12:01:24 RRSAgent has joined #dpvcg 12:01:24 logging to https://www.w3.org/2020/07/08-dpvcg-irc 12:01:33 Zakim has joined #dpvcg 12:01:55 Meeting: DPVCG Call 08-JUL-2020 12:02:01 Chair: harsh 12:02:13 present+ Georg 12:02:20 present+ beatriz 12:03:30 agenda: https://lists.w3.org/Archives/Public/public-dpvcg/2020Jul/0003.html 12:05:23 topic: approve minutes from last meeting 12:06:05 RESOLUTION: no objections 12:06:14 topic: deliverables and timeline 12:06:34 see email: https://lists.w3.org/Archives/Public/public-dpvcg/2020Jun/0015.html 12:06:40 scribe: harsh 12:08:10 ACTION: harsh to create page for new participants and contributors 12:08:11 Created ACTION-144 - Create page for new participants and contributors [on Harshvardhan J. Pandit - due 2020-07-15]. 12:08:30 georg: we need more active partipants 12:08:49 beatriz: we could have a dedicated meeting for adding new concepts to DPV and the meeting would be focused on this work only 12:10:46 harsh: we use the spreadsheet we have for the DPV can be extended with additional sheet for 'proposed', we add concepts ready for inclusion from the mailing list and resolve them in the meeting 12:11:04 ACTION: harsh to add proposed tab to the spreadsheet for concepts 12:11:05 Created ACTION-145 - Add proposed tab to the spreadsheet for concepts [on Harshvardhan J. Pandit - due 2020-07-15]. 12:11:22 ACTION: harsh to organise DPV concepts update meeting 12:11:23 Created ACTION-146 - Organise dpv concepts update meeting [on Harshvardhan J. Pandit - due 2020-07-15]. 12:12:59 harsh: we should list use-cases, we have some on the Wiki - we should extend that section 12:13:18 Georg: we should categorise use-cases and then list/expand them; then we advertise for adding use-cases 12:14:37 harsh: we can use Github for issues as it provides a wider audience 12:14:43 present+ PaulKnowles 12:16:49 topic: adding concepts to DPV 12:17:18 harsh: we have had concepts suggested by Signatu on the mailing list 12:18:29 regarding source of data: https://lists.w3.org/Archives/Public/public-dpvcg/2020Jul/0001.html 12:20:14 Georg: source is direct point of collection, origin is the origin/first point. 12:21:50 harsh: where to define source? To me, this is similar to storage 12:24:57 RESOLUTION: source to be added to Technical measures module 12:27:15 Georg: how to express sensitive categories of data? 12:27:33 harsh: subclass or instantiate them as original class + special/sensitive category 12:27:40 regarding: purpose of data https://lists.w3.org/Archives/Public/public-dpvcg/2020Jul/0000.html 12:28:25 Georg: from the discussion on the mailing list - harsh raised a comment that the phrase does not constitute purpose as defined by law, but the vendors/clients use these words 12:28:47 Georg: It would be useful for everyone to have these (similar) categories 12:30:48 Analytics: on its own is not a purpose, but when expanded can be e.g. Analytics for website user analysis 12:31:18 Agreement on this interpretation 12:31:25 Discussing: advertising 12:31:37 present+ MarkLizar 12:33:21 Georg: Advertisement usually means marketing, and is a bucket for all technologies 12:34:05 harsh: Okay, as long we declare that adversiting by itself does not mean it includes profiling, personalisation, etc. - these needs to be declared additionally. 12:34:57 RESOLUTION: Add advertising as a purpose to DPV 12:36:16 Discussion: Cloud infrastructure and traffic distribution 12:36:25 harsh: I think service provision covers it 12:36:52 Georg: laws specify declaration but not level of details, so this could be necessary 12:37:50 Discussion: Document consent 12:38:07 harsh: This relates to a generic purpose about information collection for legal obligation 12:39:29 harsh: How do we specify legal obligation as a purpose? Do we add 'legal obligation' as a purpose? 12:40:07 harsh: we can ask / open thread on mailing list about this to clarify this 12:41:35 Georg: in Signatu, we list the purpose as 'document consent' and the legal basis 'legal obligation' 12:42:40 Discussing: Customer Management 12:43:23 Georg: this is about lifecycle of customers (as explained in email) 12:44:34 harsh: we have an existing purpose dpv:ImproveInternalCRMProcesses - so do we need a CRM purpose? 12:45:05 RESOLUTION: We add Customer Relationship Management as purpose 12:45:44 Discussing: Marketing 12:46:30 harsh: We should add Marketing. And we should relate it to Advertisement by saying Advertising is subset of Marketing 12:47:04 Georg: we would need to revisit this as and when ePrivacy 'redefines' Marketing 12:48:50 topic: GA4GH status 12:48:59 Mark: are there any updates/discussions on GA4GH? 12:49:11 harsh: no, we had a meeting - which is on mailing list. Nothing other than that. 12:50:49 Mark: What is covered by DPV in terms of purpose and context and what is covered by GA4GH? 12:50:54 harsh: suggest taking that up on the mailing list 12:51:03 topic: purpose of data https://lists.w3.org/Archives/Public/public-dpvcg/2020Jul/0000.html 12:51:14 Georg: Payment is not included in DPV 12:51:53 Georg: Stripe and other vendors bundle purposes together e.g. purpose with fraud detection 12:52:44 harsh: does Payment come under Service Provision? Is this always the case? 12:53:29 Georg: not necessarily 12:54:37 harsh: if not Service provision - then where should be list it? Also, how does this relate to Banking terminology e.g. transactions 12:55:01 Georg: agreed, we should clarify this 12:56:49 Discussing: Personalisation depends on/is enabled by profiling 12:56:59 harsh: we have profiling as processing category based on GDPR A4.4 12:57:38 Discussing: Survey 12:57:45 harsh: by itself, it is a collection method 12:57:56 Georg: yes, how do we specify collection methods? 12:59:09 ISSUE: How to represent collection method of personal data? 12:59:09 Created ISSUE-39 - How to represent collection method of personal data?. Please complete additional details at . 13:00:51 Next meeting in two weeks: Wed-22 14:00 CEST / 13:00 Dublin time 13:01:00 zakim, bye 13:01:00 leaving. As of this point the attendees have been Georg, beatriz, PaulKnowles, MarkLizar 13:01:00 Zakim has left #dpvcg 13:01:07 rrsagent, make log public 13:01:13 rrsagent, draft minutes 13:01:13 I have made the request to generate https://www.w3.org/2020/07/08-dpvcg-minutes.html harsh 13:01:36 rrsagent, bye 13:01:36 I see 3 open action items saved in https://www.w3.org/2020/07/08-dpvcg-actions.rdf : 13:01:36 ACTION: harsh to create page for new participants and contributors [1] 13:01:36 recorded in https://www.w3.org/2020/07/08-dpvcg-irc#T12-08-10 13:01:36 ACTION: harsh to add proposed tab to the spreadsheet for concepts [2] 13:01:36 recorded in https://www.w3.org/2020/07/08-dpvcg-irc#T12-11-04 13:01:36 ACTION: harsh to organise DPV concepts update meeting [3] 13:01:36 recorded in https://www.w3.org/2020/07/08-dpvcg-irc#T12-11-22