adds AI Act documentation; fixes pd concept

- adds EU AI Act documentation with message on vocabulary being in early stages (diagrams are missing) - fixes 'Country' being defined twice in PD (removes the later addition from @besteves4)
w3c · May 31, 2024 · 079e9ef · 079e9ef
1 parent 0d91464
commit 079e9ef
Show file tree

Hide file tree

Showing 72 changed files with 23,340 additions and 23,431 deletions.
diff --git a/code/jinja2_resources/template_legal_eu_aiact.jinja2 b/code/jinja2_resources/template_legal_eu_aiact.jinja2
@@ -70,78 +70,91 @@
 <body>
 {% block ABSTRACT %}
   <section id="abstract">
-    <p>TODO</p>
+    <p>The EU-AIAct extension extends the [[[DPV]]] to provide concepts such as systems, purposes, risks, roles, documentations, and assessments based on the [[[AIAct]]]. The canonical URL for EU-AIAct extension is <a href="https://w3id.org/dpv/legal/eu/aiact">https://w3id.org/dpv/legal/eu/aiact</a>, the namespace for terms is <a href="https://w3id.org/dpv/legal/eu/aiact#"><code>https://w3id.org/dpv/legal/eu/aiact#</code></a>, the suggested prefix is <code>eu-aiact</code>, and this document along with source and releases are available at <a href="https://github.com/w3c/dpv">https://github.com/w3c/dpv</a>.</p>
+    <p style="color: red">NOTE: This is a draft vocabulary, which will be updated as the AI Act is formally published and authoritative guidance is established on its interpretation. The DPVCG welcomes participation and contributions for this work.</p>
     {{ sotd() }}
     {{ dpv_document_family(document='eu-aiact-spec') }}
   </section>
 {% endblock ABSTRACT %}
 {% block INTRODUCTION %}
   <section id="motivation">
     <h2>Introduction</h2>
-    <div class="issue" title="Content missing - Introduction"></div>
+    <p>The [[[AIAct]]] is a landmark regulation which regulates the use of Artificial Intelligence (AI) technologies. To support its implementation, the [[EU-AIAct]] extension provides relevant concepts which can be used to describe the facts of how AI is being developed and used within use-cases, and to produce the required documentation necessary for establishing or verifying compliance with the [[AIAct]]. Concepts in this extension extend relevant concepts defined in [[[DPV]]], as well as those defined in [[[AI]]] and [[[TECH]]] extensions.</p>
+    <p>At the moment, the [[EU-AIAct]] extension provides the following concepts as defined or interpreted from the [[AIAct]]:</p>
+    <ul>
+      <li><a href="#vocab-system">taxonomy of AI systems</a>, such as general purpose AI systems or those using biometrics</li>
+      <li><a href="#vocab-purpose">taxonomy of purposes</a>, such as to produce deep fakes or perform biometric identification</li>
+      <li><a href="#vocab-risk">taxonomy of risk categorisations</a>, such as defining serious incidents or systemtic risks at EU level</li>
+      <li><a href="#vocab-data">taxonomy of data categorisations</a>, such as training and testing data</li>
+      <li><a href="#vocab-roles">taxonomy of legal roles</a>, such as the AI Deployers and Providers</li>
+      <li><a href="#vocab-docs">taxonomy of documentation</a>, such as technical documentation </li>
+      <li><a href="#vocab-status">taxonomy of statuses</a>, such as market availability and supply of services</li>
+      <li><a href="#vocab-assessment">taxonomy of assessments</a>, such as conformity assessment and fundamental rights impact assessment</li>
+      <li><a href="#vocab-misc">other concepts</a>, such as substantial modification and reasonably forseeable misuses</li>
+    </ul>
   </section>
 {% endblock INTRODUCTION %}
 {% block VOCAB %}
 
   <section id="vocab-system">
     <h2>AI System</h2>
-    <div class="issue" title="Content missing - Entities"></div>
+    <p>The concept [=AISystem=] represents AI systems as defined in the AI Act.</p>
 
     {{ list_hierarchy(modules['system']['classes']) }}
   </section>
 
   <section id="vocab-purpose">
-    <h2>AI Purpose</h2>
-    <div class="issue" title="Content missing - Purpose"></div>
+    <h2>AI Capability</h2>
+    <p>The use of 'capability' here refers to the capability of the technology to produce, perform, or achieve something, which is expressed in the [[TECH]] extension as <code>tech:Capability</code>.</p>
 
