DPP Access Control — ESPR Regulatory Alignment
Release: 2026-04-01
- This version:
- http://w3id.org/dpp/access-control/espr/1.0.0
- Latest version:
- http://w3id.org/dpp/access-control/espr
- Revision:
- 1.0.0
- Authors:
- Rahel Kebede
- Contributors:
- Bincy Veena
- Annika Moscati
- Peter Johansson
- Imports:
- dpp-ac core, dpp-ac gdpr, data-categories, roles
- Download serialization:
- License:
- Legal source:
- ESPR Regulation (EU) 2024/1781
- Cite as:
- Rahel Kebede. DPP Access Control — ESPR Regulatory Alignment. Revision: 1.0.0. Retrieved from: http://w3id.org/dpp/access-control/espr/1.0.0
Abstract
This module provides the canonical role–permission matrix for the
DPP Access Control framework as normative
AccessPolicy instances grounded in
ESPR
Regulation (EU) 2024/1781, with legal-basis assertions per the
GDPR module.
This module is composed of policy instances (ABox), not new vocabulary terms, so
it is documented here as a companion artifact rather than with the WIDOCO vocabulary template
used for the dpp-ac core, roles, data-categories and GDPR modules.
Policy matrix (3 policies)
| Policy | Role | Legal basis | Purpose | Permissions / prohibitions | ESPR ref. |
|---|---|---|---|---|---|
MSAFullReadPolicy |
MarketSurveillanceAuthorityRole |
PublicTaskBasis |
MARKET_SURVEILLANCE | Permit Read on all DataCategory modules |
Article 14 |
ManufacturerOwnDPPPolicy |
ManufacturerRole |
LegalObligation |
— | Permit Read/Write on own DPP;
Prohibit Delete of CertificationData |
Article 4 |
CustomsBorderInspectionPolicy |
CustomsAuthorityRole |
PublicTaskBasis |
CUSTOMS_INSPECTION | Permit Read on
ProductIdentificationData and CertificationData |
ESPR + Union Customs Code (EU) 952/2013 |
Policies are owned by the system principal
ESPRAuthority (ESPR Regulatory Framework Authority). The complete policy,
permission and prohibition definitions are in the
Turtle source.
Acknowledgments
This companion page follows the visual template produced by WIDOCO (Daniel Garijo) so that it is consistent with the vocabulary documentation generated for the other modules.