W3C

– DRAFT –
Data Privacy Vocabularies and Controls Community Group Teleconference

08 January 2019

Meeting minutes

<Eva_and_Bud> Hopefully just a few minutes, he's working on it

<harsh> Bert: Anything we need to add to the agenda (no reponse)

<harsh> Bert: Comments on last minutes (December)

<Bert> last minutes

<Javier> minutes approved

<harsh> Bert: Moving to action items

<Bert> action-33?

action-33 -- Harshvardhan Pandit to Summarize elements of consent from the mails and align with mark lizar on "concent receipt" definition (e.g. on delegation) -- due 2018-11-13 -- OPEN

https://‌www.w3.org/‌community/‌dpvcg/‌track/‌actions/‌33

<Javier> Harsh sent an email with the elements of consent. This needs more work with Mark to show in the next meeting

<harsh> Mark: Also looking at GDPR version of consent records, and we should have something by next call

<Bert> action-35?

action-35 -- Mark Lizar to Add previous classifications to subpages of https://‌www.w3.org/‌community/‌dpvcg/‌wiki/‌taxonomy -- due 2018-11-13 -- OPEN

https://‌www.w3.org/‌community/‌dpvcg/‌track/‌actions/‌35

<harsh> link to open actions - https://‌www.w3.org/‌community/‌dpvcg/‌track/‌actions/‌open

<Bert> close action-35

Closed action-35.

<Bert> action-41?

action-41 -- Eva Schlehahn to Send email with suggested timing for the agenda as talked about during the last dpvcg call -- due 2018-11-27 -- OPEN

https://‌www.w3.org/‌community/‌dpvcg/‌track/‌actions/‌41

<harsh> relevant email for Action-35 (by Mark) https://‌lists.w3.org/‌Archives/‌Public/‌public-dpvcg/‌2018Nov/‌0027.html

<Bert> close action-41

Closed action-41.

<Bert> action-42?

action-42 -- Eva Schlehahn to Look into requirements of data protection assessment, and whether it would make sense to formalize that in terms of what we standardize -- due 2018-12-10 -- OPEN

https://‌www.w3.org/‌community/‌dpvcg/‌track/‌actions/‌42

<Javier> Eva: ongoing until the next telco

<Bert> action-43?

action-43 -- Eva Schlehahn to Have a look a study on aal that might help us -- due 2018-12-10 -- OPEN

https://‌www.w3.org/‌community/‌dpvcg/‌track/‌actions/‌43

<Bert> close action-43

Closed action-43.

<harsh> Eva: being done, during last telco I sent the study which is not useful to the group

<Bert> action-48?

action-48 -- Harshvardhan Pandit to Look into classifications of organisations that could serve as a basis for clsssifying data controllers -- due 2018-12-11 -- OPEN

https://‌www.w3.org/‌community/‌dpvcg/‌track/‌actions/‌48

<harsh> https://‌lists.w3.org/‌Archives/‌Public/‌public-dpvcg/‌2018Dec/‌0021.html

<harsh> categorisation of organisations

<Bert> action-49?

action-49 -- Eva Schlehahn to Put ms visio picture of usage policy on the wiki -- due 2018-12-11 -- OPEN

https://‌www.w3.org/‌community/‌dpvcg/‌track/‌actions/‌49

<Bert> close action-49

Closed action-49.

