W3C

– DRAFT –
DPVCG Meeting Call

23 NOV 2022

Attendees

Present
beatriz, delaram, georg, harsh, julian, paul
Regrets
-
Chair
harsh
Scribe
harsh

Meeting minutes

Previous minutes

DPV v1 prep

We discussed pending issues on GitHub and resolved all open issues for v1.

The collection of issues is at - https://github.com/w3c/dpv/issues/50

Specify conditions, constraints, or restrictions e.g. for purpose or data category #18 - resolved as we have Rules now.

<Github> https://github.com/w3c/dpv/issues/18 : Specify conditions, constraints, or restrictions e.g. for purpose or data category

Add/Expand Purpose Categories #22 - resolved as we have refined the purposes recently and identify no major issues.

<Github> https://github.com/w3c/dpv/issues/22 : Add/Expand Purpose Categories

Adding Safeguards to DPV #23 - resolved as we went through the list and have confirmed the safeguards are present in DPV.

<Github> https://github.com/w3c/dpv/issues/23 : Adding Safeguards to DPV

DPV releases should contain only the vocabulary #40 - resolved as code has been implemented.

<Github> https://github.com/w3c/dpv/issues/40 : DPV releases should contain only the vocabulary

List of concepts, documentation, and other things to be provided in DPV v1.0.0 #38 - resolved as we have agreed on v1 concepts and future work.

<Github> https://github.com/w3c/dpv/issues/38 : List of concepts, documentation, and other things to be provided in DPV v1.0.0

Adding PII as a concept

We discussed whether to add PII as a concept as it is used in several use-cases and jurisdictions.

The issue is the exact definition of PII and its relation with PersonalData. There are several different iterations, and while providing PII may be of value, if it is the exact same as PersonalData, then there is no need to provide a concept separately.

Instead, if PII is a subtype of PersonalData, then this should be made explicitly clear through the definition.

We have decided for now to keep the issue open and discuss it later.

Indicating PII i.e. Personally Identifiable data category or categories in combination #14

<Github> https://github.com/w3c/dpv/issues/14 : Indicating PII i.e. Personally Identifiable data category or categories in combination

(relevant issue)

Sensitivity of Data

Express 'sensitivity' of data #11 - relevant issue

<Github> https://github.com/w3c/dpv/issues/11 : Express 'sensitivity' of data

We discussed whether we should provide sensitivity of data as a concept/relation to indicate how sensitive the data is (on a scale).

Harsh's proposal is to reuse Severity instead of creating a separate scale, since the use of severity is tied to risk/impact which uses levels and severities.

Paul disagrees that such use is compantible, and that severity reflects association with impact, whereas severity is a concept applicable before use.

We have decided to keep the issue open for this discussion to continue later.

Pending tasks

Documentation Style Guide #39 - harsh will create a wiki page with some collected requirements

<Github> https://github.com/w3c/dpv/issues/39 : Documentation Style Guide

Diagrams #24 #65 - Georg and Delaram are working on this

<Github> https://github.com/w3c/dpv/issues/24 : Diagrams in documentation for better view of concepts

<Github> https://github.com/w3c/dpv/issues/65 : Add/Update diagrams in DPV for v1

Use-Cases and Examples showing how vocab can be used #12 - harsh and beatriz are editing these

<Github> https://github.com/w3c/dpv/issues/12 : Use-Cases and Examples showing how vocab can be used

georg has suggested to not use new concepts (~ex:Concept~) in the examples as it causes confusion as to where those concepts are in DPV. Or, to provide textual description that these concepts have been created to show how DPV's concepts can be extended.

Machine-readable requests to execute rights #4 Rights Exercise - will be integrated in v1, needs textual description

<Github> https://github.com/w3c/dpv/issues/4 : Machine-readable requests to execute rights

Next Meeting

We will meet again in 1 week, on WED NOV-30 13:00 WET / 14:00 CET

Other than textual descriptions to be added to the specification, and the diagrams, no other issues have urgency.

The guides, use-cases, examples, and refinements will continue to happen post v1 release.

Minutes manually created (not a transcript), formatted by scribe.perl version 196 (Thu Oct 27 17:06:44 2022 UTC).

Diagnostics

Active on IRC: Github, harsh