Privacy

incubating

Status of this Document

This report was published by the User Journal Graph Community Group . It is not a W3C Standard nor is it on the W3C Standards Track. Please note that under the W3C Community Contributor License Agreement (CLA) there is a limited opt-out and other conditions apply. Learn more about W3C Community and Business Groups .

Editors: Seva Dolgopolov
Group: User Journal Graph Community Group
Repository: View Source
License: W3C-Software-and-Document

Status: incubating supported extension for privacy metadata on UJG nodes.

This page provides an exploratory payload shape for privacy concerns such as data classification, consent purposes, retention windows, and redaction rules. The schema and examples below are informative brainstorming material, not normative conformance artifacts.

1. Namespace

Canonical namespace string: https://ujg.specs.openuji.org/ed/extensions/privacy
Payload location: extensions["https://ujg.specs.openuji.org/ed/extensions/privacy"]

2. Scope

Applicable UJG objects: Node
Likely attachment points: Touchpoint, RuntimeEvent, ExperienceStep

3. Exploratory JSON Schema

json

 {
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://ujg.specs.openuji.org/ed/extensions/privacy/schema",
  "title": "UJG Privacy Extension Payload",
  "type": "object",
  "additionalProperties": false,
  "properties": {
    "version": { "type": "string" },
    "dataClassification": {
      "type": "string",
      "enum": ["public", "internal", "personal", "sensitive"]
    },
    "legalBasis": { "type": "string" },
    "consentPurposes": {
      "type": "array",
      "items": { "type": "string" }
    },
    "retentionDays": { "type": "integer", "minimum": 0 },
    "redaction": {
      "type": "object",
      "additionalProperties": { "type": "boolean" }
    },
    "sharing": {
      "type": "object",
      "additionalProperties": false,
      "properties": {
        "processors": {
          "type": "array",
          "items": { "type": "string" }
        },
        "transferRegion": { "type": "string" }
      }
    }
  },
  "required": ["dataClassification"]
} 
 {
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://ujg.specs.openuji.org/ed/extensions/privacy/schema",
  "title": "UJG Privacy Extension Payload",
  "type": "object",
  "additionalProperties": false,
  "properties": {
    "version": { "type": "string" },
    "dataClassification": {
      "type": "string",
      "enum": ["public", "internal", "personal", "sensitive"]
    },
    "legalBasis": { "type": "string" },
    "consentPurposes": {
      "type": "array",
      "items": { "type": "string" }
    },
    "retentionDays": { "type": "integer", "minimum": 0 },
    "redaction": {
      "type": "object",
      "additionalProperties": { "type": "boolean" }
    },
    "sharing": {
      "type": "object",
      "additionalProperties": false,
      "properties": {
        "processors": {
          "type": "array",
          "items": { "type": "string" }
        },
        "transferRegion": { "type": "string" }
      }
    }
  },
  "required": ["dataClassification"]
} 

4. Example

json

 {
  "@id": "https://example.com/runtime/events/payment-authorized",
  "@type": "RuntimeEvent",
  "extensions": {
    "https://ujg.specs.openuji.org/ed/extensions/privacy": {
      "version": "0.1.0",
      "dataClassification": "personal",
      "legalBasis": "contract",
      "consentPurposes": ["analytics-basic", "fraud-prevention"],
      "retentionDays": 365,
      "redaction": {
        "email": true,
        "cardLast4": false
      },
      "sharing": {
        "processors": ["payments.vendor-a", "fraud.vendor-b"],
        "transferRegion": "eu"
      }
    }
  }
} 
 {
  "@id": "https://example.com/runtime/events/payment-authorized",
  "@type": "RuntimeEvent",
  "extensions": {
    "https://ujg.specs.openuji.org/ed/extensions/privacy": {
      "version": "0.1.0",
      "dataClassification": "personal",
      "legalBasis": "contract",
      "consentPurposes": ["analytics-basic", "fraud-prevention"],
      "retentionDays": 365,
      "redaction": {
        "email": true,
        "cardLast4": false
      },
      "sharing": {
        "processors": ["payments.vendor-a", "fraud.vendor-b"],
        "transferRegion": "eu"
      }
    }
  }
} 