-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathspec.bs
More file actions
251 lines (218 loc) · 13.6 KB
/
spec.bs
File metadata and controls
251 lines (218 loc) · 13.6 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
<pre class='metadata'>
Title: Risk Extension for Unfair Terms
Shortname: risk
Level: none
Status: LD
Editor: Anonymous
Abstract: This specification has the goal to introduce concepts needed to model risk in contractual clauses from Terms of Services.
Markup Shorthands: markdown yes, css no
Canonical URL: _ORCHESTRATOR_CURRENT_BUILD_FULL_LINK_
</pre>
<pre class=biblio>
{"odrl-formal-semantics": {
"href": "https://w3c.github.io/odrl/formal-semantics/",
"title": "ODRL Formal Semantics",
"authors": [
"Nicoletta Fornara",
"Víctor Rodríguez-Doncel",
"Beatriz Esteves",
"Simon Steyskal",
"Benedict Whittam Smith"
]
}
}
</pre>
Introduction {#introduction}
============================
This specification has the goal to introduce concepts needed to model risk in contractual clauses from Terms of Services.
As such, building on the [DPV](https://w3id.org/dpv#) specification and its [Risk](https://w3id.org/dpv/risk#) extension, we provide a set of terms to represent unfair terms as risk:RiskSource and legal mitigation mechanisms as dpv:RiskMitigationMeasure.
## Namespaces ## {#namespaces}
Commonly used namespace prefixes used in this specification:
```turtle
@prefix dcterms: <http://purl.org/dc/terms/> .
@prefix rdf: <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
@prefix tosl-risk: <https://w3id.org/tosl-risk#> .
@prefix dpv: <https://w3id.org/dpv#> .
@prefix risk: <https://w3id.org/dpv/risk#> .
@prefix justifications: <https://w3id.org/dpv/justifications#> .
```
Vocabulary {#vocabulary}
========================
## Risk Sources ## {#risk-source}
<figure id="risk-source-figure">
<img src="https://www.plantuml.com/plantuml/svg/ZPBDhjem48NtynIMxg8hNg2wgcvXLu6GAdY0mHcI4Vw9x0aLQddtEab5AB7Xxi3ppJaZvVk8Wa4wQy3GKPHu5RXkH5KSI0jx1r_4j_txmOjuUpS0RJ16jMlOrUejiZbJ06XHdx0cLRLdzHkK6g6V74___TcmS8rzpeOmTe5kqntfnh56imqrEeu3X6R2ff2LTvfQWUjK6zBpNUz31hh4M7BIRnUWGh3uQ1OFwNjtH0u9be1QLWQxIEgjzgQw8T_3WIKCqTdvgl6iQNjSuw_yF8NtzvBrPpG5PEnVNlOnVOeiywDBfrUiYtUisR9WFqwtC1xOi5oovDwnGQ6GhcdGrVG2sb6mx71MV0KOpLaiXc-flge6u_3h6pntGBt_IKjvYuQ0qZHrsF6DngPto7FJJHp_JQbQNcxzS2V9T0t0Czr6BgVCmzei-wd4UJfhC-JAnwMPfcLshcoPpUfRnlCgb_cCrcKuh_ZBhRdkdrwOgG_mGQxghFaB">
<figcaption>Risk sources</figcaption>
</figure>
<pre class=simpledef>
IRI: [https://w3id.org/tosl-risk#UnfairContractClause](https://w3id.org/tosl-risk#UnfairContractClause)
Label: Unfair Contract Clause
Type: [dpv:RiskConcept](https://w3id.org/dpv#RiskConcept), [dpv:PotentialRiskSource](https://w3id.org/dpv#PotentialRiskSource), [dpv:PotentialRisk](https://w3id.org/dpv#PotentialRisk)
Definition: Clause creating a significant imbalance between the rights and obligations of the provider and the consumer
Parent: [risk:OrganisationalManagementRisk](https://w3id.org/dpv/risk#OrganisationalManagementRisk)
</pre>
<pre class=simpledef>
IRI: [https://w3id.org/tosl-risk#ArbitrationClause](https://w3id.org/tosl-risk#ArbitrationClause)
Label: Arbitration Clause
Type: [dpv:RiskConcept](https://w3id.org/dpv#RiskConcept), [dpv:PotentialRiskSource](https://w3id.org/dpv#PotentialRiskSource), [dpv:PotentialRisk](https://w3id.org/dpv#PotentialRisk)
Definition: Clause requiring the consumer to resolve disputes through arbitration before initiating legal proceedings
Parent: [tosl-risk:UnfairContractClause](https://w3id.org/tosl-risk#UnfairContractClause)
