ISO/IEC 23751:2022 情報技術—クラウドコンピューティングと分散プラットフォーム—データ共有契約（DSA）フレームワーク | ページ 6

3.1

party

natural person or legal person, whether or not incorporated, or a group of either

[SOURCE:ISO/IEC 27729:2012,3.1]

3.2

data originator

party (3.1) that created the data and that can have rights

Note 1 to entry: A data originator can be an individual person.

Note 2 to entry: The data originator can be distinct from the natural or legal person(s) mentioned in, described by, or implicitly or explicitly associated with the data. For example, PII can be collected by a data originator that identifies other individuals. Those data subjects (PII Principals) can also have rights, in relation to the data set.

Note 3 to entry: Rights can include the right to publicity, right to display name, right to identity, right to prohibit data use in a way that offends honourable mention.

3.3

data broker

party (3.1) that collects data from one or more sources and sells the data to one or more data users (3.5)

Note 1 to entry: In the context of data broker, sell means to provide data in exchange for money or other item of value.

3.4

data holder

party (3.1) that has legal control to authorize data processing (3.8) of the data by other parties

Note 1 to entry: A data originator (3.2) can be a data holder.

3.5

data user

party (3.1) that is authorized to perform processing of data under the legal control of a data holder (3.4)

3.6

chain of custody

demonstrable possession, movement, handling, and location of material from one point in time until another

[SOURCE:ISO/IEC 27050-1:2016, 3.1]

3.7

data sharing

access to or processing of the same data by more than one authorized entity

Note 1 to entry: Use of the data can be synchronous or asynchronous.

Note 2 to entry: Data can be shared, for example, (i) by allowing access to, or the execution of operations over, the original dataset, or (ii) by giving a copy of the data to the interested entity.

Note 3 to entry: The way in which data is shared fundamentally influences the available controls and the statements needed in a data sharing agreement.

3.8

data processing

systematic performance of operations upon data

[SOURCE:ISO 2382:2015, 2121276, modified — Notes 1, 2, 3 and 4 to entry were deleted.]

3.9

cloud service agreement

documented agreement between the cloud service provider and cloud service customer that governs the covered service(s)

Note 1 to entry: A cloud service agreement can consist of one or more parts recorded in one or more documents.

[SOURCE:ISO/IEC 19086-1:2016, 3.3]

3.10

data store

persistent repository for digital information

Note 1 to entry: A data store can be accessed by a single entity or shared by multiple entities via a network or other connection.

[SOURCE:ISO/IEC 20924:2018, 3.1.13]

3.11

ratio scale

continuous scale with equal sized scale values and an absolute or natural zero point

[SOURCE:ISO 3534‑2:2006, 1.1.9, modified — The EXAMPLE and Note 1 to entry were deleted.]

3.12

data level objective

DLO

commitment a data holder (3.4) or a data user (3.5) makes for a specific, quantitative characteristic of a dataset ここで, the value follows the interval scale or ratio scale (3.11)

Note 1 to entry: A data level objective commitment can be expressed as a range.

3.13

data qualitative objective

DQO

commitment a data holder (3.4) or a data user (3.5) makes for a specific, qualitative characteristic of a dataset ここで, the value follows the nominal scale or ordinal scale

Note 1 to entry: A data qualitative objective can be expressed as an enumerated list.

Note 2 to entry: Qualitative characteristics typically require human interpretation.

Note 3 to entry: The ordinal scale allows for existence/non-existence.

3.14

public domain data

class of data objects over which nobody holds or can hold copyright or other intellectual property

Note 1 to entry: Data can be in the public domain in some jurisdictions, while not in others.

Note 2 to entry: The concept of public domain and the difference between this and"publicly available" is subtle and varies between jurisdictions. Readers should make themselves aware of the specific legal situation as it can apply to them.

[SOURCE:ISO/IEC 19944-1:2020, 3.4.4]