<Bert> action-5?

action-5 -- Harshvardhan Pandit to Draft a page about GDPRtext -- due 2018-08-13 -- CLOSED

https://‌www.w3.org/‌community/‌dpvcg/‌track/‌actions/‌5

<Bert> action-55?

action-55 -- Javier D. Fernández to Look into how to align special duration vocab with “deletion-ideas” from eva’s slide (e.g. include no-retention, deleted-by, etc.) in our vocabulary -- due 2018-12-11 -- OPEN

https://‌www.w3.org/‌community/‌dpvcg/‌track/‌actions/‌55

<Bert> action-57?

action-57 -- Harshvardhan Pandit to Start definitionsions of the high-level purposes at https://‌www.w3.org/‌community/‌dpvcg/‌wiki/‌purposes_for_handling_personal_data#high-level_categories_.28to-be-discussed.29 and map them to purposes collected from use cases -- due 2018-12-18 -- OPEN

<harsh> Javier: we'll discuss during the next meeting

https://‌www.w3.org/‌community/‌dpvcg/‌track/‌actions/‌57

<harsh> high-level data purposes (email) https://‌lists.w3.org/‌Archives/‌Public/‌public-dpvcg/‌2018Dec/‌0034.html

Progress so far

<harsh> Bert: did anyone make any progress on anything?

<Javier> Eva: The main problem is the xmas holidays, but will get up to speed soon

<Javier> Harsh: how consent is given in the web, having a look at the IAD consent. How to give consent, advertisement... From the legal point of view, is it enough or not

<harsh> IAB europe consent framework

<harsh> https://‌github.com/‌InteractiveAdvertisingBureau/‌GDPR-Transparency-and-Consent-Framework

<Javier> Eva: I will have a look

<harsh> Eva: send an email on the community mailing list and I can take a look

<Javier> Mark: They call it consent but it is probably not consent

Action: eva to look at IAB Europe consent framework

Created ACTION-58 - Look at iab europe consent framework [on Eva Schlehahn - due 2019-01-15].

<Javier> Harsh: It is more a technical framework, but maybe the most important are the categories of data, purposes...

<Javier> Mark: will have a look too, interesting

<Javier> Harsh: it seems a limited framework, no way to add new categories, but a good start

<Javier> Bert: Other topics?

<harsh> IAB purposes: https://‌github.com/‌InteractiveAdvertisingBureau/‌GDPR-Transparency-and-Consent-Framework/‌blob/‌master/‌Consent%20string%20and%20vendor%20list%20formats%20v1.1%20Final.md#purposes-features

<Javier> Harsh: Axel, javier and me are looking into data categories and looking at papers and other sources mentioning that data can be inferred from other data. For example, given data A and B, data C can be inferred

<Javier> ... plan is to have some results in the next months

<harsh> Bert: Did anyone take a look at the slides Bud posted an hour ago?

<harsh> https://‌lists.w3.org/‌Archives/‌Public/‌public-dpvcg/‌2019Jan/‌0004.html

<Javier> Eva: Will there be a draft document of our findings?

<Javier> Bert: Yes, but we have no concrete plans so far

<harsh> Eva: we should have a document to keep track of different things people are looking at, and keeping a concise overview is required to make it easy to communicate and understand

<Javier> Bert: So far I think we could continue with the wiki...

<harsh> Bert: I thought we can use the wiki as a reporting tool, but we can also have a report. What do others think?

<Javier> Harsh: I think now we are still in an early phase, how are we going to create the vocabulary, which language,...

<harsh> Bert: also the question about who takes editorship of the document

<harsh> Harsh: so in the next few calls, we can discuss and decide on these and then write the report describing our plan and approach

<Eva_and_Bud> our webex connection just died, trying to reconnect

<Eva_and_Bud> back :)

<harsh> Harsh: we can discuss (ACTION-53) about the namespace, Javier suggested priv as the namespace on mailing list.

<harsh> Javier: we can discuss these in the next call(s) when Axel is present

<Javier> Bert: so next telco would be in 2 weeks as planned

<harsh> Bert: next call on 22nd as per schedule

<Javier> Hash: I can share an overview of the status if that's useful

Summary of action items

  1. eva to look at IAB Europe consent framework
Minutes manually created (not a transcript), formatted by Bert Bos's scribe.perl version 2.49 (2018/09/19 15:29:32), a reimplementation of David Booth's scribe.perl. See CVS log.

Diagnostics

No scribenick or scribe found. Guessed: trackbot