Formalization
We derive the extracted rules of the EU DPD into a machine readable format, so that can be processed by the automated tool. We chose JSON format to express the rules. We call this rule as Template Access Control Policy or Abstract Policy.
Below is the complete abstract policy extracted from the EU DPD, and also available inside the tool.
{ "comment": "version: 17/02/17", "type": "abstract", "rule": [ { "label": ["art.2(g)"], "effect": "allow", "sufficient": ["read", "anonymous_data"], "predicate": ["recipient", "read", "anonymous_data"] }, { "label": ["art.2(g)"], "effect": "deny", "predicate": ["recipient", "not_read"] }, { "label": ["art.2(g)"], "effect": "deny", "predicate": ["recipient", "not_anonymous_data"] }, { "label": ["art.3(2)"], "effect": "allow", "predicate": ["process", "personal_data", "domestic_exception"] }, { "label": ["art.3(2)"], "effect": "deny", "predicate": ["process", "personal_data", "not_domestic_exception"] }, { "label": ["art.7(1)(a)", "art.6(1)", "art.5"], "effect": "allow", "predicate": ["controller", "process", "personal_data", "legitimate_purpose", "data_quality", "consent", "ms_requirements"] }, { "label": ["art.7(1)(a)", "art.6(1)", "art.5"], "effect": "deny", "sufficient": "not_legitimate_purpose", "predicate": ["controller", "process", "personal_data", "not_legitimate_purpose"] }, { "label": ["art.7(1)(a)", "art.6(1)", "art.5"], "effect": "deny", "sufficient": "not_data_quality", "predicate": ["controller", "process", "personal_data", "not_data_quality"] }, { "label": ["art.7(1)(a)", "art.6(1)", "art.5"], "effect": "deny", "sufficient": "not_consent", "predicate": ["controller", "process", "personal_data", "not_consent"] }, { "label": ["art.7(1)(a)", "art.6(1)", "art.5"], "effect": "deny", "sufficient": "not_ms_requirements", "predicate": ["controller", "process", "personal_data", "not_ms_requirements"] }, { "label": ["art.7(1)(a)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "allow", "predicate": ["processor", "process", "personal_data", "mandate", "legitimate_purpose", "data_quality", "ms_requirements"] }, { "label": ["art.7(1)(a)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "sufficient": "not_mandate", "predicate": ["processor", "process", "personal_data", "not_mandate"] }, { "label": ["art.7(1)(b)", "art.6(1)", "art.5"], "effect": "allow", "predicate": ["controller", "process", "personal_data", "contract_purpose", "data_quality", "ms_requirements"] }, { "label": ["art.7(1)(b)", "art.6(1)", "art.5"], "effect": "deny", "predicate": ["controller", "process", "personal_data", "not_contract_purpose", "data_quality", "ms_requirements"] }, { "label": ["art.7(1)(b)", "art.6(1)", "art.5"], "effect": "deny", "predicate": ["controller", "process", "personal_data", "contract_purpose", "not_data_quality", "ms_requirements"] }, { "label": ["art.7(1)(b)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "allow", "predicate": ["processor", "mandate", "process", "personal_data", "contract_purpose", "data_quality", "ms_requirements"] }, { "label": ["art.7(1)(b)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "predicate": ["processor", "not_mandate", "process", "personal_data", "contract_purpose", "data_quality", "ms_requirements"] }, { "label": ["art.7(1)(b)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "predicate": ["processor", "mandate", "process", "personal_data", "not_contract_purpose", "data_quality", "ms_requirements"] }, { "label": ["art.7(1)(b)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "predicate": ["processor", "mandate", "process", "personal_data", "contract_purpose", "not_data_quality", "ms_requirements"] }, { "label": ["art.7(1)(c)", "art.6(1)", "art.5"], "effect": "allow", "predicate": ["controller", "process", "personal_data", "legal_obligation_purpose", "data_quality", "ms_requirements"] }, { "label": ["art.7(1)(c)", "art.6(1)", "art.5"], "effect": "deny", "predicate": ["controller", "process", "personal_data", "not_legal_obligation_purpose", "data_quality", "ms_requirements"] }, { "label": ["art.7(1)(c)", "art.6(1)", "art.5"], "effect": "deny", "predicate": ["controller", "process", "personal_data", "legal_obligation_purpose", "not_data_quality", "ms_requirements"] }, { "label": ["art.7(1)(c)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "allow", "predicate": ["processor", "mandate", "process", "personal_data", "legal_obligation_purpose", "data_quality", "ms_requirements"] }, { "label": ["art.7(1)(c)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "predicate": ["processor", "not_mandate", "process", "personal_data", "legal_obligation_purpose", "data_quality", "ms_requirements"] }, { "label": ["art.7(1)(c)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "predicate": ["processor", "mandate", "process", "personal_data", "not_legal_obligation_purpose", "data_quality", "ms_requirements"] }, { "label": ["art.7(1)(c)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "predicate": ["processor", "mandate", "process", "personal_data", "legal_obligation_purpose", "not_data_quality", "ms_requirements"] }, { "label": ["art.7(1)(d)", "art.6(1)", "art.5"], "effect": "allow", "predicate": ["controller", "process", "personal_data", "vital_interest_purpose", "data_quality", "ms_requirements"] }, { "label": ["art.7(1)(d)", "art.6(1)", "art.5"], "effect": "deny", "predicate": ["controller", "process", "personal_data", "not_vital_interest_purpose", "data_quality", "ms_requirements"] }, { "label": ["art.7(1)(d)", "art.6(1)", "art.5"], "effect": "deny", "predicate": ["controller", "process", "personal_data", "vital_interest_purpose", "not_data_quality", "ms_requirements"] }, { "label": ["art.7(1)(d)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "allow", "predicate": ["processor", "mandate", "process", "personal_data", "vital_interest_purpose", "data_quality", "ms_requirements"] }, { "label": ["art.7(1)(d)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "predicate": ["processor", "not_mandate", "process", "personal_data", "vital_interest_purpose", "data_quality", "ms_requirements"] }, { "label": ["art.7(1)(d)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "predicate": ["processor", "mandate", "process", "personal_data", "not_vital_interest_purpose", "data_quality", "ms_requirements"] }, { "label": ["art.7(1)(d)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "predicate": ["processor", "mandate", "process", "personal_data", "vital_interest_purpose", "not_data_quality", "ms_requirements"] }, { "label": ["art.7(1)(e)", "art.6(1)", "art.5"], "effect": "allow", "predicate": ["controller", "process", "personal_data", "public_interest_purpose", "data_quality", "ms_requirements"] }, { "label": ["art.7(1)(e)", "art.6(1)", "art.5"], "effect": "deny", "predicate": ["controller", "process", "personal_data", "not_public_interest_purpose", "data_quality", "ms_requirements"] }, { "label": ["art.7(1)(e)", "art.6(1)", "art.5"], "effect": "deny", "predicate": ["controller", "process", "personal_data", "public_interest_purpose", "not_data_quality", "ms_requirements"] }, { "label": ["art.7(1)(e)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "allow", "predicate": ["processor", "mandate", "process", "personal_data", "public_interest_purpose", "data_quality", "ms_requirements"] }, { "label": ["art.7(1)(e)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "predicate": ["processor", "not_mandate", "process", "personal_data", "public_interest_purpose", "data_quality", "ms_requirements"] }, { "label": ["art.7(1)(e)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "predicate": ["processor", "mandate", "process", "personal_data", "not_public_interest_purpose", "data_quality", "ms_requirements"] }, { "label": ["art.7(1)(e)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "predicate": ["processor", "mandate", "process", "personal_data", "public_interest_purpose", "not_data_quality", "ms_requirements"] }, { "label": ["art.8(2)(a)", "art.6(1)", "art.5"], "effect": "allow", "predicate": ["controller", "process", "sensitive_data", "legitimate_purpose", "consent", "ms_requirements", "data_quality"] }, { "label": ["art.8(2)(a)", "art.6(1)", "art.5"], "effect": "deny", "predicate": ["controller", "process", "sensitive_data", "not_legitimate_purpose", "consent", "ms_requirements", "data_quality"] }, { "label": ["art.8(2)(a)", "art.6(1)", "art.5"], "effect": "deny", "predicate": ["controller", "process", "sensitive_data", "legitimate_purpose", "not_consent", "ms_requirements", "data_quality"] }, { "label": ["art.8(2)(a)", "art.6(1)", "art.5"], "effect": "deny", "predicate": ["controller", "process", "sensitive_data", "legitimate_purpose", "consent", "not_ms_requirements", "data_quality"] }, { "label": ["art.8(2)(a)", "art.6(1)", "art.5"], "effect": "deny", "predicate": ["controller", "process", "sensitive_data", "legitimate_purpose", "consent", "ms_requirements", "not_data_quality"] }, { "label": ["art.8(2)(a)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "allow", "predicate": ["processor", "mandate", "process", "sensitive_data", "