DesignLex
/设计研究/Data action
论文进阶

Data action

数据动作(data action),指系统中对数据执行的离散操作(如 collect、process、store、share、delete),是隐私工程框架(如 NIST PRAM)中枚举系统数据流与转化的基本分析单元。

English Definition

"A discrete operation performed on data within a system (e.g., collect, process, store, share, delete), used as a unit of analysis in privacy engineering frameworks to enumerate how data moves and is transformed."

用法说明 · 针对中文母语者

通常与 stakeholder interaction(利益相关者交互)成对出现:data action 描述系统对数据做什么,stakeholder interaction 描述系统与用户之间的交互(如获取同意、请求删除)。

真实用例 · 2

"nodes that represent specific data actions (e.g., collect, process) and stakeholder interactions (e.g., obtaining consent, requesting data deletion)"

论文Pipeline extracted — review needed·在隐私通用表征(universal representation)中定义节点的语义类型

"Note that we only enumerate data actions and relevant design decisions; analysts still need to manually evaluate risk likelihood and impact"

论文Pipeline extracted — review needed·在图注中说明工具的自动化边界——动作可枚举,但风险评估仍需人工
由 pipeline 自动采集,待人工 review