EM-LEG-06 · Subject model · W2
Personal data processing and data subject rights
Processing purpose, data categories, participant roles, legal basis, retention periods and data subject requests. Jurisdictional rules are defined by verified profiles.
Queued for research
Claude: not-started; Grok: not-started.
Research note, in Russian: Entire research brief pending
Subject boundary and candidate types
- ProcessingActivity
- Purpose
- DataSubjectRequest
- ProcessingBasis
- RetentionRule
Deep research questions
- How to distinguish a purpose from a storage system?
- When is consent a legal basis and when is it not?
- How to fulfill deletion when another fact must be retained?
Verifiable invariants
- Purpose and legal basis are stated separately
- Deletion has a scope and a confirmation
- A projection does not extend the permitted purpose
End-to-end acceptance scenario
Verify a deletion request, lawful retention of part of the records and a minimal projection for analytics.
Negative case
Withdrawal of consent unconditionally deletes the entire accounting history.
Approaches to compare
- OASIS UBL/FIBO: agreements, parties and obligations
- ODRL: permission, prohibition, duty and constraint
- Primary legal sources of selected jurisdictions; subject-matter verification of applicability is mandatory
Candidates in the live catalogue
- WM-XCT-002 · Access Contract / Consent · 0.3.0-research.1 · installable
Semantic fit requires boundary research; a published model does not by itself complete this card. - WM-XCT-003 · Projection / Disclosure Policy · 0.3.0-research.1 · installable
Semantic fit requires boundary research; a published model does not by itself complete this card.
Result requirements
Every card is executed together with the full research contract: definitions, fields and cardinalities, lifecycle, sources, data mastership, rights, the five object facets, at least eight invariants, positive and negative examples, dependencies, migration and applicability limits.