You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
user.authorization.biometrics,user.authorization,Authorization Biometrics,"CA, CT, CO, VA, UT, OR, TX, WA MHMD, IL BIPA",Credentials for system authentication based on biometrics.
15
+
user.biometrics.fingerprint,user.biometrics,Biometrics Fingerprint,"CA, CT, CO, VA, UT, OR, TX, WA MHMD, IL BIPA",Fingerprint encoded data about a subject.
16
+
user.biometrics.retinal,user.biometrics,Biometrics Retinal,"CA, CT, CO, VA, UT, OR, TX, WA MHMD, IL BIPA ",Retinal data about a subject.
17
+
user.biometrics.voice,user.biometrics,Biometrics Voice,"CA, CT, CO, VA, UT, OR, TX, WA MHMD, IL BIPA ",Voice encoded data about a subject.
18
+
user.children.children_under_thirteen,user.children,Children Under Thirteen,"CA, CT, CO, VA, UT, OR, TX",Data relating to children under 13.
19
+
user.children.thirteen_to_sixteen,user.children,Child Thriteen-to-Sixteen,CA,Data relating to children between 13-15.
user.demographic.sexual_orientation,user.demographic,Sexual Orientation,"CA, CT, CO, VA, UT, OR, TX",Sexual orientation of data subject.
22
+
user.demographic.race_ethnicity,user.demographic,Race or Ethnicity,"CA, CT, CO, VA, UT, OR, TX",Race or ethnicity of data subject.
23
+
user.demographic.citizenship_or_immigration_status,user.demographic,Citzenship or Immigration Status,"CA, CT, CO, VA, UT, OR, TX",Citizen or immigration status of data subject.
24
+
user.demographic.religious_belief,user.demographic,Religious Beliefs,"CA, CT, CO, VA, UT, OR, TX",Religion or religious beliefs of the data subject.
25
+
user.demographic.philosophical_belief,user.demographic,Philosophical Beliefs,CA,Philosophical beliefs of the data subject.
user.government_id.immigration,user.government_id,Immigration Status ,"CA, CT, CO, VA, UT, OR, TX",State issued immigration or residency data.
29
+
user.government_id.national_identification_number,user.government_id,State Government ID ,CA,State issued personal identification number.
30
+
user.health.treatment,user.health,Health Treatment,"CA, CT, CO, VA, UT, OR, TX, WA MHMD, NV Health, ",Health-realted treatment for a subject
31
+
user.health.prescriptions,user.health,Prescriptions,"CA, CT, CO, VA, UT, OR, TX, WA MHMD, NV Health, ",Prescriptions belonging to a subject
32
+
user.health.symptons,user.health,Symptoms,"CA, CT, CO, VA, UT, OR, TX, WA MHMD, NV Health, ",Medical symptoms associated with a subject
33
+
user.health.medications,user.health,Medications,"CA, CT, CO, VA, UT, OR, TX, WA MHMD, NV Health, ",Medications taken by a subject
34
+
user.health.reproductive_or_sexual,user.health,Reproductive or Sexual Health,"CA, CT, CO, VA, UT, OR, TX, WA MHMD, NV Health, ",Reproductive or sexual data belonging to a subject
35
+
user.health.genetic ,user.health,Genetic information,"CA, CT, CO, VA, UT, OR, TX, WA MHMD, NV Health, ",Data about the genetic makeup provided by the subject.
36
+
user.health.social_psychological_behavioral,user.health,Psychological or Behavioral Condition,"CA, CT, CO, VA, UT, OR, TX, WA MHMD, NV Health, ","Social, psychological, and/or behavioral data belonging to a subject. "
37
+
user.health.medical_diagnosis ,user.health,Medical Diagonosis ,"CA, CT, CO, VA, UT, OR, TX, WA MHMD, NV Health, ",Medical diagnosis of a subject.
38
+
user.health.condition,user.health,Health Condition,"CA, CT, CO, VA, UT, OR, TX, WA MHMD, NV Health, ",Health condition of a subject.
