Pr²Graph — Privacy Practice Graph Ontology

Namespace URI: https://w3id.org/pr2graph#

Ontology for the Pr²Graph knowledge graph, modelling data privacy practices extracted from website privacy policies. Part of the ISWC 2026 resource paper “A Semantic Resource Suite for Privacy Policy Formalization”.

This is the human-readable view of the ontology. The machine-readable Turtle serialization is available at pr2graph.ttl.

This is a hash namespace: terms resolve as https://w3id.org/pr2graph#DataPractice, …#data, etc.

Ontology

<https://w3id.org/pr2graph> a owl:Ontology — created 2026-08-05, version 1.0, imports dpv: (Data Privacy Vocabulary).

Classes

Term	Description
`DataPractice`	A privacy-relevant data practice described in a policy; links data, purposes, parties, and original policy text.
`DataCollectionUse`	First-party data collection-and-use practice. subClassOf DataPractice.
`DataSharingDisclosure`	Data shared with / disclosed to a third party. subClassOf DataPractice.
`PrivacyPolicy`	A privacy policy document of a service.
`Service`	An online service or website whose privacy policy is represented in the KG.
`Website`	A website whose privacy policy is represented in the KG. subClassOf Service.
`Party`	A party (person, organisation, or group) involved in a data practice.
`FirstParty`	The first-party organisation (typically the data controller). subClassOf Party.
`ThirdParty`	A third-party organisation that receives or processes personal data. subClassOf Party.
`User`	The user (data subject) whose personal data is collected or shared. subClassOf Party.
`Data`	A category of personal data involved in a practice (grounded in DPV where applicable).
`Purpose`	A stated purpose of collection, use, or sharing (grounded in DPV where applicable).
`Text`	The original policy text segment from which a practice was extracted.
`Recipient`	Vocabulary concept used as an ODRL left-operand to encode third-party-sharing restrictions in the DToU formal model.

Term

Description

DataPractice

A privacy-relevant data practice described in a policy; links data, purposes, parties, and original policy text.

DataCollectionUse

First-party data collection-and-use practice. subClassOf DataPractice.

DataSharingDisclosure

Data shared with / disclosed to a third party. subClassOf DataPractice.

PrivacyPolicy

A privacy policy document of a service.

Service

An online service or website whose privacy policy is represented in the KG.

Website

A website whose privacy policy is represented in the KG. subClassOf Service.

Party

A party (person, organisation, or group) involved in a data practice.

FirstParty

The first-party organisation (typically the data controller). subClassOf Party.

ThirdParty

A third-party organisation that receives or processes personal data. subClassOf Party.

User

The user (data subject) whose personal data is collected or shared. subClassOf Party.

Data

A category of personal data involved in a practice (grounded in DPV where applicable).

Purpose

A stated purpose of collection, use, or sharing (grounded in DPV where applicable).

Text

The original policy text segment from which a practice was extracted.

Recipient

Vocabulary concept used as an ODRL left-operand to encode third-party-sharing restrictions in the DToU formal model.

Object Properties

Term	Domain → Range	Description
`hasDataPractice`	PrivacyPolicy → DataPractice	Links a policy to one of its extracted practices.
`text`	DataPractice → Text	The original text segment of the practice.
`data`	DataPractice → Data	The personal data involved in the practice.
`purpose`	DataPractice → Purpose	The purpose of collection, use, or sharing.
`user`	DataCollectionUse → Party	The user providing the personal data.
`provider`	DataPractice → Party	The party providing / controlling the data.
`sharer`	DataSharingDisclosure → Party	The party sharing the data (typically the controller).
`receiver`	DataSharingDisclosure → Party	The third party receiving the shared data.
`for`	PrivacyPolicy → Service	The service to which the policy belongs.

Term

Domain → Range

Description

hasDataPractice

PrivacyPolicy → DataPractice

Links a policy to one of its extracted practices.

text

DataPractice → Text

The original text segment of the practice.

data

DataPractice → Data

The personal data involved in the practice.

purpose

DataPractice → Purpose

The purpose of collection, use, or sharing.

user

DataCollectionUse → Party

The user providing the personal data.

provider

DataPractice → Party

The party providing / controlling the data.

sharer

DataSharingDisclosure → Party

The party sharing the data (typically the controller).

receiver

DataSharingDisclosure → Party

The third party receiving the shared data.

for

PrivacyPolicy → Service

The service to which the policy belongs.

Term	Domain → Range	Description
`name`	Party → xsd:string	The name of a party.
`hasDomain`	Website → xsd:string	The domain name (URL) of the website.
`value`	Text → xsd:string	The literal text content of the policy segment.

Term

Domain → Range

Description

name

Party → xsd:string

The name of a party.

hasDomain

Website → xsd:string

The domain name (URL) of the website.

value

Text → xsd:string

The literal text content of the policy segment.

Pr²Graph — Privacy Practice Graph Ontology

Ontology

Classes

Object Properties

Datatype Properties

Contact / Maintainer