Package Privacy

R-DHuDC

Finds a data asset relating to a human along with a stored copy of the data.

R-DHuDF

Finds a data asset relating to a human along with a flowing copy of the data.

R-Hs

Finds a solo Health Sensor.

R-HuDoPS

Finds a Process that serves data relating to a Human data subject, along with its host and operator.

R-HuDP

Finds a Process that is using Data relating to a Human data subject who is a citizen or resident in some jurisdiction.

R-HuDPoS

Finds a Stakeholder operating a Process that is using Data relating to a Human data subject via a controlling Service, where the subject operates the Service.

R-HuDPS

Finds a Stakeholder operating a Process that is using Data relating to a Human data subject via a controlling Service.

R-HuDSH

Finds a Host storing Data related to a Human subject.

R-HurH

Finds a Human with a related personal device.

R-HurSesD

Finds Data produced as output by a Sensor related to a Human.

R-HurTh

Finds a Thing relating to a Human, plus onboard data and processing.

R-HurThcD

Finds control input to an IoT Thing related to a Human.

R-HuwStrH

Finds a Human with a related personal device and who works for an Employer.

MP-DHuDC

Finds a data asset relating to a human along with a stored copy of the data.

MP-DHuDF

Finds a data asset relating to a human along with a flowing copy of the data.

MP-D-Hu-Th

Finds a solo Data asset which is not spam, not created by a Sensor or stored on an IoT Thing, and does not relate to a human subject.

MP-H-Hu

Finds a Host that has no interactive user, no manager, and does not relate to any user.

MP-Hs

Finds a solo Health Sensor.

MP-Hu-aDPoS-i

Finds Stakeholder operating a Process that is using Data relating to a Human data subject who may be a child via a controlling Service, where the subject operates the Service but not the Process.

MP-Hu-aDPS-io

Finds a Stakeholder operating a Process that is using Data relating to a Human data subject who may be a child via a controlling Service, where the subject does not operate either the Process or the controlling Service.

MP-HuDPoS-i

Finds Stakeholder operating a Process that is using Data relating to a Human data subject via a controlling Service, where the subject operates the Service but not the Process.

MP-HuDPS-io

Finds a Stakeholder operating a Process that is using Data relating to a Human data subject via a controlling Service, where the subject does not operate either the Process or the controlling Service.

MP-HurH-StSt

Finds a Human who does not work for anyone else, with a related personal device that has no operator.

MP-HurSesD

Finds Data produced as output by a Sensor related to a Human.

MP-HurThcD

Finds control input to an IoT Thing related to a Human.

MP-HurTh-S-m

Finds a Thing relating to a Human, plus onboard data and processing, where there is no manager and no specified location.

MP-HuwStrH-St

Finds a Human working for an Employer, with a personal device that has no other operator.

MP-IoT-Hu

Finds a solo IoT Thing that does not relate to a Human data subject. Not used at present, but reserved for a future extension.

CP-HurTh-S-m+m

Finds a Thing relating to a Human with no Manager and no specified location, and makes the Human its manager.

CP-HuiThaS-S+r

Finds a Human that has access to a space and uses an IoT Thing which has no asserted location, and adds a link saying that the device relates to the Human.

CP-HurSesD+Rel

Finds Data produced as output by a Sensor related to a Human, and adds the relationship of the Data to the Human.

CP-HurThcD+Rel

Finds control input to an IoT Thing related to a Human, and adds the relationship of the Data to the Human.

CP-HurH-StSt+o

Makes the Human with a related personal device its operator if the Human does not work for anyone else, and the device has no other operator.

CP-HuwStrH-St+o

Finds a Human working for some other stakeholder with a related personal device that has no other operator, and makes the employer of the Human the device operator.

CP-DHuDC+r

Finds a data asset relating to a human along with a stored copy of the data, and asserts that the stored copy relates to the human.

CP-DHuDF+r

Finds a data asset relating to a human along with a flowing copy of the data, and asserts that the latter also relates to the human.

D.E.D-Hu-Th.9

Data Data is not related to any human: personal data must have a 'relatesTo' link to its Human data subject. Data Data does not have such a link. If Data is personal data, then you should add the data subject to the model if they are not yet included (even if they are not users of the system) and add the relationship indicating the data relates to that subject. If in fact Data is not personal data, select the control strategy to signal to SSM that the absence of such a link is not an error.

H.E.H-Hu.9

Inappropriate control at device Host: the model specifies that this is a personal device protected by its user, but it is not a personal IoT device related to a data subject, neither is it being used or managed by any user. Deselect the Personal Device control, or insert the user and their relationship with the device.

Hs.E.Hs.9

IOT Health Sensor Sensor is deprecated: Instead of using an IOT Health Sensor use a Sensor and Health Data with the senses relationship between them.

Th.E.IoT-Hu.9

Internet of Things device Thing is not related to any human: IoT devices contain embedded data which may be personal data, in which case they must have a 'relatesTo' link to the Human data subject. Device Thing does not have such a link. If the data used by Thing is personal data, then you should add the data subject to the model if they are not yet included (even if they are not users of the system) and add the relationship indicating that Thing relates to that subject. If Thing is non-personal, then select the control strategy to signal to SSM that the absence of such a link is not an error.

(empty)

CSG-ImpersonalData	Signals that the data asset *Data* is not related to a human data subject, thus addressing modelling error threats representing the possibility that the relationship to a data subject has been overlooked.
CSG-ImpersonalThing	Signals that the IoT asset *Thing* is not related to a human data subject, thus addressing modelling error threats representing the possibility that the relationship to a data subject has been overlooked.
CSG-InferredControlData	It is acceptable that the control data *Data* is inferred.
CSG-InferredSensedData	It is acceptable that the sensed data *Data* is inferred.

BreakTheGlass	The policy associated with the data allows restrictions to be bypassed under specific circumstances in which this is necessary. Typically used with consent based policies for cases when a data subject is not conscious or not contactable.
ConsentEnforcement	A policy enforcement point that enforces a dynamic access policy reflecting all previous consent decisions by related users.
ConsentInterface	The user interface for the human incorporates appropriate information explaining the purpose of personal data processing and providing other information as required by regulations, and a means to specify or revoke their consent to this.
ConsentManagement	The data has an access policy that is dynamically managed based on consent decisions from a data subject.
ImpersonalData	Applied to a Data or IoT Thing asset, indicates that the asset is not related to a Human data subject.
InferredDataAsset	Applies to IOT assets within a system that have associated control or sensed data, indicating that the control or sensed data asset in question is inferred rather than user-asserted.
VitalInterests	The process carries out a function that is necessary to protect the vital interests of a natural person.

Role_DataSubject

A natural person who is the subject of personal data.

BiometricData	A data item or set that contains biometric measurements relating to individuals.
GeneticData	A data item or set that contains genetic information relating to individuals.
HealthData	A data item or set that contains health information, which may or may not be related to a specific individual.
HealthSensor	A sensor for acquiring health related data from a patient. Has no console allowing login, but it may have an interface allowing some interaction with a human user, who may or may not be the patient.