39
+
user.health.record_id,user.health,Health record ,"CA, CT, CO, VA, UT, OR, TX, WA MHMD, NV Health",Medical record identifiers belonging to a subject.
40
+
user.location,user,Location,"CA, CT, VA, UT, OR, TX, WA MHMD, NV Health",Location data.
41
+
user.location.precise,user.location,Precise Location,,Precise location derived from sensors (less than 500M).
42
+
user.financial.bank_account,user.financial,Bank Account Information,,Bank account information belonging to the subject.
43
+
user.behavior,user,Behavior,"WA MHMD, NV Health",Behavioral data about the subject.
44
+
user.contact,user,Contact,,Contact data collected about a user.
45
+
user.device,user,Device,,"Data related to a user's device, configuration and setting."
46
+
user.payment,user,Payment,,Payment data related to user.
47
+
user.social_activity,user,Social Activity,,Social activity and interaction data.
48
+
user.unique_id,user,Unique ID,,Unique identifier for a user assigned through system use.
49
+
user.financial,user,Financial,,Payment data and financial history.
50
+
user.name,user,Name,,User's real name.
51
+
user.criminal_history,user,Criminal History,,Criminal records or information about the data subject.
52
+
user.privacy_preferences,user,Privacy Preferences,,Privacy preferences or settings set by the subject.
53
+
user.job_title,user,Job title,,Professional data.
54
+
user.content,user,Content,,"Content related to, or created by the subject."
55
+
user.account.username,user.account,Username,,Username associated with account.
56
+
user.authorization.credentials,user.authorization,Auth Credentials,,Authentication credentials to a system.
57
+
user.authorization.password,user.authorization,Password,,Password for system authentication.
58
+
user.behavior.browsing_history,user.behavior,Browsing History,,Content browsing history of a user.
59
+
user.behavior.media_consumption,user.behavior,Media Consumption,,Content consumption history of the subject.
60
+
user.behavior.purchase_history,user.behavior,Purchase History,,Purchase history of the subject.
61
+
user.behavior.search_history,user.behavior,Search History,,Search history of the subject.
user.contact.address,user.contact,Address,,Contact address data collected about a user.
67
+
user.contact.address.mailing_address,user.contact.address,Mailing Address,,Contact address data collected about a user.
68
+
user.contact.address.city,user.contact.address,City,,User's city level address data.
69
+
user.contact.address.country,user.contact.address,Country,,User's country level address data.
70
+
user.contact.address.postal_code,user.contact.address,Postal Code,,User's postal code.
71
+
user.contact.address.state,user.contact.address,State,,User's state level address data.
72
+
user.contact.address.street,user.contact.address,Street,,User's street level address data.
73
+
user.content.private,user.content,Private Content,,"Private content related to, or created by the subject, not publicly available."
74
+
user.content.public,user.content,Public Content,,Publicly shared Content related to or created by the subject.
75
+
user.content.self_image,user.content,Self Image,,Photograph or image in which subject is whole or partially recognized.
76
+
user.demographic.union_membership,user.demographic,Union Membership,,Union membership of data subject
77
+
user.demographic.protected_classifications,user.demographic,Protected Classifications,,Demographic data about a user that are protected classifications.
78
+
user.demographic.age_range,user.demographic,Age Range,,Non specific age or age-range of data subject.
79
+
user.demographic.date_of_birth,user.demographic,Date of Birth,,Date of birth of data subject.
80
+
user.demographic.gender,user.demographic,Gender,,Gender of data subject.
81
+
user.demographic.language,user.demographic,Language,,Spoken or written language of subject.
82
+
user.demographic.marital_status,user.demographic,Marial Status,,Marital status of data subject.
83
+
user.demographic.political_opinion,user.demographic,Political Opinion,,Political opinion or belief of data subject.
84
+
user.demographic.profile,user.demographic,Profile,,Profile or preference information about the data subject.
85
+
user.device.telemetry,user.device,Telemetry,,User identifiable measurement data from system sensors and monitoring.
