Add legal modules for EU countries with DPAs and laws #48

Open coolharsh55 opened 2 years ago

coolharsh55 commented 2 years ago

With the changes in 2.0, to represent concepts such as law and DPA needs a new legal module (i.e. a subdirectory within /legal) representing the jurisdiction. The information for this e.g. from GDPRHub has a page with DPAs - https://gdprhub.eu/index.php?title=Category:DPA will be put in separate spreadsheets and used to create individual RDF and HTML files for each jurisdiction. E.g. see existing extensions for Ireland, Germany, US, etc.

Work needed now is to populate the spreadsheet https://docs.google.com/spreadsheets/d/1pqGE67I5kyoGrkhMItJbi18VLguVqE1jVecnfki1ujY/edit?gid=2007379443#gid=2007379443 with this info, update 100, vocab_management, and then generate RDF and HTML.

older issue: Current documentation (HTML) has some concepts showing association with relevant terms, but this is inconsistent. E.g. https://w3id.org/dpv/dpv-legal#DPA-AT shows link to relevant jurisdiction and laws, but the jurisdiction https://w3id.org/dpv/dpv-legal#AT does not show either the law or the authority. To fix,

  1. Make changes in spreadsheet to have this information present there
  2. Make changes in 002*.py to serialise this in RDF
  3. Make changes in 003*.py to provide these relations in the HTML tables.

NOTE: It would be better in the long term to refactor the entire term extraction process to handle arbitrary relations, as otherwise this would mean custom code for each and every sheet that has a non-uniform structure.

coolharsh55 commented 3 months ago

Two regressions:

  1. We no longer have all DPAs (e.g. DPA-AT) declared as they now reside within the jurisdictional extensions (e.g. /legal/at is needed)
  2. Where to store the triple loc:AT dpv:hasApplicableLaw legal-eu:law-GDPR? Preference would be to store it within the AT extension.
besteves4 commented 3 months ago

I wonder whether it would be nice to have a KG with this, e.g., on https://w3id.org/dpv/kg, where all of these triples, e.g., locations <-> laws, legal basis <-> rights, and so on, are available instead of being spread out in different extensions.

coolharsh55 commented 3 months ago

@besteves4 it would be redundant to provide this since such a graph can be constructed automatically by importing all legal extensions? Also, the legal.ttl contains some triples - e.g. authorities and laws, but legal basis to rights mappings are not present as these are defined within specific jurisdictions.

coolharsh55 commented 3 months ago

We can provide in legal-eu.ttl all the legal bases, rights, mappings from legal basis to rights, laws, authorities - its the same jurisdiction so there should be no conflicts or issues. What do you think?

ghurlbot commented 3 months ago

Comment by @coolharsh55 via IRC channel #dpvcg on irc.w3.org

fix this in time for 2.0 release

coolharsh55 commented 2 months ago

Added association between dpv:Authority and dpv:Law for the 2.0 release. For 2.1, more extensions have to be created to represent specific authorities and laws and associations within them - which will then be consolidated into the LEGAL extension RDF and HTML for convenience.

coolharsh55 commented 2 months ago

GDPRHub has a page with DPAs - https://gdprhub.eu/index.php?title=Category:DPA

coolharsh55 commented 2 months ago

Added legal extensions for EU/EEA members with DPAs defined in 314f098 - laws are not defined but are quite trivial to add in (need a name, link, and date added to spreadsheet).