     {{ list_hierarchy(modules['purpose']['classes']) }}
   </section>
 
   <section id="vocab-risk">
     <h2>AI Risk</h2>
-    <div class="issue" title="Content missing - Risk"></div>
+    <p>The AI Act has a specific definition of risk as "combination of the probability of an occurrence of harm and the severity of that harm", which is represented using the concept [=Risk=] within this extension. This definition is a more specific form of <code>dpv:Risk</code>, and hence the existing relations can be used to describe its severity and likelihood.</p>
 
     {{ list_hierarchy(modules['risk']['classes']) }}
   </section>
 
   <section id="vocab-data">
     <h2>AI Data</h2>
-    <div class="issue" title="Content missing - Data"></div>
+    <p>The AI Act defines different categories of data as used to develop and deploy AI systems, such as [=TrainingData=] and [=TestingData=]. It also uses [=Biometric=] which is a special category of personal data under [[GDPR]].</p>
 
     {{ list_hierarchy(modules['data']['classes']) }}
   </section>
 
   <section id="vocab-roles">
     <h2>AI Roles</h2>
-    <div class="issue" title="Content missing - Roles"></div>
+    <p>AI Roles describes the categorisation of entities based on the role they take in developing, providing or deploying, and using an AI System as defined within the [[AIAct]].</p> 
 
     {{ list_hierarchy(modules['roles']['classes']) }}
   </section>
 
   <section id="vocab-docs">
     <h2>AI Documentation</h2>
-    <div class="issue" title="Content missing - Documentation"></div>
+    <p>The documentation associated with AI, AI Systems, and other processes defined within the AI Act. These are described using <code>tech:Documentation</code> from the [[TECH]] extension.</p>
 
     {{ list_hierarchy(modules['docs']['classes']) }}
   </section>
 
   <section id="vocab-status">
     <h2>AI Status</h2>
-    <div class="issue" title="Content missing - Status"></div>
+    <p>Different statuses are described or implied within the [[AIAct]], such as [=MarketAvailabilityStatus=] regarding whether the AI system is available on the market, and [=ServiceSupplyStatus=] regarding whether the AI system has been supplied. These statuses refect the requirement to describe the state of the AI system and its use, which has implications in terms of requirements and obligations.</p>
 
     {{ list_hierarchy(modules['status']['classes']) }}
   </section>
 
   <section id="vocab-assessment">
     <h2>AI Assessment</h2>
-    <div class="issue" title="Content missing - Assessment"></div>
+    <p>The [[AIAct]] requires various assessments, such as [=CEMarking=] and [=PostMarketMonitoringSystem=] as part of its obligations. These are described using [[DPV]] concepts such as <code>dpv:CertificationSeal</code> and <code>dpv:ImpactAssessment</code>.</p>
 
     {{ list_hierarchy(modules['assessment']['classes']) }}
   </section>
 
   <section id="vocab-misc">
     <h2>Misc. Concepts</h2>
-    <div class="issue" title="Content missing - Misc concepts"></div>
+    <p>These concepts currently do not fit within the other stated categories, and are pooled together under a 'misc.' label while the vocabulary is being further developed.</p>
 
     {{ list_hierarchy(modules['misc']['classes']) }}
   </section>

diff --git a/code/vocab_csv/pd-extended.csv b/code/vocab_csv/pd-extended.csv
@@ -208,7 +208,7 @@ Sexual,Sexual,Information about sexuality and sexual history ,"pd:External,dpv:S
 TradeUnionMembership,Trade Union Membership,Information about trade union memberships and related topics,"pd:GroupMembership,dpv:SpecialCategoryPersonalData",dpv:PersonalData,,,,,,2022-05-18,,accepted,Harshvardhan J. Pandit,https://www.w3.org/community/dpvcg/wiki/MinutesOfMeeting_20220518,,,,,,,,,,,,,
 ,,,,,,,,,,,,,,
 PhysicalAddress,Physical Address,Information about physical address.,"pd:Contact,pd:Location",dpv:PersonalData,,,,,"(EnterPrivacy Categories of Personal Information, https://enterprivacy.com/wp-content/uploads/2018/09/Categories-of-Personal-Information.pdf)",2019-06-04,2024-04-20,modified,"Elmar Kiesling; Harshvardhan J. Pandit, Fajar Ekaputra, Beatriz Esteves",https://www.w3.org/2019/06/04-dpvcg-minutes.html,,,,,,,,,,,,,
-Country,Country,Information about country as a location,pd:PhysicalAddress,dpv:PersonalData,,,,,,,,accepted,Beatriz Esteves,,,,,,,,,,,,,,
+Country,Country,Information about country as a location,pd:PhysicalAddress,dpv:PersonalData,,,,,,,,,Beatriz Esteves,,,,,,,,,,,,,,
 Region,Region,Information about region as a location,pd:PhysicalAddress,dpv:PersonalData,,,,,,,,accepted,Beatriz Esteves,,,,,,,,,,,,,,
 City,City,Information about city as a location,pd:PhysicalAddress,dpv:PersonalData,,,,,,,,accepted,Beatriz Esteves,,,,,,,,,,,,,,
 Street,Street,Information about street as a location,pd:PhysicalAddress,dpv:PersonalData,,,,,,,,accepted,Beatriz Esteves,,,,,,,,,,,,,,

diff --git a/code/vocab_csv/pd.xlsx b/code/vocab_csv/pd.xlsx
diff --git a/legal/eu/aiact/eu-aiact-en.html b/legal/eu/aiact/eu-aiact-en.html
@@ -346,7 +346,8 @@
 </head>
 <body>
   <section id="abstract">
-    <p>TODO</p>
+    <p>The EU-AIAct extension extends the [[[DPV]]] to provide concepts such as systems, purposes, risks, roles, documentations, and assessments based on the [[[AIAct]]]. The canonical URL for EU-AIAct extension is <a href="https://w3id.org/dpv/legal/eu/aiact">https://w3id.org/dpv/legal/eu/aiact</a>, the namespace for terms is <a href="https://w3id.org/dpv/legal/eu/aiact#"><code>https://w3id.org/dpv/legal/eu/aiact#</code></a>, the suggested prefix is <code>eu-aiact</code>, and this document along with source and releases are available at <a href="https://github.com/w3c/dpv">https://github.com/w3c/dpv</a>.</p>
+    <p style="color: red">NOTE: This is a draft vocabulary, which will be updated as the AI Act is formally published and authoritative guidance is established on its interpretation. The DPVCG welcomes participation and contributions for this work.</p>
     <section id="sotd">
     <p style="color: red; font-weight: bold;">The DPVCG is currently updating the specifications to v2. This document is a draft and may change as part of this process.</p>
     <p><strong>Contributing:</strong> The DPVCG welcomes participation to improve the DPV and associated resources, including expansion or refinement of concepts, requesting information and applications, and addressing open issues. <a href="https://github.com/w3c/dpv/blob/master/contributing.md">See contributing page</a> for further information.</p>
@@ -363,12 +364,24 @@ <h2>DPV and Related Resources</h2>
   </section>
   <section id="motivation">
     <h2>Introduction</h2>
-    <div class="issue" title="Content missing - Introduction"></div>
+    <p>The [[[AIAct]]] is a landmark regulation which regulates the use of Artificial Intelligence (AI) technologies. To support its implementation, the [[EU-AIAct]] extension provides relevant concepts which can be used to describe the facts of how AI is being developed and used within use-cases, and to produce the required documentation necessary for establishing or verifying compliance with the [[AIAct]]. Concepts in this extension extend relevant concepts defined in [[[DPV]]], as well as those defined in [[[AI]]] and [[[TECH]]] extensions.</p>
+    <p>At the moment, the [[EU-AIAct]] extension provides the following concepts as defined or interpreted from the [[AIAct]]:</p>
+    <ul>
+      <li><a href="#vocab-system">taxonomy of AI systems</a>, such as general purpose AI systems or those using biometrics</li>
+      <li><a href="#vocab-purpose">taxonomy of purposes</a>, such as to produce deep fakes or perform biometric identification</li>
+      <li><a href="#vocab-risk">taxonomy of risk categorisations</a>, such as defining serious incidents or systemtic risks at EU level</li>
+      <li><a href="#vocab-data">taxonomy of data categorisations</a>, such as training and testing data</li>
+      <li><a href="#vocab-roles">taxonomy of legal roles</a>, such as the AI Deployers and Providers</li>
+      <li><a href="#vocab-docs">taxonomy of documentation</a>, such as technical documentation </li>
+      <li><a href="#vocab-status">taxonomy of statuses</a>, such as market availability and supply of services</li>
+      <li><a href="#vocab-assessment">taxonomy of assessments</a>, such as conformity assessment and fundamental rights impact assessment</li>
+      <li><a href="#vocab-misc">other concepts</a>, such as substantial modification and reasonably forseeable misuses</li>
+    </ul>
   </section>
 
