A standards-based (GDPR, W3C DPV) vocabulary for classifying personal data in code, with optional build-time enforcement and GDPR Article 30 record generation.