Source: Annex UCTD. 1(q)
</pre>
<pre class=simpledef>
IRI: [https://w3id.org/tosl-risk#ChoiceOfLawClause](https://w3id.org/tosl-risk#ChoiceOfLawClause)
Label: Choice of Law Clause
Type: [dpv:RiskConcept](https://w3id.org/dpv#RiskConcept), [dpv:PotentialRiskSource](https://w3id.org/dpv#PotentialRiskSource), [dpv:PotentialRisk](https://w3id.org/dpv#PotentialRisk)
Definition: Clause establishing that disputes are governed by the law of a jurisdiction different from the consumer's place of residence
Parent: [tosl-risk:UnfairContractClause](https://w3id.org/tosl-risk#UnfairContractClause)
Source: Article 3(1) UCTD and Article 6 (2) UCTD
</pre>
<pre class=simpledef>
IRI: [https://w3id.org/tosl-risk#ContentRemovalClause](https://w3id.org/tosl-risk#ContentRemovalClause)
Label: Content Removal Clause
Type: [dpv:RiskConcept](https://w3id.org/dpv#RiskConcept), [dpv:PotentialRiskSource](https://w3id.org/dpv#PotentialRiskSource), [dpv:PotentialRisk](https://w3id.org/dpv#PotentialRisk)
Definition: Clause allowing the provider to unilaterally remove consumer's content
Parent: [tosl-risk:UnfairContractClause](https://w3id.org/tosl-risk#UnfairContractClause)
Source: GDPR and CJEU
</pre>
<pre class=simpledef>
IRI: [https://w3id.org/tosl-risk#ContractByUsingClause](https://w3id.org/tosl-risk#ContractByUsingClause)
Label: Contract by Using Clause
Type: [dpv:RiskConcept](https://w3id.org/dpv#RiskConcept), [dpv:PotentialRiskSource](https://w3id.org/dpv#PotentialRiskSource), [dpv:PotentialRisk](https://w3id.org/dpv#PotentialRisk)
Definition: Clause stating that the contractual terms are accepted through the consumer's use of the service
Parent: [tosl-risk:UnfairContractClause](https://w3id.org/tosl-risk#UnfairContractClause)
Source: Annex UCTD. 1(i)
</pre>
<pre class=simpledef>
IRI: [https://w3id.org/tosl-risk#JurisdictionClause](https://w3id.org/tosl-risk#JurisdictionClause)
Label: Jurisdiction Clause
Type: [dpv:RiskConcept](https://w3id.org/dpv#RiskConcept), [dpv:PotentialRiskSource](https://w3id.org/dpv#PotentialRiskSource), [dpv:PotentialRisk](https://w3id.org/dpv#PotentialRisk)
Definition: Clause requiring disputes to be resolved outside the consumer's country of residence
Parent: [tosl-risk:UnfairContractClause](https://w3id.org/tosl-risk#UnfairContractClause)
Source: Article 3(1) UCTD
</pre>
<pre class=simpledef>
IRI: [https://w3id.org/tosl-risk#LimitationOfLiabilityClause](https://w3id.org/tosl-risk#LimitationOfLiabilityClause)
Label: Limitation of Liability Clause
Type: [dpv:RiskConcept](https://w3id.org/dpv#RiskConcept), [dpv:PotentialRiskSource](https://w3id.org/dpv#PotentialRiskSource), [dpv:PotentialRisk](https://w3id.org/dpv#PotentialRisk)
Definition: Clause limiting the provider's responsibility for damages or losses incurred by the consumer while using the service
Parent: [tosl-risk:UnfairContractClause](https://w3id.org/tosl-risk#UnfairContractClause)
Source: Annex UCTD. 1(b)
</pre>
<pre class=simpledef>
IRI: [https://w3id.org/tosl-risk#UnilateralChangeClause](https://w3id.org/tosl-risk#UnilateralChangeClause)
Label: Unilateral Change Clause
Type: [dpv:RiskConcept](https://w3id.org/dpv#RiskConcept), [dpv:PotentialRiskSource](https://w3id.org/dpv#PotentialRiskSource), [dpv:PotentialRisk](https://w3id.org/dpv#PotentialRisk)
Definition: Clause allowing the provider to unilaterally modify the contract or the service
Parent: [tosl-risk:UnfairContractClause](https://w3id.org/tosl-risk#UnfairContractClause)
Source: Annex UCTD. 1(j and k)
</pre>