   <section id="vocab-system">
     <h2>AI System</h2>
-    <div class="issue" title="Content missing - Entities"></div>
+    <p>The concept [=AISystem=] represents AI systems as defined in the AI Act.</p>
 
     <div class="list-hierarchy"><ul class="concept-list">
   <li>
@@ -422,8 +435,8 @@ <h2>AI System</h2>
   </section>
 
   <section id="vocab-purpose">
-    <h2>AI Purpose</h2>
-    <div class="issue" title="Content missing - Purpose"></div>
+    <h2>AI Capability</h2>
+    <p>The use of 'capability' here refers to the capability of the technology to produce, perform, or achieve something, which is expressed in the [[TECH]] extension as <code>tech:Capability</code>.</p>
 
     <div class="list-hierarchy"><ul class="concept-list">
   <li>
@@ -461,7 +474,7 @@ <h2>AI Purpose</h2>
 
   <section id="vocab-risk">
     <h2>AI Risk</h2>
-    <div class="issue" title="Content missing - Risk"></div>
+    <p>The AI Act has a specific definition of risk as "combination of the probability of an occurrence of harm and the severity of that harm", which is represented using the concept [=Risk=] within this extension. This definition is a more specific form of <code>dpv:Risk</code>, and hence the existing relations can be used to describe its severity and likelihood.</p>
 
     <div class="list-hierarchy"><ul class="concept-list">
   <li>
@@ -487,7 +500,7 @@ <h2>AI Risk</h2>
 
   <section id="vocab-data">
     <h2>AI Data</h2>
-    <div class="issue" title="Content missing - Data"></div>
+    <p>The AI Act defines different categories of data as used to develop and deploy AI systems, such as [=TrainingData=] and [=TestingData=]. It also uses [=Biometric=] which is a special category of personal data under [[GDPR]].</p>
 
     <div class="list-hierarchy"><ul class="concept-list">
   <li>
@@ -515,7 +528,7 @@ <h2>AI Data</h2>
 
   <section id="vocab-roles">
     <h2>AI Roles</h2>
-    <div class="issue" title="Content missing - Roles"></div>
+    <p>AI Roles describes the categorisation of entities based on the role they take in developing, providing or deploying, and using an AI System as defined within the [[AIAct]].</p> 
 
     <div class="list-hierarchy"><ul class="concept-list">
   <li>
@@ -590,7 +603,7 @@ <h2>AI Roles</h2>
 
   <section id="vocab-docs">
     <h2>AI Documentation</h2>
-    <div class="issue" title="Content missing - Documentation"></div>
+    <p>The documentation associated with AI, AI Systems, and other processes defined within the AI Act. These are described using <code>tech:Documentation</code> from the [[TECH]] extension.</p>
 
     <div class="list-hierarchy"><ul class="concept-list">
   <li>
@@ -623,7 +636,7 @@ <h2>AI Documentation</h2>
 
   <section id="vocab-status">
     <h2>AI Status</h2>
-    <div class="issue" title="Content missing - Status"></div>
+    <p>Different statuses are described or implied within the [[AIAct]], such as [=MarketAvailabilityStatus=] regarding whether the AI system is available on the market, and [=ServiceSupplyStatus=] regarding whether the AI system has been supplied. These statuses refect the requirement to describe the state of the AI system and its use, which has implications in terms of requirements and obligations.</p>
 
     <div class="list-hierarchy"><ul class="concept-list">
   <li>
@@ -707,7 +720,7 @@ <h2>AI Status</h2>
 
   <section id="vocab-assessment">
     <h2>AI Assessment</h2>
-    <div class="issue" title="Content missing - Assessment"></div>
+    <p>The [[AIAct]] requires various assessments, such as [=CEMarking=] and [=PostMarketMonitoringSystem=] as part of its obligations. These are described using [[DPV]] concepts such as <code>dpv:CertificationSeal</code> and <code>dpv:ImpactAssessment</code>.</p>
 
     <div class="list-hierarchy"><ul class="concept-list">
   <li>
@@ -767,7 +780,7 @@ <h2>AI Assessment</h2>
 
   <section id="vocab-misc">
     <h2>Misc. Concepts</h2>
-    <div class="issue" title="Content missing - Misc concepts"></div>
+    <p>These concepts currently do not fit within the other stated categories, and are pooled together under a 'misc.' label while the vocabulary is being further developed.</p>
 
     <div class="list-hierarchy"><ul class="concept-list">
   <li>