diff --git a/mkdocs/docs/.DS_Store b/mkdocs/docs/.DS_Store index 64b23712..3ac8bdfa 100644 Binary files a/mkdocs/docs/.DS_Store and b/mkdocs/docs/.DS_Store differ diff --git a/mkdocs/docs/taxonomy/data_categories.md b/mkdocs/docs/taxonomy/data_categories.md index c3501ccd..dca7b471 100644 --- a/mkdocs/docs/taxonomy/data_categories.md +++ b/mkdocs/docs/taxonomy/data_categories.md @@ -63,52 +63,84 @@ Below is a reference for all subcategories of `system` and `user` to assist with | Label | Parent Key | Description | | --- | --- | --- | -| `biometric` | `user` |Encoded characteristics of a user. | -| `biometric_health` | `user` |Encoded characteristic about a user's health. | -| `browsing_history` | `user` |Content browsing history of a user. | -| `contact` | `user` |User contact data. | -| `address` | `user.contact` |User contact data related to an address. | -| `email` | `user.contact` |User's email address. | -| `phone_number` | `user.contact` |User's phone number. | -| `city` | `user.contact.address` |User's city level address data. | -| `country` | `user.contact.address` |User's country level address data. | -| `postal_code` | `user.contact.address` |User's postal code. | -| `state` | `user.contact.address` |User's state level address data. | -| `street` | `user.contact.address` |User's street level address data. | -| `demographic` | `user` |Demographic data about a user. | -| `gender` | `user` |Gender of an individual. | -| `location` | `user` |Records of the location of a user. | -| `media_consumption` | `user` |Media type consumption data of a user. | -| `non_specific_age` | `user` |Age range data. | -| `observed` | `user` |Data collected through observation of use of the system. | -| `organization` | `user` |Derived data that is linked to, or identifies an organization. | -| `profiling` | `user` |Preference and interest data about a user. | -| `race` | `user` |Racial or ethnic origin data. | -| `religious_belief` | `user` |Religion or religious belief. | -| `search_history` | `user` |Records of search history and queries of a user. | -| `sexual_orientation` | `user` |Personal sex life or sexual data. | -| `social` | `user` |Social activity and interaction data. | -| `telemetry` | `user` |User identifiable measurement data from system sensors and monitoring. | -| `unique_id` | `user` |Unique identifier for a user assigned through system use. | -| `user_sensor` | `user` |Measurement data derived about a user's environment through system use. | -| `workplace` | `user` |Organization of employment. | -| `device` | `user` |Data related to a user's device, configuration and setting. | -| `cookie_id` | `user.device` |Cookie unique identification number. | -| `device_id` | `user.device` |Device unique identification number. | -| `ip_address` | `user.device` |Unique identifier related to device connection. | -| `childrens` | `user` |Data relating to children. | -| `health_and_medical` | `user` |Health records or individual's personal medical information. | -| `job_title` | `user` |Professional data. | -| `name` | `user` |User's real name. | -| `political_opinion` | `user` |Data related to the individual's political opinions. | -| `date_of_birth` | `user` |User's date of birth. | -| `genetic` | `user` |Data about the genetic makeup of a user. | -| `credentials` | `user` |User authentication data. | -| `biometric_credentials` | `user.credentials` |Credentials for system authentication. | -| `password` | `user.credentials` |Password for system authentication. | -| `financial` | `user` |Payment data and financial history. | -| `account_number` | `user.financial` |User's account number for a payment card, bank account, or other financial system. | -| `government_id` | `user` |State provided identification data. | -| `drivers_license_number` | `user.government_id` |State issued driving identification number. | -| `national_identification_number` | `user.government_id` |State issued personal identification number. | -| `passport_number` | `user.government_id` |State issued passport data. | +| `user.account` | `user` | Account creation or registration information. | +| `user.authorization` | `user` | Scope of permissions and access to a system. | +| `user.behavior` | `user` | Behavioral data about the subject. | +| `user.biometric` | `user` | Encoded characteristics provided by a user. | +| `user.childrens` | `user` | Data relating to children. | +| `user.contact` | `user` | Contact data collected about a user. | +| `user.content` | `user` | Content