86
+
user.device.sensor,user.device,Sensor,,Measurement data about a user's environment through system use.
87
+
user.device.cookie,user.device,Cookie,,"Data related to a subject, stored within a cookie."
Copy file name to clipboardExpand all lines: mkdocs/docs/index.md
+24-13Lines changed: 24 additions & 13 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,22 +1,26 @@
1
-
# Fides Language
1
+
# IAB Tech Lab & Fideslang
2
2
3
-
Fideslang (fee-dez-læŋg, from the Latin term "Fidēs" + "language") is a taxomony of privacy and governancerelated data elements, purposes of data use, and subjects. Fideslang provides an interoperable standard for labeling data and describing data processing activities for governance across global privacy regulations.
3
+
Fideslang (fee-dez-læŋg, derived from the Latin term "Fidēs" and "language") is a taxonomy developed to standardize the way privacy and governance-related data elements, purposes of data use, and subjects are labeled and described. This taxonomy provides an interoperable standard designed to assist businesses in navigating the complex landscape of global privacy regulations.
4
4
5
+
In collaboration with [Ethyca](https://ethyca.com), [IAB Tech Lab](https://iabtechlab.com/) received a donation of Fideslang to accelerate the development of privacy standards within the ad tech industry. Fideslang represents five years of dedicated work aimed at enhancing data privacy practices by creating a universal language that bridges the gap between legal and development teams. This innovation aligns seamlessly with the IAB Tech Lab's Privacy Taxonomy Project, a key initiative of the Privacy Implementation & Accountability Task Force. The project aims to create a standardized privacy taxonomy that enables businesses to effectively manage their data privacy compliance and communicate privacy information more clearly across the industry.
6
+
7
+
The Privacy Taxonomy is uniquely tailored to the evolving landscape of data protection. Building on the foundation of Fideslang, the taxonomy aims to set a new standard for how privacy information is conveyed across the digital advertising ecosystem.
8
+
The Privacy Taxonomy is open for public comment until October 5th, 2024. Industry stakeholders are encouraged to review and provide feedback at [[email protected]]([email protected]).
5
9
6
10
[](https://creativecommons.org/licenses/by/4.0/)
7
11
8
12
9
13
## Taxonomy Explorer
10
14
11
-
Fideslang privacy taxonomy is made up of three main classification groups. These groups are used together to describe the data types, purpose of use, and data owners (subjects) of data being processed, for data privacy and governance purposes. Below you can explore the primary components of the taxonomy.
15
+
The IAB Tech Lab Privacy Taxonomy is composed of three main classification groups: Data Elements, Data Uses, and Data Subjects. These groups work together to describe the data types, purposes of use, and data owners (subjects) of data being processed for privacy and governance purposes. Below, you can explore the primary components of the taxonomy.
12
16
13
17
To learn more about the taxonomy's structure read the [explanation below](#fideslang-privacy-taxonomy-explained)
@@ -47,19 +51,20 @@ To learn more about the taxonomy's structure read the [explanation below](#fides
47
51
48
52
## Fideslang Privacy Taxonomy Explained
49
53
50
-
### 1. Data Categories
51
-
Data Categories are labels to describe the type of data processed by your busess and technology systems.
52
-
Data Categories are hierarchical with natural inheritance, meaning you can label data coarsely with a high-level category (e.g. `user.contact` data), or you can tag it with greater precision using subcategories (e.g. `user.contact.email` data).
54
+
### 1. Data Elements
55
+
Data Elements are labels to describe the type of data processed by your business and technology systems. Data Categories are hierarchical with natural inheritance, meaning you can label data coarsely with a high-level category (e.g. user.contact data), or you can tag it with greater precision using subcategories (e.g. user.contact.email data). This provides a standard way to tag data in databases, which can assist with data privacy operations (e.g. data mapping, DSRs, contracts, disclosures, consent/opt-out, etc.). The data element, when clear under the applicable law, aligns with categories specified in US data privacy laws (e.g., CCPA, CPA).
