W3C

- DRAFT -

Call JUNE-10

10 Jun 2020

Attendees

Present
Beatriz, Georg, Rana, harsh, Mark, GeorgeLioudakis
Regrets
Chair
harsh
Scribe
harsh

Contents


Approval for minutes for MAY-27 (done)

<scribe> scribe: harsh

harsh: revisiting goals/deliverables for the group

Beatriz: global alliance for genomics (emails sent by Mark Lizar on mailing list) - not sure on what it means or is proposed

Georg: I agree

harsh: it would be best to reply to the email and ask for more details/clarity

Georg: there was a public call, related to use of DUO ontology including purposes; DUO purposes do not match DPV categories

harsh: I agree, DUO purposes contain what we define in DPV as purpose, processing, sometimes recipients. But they can be aligned if needed (IMO)

Georg: People from GHA and DPVCG should collaborate and discuss how to move forward - and see whether they would like to use the separation of purpose categories/processing etc as the DPV has done. If yes, then we can combine them within DPV(CG).

harsh: Mark is on call - so we can discuss this issue here

Georg: it was not clear about what is proposed - could you clarify the sentence regargind mapping with Global Health Alliance?

email: https://lists.w3.org/Archives/Public/public-dpvcg/2020Jun/0004.html

Mark: the goal is to use DPV to define and/or purposes through mapping

Georg: what DUO / GHA has done is stich together sentences with multiple elements. So first activity would be to ask the GHA people if they see separation as in DPV is useful for them and then do the mapping.

Mark: The project we are working are involved in a project called Molecular You for medical research in British Columbia which uses Blockchain and DUO. The goal is to make a digital ledger for consent. GH4Ga is part of the project / they consult.
... Anadi (from that group) has tried to do a test mapping
... it is tricky for research related to genetics which also includes family genetic information or emotions; and these are valuable to distill separately as a research problem; and then we can think about doing this with DPV
... the approach is different here where DPV can be used as a code of conduct in GH4GH in order to provide consent for medical reearch

harsh: from your perspective, what are you proposing as next steps for DPVCG?

Mark: mapping with GH4GH for DPV - and then liasing with them to work on this (summarised sentence)
... we could set up a call to do this

harsh: We should discuss more on this through the mailing list in terms of interest, clarification, and work involved
... Moving to topic of the group's deliverables and timelines - we should update these.
... I propose to focus on use-cases, how DPV can be improved, and disseminating it to adopters for specific use-cases

Mark: (regarding ISO/IEC 29184) as an use-case and also the work been done at Kantara

Georg: expressing concern that DPV(CG) should not work in such a way to become dependant on a license with ISO

Mark: I agree we don't want licensing, but ISO represents consensus with large players which is important

harsh: to clarify, I think we should incorporate requirements from an international standard as an use-case and ensure DPV can provide e.g. machine-readable vocabulary for privacy/consent notices

Georg: that clarifies the issue for me

Mark: anyone can access ISO documents through participation in (some) group - which I will send to the group's public mailing list
... (reg. ISO) after confirmation with Colin at Kantara
... we worked on ISO to DPV extension using GDPR, and we were waiting for ISO 29184 to create an ISO to GDPR (with DPV mapping in appendix) to provide a single mapping source for vocabularies

This is involved in the summer project for the GH4GH

harsh: Item 3 on the agenda was ISO/IEC - which we have discussed
... My argument for DPV is that we should map to a single agreed international standard - which is ISO instead of attempting to add individual jurisdictions/

Georg: I would like to bring attention to transfer legal basis submitted by Signatu and see them added to the DPV

harsh: I would suggest sending a reminder email to the mailing list and CC'ng legal experts to get it validated. We can then do the technical work on incorporating it.

Georg: Article 13/14 regarding information to be provided - should also be incorporated / addressed by DPVCG.
... Whether DPV is fully aligned to specify this information. IF not, we should assess whether DPV should include this information.
... currently DPV lists elements comprising Data Processing Handling - but it does not say (in much detail) regarding relations between elements. It could be worthwhile to have a discussion to see if it is useful.

harsh: is this about a relation between e.g. processing and data category or processing and purpose? Georg: Yes.

Georg sharing screen to display diagram about relations

examples on screen: data storage, sensitive associated with data

harsh: We have had this discussion which influenced the design of separate concepts and a single concept intersection them (i.e. PersonalDataHandling)
... Georg can share the relations / diagram to the group to say/show which relations are not considered or possible

ISSUE: Article 13/14 requirements using DPV

<trackbot> Created ISSUE-38 - Article 13/14 requirements using dpv. Please complete additional details at <https://www.w3.org/community/dpvcg/track/issues/38/edit>.

<scribe> ACTION: Harsh to initiate discussion with group on current deliverables and timelines

<trackbot> Created ACTION-141 - Initiate discussion with group on current deliverables and timelines [on Harshvardhan J. Pandit - due 2020-06-17].

<scribe> ACTION: Georg to share list of relations between DPV concepts

<trackbot> Created ACTION-142 - Share list of relations between dpv concepts [on Georg Philip Krog - due 2020-06-17].

<scribe> ACTION: Mark to share how to participate/access ISO documents

<trackbot> Created ACTION-143 - Share how to participate/access iso documents [on Mark Lizar - due 2020-06-17].

Georg and Mark discussing UI/UX for human-intended privacy notices

George Lioudakis introducing themselves : involved with data protection and ontologies for ~15 years

Georg: we also need to consider convention 108

Mark: we need to consider the global legislation vocabulary - I will follow up on this in the mailing list with Joss

(running out of time for meeting call)

Summary of Action Items

[NEW] ACTION: Georg to share list of relations between DPV concepts
[NEW] ACTION: Harsh to initiate discussion with group on current deliverables and timelines
[NEW] ACTION: Mark to share how to participate/access ISO documents
 

Summary of Resolutions

[End of minutes]

Minutes manually created (not a transcript), formatted by David Booth's scribe.perl version (CVS log)
$Date: 2020/06/10 13:03:13 $

Scribe.perl diagnostic output

[Delete this section before finalizing the minutes.]
This is scribe.perl Revision of Date 
Check for newer version at http://dev.w3.org/cvsweb/~checkout~/2002/scribe/

Guessing input format: Irssi_ISO8601_Log_Text_Format (score 1.00)

Default Present: Beatriz, Georg, Rana, harsh, Mark, GeorgeLioudakis
Present: Beatriz Georg Rana harsh Mark GeorgeLioudakis
Found Scribe: harsh
Inferring ScribeNick: harsh

WARNING: No "Topic:" lines found.


WARNING: No date found!  Assuming today.  (Hint: Specify
the W3C IRC log URL, and the date will be determined from that.)
Or specify the date like this:
<dbooth> Date: 12 Sep 2002

People with action items: georg harsh mark

WARNING: Input appears to use implicit continuation lines.
You may need the "-implicitContinuations" option.


WARNING: No "Topic: ..." lines found!  
Resulting HTML may have an empty (invalid) <ol>...</ol>.

Explanation: "Topic: ..." lines are used to indicate the start of 
new discussion topics or agenda items, such as:
<dbooth> Topic: Review of Amy's report


WARNING: IRC log location not specified!  (You can ignore this 
warning if you do not want the generated minutes to contain 
a link to the original IRC log.)


[End of scribe.perl diagnostic output]