related to, or created by the subject. | +| `user.demographic` | `user` | Demographic data about a user. | +| `user.location` | `user` | Records of the location of a user. | +| `user.device` | `user` | Data related to a user's device, configuration and setting. | +| `user.payment` | `user` | Payment data related to user. | +| `user.social` | `user` | Social activity and interaction data. | +| `user.unique_id` | `user` | Unique identifier for a user assigned through system use. | +| `user.telemetry` | `user` | User identifiable measurement data from system sensors and monitoring. | +| `user.user_sensor` | `user` | Measurement data about a user's environment through system use. | +| `user.workplace` | `user` | Organization of employment. | +| `user.sensor` | `user` | Measurement data from sensors and monitoring systems. | +| `user.financial` | `user` | Payment data and financial history. | +| `user.government_id` | `user` | State provided identification data. | +| `user.health_and_medical` | `user` | Health records or individual's personal medical information. | +| `user.name` | `user` | User's real name. | +| `user.criminal_history` | `user` | Criminal records or information about the data subject. | +| `user.privacy_preferences` | `user` | Privacy preferences or settings set by the subject. | +| `user.job_title` | `user` | Professional data. | +| `user.account.settings` | `user.account` | Account preferences and settings. | +| `user.account.username` | `user.account` | Username associated with account. | +| `user.authorization.credentials` | `user.authorization` | Authentication credentials to a system. | +| `user.authorization.biometric` | `user.authorization` | Credentials for system authentication. | +| `user.authorization.password` | `user.authorization` | Password for system authentication. | +| `user.behavior.browsing_history` | `user.behavior` | Content browsing history of a user. | +| `user.behavior.media_consumption` | `user.behavior` | Content consumption history of the subject. | +| `user.behavior.purchase_history` | `user.behavior` | Purchase history of the subject. | +| `user.behavior.search_history` | `user.behavior` | Search history of the subject. | +| `user.biometric.fingerprint` | `user.biometric` | Fingerprint encoded data about a subject. | +| `user.biometric.retinal` | `user.biometric` | Retinal data about a subject. | +| `user.biometric.voice` | `user.biometric` | Voice encoded data about a subject. | +| `user.biometric.health` | `user.biometric` | Encoded characteristic collected about a user. | +| `user.contact.address` | `user.contact` | Contact address data collected about a user. | +| `user.contact.email` | `user.contact` | User's contact email address. | +| `user.contact.phone_number` | `user.contact` | User's phone number. | +| `user.contact.url` | `user.contact` | Subject's websites or links to social and personal profiles. | +| `user.contact.fax_number` | `user.contact` | Data Subject's fax number. | +| `user.contact.organization` | `user.contact` | Data Subject's Organization. | +| `user.contact.address.city` | `user.contact.address` | User's city level address data. | +| `user.contact.address.country` | `user.contact.address` | User's country level address data. | +| `user.contact.address.postal_code` | `user.contact.address` | User's postal code. | +| `user.contact.address.state` | `user.contact.address` | User's state level address data. | +| `user.contact.address.street` | `user.contact.address` | User's street level address data. | +| `user.content.private` | `user.content` | Private content related to, or created by the subject, not publicly available. | +| `user.content.public` | `user.content` | Publicly shared Content related to, or created by the subject. | +| `user.content.self_image` | `user.content` | Photograph or image in which subject is whole or partially recognized. | +| `user.demographic.age_range` | `user.demographic` | Non specific age or age-range of data subject. | +| `user.demographic.date_of_birth` | `user.demographic` | Date of birth of data subject. | +| `user.demographic.gender` | `user.demographic` | Gender of data subject. | +| `user.demographic.language` | `user.demographic` | Spoken or written language of subject. | +| `user.demographic.marital_status` | `user.demographic` | Marital status of data subject. | +| `user.demographic.political_opinion` | `user.demographic` | Political opinion or belief of data subject. | +| `user.demographic.profile` | `user.demographic` | Profile