W3C

– DRAFT –
(MEETING TITLE)

27 May 2020

Attendees

Present
Beatriz, Georg, harsh, Mark, Rana
Regrets
-
Chair
-
Scribe
harsh

Meeting minutes

harsh: we need to revisit the timeline and deliverables of the DPVCG and agree on prioritising items to work on next. We need a list of things before we prioritise.

harsh: invite applications and extensions of DPV as well as other related aspects

Action: Discuss prioritising of items for timeline and deliverables

<trackbot> Error finding 'Discuss'. You can review and register nicknames at <https://‌www.w3.org/‌community/‌dpvcg/‌track/‌users>.

Rana: Is the DPVCG working on organisation's obligations under GDPR?

harsh: There is a proposed page on the Wiki: https://‌www.w3.org/‌community/‌dpvcg/‌wiki/‌Obligations but nothing done on it yet

We discussed generating privacy policies and annotating them using DPV - and Signatu (Georg) has expressed interest in conducting this research with(in) DPVCG

Mark: is there any idea/interest/opinion on using DPV for health data and medical research?

harsh: There are many many layers of additional requirements and GDPR compliance is the minimum procedural requirement within these. So far the DPVCG has not considered this in scope or to be of interest.

Georg: we have privacy policy generator and we can inform which parts of DPV are not covered

harsh: That would be Task 1 in this work, generating the privacy policy. After that there also needs to be annotations done - so because policies are usually provided in HTML, this could be done via RDFa or microdata.

Georg: current example of generated privacy policy is on https://‌signatu.com/

harsh: This can be expressed as executing queries over personal data handling instances e.g. What data is collected? would query data mentioned in instances.

Action: harsh to start discussion on DPVCG timeline and deliverables update

<trackbot> Created ACTION-139 - Start discussion on dpvcg timeline and deliverables update [on Harshvardhan J. Pandit - due 2020-06-03].

Action: Georg to share missing concepts in DPV for privacy policy generation

<trackbot> Error finding 'Georg'. You can review and register nicknames at <https://‌www.w3.org/‌community/‌dpvcg/‌track/‌users>.

Action: Georg Philip Krog to share missing concepts in DPV for privacy policy generation

<trackbot> Error finding 'Georg'. You can review and register nicknames at <https://‌www.w3.org/‌community/‌dpvcg/‌track/‌users>.

Action: Georg to share missing concepts in DPV for privacy policy generation

<trackbot> Created ACTION-140 - Share missing concepts in dpv for privacy policy generation [on Georg Philip Krog - due 2020-06-03].

Georg: SNOMED provides a taxonomy of concepts for medical/health data https://‌www.snomed.org/

Rana: We (with Beatriz, Victor) at UPM are working on ODRL profiles using DPV, and will come back on how that is faring

Georg: Of relevance is the ATTEMPTO project http://‌attempto.ifi.uzh.ch/‌site/ that provides resources for writing formal methods/rules for non-familiar users.

Summary of action items

  1. Discuss prioritising of items for timeline and deliverables
  2. harsh to start discussion on DPVCG timeline and deliverables update
  3. Georg to share missing concepts in DPV for privacy policy generation
  4. Georg Philip Krog to share missing concepts in DPV for privacy policy generation
  5. Georg to share missing concepts in DPV for privacy policy generation
Minutes manually created (not a transcript), formatted by scribe.perl version 117 (Tue Apr 28 12:46:31 2020 UTC).