<pre class=simpledef>
IRI: [https://w3id.org/tosl-risk#UnilateralTerminationClause](https://w3id.org/tosl-risk#UnilateralTerminationClause)
Label: Unilateral Termination Clause
Type: [dpv:RiskConcept](https://w3id.org/dpv#RiskConcept), [dpv:PotentialRiskSource](https://w3id.org/dpv#PotentialRiskSource), [dpv:PotentialRisk](https://w3id.org/dpv#PotentialRisk)
Definition: Clause allowing the provider to unilaterally terminate the contract or access to the service
Parent: [tosl-risk:UnfairContractClause](https://w3id.org/tosl-risk#UnfairContractClause)
Source: Annex UCTD. 1(f and g)
</pre>
## Risk Mitigation Measures & Justifications ## {#risk-mitigation}
<figure id="risk-mitigation-figure">
<img src="https://www.plantuml.com/plantuml/svg/ZPHHRjGm48RVVGfBVU1fBu0gr58G4g8WHNi1uqoIeOuTsPE55N1td6Ir6uV9g4zj_7__U3oQVnyIcKXZxvI3XZG57R7jIDSOmH86hzvG6ARpxu4ez2j1MMTIqiSEVQll4heJHAK6OrzC2xeUJlgtqdg1AamlnSSp4hPcglCC9eqHhkeHREVH6lSjjiPZcY7ZjjZNG6XldpByUKo43TfPLdzlNVvO2sdLyCTV42qcs7LIIEuGyqjMfaTh8QLZU0fZfAJlsk3gg_YKBnXxY1KahC7RN3hRQvo7kSFcGfxY-LF8e_Neso_cvuRy00wc0iiuTiJY4Ll6aAc08i9fcfljfZ7s9PIdCJYqI5DVuAS_58FRGDMqEDFZ-m5yCjopSl4MbbPPIMgq0jCq6FjB3_pbHuWzUaFms134fUY6l23yq4gTQoUlmBBnXyEyoFgjxaoQ_tjtKqhdZ9Hd6PONNT__oNNugCotxQdvjduvWwMjUyLogmTWkgXGlpzVxrUyRsvii-e2AU-zO9H28DdAH8Wak_gIWy-1v6128U15GWHk6mO1bP8XsFwFYLBiRs8vz4AI34pU1Nmtb4enC5j7gVaPx98Kqj8P8p0J4PAx8AyAEIifzG2-7dlt3m00">
<figcaption>Risk mitigation measures & justifications</figcaption>
</figure>
<pre class=simpledef>
IRI: [https://w3id.org/tosl-risk#DeletionJustification](https://w3id.org/tosl-risk#DeletionJustification)
Label: Deletion Justification
Type: [dpv:Justification](https://w3id.org/dpv#Justification)
Definition: Control that requires providing justified reasons when user data is deleted
Parent: [justifications:ExerciseJustification](https://w3id.org/dpv/justifications#ExerciseJustification)
</pre>
<pre class=simpledef>
IRI: [https://w3id.org/tosl-risk#ChangeJustification](https://w3id.org/tosl-risk#ChangeJustification)
Label: Deletion Justification
Type: [dpv:Justification](https://w3id.org/dpv#Justification)
Definition: Control that requires providing justified reasons when contractual terms are modified
Parent: [justifications:ExerciseJustification](https://w3id.org/dpv/justifications#ExerciseJustification)
Source: Annex UCTD. 1(j), 1(k)
</pre>
<pre class=simpledef>
IRI: [https://w3id.org/tosl-risk#TerminationJustification](https://w3id.org/tosl-risk#TerminationJustification)
Label: Termination Justification
Type: [dpv:Justification](https://w3id.org/dpv#Justification)
Definition: Control that requires providing justified reasons when a service is terminated
Parent: [justifications:ExerciseJustification](https://w3id.org/dpv/justifications#ExerciseJustification)
Source: Annex UCTD. 1(g)
</pre>
<pre class=simpledef>
IRI: [https://w3id.org/tosl-risk#AccessToCourts](https://w3id.org/tosl-risk#AccessToCourts)
Label: Access to Courts
Type: [dpv:RiskMitigationMeasure](https://w3id.org/dpv#RiskMitigationMeasure)
Definition: Control that ensures consumers retain the right to take legal action without being required arbitration
Parent: [dpv:OrganisationalMeasure](https://w3id.org/dpv#OrganisationalMeasure)
Source: Annex UCTD. 1(q)
</pre>
<pre class=simpledef>
IRI: [https://w3id.org/tosl-risk#ConsumerResidenceJurisdiction](https://w3id.org/tosl-risk#ConsumerResidenceJurisdiction)
Label: Consumer Residence Jurisdiction
Type: [dpv:RiskMitigationMeasure](https://w3id.org/dpv#RiskMitigationMeasure)