or preference information about the data subject. | +| `user.demographic.race_ethnicity` | `user.demographic` | Race or ethnicity of data subject. | +| `user.demographic.religious_belief` | `user.demographic` | Religion or religious beliefs of the data subject. | +| `user.demographic.sexual_orientation` | `user.demographic` | Sexual orientation of data subject. | +| `user.device.cookie` | `user.device` | Data related to a subject, stored within a cookie. | +| `user.device.cookie_id` | `user.device` | Cookie unique identification number. | +| `user.device.device_id` | `user.device` | Device unique identification number. | +| `user.device.ip_address` | `user.device` | Unique identifier related to device connection. | +| `user.financial.bank_account` | `user.financial` | Bank account information belonging to the subject. | +| `user.financial.credit_card` | `user.financial` | Credit card information belonging to the subject. | +| `user.government_id.birth_certificate` | `user.government_id` | State issued certificate of birth. | +| `user.government_id.drivers_license_number` | `user.government_id` | State issued driving identification number. | +| `user.government_id.immigration` | `user.government_id` | State issued immigration or residency data. | +| `user.government_id.national_identification_number` | `user.government_id` | State issued personal identification number. | +| `user.government_id.passport_number` | `user.government_id` | State issued passport data. | +| `user.government_id.vehicle_registration` | `user.government_id` | State issued license plate or vehicle registration data. | +| `user.health_and_medical.genetic` | `user.health_and_medical` | Data about the genetic makeup provided by the subject. | +| `user.health_and_medical.insurance_beneficiary_id` | `user.health_and_medical` | Health insurance beneficiary number of the subject. | +| `user.health_and_medical.record_id` | `user.health_and_medical` | Medical record identifiers belonging to a subject. | +| `user.location.imprecise` | `user.location` | Imprecise location derived from sensors (more than 500M). | +| `user.location.precise` | `user.location` | Precise location derived from sensors (less than 500M). | +| `user.name.first` | `user.name` | Subject's first name. | +| `user.name.last` | `user.name` | Subject's last, or family, name. | +| `user.unique_id.pseudonymous` | `user.unique_id` | A pseudonymous, or probabilistic identifier generated from other subject or device data belonging to the subject. | \ No newline at end of file diff --git a/mkdocs/docs/taxonomy/data_uses.md b/mkdocs/docs/taxonomy/data_uses.md index a6c3a1d6..60e61676 100644 --- a/mkdocs/docs/taxonomy/data_uses.md +++ b/mkdocs/docs/taxonomy/data_uses.md @@ -28,44 +28,6 @@ A human-readable description of the Data Use. The fides key of the the Data Use's parent. -**legal_basis**     _enum_ - -The legal basis category of which the data use falls under. This field is used as part of the creation of an exportable data map. Current valid options: - -* `Consent` -* `Contract` -* `Legal Obligation` -* `Vital Interest` -* `Public Interest` -* `Legitimate Interest` - -**special_category**     _enum_ - -The special category for processing of which the data use falls under. This field is used as part of the creation of an exportable data map. Current valid options: - -* `Consent` -* `Employment` -* `Vital Interests` -* `Non-profit Bodies` -* `Public by Data Subject` -* `Legal Claims` -* `Substantial Public Interest` -* `Medical` -* `Public Health Interest` - -**recipent**     _string_ - -An array of recipients is applied here when sharing personal data outside of your organization (e.g. Internal Revenue Service, HMRC, etc.) - -**legitimate_interest**     boolean     default: `False` - -A boolean value representing whether the legal basis is a `Legitimate Interest`. This is validated at run time and looks for a `legitimate_interest_impact_assessment` to exist if true. - -**legitimate_interest_impact_assessment**     _url_ - -A url to the legitimate interest impact assessment. Can be any valid url (e.g. http, file, etc.) - -**organization_fides_key**     _string_     default: `default_organization` The fides key of the organization to which this Data Use belongs. @@ -79,65 +41,96 @@ The fides key of the organization to which this Data Use belongs. ## Top Level Data Uses -There are seven top-level Data Use classes: +The top-level Data Use classes: | Label | Parent Key | Description | | --- | --- | --- | -|`provide` |`-` |Provide, give, or make available the product, service, application or system. | -|`improve` |`-` |Improve the product, service, application or system. | -|`personalize` |`-` |Personalize the product, service, application or system. | -|`advertising` |`-` |The promotion of products or services targeted to users based on the the processing of user provided data in the system. | -|`third_party_sharing` |`-` |The transfer of specified data categories to third parties outside of the system/application's scope. | -|`collect` |`-` |Collecting and storing data in order to use it for another purpose such as data training for ML. | -|`train_ai_system` |`-` |Training an AI system. Please note when this data use is specified, the method and degree to which a user may be directly identified in the resulting AI system should be appended.| +|`analytics` |`-` | Provides analytics for activities such as system and advertising performance reporting, insights and fraud detection. | +|`collect` |`-` | Collects or stores data in order to use it for another purpose which has not yet been expressly defined. | +|`employment` |`-` | Processes data for the purpose of recruitment or employment and human resources (HR) related activities. | +|`essential` |`-` | Operates the service or product, including legal obligations, support and basic system operations. | +|`finance` |`-` | Enables finance and accounting activities such as audits and tax reporting. +|`functional` |`-` |Used for specific, necessary, and legitimate purposes | +|`marketing` |`-` | Enables marketing, promotion, advertising and sales activities for the product, service, application or system. | +|`operations` |`-` | Supports business processes necessary to the organization's operation.| +|`personalize` |`-` |Personalizes the product, service, application or system. | +|`sales` |`-` | Supports sales activities such as communications and outreach.| +|`third_party_sharing` |`-` | Transfers data to third parties outside of the system or service's scope.| +|`train_ai_system` |`-` | Trains an AI system or data model for machine learning.| For each top level classification there are multiple subclasses that provide richer context. Below is a reference for all subclasses of `account`, `system` and `user` to assist with describing all data across systems. -### Provide Data Uses - +### Analytics data uses | Label | Parent Key | Description | | --- | --- | --- | -|`service` |`provide` |The source service, product, system or application being provided to the user. | -|`provide.service.operations` |`provide.service` |Use of specified data categories to operate and protect the system in order to provide the service. | -|`provide.service.operations.support` |`provide.service.operations` |Use of specified data categories to provide support for operation and protection of the system in order to provide the service. | -|`provide.service.operations.support.optimization`|`provide.service.operations.support`|Use of specified data categories to optimize and improve support operations in order to provide the service. | -|`provide.service.upgrades` |`provide.service` |Offer upgrades or upsales such as increased capacity for the service based on monitoring of service usage. | - -### Improve Data Uses +| `analytics.reporting.ad_performance` | `analytics.reporting` | Provides analytics for reporting of advertising performance. | +| `analytics.reporting.content_performance` | `analytics.reporting` | Analytics for reporting on content performance. | +| `analytics.reporting.campaign_insights` | `analytics.reporting` | Provides analytics for reporting of campaign insights related to advertising and promotion activities. | +| `analytics.reporting.system` | `analytics.reporting` | Provides analytics for reporting on system activity. | +| `analytics.reporting.system.performance` | `analytics.reporting.system` | Provides analytics for reporting on system performance. | -| Label | Parent Key | Description | -| --- | --- | --- | -|`system` | `improve` |The source system, product, service or application being improved. | - - -### Personalize Data Uses +### Employment data uses +| Label | Parent Key | Description | +| --- | --- | --- | +| `employment.recruitment` | `employment` | Processes data of prospective employees for the purpose of recruitment. | -| Label | Parent Key | Description | -| --- | --- | --- | -|`system` | `personalize` | The source system, product, service or application being