W3C

– DRAFT –
DPVCG Meeting Call

08 DEC 2021

Attendees

Present
georg, harsh, julian, paul
Regrets
inah
Chair
harsh
Scribe
harsh

Meeting minutes

Previous minutes https://www.w3.org/2021/12/01-dpvcg-minutes.html

Previous minutes about today's agenda https://www.w3.org/2021/11/24-dpvcg-minutes.html

Data Entities categories and sub-classes

In previous meeting(s), we agreed to include only those categories that are relevant and important e.g. mentioned by a legal obligation so as to include in core DPV instead of an extension

julian: this list will not be comprehensive, and is dynamic and industry-specific in real-world

georg: so in cases of e.g. ROPA, there would DataSubject as the field and an open text field to specify information about what data subject categories

julian: these labels are not formalised in the sense that their interpretation is not clear, unambigious, or uniform across use-cases. For example, 'WebsiteVisitors' is applicable to a visitor to a website, but if there is embedded Twitter content on that website then are they also visitors?

julian: some of these categories are subclasses of LegalEntity but not DataSubject, why so?

georg: In some cases, e.g. GDPR A.9(2-d), where members may not be data subjects until certain conditions are met

julian: in this case, `Member` should be in dpv-gdpr rather than dpv

georg: we can think in terms of legal entities, so as to see which groups of data subjects are associated with each legal entity ; then we can think of what categories to model

Everyone agrees to the proposal. Georg will be sharing a preliminary categorisation on the mailing list.

Personal Data Categories ambiguity and resolution

Proposal earlier talked about prefixing concept IRIs (e.g. Location) with `pd_` to make it `pd_Location` so as to disambiguate it from other uses of Location e.g. StorageLocation as adopters are incorrectly using Location (which is personal data) to denote other forms of non-personal-data locations e.g. company location

julian: prefer modular approach i.e. extract personal data to separate module and use as dpv-pd:Location

paul: like the concepts all being in one place, but okay to go with consensus

harsh: Piero denoted preference for modular approach as well

harsh: I prefer modular approach as well

Harsh will enquire with Georg and the group will make a decision in next week's meeting

Next Meeting

We will meet again on WED 15-DEC 13:00 WET / 14:00 CET

Minutes manually created (not a transcript), formatted by scribe.perl version 185 (Thu Dec 2 18:51:55 2021 UTC).