diff --git a/sap-extensions/extensions.json b/sap-extensions/extensions.json index e66218a..de50544 100644 --- a/sap-extensions/extensions.json +++ b/sap-extensions/extensions.json @@ -45,12 +45,12 @@ "x-sap-dpp-is-potentially-personal": { "type": "boolean", "default": true, - "description": "Property contains potentially personal data. Properties annotated with x-sap-dpp-field-semantics need not be additionally annotated with this extension." + "description": "Property contains potentially personal data. Properties annotated with x-sap-dpp-field-semantics need not be additionally annotated with this extension. Personal data describes any information which is related to an identified or identifiable natural person (data subject). An identifiable person is one who can be identified, directly or indirectly, in particular by a reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person." }, "x-sap-dpp-is-potentially-sensitive": { "type": "boolean", "default": true, - "description": "Property contains potentially sensitive personal data" + "description": "Property contains potentially sensitive personal data. Sensitive personal data is a category of personal data that needs special handling. The determination which personal data is sensitive may differ for different legal areas or industries. Examples of sensitive personal data: 1. Special categories of personal data, such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health or sex life or sexual orientation. 2. Personal data subject to professional secrecy. 3. Personal data relating to criminal or administrative offenses. 4. Personal data concerning insurances and bank or credit card accounts." } } }, diff --git a/sap-schemas/v2.0/README.md b/sap-schemas/v2.0/README.md index ef1659a..74422c4 100644 --- a/sap-schemas/v2.0/README.md +++ b/sap-schemas/v2.0/README.md @@ -618,7 +618,7 @@ Constraints: - Type: `Boolean` - Used at: [Schema Object](https://spec.openapis.org/oas/v2.0#schema-object) -- Description: Property contains potentially personal data. Properties annotated with `x-sap-dpp-field-semantics` need not be additionally annotated with this extension. +- Description: Property contains potentially personal data. Properties annotated with `x-sap-dpp-field-semantics` need not be additionally annotated with this extension. Personal data describes any information which is related to an identified or identifiable natural person (data subject). An identifiable person is one who can be identified, directly or indirectly, in particular by a reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person. Constraints: @@ -629,7 +629,14 @@ Constraints: - Type: `Boolean` - Used at: [Schema Object](https://spec.openapis.org/oas/v2.0#schema-object) -- Description: Property contains potentially sensitive personal data. +- Description: Property contains potentially sensitive personal data. Sensitive personal data is a category of personal data that needs special handling. The determination which personal data is sensitive may differ for different legal areas or industries. + + Examples of sensitive personal data: + + - Special categories of personal data, such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health or sex life or sexual orientation. + - Personal data subject to professional secrecy. + - Personal data relating to criminal or administrative offenses. + - Personal data concerning insurances and bank or credit card accounts. Constraints: diff --git a/sap-schemas/v2.0/schema.json b/sap-schemas/v2.0/schema.json index b6cf427..ff0ffa3 100644 --- a/sap-schemas/v2.0/schema.json +++ b/sap-schemas/v2.0/schema.json @@ -1331,12 +1331,12 @@ "x-sap-dpp-is-potentially-personal": { "type": "boolean", "default": true, - "description": "Property contains potentially personal data. Properties annotated with x-sap-dpp-field-semantics need not be additionally annotated with this extension." + "description": "Property contains potentially personal data. Properties annotated with x-sap-dpp-field-semantics need not be additionally annotated with this extension. Personal data describes any information which is related to an identified or identifiable natural person (data subject). An identifiable person is one who can be identified, directly or indirectly, in particular by a reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person." }, "x-sap-dpp-is-potentially-sensitive": { "type": "boolean", "default": true, - "description": "Property contains potentially sensitive personal data" + "description": "Property contains potentially sensitive personal data. Sensitive personal data is a category of personal data that needs special handling. The determination which personal data is sensitive may differ for different legal areas or industries. Examples of sensitive personal data: 1. Special categories of personal data, such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health or sex life or sexual orientation. 2. Personal data subject to professional secrecy. 3. Personal data relating to criminal or administrative offenses. 4. Personal data concerning insurances and bank or credit card accounts." }, "x-sap-odm-semantic-key": { "type": "array", diff --git a/sap-schemas/v3.0/README.md b/sap-schemas/v3.0/README.md index 48b668a..c335318 100644 --- a/sap-schemas/v3.0/README.md +++ b/sap-schemas/v3.0/README.md @@ -587,7 +587,7 @@ Constraints: - Type: `Boolean` - Used at: [Schema Object](https://spec.openapis.org/oas/v3.0.3#schema-object) -- Description: Property contains potentially personal data. Properties annotated with `x-sap-dpp-field-semantics` need not be additionally annotated with this extension. +- Description: Property contains potentially personal data. Properties annotated with `x-sap-dpp-field-semantics` need not be additionally annotated with this extension. Personal data describes any information which is related to an identified or identifiable natural person (data subject). An identifiable person is one who can be identified, directly or indirectly, in particular by a reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person. Constraints: @@ -598,7 +598,14 @@ Constraints: - Type: `Boolean` - Used at: [Schema Object](https://spec.openapis.org/oas/v3.0.3#schema-object) -- Description: Property contains potentially sensitive personal data. +- Description: Property contains potentially sensitive personal data. Sensitive personal data is a category of personal data that needs special handling. The determination which personal data is sensitive may differ for different legal areas or industries. + + Examples of sensitive personal data: + + - Special categories of personal data, such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health or sex life or sexual orientation. + - Personal data subject to professional secrecy. + - Personal data relating to criminal or administrative offenses. + - Personal data concerning insurances and bank or credit card accounts. Constraints: diff --git a/sap-schemas/v3.0/schema.json b/sap-schemas/v3.0/schema.json index 5f5dd0a..76b86f7 100644 --- a/sap-schemas/v3.0/schema.json +++ b/sap-schemas/v3.0/schema.json @@ -724,12 +724,12 @@ "x-sap-dpp-is-potentially-personal": { "type": "boolean", "default": true, - "description": "Property contains potentially personal data. Properties annotated with x-sap-dpp-field-semantics need not be additionally annotated with this extension." + "description": "Property contains potentially personal data. Properties annotated with x-sap-dpp-field-semantics need not be additionally annotated with this extension. Personal data describes any information which is related to an identified or identifiable natural person (data subject). An identifiable person is one who can be identified, directly or indirectly, in particular by a reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person." }, "x-sap-dpp-is-potentially-sensitive": { "type": "boolean", "default": true, - "description": "Property contains potentially sensitive personal data" + "description": "Property contains potentially sensitive personal data. Sensitive personal data is a category of personal data that needs special handling. The determination which personal data is sensitive may differ for different legal areas or industries. Examples of sensitive personal data: 1. Special categories of personal data, such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health or sex life or sexual orientation. 2. Personal data subject to professional secrecy. 3. Personal data relating to criminal or administrative offenses. 4. Personal data concerning insurances and bank or credit card accounts." }, "x-sap-odm-semantic-key": { "type": "array",