RESOLUTION: no objections
see email: https://lists.w3.org/Archives/Public/public-dpvcg/2020Jun/0015.html
<scribe> scribe: harsh
<scribe> ACTION: harsh to create page for new participants and contributors
<trackbot> Created ACTION-144 - Create page for new participants and contributors [on Harshvardhan J. Pandit - due 2020-07-15].
georg: we need more active partipants
beatriz: we could have a dedicated meeting for adding new concepts to DPV and the meeting would be focused on this work only
harsh: we use the spreadsheet we have for the DPV can be extended with additional sheet for 'proposed', we add concepts ready for inclusion from the mailing list and resolve them in the meeting
<scribe> ACTION: harsh to add proposed tab to the spreadsheet for concepts
<trackbot> Created ACTION-145 - Add proposed tab to the spreadsheet for concepts [on Harshvardhan J. Pandit - due 2020-07-15].
<scribe> ACTION: harsh to organise DPV concepts update meeting
<trackbot> Created ACTION-146 - Organise dpv concepts update meeting [on Harshvardhan J. Pandit - due 2020-07-15].
harsh: we should list use-cases, we have some on the Wiki - we should extend that section
Georg: we should categorise use-cases and then list/expand them; then we advertise for adding use-cases
harsh: we can use Github for issues as it provides a wider audience
harsh: we have had concepts suggested by Signatu on the mailing list
regarding source of data: https://lists.w3.org/Archives/Public/public-dpvcg/2020Jul/0001.html
Georg: source is direct point of collection, origin is the origin/first point.
harsh: where to define source? To me, this is similar to storage
RESOLUTION: source to be added to Technical measures module
Georg: how to express sensitive categories of data?
harsh: subclass or instantiate them as original class + special/sensitive category
regarding: purpose of data https://lists.w3.org/Archives/Public/public-dpvcg/2020Jul/0000.html
Georg: from the discussion on the
mailing list - harsh raised a comment that the phrase does not
constitute purpose as defined by law, but the vendors/clients
use these words
... It would be useful for everyone to have these (similar)
categories
Analytics: on its own is not a purpose, but when expanded can be e.g. Analytics for website user analysis
Agreement on this interpretation
Discussing: advertising
Georg: Advertisement usually means marketing, and is a bucket for all technologies
harsh: Okay, as long we declare that adversiting by itself does not mean it includes profiling, personalisation, etc. - these needs to be declared additionally.
RESOLUTION: Add advertising as a purpose to DPV
Discussion: Cloud infrastructure and traffic distribution
harsh: I think service provision covers it
Georg: laws specify declaration but not level of details, so this could be necessary
Discussion: Document consent
harsh: This relates to a generic
purpose about information collection for legal obligation
... How do we specify legal obligation as a purpose? Do we add
'legal obligation' as a purpose?
... we can ask / open thread on mailing list about this to
clarify this
Georg: in Signatu, we list the purpose as 'document consent' and the legal basis 'legal obligation'
Discussing: Customer Management
Georg: this is about lifecycle of customers (as explained in email)
harsh: we have an existing purpose dpv:ImproveInternalCRMProcesses - so do we need a CRM purpose?
RESOLUTION: We add Customer Relationship Management as purpose
Discussing: Marketing
harsh: We should add Marketing. And we should relate it to Advertisement by saying Advertising is subset of Marketing
Georg: we would need to revisit this as and when ePrivacy 'redefines' Marketing
Mark: are there any updates/discussions on GA4GH?
harsh: no, we had a meeting - which is on mailing list. Nothing other than that.
Mark: What is covered by DPV in terms of purpose and context and what is covered by GA4GH?
harsh: suggest taking that up on the mailing list
Georg: Payment is not included in
DPV
... Stripe and other vendors bundle purposes together e.g.
purpose with fraud detection
harsh: does Payment come under Service Provision? Is this always the case?
Georg: not necessarily
harsh: if not Service provision - then where should be list it? Also, how does this relate to Banking terminology e.g. transactions
Georg: agreed, we should clarify this
Discussing: Personalisation depends on/is enabled by profiling
harsh: we have profiling as processing category based on GDPR A4.4
Discussing: Survey
harsh: by itself, it is a collection method
Georg: yes, how do we specify collection methods?
ISSUE: How to represent collection method of personal data?
<trackbot> Created ISSUE-39 - How to represent collection method of personal data?. Please complete additional details at <https://www.w3.org/community/dpvcg/track/issues/39/edit>.
Next meeting in two weeks: Wed-22 14:00 CEST / 13:00 Dublin time
This is scribe.perl Revision of Date Check for newer version at http://dev.w3.org/cvsweb/~checkout~/2002/scribe/ Guessing input format: Irssi_ISO8601_Log_Text_Format (score 1.00) Default Present: Georg, beatriz, PaulKnowles, MarkLizar Present: Georg beatriz PaulKnowles MarkLizar Found Scribe: harsh Inferring ScribeNick: harsh Agenda: https://lists.w3.org/Archives/Public/public-dpvcg/2020Jul/0003.html WARNING: No date found! Assuming today. (Hint: Specify the W3C IRC log URL, and the date will be determined from that.) Or specify the date like this: <dbooth> Date: 12 Sep 2002 People with action items: harsh WARNING: Input appears to use implicit continuation lines. You may need the "-implicitContinuations" option. WARNING: IRC log location not specified! (You can ignore this warning if you do not want the generated minutes to contain a link to the original IRC log.)[End of scribe.perl diagnostic output]