53
56
54
57
55
58
### 2. Data Uses
56
-
Data Uses are labels that describe how, or for what purpose(s) you are using data. You may think of these as analagous to Purpose of Processing in such documents as a RoPA (Record of Processing Activities).
59
+
Data Uses are labels that describe how, or for what purpose(s) you are using data. You may think of these as analogous to Purpose of Processing in such documents as a RoPA (Record of Processing Activities).
60
+
61
+
Data Uses are also hierarchical with natural inheritance, meaning you can easily describe what you're using data for either coarsely (e.g. provide.service.operations) or with more precision using subcategories (e.g. provide.service.operations.support.optimization).
57
62
58
-
Data Uses are also hierarchical with natural inheritance, meaning you can easily describe what you're using data for either coarsely (e.g. `provide.service.operations`) or with more precision using subcategories (e.g. `provide.service.operations.support.optimization`).
63
+
The top-level labels create standard buckets to categorize data uses into: (1) necessary, (2) operational, (3) analytics, (4) advertising and marketing, and (5) disclosure.
59
64
60
65
### 3. Data Subjects
61
66
62
-
Data Subjects describes the owner or individual that the data being processed describes, examples might be a customer, or an employee. In many systems a generic user label may be sufficient, however the taxonomy is intended to provide greater control through specificity where needed for governnce.
67
+
Data Subjects describes the owner or individual that the data being processed describes, examples might be a customer, or an employee. In many systems a generic user label may be sufficient, however the taxonomy is intended to provide greater control through specificity where needed for governance.
63
68
64
69
Examples of this are:
65
70
@@ -68,13 +73,15 @@ Examples of this are:
68
73
-`employee`
69
74
70
75
### Laws Triggered
71
-
For data categories and data uses, these are mapped to the major laws they trigger and the sensitivity that a given data category may obtain based on processing under a given framework.
76
+
For data categories and data uses, these are mapped to the major laws they trigger and the sensitivity that a given data category may obtain based on processing under a given framework.
72
77
73
78
### IAB Frameworks
74
79
The Fideslang taxonomy automatically cross-references all data uses to the IAB TCF and IAB MSPA frameworks, meaning that if you tag a data use such as `advertising_marketing.first_party.targeted`, it will automatically inherit the classification of "First Party Advertising" as defined by 1.33ii of the MSPA.
75
80
76
81
### Sensitivity Matrix
77
-
When using the Fideslang taxonomy, you may assign sensitivity on a scale of 1 - 3 to given data categories. With 1 not being sensitive and 3 being sensitive as determined by applicable law. You should complete this sensitivity matrix based on your businesses internal policies and risk management.
82
+
When using the Privacy Taxonomy, you may assign sensitivity on a scale of 1-3 to given data categories. With 1 not being sensitive and 3 being sensitive as determined by applicable law. You should complete this sensitivity matrix based on your businesses internal policies and risk management.
83
+
84
+
Sensitivity Matrix scoring:
78
85
79
86
- 1 = no;
80
87
- 2 = no; unless combined with another non-sensitive data point that makes the combined data elements sensitive
@@ -85,8 +92,12 @@ When using the Fideslang taxonomy, you may assign sensitivity on a scale of 1 -
85
92
86
93
### Extensibility and Interoperability
87
94
88
-
The taxonomy is designed to support common privacy compliance regulations and standards out of the box, these include CCPA, MSPA, etc.
95
+
The Privacy Taxonomy is designed to support common privacy compliance regulations and standards out of the box, these include CCPA, MSPA, etc.
89
96
90
97
You can extend the taxonomy to support your system needs. If you do this, we recommend extending from the existing class structures to ensure interoperability inside and outside your organization.
91
98
92
99
If you have suggestions for missing classifications or concepts, please submit them for addition.
100
+
101
+
Public Comment
102
+
Privacy Taxonomy is open for public comment until October 5th, 2024. Industry stakeholders are encouraged to review and provide feedback to [[email protected]](mailto:[email protected]).
0 commit comments