new taxonomies added fpf and GDPR

pull/5/head
Alexandre Dulaunoy 2018-05-02 17:50:31 +02:00
parent ada8abf8bb
commit 1755d049bd
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
2 changed files with 64002 additions and 61937 deletions

View File

@ -470,7 +470,9 @@ body.book #toc,body.book #preamble,body.book h1.sect0,body.book .sect1>h2{page-b
<li><a href="#_europol_event">europol-event</a></li>
<li><a href="#_europol_incident">europol-incident</a></li>
<li><a href="#_event_assessment">event-assessment</a></li>
<li><a href="#_fpf">fpf</a></li>
<li><a href="#_fr_classif">fr-classif</a></li>
<li><a href="#_gdpr">gdpr</a></li>
<li><a href="#_honeypot_basic">honeypot-basic</a></li>
<li><a href="#_iep">iep</a></li>
<li><a href="#_incident_disposition">incident-disposition</a></li>
@ -7527,6 +7529,140 @@ event-assessment namespace available in JSON format at <a href="https://github.c
</div>
</div>
<div class="sect1">
<h2 id="_fpf">fpf</h2>
<div class="sectionbody">
<div class="admonitionblock note">
<table>
<tr>
<td class="icon">
<i class="fa icon-note" title="Note"></i>
</td>
<td class="content">
fpf namespace available in JSON format at <a href="https://github.com/MISP/misp-taxonomies/blob/master/fpf/machinetag.json"><strong>this location</strong></a>. The JSON format can be freely reused in your application or automatically enabled in <a href="https://www.github.com/MISP/MISP">MISP</a> taxonomy.
</td>
</tr>
</table>
</div>
<div class="paragraph">
<p>The Future of Privacy Forum (FPF) [visual guide to practical de-identification](<a href="https://fpf.org/2016/04/25/a-visual-guide-to-practical-data-de-identification/" class="bare">https://fpf.org/2016/04/25/a-visual-guide-to-practical-data-de-identification/</a>) taxonomy is used to evaluate the degree of identifiability of personal data and the types of pseudonymous data, de-identified data and anonymous data. The work of FPF is licensed under a creative commons attribution 4.0 international license.</p>
</div>
<div class="sect2">
<h3 id="_degrees_of_identifiability">degrees-of-identifiability</h3>
<div class="paragraph">
<p>Information containing direct and indirect identifiers.</p>
</div>
<div class="sect3">
<h4 id="_fpf_degrees_of_identifiability_explicitly_personal">fpf:degrees-of-identifiability="explicitly-personal"</h4>
<div class="paragraph">
<p>Explicitly personal</p>
</div>
<div class="paragraph">
<p>Name, address, phone number, SSN, government-issued ID (e.g., Jane Smith, 123 Main Street, 555-555-5555)</p>
</div>
</div>
<div class="sect3">
<h4 id="_fpf_degrees_of_identifiability_potentially_identifiable">fpf:degrees-of-identifiability="potentially-identifiable"</h4>
<div class="paragraph">
<p>Potentially identifiable</p>
</div>
<div class="paragraph">
<p>Unique device ID, license plate, medical record number, cookie, IP address (e.g., MAC address 68:A8:6D:35:65:03)</p>
</div>
</div>
<div class="sect3">
<h4 id="_fpf_degrees_of_identifiability_not_readily_identifiable">fpf:degrees-of-identifiability="not-readily-identifiable"</h4>
<div class="paragraph">
<p>Not readily identifiable</p>
</div>
<div class="paragraph">
<p>Same as Potentially Identifiable except data are also protected by safeguards and controls (e.g., hashed MAC addresses &amp; legal representations)</p>
</div>
</div>
</div>
<div class="sect2">
<h3 id="_pseudonymous_data">pseudonymous-data</h3>
<div class="paragraph">
<p>Information from which direct identifiers have been eliminated or transformed, but indirect entifiers remain intact.</p>
</div>
<div class="sect3">
<h4 id="_fpf_pseudonymous_data_key_coded">fpf:pseudonymous-data="key-coded"</h4>
<div class="paragraph">
<p>Key coded</p>
</div>
<div class="paragraph">
<p>Clinical or research datasets where only curator retains key (e.g., Jane Smith, diabetes, HgB 15.1 g/dl = Csrk123)</p>
</div>
</div>
<div class="sect3">
<h4 id="_fpf_pseudonymous_data_pseudonymous">fpf:pseudonymous-data="pseudonymous"</h4>
<div class="paragraph">
<p>Pseudonymous</p>
</div>
<div class="paragraph">
<p>Unique, artificial pseudonyms replace direct identifiers (e.g., HIPAA Limited Datasets, John Doe = 5L7T LX619Z) (unique sequence not used anywhere else)</p>
</div>
</div>
<div class="sect3">
<h4 id="_fpf_pseudonymous_data_protected_pseudonymous">fpf:pseudonymous-data="protected-pseudonymous"</h4>
<div class="paragraph">
<p>Protected pseudonymous</p>
</div>
<div class="paragraph">
<p>Same as Pseudonymous, except data are also protected by safeguards and controls</p>
</div>
</div>
</div>
<div class="sect2">
<h3 id="_de_identified_data">de-identified-data</h3>
<div class="paragraph">
<p>Direct and known indirect identifiers have been removed or manipulated to break the linkage to real world identities.</p>
</div>
<div class="sect3">
<h4 id="_fpf_de_identified_data_de_identified">fpf:de-identified-data="de-identified"</h4>
<div class="paragraph">
<p>De-identified</p>
</div>
<div class="paragraph">
<p>Data are suppressed, generalized, perturbed, swapped, etc. (e.g., GPA: 3.2 = 3.0-3.5, gender: female = gender: male)</p>
</div>
</div>
<div class="sect3">
<h4 id="_fpf_de_identified_data_protected_de_identified">fpf:de-identified-data="protected-de-identified"</h4>
<div class="paragraph">
<p>Protected de-identified</p>
</div>