legitimate_purpose", "data_quality", "ms_requirements"] }, { "label": ["art.8(2)(a)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "predicate": ["processor", "not_mandate", "process", "sensitive_data", "legitimate_purpose", "data_quality", "ms_requirements"] }, { "label": ["art.8(2)(a)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "predicate": ["processor", "mandate", "process", "sensitive_data", "not_legitimate_purpose", "data_quality", "ms_requirements"] }, { "label": ["art.8(2)(b)", "art.6(1)", "art.5"], "effect": "allow", "predicate": ["controller", "process", "sensitive_data", "employment_legal_obligation_purpose", "ms_requirements", "data_quality"] }, { "label": ["art.8(2)(b)", "art.6(1)", "art.5"], "effect": "deny", "predicate": ["controller", "process", "sensitive_data", "not_employment_legal_obligation_purpose", "ms_requirements", "data_quality"] }, { "label": ["art.8(2)(b)", "art.6(1)", "art.5"], "effect": "deny", "predicate": ["controller", "process", "sensitive_data", "employment_legal_obligation_purpose", "not_ms_requirements", "data_quality"] }, { "label": ["art.8(2)(b)", "art.6(1)", "art.5"], "effect": "deny", "predicate": ["controller", "process", "sensitive_data", "employment_legal_obligation_purpose", "ms_requirements", "not_data_quality"] }, { "label": ["art.8(2)(b)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "allow", "predicate": ["processor", "mandate", "process", "sensitive_data", "employment_legal_obligation_purpose", "data_quality", "ms_requirements"] }, { "label": ["art.8(2)(b)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "predicate": ["processor", "not_mandate", "process", "sensitive_data", "employment_legal_obligation_purpose", "data_quality", "ms_requirements"] }, { "label": ["art.8(2)(b)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "predicate": ["processor", "mandate", "process", "sensitive_data", "not_employment_legal_obligation_purpose", "data_quality", "ms_requirements"] }, { "label": ["art.8(2)(b)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "predicate": ["processor", "mandate", "process", "sensitive_data", "employment_legal_obligation_purpose", "not_data_quality", "ms_requirements"] }, { "label": ["art.8(2)(c)", "art.6(1)", "art.5"], "effect": "allow", "predicate": ["controller", "process", "sensitive_data", "vital_interest_purpose", "incapable_ds", "data_quality", "ms_requirements"] }, { "label": ["art.8(2)(c)", "art.6(1)", "art.5"], "effect": "deny", "predicate": ["controller", "process", "sensitive_data", "not_vital_interest_purpose", "incapable_ds", "data_quality", "ms_requirements"] }, { "label": ["art.8(2)(c)", "art.6(1)", "art.5"], "effect": "deny", "predicate": ["controller", "process", "sensitive_data", "vital_interest_purpose", "not_incapable_ds", "data_quality", "ms_requirements"] }, { "label": ["art.8(2)(c)", "art.6(1)", "art.5"], "effect": "deny", "predicate": ["controller", "process", "sensitive_data", "vital_interest_purpose", "incapable_ds", "not_data_quality", "ms_requirements"] }, { "label": ["art.8(2)(c)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "allow", "predicate": ["processor", "mandate", "process", "sensitive_data", "vital_interest_purpose", "incapable_ds", "data_quality", "ms_requirements"] }, { "label": ["art.8(2)(c)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "predicate": ["processor", "not_mandate", "process", "sensitive_data", "vital_interest_purpose", "incapable_ds", "data_quality", "ms_requirements"] }, { "label": ["art.8(2)(c)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "predicate": ["processor", "mandate", "process", "sensitive_data", "not_vital_interest_purpose", "incapable_ds", "data_quality", "ms_requirements"] }, { "label": ["art.8(2)(c)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "predicate": ["processor", "mandate", "process", "sensitive_data", "vital_interest_purpose", "not_incapable_ds", "data_quality", "ms_requirements"] }, { "label": ["art.8(2)(c)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "predicate": ["processor", "mandate", "process", "sensitive_data", "vital_interest_purpose", "incapable_ds", "not_data_quality", "ms_requirements"] }, { "label": ["art.8(2)(d)", "art.6(1)", "art.5"], "effect": "allow", "predicate": ["foundation_controller", "process_but_disclosing", "member_sensitive_data", "legitimate_activity_purpose", "data_quality", "ms_requirements"] }, { "label": ["art.8(2)(d)", "art.6(1)", "art.5"], "effect": "deny", "predicate": ["foundation_controller", "process_but_disclosing", "member_sensitive_data", "not_legitimate_activity_purpose", "data_quality", "ms_requirements"] }, { "label": ["art.8(2)(d)", "art.6(1)", "art.5"], "effect": "deny", "predicate": ["foundation_controller", "process_but_disclosing", "member_sensitive_data", "legitimate_activity_purpose", "not_data_quality", "ms_requirements"] }, { "label": ["art.8(2)(d)", "art.6(1)", "art.5"], "effect": "allow", "predicate": ["foundation_controller", "third_party_disclosing", "member_sensitive_data", "legitimate_activity_purpose", "consent", "data_quality", "ms_requirements"] }, { "label": ["art.8(2)(d)", "art.6(1)", "art.5"], "effect": "deny", "predicate": ["foundation_controller", "third_party_disclosing", "member_sensitive_data", "not_legitimate_activity_purpose", "consent", "data_quality", "ms_requirements"] }, { "label": ["art.8(2)(d)", "art.6(1)", "art.5"], "effect": "deny", "predicate": ["foundation_controller", "third_party_disclosing", "member_sensitive_data", "legitimate_activity_purpose", "not_consent", "data_quality", "ms_requirements"] }, { "label": ["art.8(2)(d)", "art.6(1)", "art.5"], "effect": "deny", "predicate": ["foundation_controller", "third_party_disclosing", "member_sensitive_data", "legitimate_activity_purpose", "consent", "not_data_quality", "ms_requirements"] }, { "label": ["art.8(2)(d)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "allow", "predicate": ["foundation_processor", "mandate", "process_but_disclosing", "member_sensitive_data", "legitimate_activity_purpose", "data_quality", "ms_requirements"] }, { "label": ["art.8(2)(d)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "predicate": ["foundation_processor", "not_mandate", "process_but_disclosing", "member_sensitive_data", "legitimate_activity_purpose", "data_quality", "ms_requirements"] }, { "label": ["art.8(2)(d)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "predicate": ["foundation_processor", "mandate", "process_but_disclosing", "member_sensitive_data", "not_legitimate_activity_purpose", "data_quality", "ms_requirements"] }, { "label": ["art.8(2)(d)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "predicate": ["foundation_processor", "mandate", "process_but_disclosing", "member_sensitive_data", "legitimate_activity_purpose", "not_data_quality", "ms_requirements"] }, { "label": ["art.8(2)(d)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "allow", "predicate": ["foundation_processor", "mandate", "third_party_disclosing", "member_sensitive_data", "legitimate_activity_purpose", "consent", "data_quality", "ms_requirements"] }, { "label": ["art.8(2)(d)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "predicate": ["foundation_processor", "not_mandate", "third_party_disclosing", "member_sensitive_data", "legitimate_activity_purpose", "consent", "data_quality", "ms_requirements"] }, { "label": ["art.8(2)(d)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "predicate": ["foundation_processor", "mandate", "third_party_disclosing", "member_sensitive_data", "not_legitimate_activity_purpose", "consent", "data_quality", "ms_requirements"] }, { "label": ["art.8(2)(d)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "predicate": ["foundation_processor", "mandate", "third_party_disclosing", "member_sensitive_data", "legitimate_activity_purpose", "not_consent", "data_quality", "ms_requirements"] }, { "label": ["art.8(2)(d)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "predicate": ["foundation_processor", "mandate", "third_party_disclosing", "member_sensitive_data", "legitimate_activity_purpose", "consent", "not_data_quality", "ms_requirements"] }, { "label": ["art.8(2)(e)", "art.6(1)", "art.5"], "effect": "allow", "predicate": ["controller", "process", "sensitive_data", "already_public", "data_quality", "ms_requirements"] }, { "label": ["art.8(2)(e)", "art.6(1)", "art.5"], "effect": "deny", "predicate": ["controller", "process", "sensitive_data", "not_already_public", "data_quality", "ms_requirements"] }, { "label": ["art.8(2)(e)", "art.6(1)", "art.5"], "effect": "deny", "predicate": ["controller", "process", "sensitive_data", "already_public", "not_data_quality", "ms_requirements"] }, { "label": ["art.8(2)(e)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "allow", "predicate": ["processor", "mandate", "process", "sensitive_data", "already_public", "data_quality", "ms_requirements"] }, { "label": ["art.8(2)(e)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "predicate": ["processor", "not_mandate", "process", "sensitive_data", "already_public", "data_quality", "ms_requirements"] }, { "label": ["art.8(2)(e)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "predicate": ["processor", "mandate", "process", "sensitive_data", "not_already_public", "data_quality", "ms_requirements"] }, { "label": ["art.8(2)(e)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "predicate": ["processor", "mandate", "process", "sensitive_data", "already_public", "not_data_quality", "ms_requirements"] }, { "label": ["art.8(2)(e)", "art.6(1)", "art.5"], "effect": "allow", "predicate": ["controller", "process", "sensitive_data", "legal_claims_purpose", "data_quality", "ms_requirements"] }, { "label": ["art.8(2)(e)", "art.6(1)", "art.5"], "effect": "deny", "predicate": ["controller", "process", "sensitive_data", "not_legal_claims_purpose", "data_quality", "ms_requirements"] }, { "label": ["art.8(2)(e)", "art.6(1)", "art.5"], "effect": "deny", "predicate": ["controller", "process", "sensitive_data", "legal_claims_purpose", "not_data_quality", "ms_requirements"] }, { "label": ["art.8(2)(e)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "allow", "predicate": ["processor", "mandate", "process", "sensitive_data", "legal_claims_purpose", "data_quality", "ms_requirements"] }, { "label": ["art.8(2)(e)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "predicate": ["processor", "not_mandate", "process", "sensitive_data", "legal_claims_purpose", "data_quality", "ms_requirements"] }, { "label": ["art.8(2)(e)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "predicate": ["processor", "mandate", "process", "sensitive_data", "not_legal_claims_purpose", "data_quality", "ms_requirements"] }, { "label": ["art.8(2)(e)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "predicate": ["processor", "mandate", "process", "sensitive_data", "legal_claims_purpose", "not_data_quality", "ms_requirements"] }, { "label": ["art.8(3)", "art.6(1)", "art.5"], "effect": "allow", "predicate": ["health_professional_controller", "process", "sensitive_data", "health_purposes", "ms_requirements", "data_quality"] }, { "label": ["art.8(3)", "art.6(1)", "art.5"], "effect": "deny", "sufficient": "not_health_purposes", "predicate": ["health_professional_controller", "process", "sensitive_data", "not_health_purposes"] }, { "label": ["art.8(3)", "art.6(1)", "art.5"], "effect": "deny", "sufficient": "not_ms_requirements", "predicate": ["health_professional_controller", "process", "sensitive_data", "not_ms_requirements"] }, { "label": ["art.8(3)", "art.6(1)", "art.5"], "effect": "deny", "sufficient": "not_sensitive_data", "predicate": ["health_professional_controller", "process", "not_sensitive_data"] }, { "label": ["art.8(3)", "art.6(1)", "art.5"], "effect": "deny", "sufficient": "not_data_quality", "predicate": ["health_professional_controller", "process", "sensitive_data", "not_data_quality"] }, { "label": ["art.8(3)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "allow", "predicate": ["health_professional_processor", "mandate", "process", "sensitive_data", "health_purposes", "ms_requirements", "data_quality"] }, { "label": ["art.8(3)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "sufficient": "not_mandate", "predicate": ["health_professional_processor", "not_mandate", "process", "sensitive_data"] }, { "label": ["art.8(3)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "sufficient": "not_ms_requirements", "predicate": ["health_professional_processor", "process", "sensitive_data", "not_ms_requirements"] }, { "label": ["art.8(3)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "sufficient": "not_health_purposes", "predicate": ["health_professional_processor", "process", "sensitive_data", "not_health_purposes"] }, { "label": ["art.8(3)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "sufficient": "not_data_quality", "predicate": ["health_professional_processor", "process", "sensitive_data", "not_data_quality"] }, { "label": ["art.8(3)", "art.6(1)", "art.2(e)", "art.16", "art.17(2)(3)(4)", "art.5"], "effect": "deny", "sufficient": "not_sensitive_data", "predicate": ["health_professional_processor", "process", "not_sensitive_data"] }, { "label": ["art.12", "art.2(d)"], "effect": "allow", "predicate": ["data_subject", "empower", "access", "personal_data"] }, { "label": ["art.12", "art.2(d)"], "effect": "deny", "sufficient": "not_empower", "predicate": ["data_subject", "not_empower", "access", "personal_data"] }, { "label": ["art.12", "art.2(d)"], "effect": "deny", "sufficient": "not_personal_data", "predicate": ["data_subject", "access", "not_personal_data"] } ]}