Definition: Control that ensures disputes can be brought before the courts of the consumer's place of residence
</pre>
<pre class=simpledef>
IRI: [https://w3id.org/tosl-risk#ConsumerCountryGoverningLaw](https://w3id.org/tosl-risk#ConsumerCountryGoverningLaw)
Label: Consumer Country Governing Law
Type: [dpv:RiskMitigationMeasure](https://w3id.org/dpv#RiskMitigationMeasure)
Definition: Control that ensures the applicable law corresponds to the consumer's country of residence
</pre>
<pre class=simpledef>
IRI: [https://w3id.org/tosl-risk#DeletionNotice](https://w3id.org/tosl-risk#DeletionNotice)
Label: Deletion Notice
Type: [dpv:RiskMitigationMeasure](https://w3id.org/dpv#RiskMitigationMeasure)
Definition: Control that requires notifying the consumer in advance before deleting user data
Parent: [dpv:Notice](https://w3id.org/dpv#Notice)
</pre>
<pre class=simpledef>
IRI: [https://w3id.org/tosl-risk#DataRetrievalMechanism](https://w3id.org/tosl-risk#DataRetrievalMechanism)
Label: Data Retrieval Mechanism
Type: [dpv:RiskMitigationMeasure](https://w3id.org/dpv#RiskMitigationMeasure)
Definition: Control that ensures consumers can retrieve their stored data when user data is deleted
</pre>
<pre class=simpledef>
IRI: [https://w3id.org/tosl-risk#ExplicitConsentControl](https://w3id.org/tosl-risk#ExplicitConsentControl)
Label: Explicit Consent Control
Type: [dpv:RiskMitigationMeasure](https://w3id.org/dpv#RiskMitigationMeasure)
Definition: Control that requires the consumer's explicit consent before accepting the contractual terms
Source: Annex UCTD. 1(i)
</pre>
<pre class=simpledef>
IRI: [https://w3id.org/tosl-risk#RightToCompensation](https://w3id.org/tosl-risk#RightToCompensation)
Label: Right to Compensation
Type: [dpv:RiskMitigationMeasure](https://w3id.org/dpv#RiskMitigationMeasure)
Definition: Control that ensures consumers can receive compensation when damages occur due to the provider’s actions or contractual obligations
Source: Annex UCTD. 1(b)
</pre>
<pre class=simpledef>
IRI: [https://w3id.org/tosl-risk#ChangeNotice](https://w3id.org/tosl-risk#ChangeNotice)
Label: Change Notice
Type: [dpv:RiskMitigationMeasure](https://w3id.org/dpv#RiskMitigationMeasure)
Definition: Control that requires notifying consumers within a defined notice period before changes to contractual terms or service functionality
Parent: [dpv:Notice](https://w3id.org/dpv#Notice)
</pre>
<pre class=simpledef>
IRI: [https://w3id.org/tosl-risk#ReaffirmConsent](https://w3id.org/tosl-risk#ReaffirmConsent)
Label: Reaffirm Consent
Type: [dpv:RiskMitigationMeasure](https://w3id.org/dpv#RiskMitigationMeasure)
Definition: Control that requires consumers to reaffirm their consent when contractual terms or services are modified
</pre>
<pre class=simpledef>
IRI: [https://w3id.org/tosl-risk#RightToTerminateAfterChange](https://w3id.org/tosl-risk#RightToTerminateAfterChange)
Label: Right to Terminate After Change
Type: [dpv:RiskMitigationMeasure](https://w3id.org/dpv#RiskMitigationMeasure)
Definition: Control that ensures consumers can terminate the contract when they do not accept new contractual terms
</pre>
<pre class=simpledef>
IRI: [https://w3id.org/tosl-risk#TerminationNotice](https://w3id.org/tosl-risk#TerminationNotice)
Label: Termination Notice
Type: [dpv:RiskMitigationMeasure](https://w3id.org/dpv#RiskMitigationMeasure)
Definition: CControl that requires notifying consumers within a defined notice period before terminating the service
Parent: [dpv:Notice](https://w3id.org/dpv#Notice)
Source: Annex UCTD. 1(g)
</pre>