W3C

DPVCG Meeting Call

08 MAY 2024

Attendees

Present
alexJarju, anaGardano, beatrizEsteves, delaramGolpayegani, harshPandit, paulRyan, steveHickman, tyttiRintamaki, victorLopezJuarez
Regrets
georgKrog, iainHenderson
Chair
harshPandit
Scribe
harsh, harshPandit, tyttiRintamaki

Meeting minutes

Meeting minutes: https://w3id.org/dpv/meetings

purl for this meeting: https://w3id.org/dpv/meetings/meeting-2024-05-08

Justifications

<ghurlbot> Issue 63 Add Right Non-fulfilment Justifications for GDPR’s rights (by coolharsh55)

paulRyan: okay with the outputs

beatrizEsteves: okay with the outputs

harsh: that concludes the discussion with okay from paul, beatriz, and georg and we will add them to v2. For the GDPR rights, we will think about how to express the relation for v2.1

Consent Controls

<ghurlbot> Issue 115 Add Measures for Obtain, Withdraw, etc. for Consent and other Actions (by coolharsh55)

harsh: how do we add controls to obtain/ withdraw consent - there is no exact solution at the moment

harsh: Do we suggest using the existing WithdrawFromActivity or specifically add a term WithdrawConsent? The cons of the second method is that we will need to repeat such actions for all legal basis.

harsh: Proposal: we keep the consent actions to what is necessary i.e. obtaining, providing, and withdrawing and provide terms specifically for these. For others, like demonstrate, validate, etc. we can have generic controls as proposed in the issue

harsh: through this, we will be providing specific consent based relations (straightforward solution for those who wish to model consent)

paulRyan: we should model consent as it has been explicitly mentioned in regulations

beatrizEsteves: Agree with adding specific controls for consent

discussion concluded - No objections for Proposal, to be discussed next week with examples

Technology Purpose

<ghurlbot> Issue 85 Specify 'business process' or 'service goal' in DPV-Tech (by coolharsh55)

harsh: How to model the goal of the technology

harsh: Proposal: 1. What is the technology capable of 2. Reuse DPV “has purpose” to say technology has purpose etc.

steveHickman: leave it as purpose.

beatrizEsteves: confusing to use same term for defining purpose of processing activity or purpose of an AI system.

delaramGolpayegani: agrees with Beatriz

harsh: Ideas on how to represent this information and the multiple meanings behind purpose?

beatrizEsteves: properties for this in tech extension: “intended purpose”

harsh: we will then need to distinguish this as intended purpose and applied purpose - and we have dpv:Purpose already covering both, so this will be confusing

delaramGolpayegani: call it intent, concluded its too vague. Or call it function (use function as capability to model).

Discussion concluded without consensus on solution. Agreed to discuss this with furthe examples and ideas.

Tech concepts

delaramGopayegani: Need terms: market availablity status, deployer, operator, etc. Is there an umbrella term for these?
… We have TechnologyActor in tech extension, but nothing to distinguish the non-subject actors.

delaramGolpayegani: Call user “end user” instead?

harsh: For now, we have already accepted terms market availablity status, deployer, etc - so we will add this to the Tech extension.

harsh: We require a mapping of 22989 terms for actors and other concepts - Victor, Alex, Ana to assist with this
… DPV v2

harsh: we're getting there, all issues have been discussed and will be resolved, so optimistic about making the intended deadline of May end

harsh: only remaining work is documentation - data breach, DGA etc - which will be done from existing papers

Next meeting

The next meeting will be in 1 week on WED 15 May 14:00 WEST / 15:00 CEST. Agenda continued from today's discussions.

Minutes manually created (not a transcript), formatted by scribe.perl version 217 (Fri Apr 7 17:23:01 2023 UTC).