<div class="paragraph">
<p>Same as De-Identified, except data are also protected by safeguards and controls</p>
</div>
</div>
</div>
<div class="sect2">
<h3 id="_anonymous_data">anonymous-data</h3>
<div class="paragraph">
<p>Direct and indirect identifiers have en removed or manipulated together with mathematical and technical guarantees to prevent re-identification.</p>
</div>
<div class="sect3">
<h4 id="_fpf_anonymous_data_anonymous">fpf:anonymous-data="anonymous"</h4>
<div class="paragraph">
<p>Anonymous</p>
</div>
<div class="paragraph">
<p>For example, noise is calibrated to a data set to hide whether an individual is present or not (differential privacy)</p>
</div>
</div>
<div class="sect3">
<h4 id="_fpf_anonymous_data_aggregated_anonymous">fpf:anonymous-data="aggregated-anonymous"</h4>
<div class="paragraph">
<p>Aggregated anonymous</p>
</div>
<div class="paragraph">
<p>Very highly aggregated data (e.g., statistical data, census data, or population data that 52.6% of Washington, DC residents are women)</p>
</div>
</div>
</div>
</div>
</div>
<div class="sect1">
<h2 id="_fr_classif">fr-classif</h2>
<div class="sectionbody">
<div class="admonitionblock note">
@ -7646,6 +7782,92 @@ Exclusive flag set which means the values or predicate below must be set exclusi
</div>
</div>
<div class="sect1">
<h2 id="_gdpr">gdpr</h2>
<div class="sectionbody">
<div class="admonitionblock note">
<table>
<tr>
<td class="icon">
<i class="fa icon-note" title="Note"></i>
</td>
<td class="content">
gdpr namespace available in JSON format at <a href="https://github.com/MISP/misp-taxonomies/blob/master/gdpr/machinetag.json"><strong>this location</strong></a>. The JSON format can be freely reused in your application or automatically enabled in <a href="https://www.github.com/MISP/MISP">MISP</a> taxonomy.
</td>
</tr>
</table>
</div>
<div class="paragraph">
<p>Taxonomy related to the REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)</p>
</div>
<div class="sect2">
<h3 id="_special_categories">special-categories</h3>
<div class="paragraph">
<p>Special categories of personal data, refer to Art. 9 of the GDPR</p>
</div>
<div class="sect3">
<h4 id="_gdpr_special_categories_racial_or_ethnic_origin">gdpr:special-categories="racial-or-ethnic-origin"</h4>
<div class="paragraph">
<p>Racial or ethnic origin</p>
</div>
</div>
<div class="sect3">
<h4 id="_gdpr_special_categories_political_opinions">gdpr:special-categories="political-opinions"</h4>
<div class="paragraph">
<p>Political opinions</p>
</div>
</div>
<div class="sect3">
<h4 id="_gdpr_special_categories_religious_or_philosophical_beliefs">gdpr:special-categories="religious-or-philosophical-beliefs"</h4>
<div class="paragraph">
<p>Religious or philosophical beliefs</p>
</div>
</div>
<div class="sect3">
<h4 id="_gdpr_special_categories_trade_union_membership">gdpr:special-categories="trade-union-membership"</h4>
<div class="paragraph">
<p>Trade union membership</p>
</div>
</div>
<div class="sect3">
<h4 id="_gdpr_special_categories_genetic_data">gdpr:special-categories="genetic-data"</h4>
<div class="paragraph">
<p>Genetic data</p>
</div>
<div class="paragraph">
<p>Genetic data means personal data relating to the inherited or acquired genetic characteristics of a natural person which give unique information about the physiology or the health of that natural person and which result, in particular, from an analysis of a biological sample from the natural person in question.</p>
</div>
</div>
<div class="sect3">
<h4 id="_gdpr_special_categories_biometric_data">gdpr:special-categories="biometric-data"</h4>
<div class="paragraph">
<p>Biometric data</p>
</div>
<div class="paragraph">
<p>Biometric data for the purpose of uniquely identifying a natural person. Biometric data means personal data resulting from specific technical processing relating to the physical, physiological or behavioural characteristics of a natural person, which allow or confirm the unique identification of that natural person, such as facial images or dactyloscopic data.</p>
</div>
</div>
<div class="sect3">
<h4 id="_gdpr_special_categories_health">gdpr:special-categories="health"</h4>
<div class="paragraph">
<p>Health</p>
</div>
<div class="paragraph">
<p>Data concerning health. Data concerning health means personal data related to the physical or mental health of a natural person, including the provision of health care services, which reveal information about his or her health status.</p>
</div>
</div>
<div class="sect3">
<h4 id="_gdpr_special_categories_sex_life_or_sexual_orientation">gdpr:special-categories="sex-life-or-sexual-orientation"</h4>
<div class="paragraph">
<p>Sex life or sexual orientation</p>
</div>
<div class="paragraph">
<p>Data concerning a natural person&#8217;s sex life or sexual orientation</p>
</div>
</div>
</div>
</div>
</div>
<div class="sect1">
<h2 id="_honeypot_basic">honeypot-basic</h2>
<div class="sectionbody">
<div class="admonitionblock note">
@ -22705,7 +22927,7 @@ workflow namespace available in JSON format at <a href="https://github.com/MISP/
</div>
<div id="footer">
<div id="footer-text">
Last updated 2018-04-24 10:29:32 CEST
Last updated 2018-05-02 17:49:43 CEST
</div>
</div>
</body>

File diff suppressed because it is too large Load Diff