W3C

– DRAFT –
DPVCG Meeting Call 03 Feb 2021

03 Feb 2021

Attendees

Present
beatriz, davidhickey, delaram, harsh, julio, nishad, paulryan, rana
Regrets
georgkrog
Chair
harsh
Scribe
harsh

Meeting minutes

Introductions

new members, first time attendees

DPV, DPV-GDPR published

beatriz: fixes, typos, text - submitted on GitHub

paulryan: went through Primer document

DPV Adoption page in Wiki - updates from volunteers

beatriz: looking on Google Scholar for papers mentioning DPV

beatriz: few mention it but don't use, others do use it - so descriptions contain brief summary of what is being used

julio: found a paper which I think is about evaluation - paper by Nishad about MetaProfiles. Question: is this evaluation?

nishad: paper compares DPV for a scenario, so it should be counted as evaluation in terms of sufficiency

Going through open issues, actions on tracker and GitHub

Please go through open issues, actions, and try to take up things of interest

DPV presented at Legal Hackathon by beatriz

mailing list: https://lists.w3.org/Archives/Public/public-dpvcg/2021Jan/0020.html

beatriz: Presented at ANCR - Advanced Notice and Consent Receipt working group in Kantara

beatriz: They want to produce v2 of Consent Receipt

beatriz: They want interoperability between groups, and people can join and work on this

beatriz: presentation went well, few questions about availability and GitHub

beatriz: The vocabulary provided by DPV is relevant for producing the kind of interoperable data they want

link to wiki for ANCR: https://kantarainitiative.org/confluence/pages/viewpage.action?pageId=140804260

beatriz: starting work this week, plan to have v2 in 6 months

harsh: I'm involved in the PaE:CG project which is related to this work and also about consent receipts

harsh: We'll be proposing the consent receipt fields and work back for inclusion in DPV whenever the next iteration happens

project: https://paecg.github.io/

Presentation on DPV use by paul

Related to GDPR requirements and compliance

Specifically about ROPA (Register of Processing Activities) and their information requirements

Went through guidance and ROPA templates from 14 DPAs

Created a combined model representing all ROPAs, Matched concepts with DPV for sufficiency

Mapping outcome: none, exact, complex, partial

Contributed terms back into DPV - see new terms in v0.2

Next work relates to accountability using CSM-ROPA (common semantic model of ROPA)

Evaluates extent of CSM-ROPA to express ROPA in ICO accountability tracker

Shows how DPV is used and is useful in cases towards legal compliance procedures

next step is building a catalogue of data processing activities and processes (etc.) and building compliance tools on top of that

Q&A + discussion session

Next meeting

In 2 weeks, on 17th Feb at 13:00 WET / 14:00 CET

We will have rana present her work on annotating a corpus of tweets using DPV

Minutes manually created (not a transcript), formatted by scribe.perl version 127 (Wed Dec 30 17:39:58 2020 UTC).

Diagnostics

Maybe present: project