personalized. | +### Essential data uses +| Label | Parent Key | Description | +| --- | --- | --- | +| `essential.fraud_detection` | `essential` | Detects possible fraud or misuse of the product, service, application or system. | +| `essential.legal_obligation` | `essential` | Provides service to meet a legal or compliance obligation such as consent management. | +| `essential.service` | `essential` | Provides the essential product, service, application or system, without which the product/service would not be possible. | +| `essential.service.authentication` | `essential.service` | Authenticate users to the product, service, application or system. | +| `essential.service.notifications` | `essential.service` | Sends notifications about the product, service, application or system. | +| `essential.service.operations` | `essential.service` | Essential to ensure the operation of the product, service, application or system. | +| `essential.service.payment_processing` | `essential.service` | Essential to processes payments for the product, service, application or system. | +| `essential.service.security` | `essential.service` | Essential to provide security for the product, service, application or system | +| `essential.service.upgrades` | `essential.service` | Provides timely system upgrade information options. | +| `essential.service.notifications.email` | `essential.service.notifications` | Sends email notifications about the product, service, application or system. | +| `essential.service.notifications.sms` | `essential.service.notifications` | Sends SMS notifications about the product, service, application or system. | +| `essential.service.operations.support` | `essential.service.operations` | Provides support for the product, service, application or system. | +| `essential.service.operations.improve` | `essential.service.operations` | Essential to optimize and improve support for the product, service, application or system. | + +### Functional Data Uses +| Label | Parent Key | Description | +| --- | --- | --- | +| `functional.storage` | `functional` | Stores or accesses information from the device as needed when using a product, service, application, or system | +| `functional.service` | `functional` | Functions relating to provided services, products, applications or systems. | +| `functional.service.improve` | `functional.service` | Improves the specific product, service, application or system. | -### Advertising Data Uses +### Marketing Data Uses -| Label | Parent Key | Description | -| --- | --- | --- | -|`first_party` | `advertising` | The promotion of products or services targeting users based on processing of derviced data from prior use of the system. | -|`contextual` | `advertising.first_party` | The promotion of products or services targeted to users based on the processing of derived data from the users prior use of the services. | -|`personalized` | `advertising.first_party` | The targeting and changing of promotional content based on processing of specific data categories from the user. | -|`third_party` | `advertising` | The promotion of products or services targeting users based on processing of specific categories of data acquired from third party sources. | -|`personalized` | `advertising.third_party` | The targeting and changing of promotional content based on processing of specific categories of user data acquired from third party sources. | +| Label | Parent Key | Description | +| --- | --- | --- | +| `marketing.advertising` | `marketing` | Advertises or promotes the product, service, application or system and associated services. | +| `marketing.communications` | `marketing` | Uses combined channels to message and market to a customer, user or prospect. | +| `marketing.advertising.first_party` | `marketing.advertising` | Serves advertisements based on first party data collected or derived about the user. | +| `marketing.advertising.frequency_capping` | `marketing.advertising` | Restricts the number of times a specific advertisement is shown to an individual. | +| `marketing.advertising.negative_targeting` | `marketing.advertising` | Enforces rules used to ensure a certain audience or group is not targeted by advertising. | +| `marketing.advertising.profiling` | `marketing.advertising` | Creates audience profiles for the purpose of targeted advertising | +| `marketing.advertising.serving` | `marketing.advertising` | Essential to the delivery of advertising and content. | +| `marketing.advertising.third_party` | `marketing.advertising` | Serves