12:00:57 RRSAgent has joined #dpvcg 12:00:57 logging to https://www.w3.org/2021/06/30-dpvcg-irc 12:01:01 ScribeNick: harsh 12:01:27 Meeting: DPVCG Meeting Call 2021-06-30 12:01:33 Chair: harsh 12:01:53 Present: harsh, davidH, paulR, stephenTattum, nishadT 12:02:03 Date: 30 JUN 2021 12:02:19 Agenda: https://lists.w3.org/Archives/Public/public-dpvcg/2021Jun/0002.html 12:02:29 Topic: Introductions 12:02:59 stephenTattum works at PolyPoly https://polypoly.org/ and uses DPV to declare policies 12:04:47 stephenTattum: we use data categories and purposes from DPV to describe what is usually in a notice information or policy 12:05:16 present+ ranaS 12:05:33 present+ beatrizE 12:09:38 paulR: DPV as a vocabulary is lacking in terms of purposes, and this list needs to be expanded. For example, the Belgian ROPA guidance document provides many more concepts. 12:10:22 harsh: agreed; we'll put in our action items to work on these purposes 12:10:51 harsh: any reference or list of purposes, whether in court case or guidance document or complaint or elsewhere; please share in mailing list, or directly to me, or in wiki, or GitHub 12:18:16 stephenTattum: PolyPoly is like Solid, providing pods governed by policies. We use DPV to declare what data is used and for what purposes. 13:05:42 present+ georgK 13:05:56 stephenTattum: I am not familiar with technical details, will have to ask my colleagues 13:06:30 harsh: we're keeping a list of use-cases and uses of DPV in our wiki, would like to add PolyPoly to that; will take this up over email 13:06:40 Topic: Housekeeping / Admin 13:06:56 New GitHub repo: https://github.com/w3c/dpv/ 13:07:22 GitHub IRI to be share for citing, referencing, sharing DPV: http://w3.org/ns/dpv 13:07:56 Note that this IRI is "permanent" which means that no matter where DPV is actually stored, we use this as its URL and the browser will redirect to wherever it is stored 13:08:16 Current (old) url this points to is: https://dpvcg.github.io/dpv/ <--- do not use this 13:08:29 We will try to keep this alive by redirecting to the new repo and url 13:08:44 New url for dpv is: https://w3c.github.io/dpv/dpv 13:09:37 The pURL or IRI will point to this new url soon, pending when Bert does this (changin IRI requires w3c infra access which only employees have) 13:09:42 Topic: Summer workshop 13:10:15 Purposes will be the topic of a dedicated session. We will gather/collect list of purposes from the real-world or other places, and decide on them in a session. 13:13:48 For this, collect list of purposes or sources by JUL-14 - these can be shared at https://github.com/w3c/dpv/issues/22 13:14:19 We will then work on them; and have a decision session on AUG-11; giving enough time for comments and resolutions. 13:14:58 Topic: Privacy Policies, Terms and Conditions as concepts 13:15:35 A 'policy' can be any generic policy within the organisation or elsewhere. A 'privacy policy', although defined as internal to the organisation, has evolved to become an user-facing document. 13:16:42 Paul: we use the term 'notice' or 'privacy notice' to refer to these 13:20:23 So we have a concept called Notice and then specific concept for PrivacyNotice ? 13:20:43 For terms and conditions; they are a form of contract, but the label is not accurate to reflect their use and context. 13:20:56 Alternate names are also used as 'terms of use' or 'terms of service' 13:21:18 We need more legal input and knowledge for how this is referred to in order to model it as a concept. 13:21:22 Topic: Safeguards 13:22:07 How do we model Safeguards? Where do we place them within DPV? 13:24:08 What are Safeguards? 13:24:14 Are they GDPR specific? (no) 13:24:25 Are they always tech & org measures? (no) 13:26:09 Add references, concepts, discussions here: https://github.com/w3c/dpv/issues/23 13:26:41 Adequacy decision is a safeguard (Art.45 GDPR) ? 13:27:09 Proposal: safeguard as a separate top-level concept, with specific safeguards defined inside/within its set. 13:28:03 Some safeguards are within technical & organisational measures; or can include technical & organisational measures. But this is not a necessity. 13:28:36 We need to decide which concepts are GDPR-specific, and which are jurisdiction-agnostic and can be put in DPV or DPV-GDPR. 13:28:44 Topic: Next Meeting 13:29:18 Next meeting will be next week JUL-07 13:00 WEST / 14:00 CEST 13:29:27 Agenda will be discussing Safeguards 13:29:42 zakim, bye 13:29:42 leaving. As of this point the attendees have been harsh, davidH, paulR, stephenTattum, nishadT, ranaS, beatrizE, georgK 13:29:42 Zakim has left #dpvcg 13:29:45 rrsagent, publish minutes v2 13:29:45 I have made the request to generate https://www.w3.org/2021/06/30-dpvcg-minutes.html harsh 13:29:48 rrsagent, set logs world-visible 13:33:10 rrsagent, bye 13:33:10 I see no action items