Approval for minutes for MAY-27 (done)
<scribe> scribe: harsh
harsh: revisiting goals/deliverables for the group
Beatriz: global alliance for genomics (emails sent by Mark Lizar on mailing list) - not sure on what it means or is proposed
Georg: I agree
harsh: it would be best to reply to the email and ask for more details/clarity
Georg: there was a public call, related to use of DUO ontology including purposes; DUO purposes do not match DPV categories
harsh: I agree, DUO purposes contain what we define in DPV as purpose, processing, sometimes recipients. But they can be aligned if needed (IMO)
Georg: People from GHA and DPVCG should collaborate and discuss how to move forward - and see whether they would like to use the separation of purpose categories/processing etc as the DPV has done. If yes, then we can combine them within DPV(CG).
harsh: Mark is on call - so we can discuss this issue here
Georg: it was not clear about what is proposed - could you clarify the sentence regargind mapping with Global Health Alliance?
email: https://lists.w3.org/Archives/Public/public-dpvcg/2020Jun/0004.html
Mark: the goal is to use DPV to define and/or purposes through mapping
Georg: what DUO / GHA has done is stich together sentences with multiple elements. So first activity would be to ask the GHA people if they see separation as in DPV is useful for them and then do the mapping.
Mark: The project we are working
are involved in a project called Molecular You for medical
research in British Columbia which uses Blockchain and DUO. The
goal is to make a digital ledger for consent. GH4Ga is part of
the project / they consult.
... Anadi (from that group) has tried to do a test
mapping
... it is tricky for research related to genetics which also
includes family genetic information or emotions; and these are
valuable to distill separately as a research problem; and then
we can think about doing this with DPV
... the approach is different here where DPV can be used as a
code of conduct in GH4GH in order to provide consent for
medical reearch
harsh: from your perspective, what are you proposing as next steps for DPVCG?
Mark: mapping with GH4GH for DPV
- and then liasing with them to work on this (summarised
sentence)
... we could set up a call to do this
harsh: We should discuss more on
this through the mailing list in terms of interest,
clarification, and work involved
... Moving to topic of the group's deliverables and timelines -
we should update these.
... I propose to focus on use-cases, how DPV can be improved,
and disseminating it to adopters for specific use-cases
Mark: (regarding ISO/IEC 29184) as an use-case and also the work been done at Kantara
Georg: expressing concern that DPV(CG) should not work in such a way to become dependant on a license with ISO
Mark: I agree we don't want licensing, but ISO represents consensus with large players which is important
harsh: to clarify, I think we should incorporate requirements from an international standard as an use-case and ensure DPV can provide e.g. machine-readable vocabulary for privacy/consent notices
Georg: that clarifies the issue for me
Mark: anyone can access ISO
documents through participation in (some) group - which I will
send to the group's public mailing list
... (reg. ISO) after confirmation with Colin at Kantara
... we worked on ISO to DPV extension using GDPR, and we were
waiting for ISO 29184 to create an ISO to GDPR (with DPV
mapping in appendix) to provide a single mapping source for
vocabularies
This is involved in the summer project for the GH4GH
harsh: Item 3 on the agenda was
ISO/IEC - which we have discussed
... My argument for DPV is that we should map to a single
agreed international standard - which is ISO instead of
attempting to add individual jurisdictions/
Georg: I would like to bring attention to transfer legal basis submitted by Signatu and see them added to the DPV
harsh: I would suggest sending a reminder email to the mailing list and CC'ng legal experts to get it validated. We can then do the technical work on incorporating it.
Georg: Article 13/14 regarding
information to be provided - should also be incorporated /
addressed by DPVCG.
... Whether DPV is fully aligned to specify this information.
IF not, we should assess whether DPV should include this
information.
... currently DPV lists elements comprising Data Processing
Handling - but it does not say (in much detail) regarding
relations between elements. It could be worthwhile to have a
discussion to see if it is useful.
harsh: is this about a relation between e.g. processing and data category or processing and purpose? Georg: Yes.
Georg sharing screen to display diagram about relations
examples on screen: data storage, sensitive associated with data
harsh: We have had this
discussion which influenced the design of separate concepts and
a single concept intersection them (i.e.
PersonalDataHandling)
... Georg can share the relations / diagram to the group to
say/show which relations are not considered or possible
ISSUE: Article 13/14 requirements using DPV
<trackbot> Created ISSUE-38 - Article 13/14 requirements using dpv. Please complete additional details at <https://www.w3.org/community/dpvcg/track/issues/38/edit>.
<scribe> ACTION: Harsh to initiate discussion with group on current deliverables and timelines
<trackbot> Created ACTION-141 - Initiate discussion with group on current deliverables and timelines [on Harshvardhan J. Pandit - due 2020-06-17].
<scribe> ACTION: Georg to share list of relations between DPV concepts
<trackbot> Created ACTION-142 - Share list of relations between dpv concepts [on Georg Philip Krog - due 2020-06-17].
<scribe> ACTION: Mark to share how to participate/access ISO documents
<trackbot> Created ACTION-143 - Share how to participate/access iso documents [on Mark Lizar - due 2020-06-17].
Georg and Mark discussing UI/UX for human-intended privacy notices
George Lioudakis introducing themselves : involved with data protection and ontologies for ~15 years
Georg: we also need to consider convention 108
Mark: we need to consider the global legislation vocabulary - I will follow up on this in the mailing list with Joss
(running out of time for meeting call)
This is scribe.perl Revision of Date Check for newer version at http://dev.w3.org/cvsweb/~checkout~/2002/scribe/ Guessing input format: Irssi_ISO8601_Log_Text_Format (score 1.00) Default Present: Beatriz, Georg, Rana, harsh, Mark, GeorgeLioudakis Present: Beatriz Georg Rana harsh Mark GeorgeLioudakis Found Scribe: harsh Inferring ScribeNick: harsh WARNING: No "Topic:" lines found. WARNING: No date found! Assuming today. (Hint: Specify the W3C IRC log URL, and the date will be determined from that.) Or specify the date like this: <dbooth> Date: 12 Sep 2002 People with action items: georg harsh mark WARNING: Input appears to use implicit continuation lines. You may need the "-implicitContinuations" option. WARNING: No "Topic: ..." lines found! Resulting HTML may have an empty (invalid) <ol>...</ol>. Explanation: "Topic: ..." lines are used to indicate the start of new discussion topics or agenda items, such as: <dbooth> Topic: Review of Amy's report WARNING: IRC log location not specified! (You can ignore this warning if you do not want the generated minutes to contain a link to the original IRC log.)[End of scribe.perl diagnostic output]