The Privaciz/GDPR model is based on the ArchiMate model, and extended by stereotypes provided by the Privaciz Model module.
General
Tools to model basic GDPR concepts.
| Stereotype | Label | Description |
|---|---|---|
GDPRElement |
GDPR element |
Indicates that an element belongs to the GDPR model. |
|
GDPR diagram |
GDPR diagram |
|
GDPR functional diagram |
GDPR functional diagram |
|
GDPR risk diagram |
GDPR risk diagram |
|
GDPR technical diagram |
GDPR technical diagram |
DataProcessing
Tools to model the GDPR personal data processing.
| Stereotype | Label | Description |
|---|---|---|
|
Data processing |
Operation or set of operations addressing personal data. |
|
Process |
Representation of the flow of interactions between functions and services. |
|
Process |
Indicates that a data processing is carried out within a process. |
|
Purpose |
Reason why personal data are being processed. |
|
Purpose |
Indicates the purpose of a data processing. |
|
Usage |
Indicates that personal data is being used in a process. |
|
Personal data flow |
Indicates that personal data is being exchanged between participants or processes. |
|
Conveyed |
Indicates which personal data is conveyed via a data flow. |
|
Delegation |
Indicates who the data processing is subcontracted to. |
|
Implementation |
Indicates that an organization unit (organization, department or subcontractor) implements a process. |
Implementations
Tools to model GDPR implementation concepts.
| Stereotype | Label | Description |
|---|---|---|
|
Data carrier |
Personal data carrier |
|
Artifact |
Piece of data that is used or produced in a software development process, or by deployment and operation of an IT system. |
|
Material |
Structure element that represents tangible physical matter or physical elements. |
|
Node |
Physical item (hardware device). |
|
Cloud |
Applications, storage and other services which are accessed via the Web. |
|
Server |
Remote system used to access information. |
|
Hosting |
Indicates that an application component is hosted by a node. |
|
Application component |
Element used to model entire applications or individual parts of such applications. |
|
Database |
Structure used to store and organize large amounts of data. |
|
Application |
Element used to model entire applications (deployed and operational IT systems). |
|
Application |
Indicates that a process is realized by an application. |
|
Host country |
Indicates in which country the Data Carrier is hosted. |
|
Country |
Country from which a participant operates, or where personal data is stored. |
Contract |
Contract |
Abstract signed agreement (processing, storage, transfer or cooperation). |
|
Cooperation Contract |
Signed agreement that defines the cooperation terms between two participants. |
|
Processing contract |
Signed agreement that binds a data controler and a subcontractor over the processing of data. |
|
Storage contract |
Signed agreement that defines the terms of data storage. |
|
Transfer contract |
Signed agreement that defines the terms of data transfer. |
|
Contract |
Indicates which contract is used. |
Participants
Tools to model GDPR participants.
| Stereotype | Label | Description |
|---|---|---|
|
Participant |
Person or organization which takes part in processing data. |
OrganizationUnit |
Organization unit |
Participant which is not a natural person. |
|
Organization |
Either a company or a non-commercial organization which is responsible for the data processing. |
|
Subcontractor |
Subcontractor who processes data for the controller. |
|
Delegation |
Indicates who the data processing is subcontracted to. |
|
Subsequent |
Indicates that a subcontractor processes the data for the subcontractor. |
|
Department |
Sub-organization entity, like a department, or a business unit. |
|
Department |
Indicates that an organization, or a subcontractor has a department. |
|
GDPR correspondent |
Agent in charge with personal data privacy at department or business unit level. Appointed by the Organization. Reports to the DPO. |
|
Correspondent |
Indicates who is the organization’s GDPR correspondent. |
Role |
Role |
Person or agent which takes part in processing data. |
Agent |
Agent |
Operator taking part in the processing of personal data. |
|
External Agent |
Operator who takes part in the processing personal data from outside the organization. |
|
Internal agent |
Operator who takes part in the processing of personal data from within the organization. |
DataSubject |
Data subject |
Natural person whose personal data is being processed. |
|
External person |
Natural person whose personal data is processed and who is NOT part of the organization. |
|
Internal person |
Natural person whose personal data is being processed and who is part of the organization. |
|
DPO |
Data Privacy Officer (or Data Protection Officer) in charge with enforcing the compliancy with the GDPR within the organization. |
|
Cooperation |
Indicates that a participant cooperates with another participant. |
|
Cooperation context |
Indicates the context of a participant cooperation. |
|
Part Of |
Indicates that a role is part of an organization unit. |
|
Structural link |
Indicates that a participant is bind to another participant. |
|
Legal ownership |
Indicates that the personal data of a European citizen are being collected, stored, or processed. |
|
Perform |
Indicates that a process is executed by an agent. |
|
Controller |
Indicates which participant is in change with processing the personal data. |
|
Country |
Indicates the country from which a participant operates, or where personal data is stored. |
PersonalData
Tools to model GDPR personal data.
| Stereotype | Label | Description |
|---|---|---|
PersonalData |
Personal data |
Personal data’ means any information relating to an identified or identifiable natural person whom can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. |
|
Personal data group |
Container gathering several personal data. |
|
Connection data |
Connection data (IP adresses, event logs, etc.) |
|
Financial data |
Financial or economic information. |
|
Identification data |
Civil status, identity, identification data, etc. |
|
Location data |
Location data (mobility, GPS data, GSM, etc.). |
|
Personal life data |
Personal life related information (lifestyle, family situation, etc.) |
|
Professional life data |
Professional life related data (CV, education, professional training, rewards, etc.). |
|
Biometric data |
Personal data that resulted from specific processing related to physical and behavioral features of a person, which allows the identification of that person. |
|
Social security number |
Unique identification number (such as social security number). |
|
Criminal conviction data |
Sensitive data related to penal convictions or infractions. |
|
Ethnic data |
Data revealing the ethnic or racial origin of the data subject. |
|
Genetic data |
Data related to a natural person’s genetic characteristics, which offers information about the mental or physical health of that person. |
|
Health data |
Personal data referring to the personal mental and physical health of a person, including information on health services accessed. |
|
Opinion data |
Data revealing political opinions. |
|
Religious data |
Data revealing religious or philosophical beliefs. |
|
Sexual orientation data |
Data concerning the sexual life or sexual orientation. |
|
Union data |
Data revealing the union membership. |
|
Other personal data |
Other personal data, any kind of information related to a natural person. |
|
Data grouping |
Indicates which personal data compose the personal data group. |
|
Storage |
Indicates that personal data is stored in a specific data carrier. |
Risks
Tools to model GDPR risk analysis concepts.
| Stereotype | Label | Description |
|---|---|---|
|
Risk |
Breach in the system which represents a risk for the personal data being processed. |
|
Risk |
Indicates that a process is subject to a specific risk. |
|
Measure |
Technical, organizational or legal measure taken by the organization to ensure that the data is safe. |
|
Applied measure |
Indicates that a risk is warded off by a security measure. |
|
Measure type |
Type of measure taken to guarantee the security of personal data. |
|
Measure type |
Indicates that a type is associated to a measure. |
Focus
Tools to model focus diagrams.
| Stereotype | Label | Description |
|---|---|---|
|
Focus diagram |
Abstract stereotype extended by concrete focus diagrams. |
|
Participant focus diagram |
Participant focus diagram |
|
Personal data focus diagram |
Personal data focus diagram |
|
Process focus diagram |
Process focus diagram |
|
Risk focus diagram |
Risk focus diagram |
FocusDiagramDependency |
Focus diagram dependency |
Link between a focus diagram and its central element. |




















































































