Abstract
This paper presents a data protection taxonomy, that is, a classification of aspects relevant to data protection, that the industry is encouraged to use as a reference when asking and answering questions about data protection. This taxonomy is defined in terms of who, where, what, why, and how.