advertisements based on data within the system or joined with data provided by 3rd parties. | +| `marketing.advertising.first_party.contextual` | `marketing.advertising.first_party` | Serves advertisements based on current content being viewed by the user of the system or service. | +| `marketing.advertising.first_party.targeted` | `marketing.advertising.first_party` | Targets advertisements based on data collected or derived about the user from use of the system. | +| `marketing.advertising.third_party.targeted` | `marketing.advertising.third_party` | Targets advertisements based on data within the system or joined with data provided by 3rd parties. | +| `marketing.communications.email` | `marketing.communications` | Sends email marketing communications. | +| `marketing.communications.sms` | `marketing.communications` | Sends SMS marketing communications. | +### Personalize Data Uses +| Label | Parent Key | Description | +| --- | --- | --- | +| `personalize.content` | `personalize` | Personalizes the content of the product, service, application or system. | +| `personalize.profiling` | `personalize` | Creates profiles for the purpose of serving content. | +| `personalize.system` | `personalize` | Personalizes the system. | -### Third Party Sharing Data Uses +### Third-Party Sharing Data Uses | Label | Parent Key | Description | | --- | --- | --- | -|`payment_processing` | `third_party_sharing` | Sharing of specified data categories with a third party for payment processing. | -|`personalized_advertising` | `third_party_sharing` | Sharing of specified data categories for the purpose of marketing/advertising/promotion. | -|`fraud_detection` | `third_party_sharing` | Sharing of specified data categories with a third party fo fraud prevention/detection. | -|`legal_obligation` | `third_party_sharing` | Sharing of data for legal obligations, including contracts, applicable laws or regulations. | +| `third_party_sharing.legal_obligation` | `third_party_sharing` | Shares data for legal obligations, including contracts, applicable laws or regulations. | ### Collection & AI Training Data Uses diff --git a/mkdocs/docs/taxonomy/overview.md b/mkdocs/docs/taxonomy/overview.md index 6e6e01b7..6c3d7b15 100644 --- a/mkdocs/docs/taxonomy/overview.md +++ b/mkdocs/docs/taxonomy/overview.md @@ -1,6 +1,6 @@ # Fides Taxonomy -The Fides taxonomy contains four classification groups that are used together to easily describe all of the data types and associated processing behaviors of an entire tech stack; both the application and it's data storage. +The Fides taxonomy contains four classification groups that are used together to easily describe all of the data types and associated processing behaviors of an entire tech stack; both the application and its data storage. ## Summary of Taxonomy Classification Groups @@ -19,7 +19,7 @@ Data Uses are also hierarchical with natural inheritance, meaning you can easily Learn more about [Data Uses in the taxonomy reference now](data_uses.md). ### 3. Data Subjects -Data Subject is a label commonly used in the regulatory world to describe the users of a system who's data is being processed. In many systems a generic user label may be sufficient, however Fides language is intended to provide greater control through specificity where needed. +Data Subject is a label commonly used in the regulatory world to describe the users of a system whose data is being processed. In many systems a generic user label may be sufficient, however, Fides language is intended to provide greater control through specificity where needed. Examples of this are: @@ -31,18 +31,6 @@ Examples of this are: Learn more about [Data Subjects in the taxonomy reference now](data_subjects.md). - -### 4. Data Qualifiers -Data Qualifiers describe the degree of identification of the given data. Think of this as a spectrum: on one end is completely anonymous data, i.e. it is impossible to identify an individual from it, and on the other end is data that specifically identifies an individual. - -Along this spectrum are labels that describe the degree of identification that a given data might provide, such as: - -- `identified` -- `anonymized` -- `aggregated` - -Learn more about [Data Qualifiers in the taxonomy reference now](data_qualifiers.md). - ### Extensibility & interoperability The Fides language is designed to support common privacy compliance regulations and standards out of the box, these include GDPR, CCPA, LGPD and ISO 19944.