W3C

DPVCG Meeting Call

25 OCT 2023

Attendees

Present
beatriz, georg, harsh, mark, paul, tytti
Regrets
-
Chair
harsh
Scribe
harsh

Meeting minutes

Meeting minutes: https://w3id.org/dpv/meetings

purl for this meeting: https://w3id.org/dpv/meetings/meeting-2023-10-25

Updating concepts for non-personal data

<ghurlbot> Issue 99 Proposal to change DPV scope to include Non-Personal Data (by coolharsh55)

The task is to go through the spreadsheets and assess whether a concept is limited or scoped to personal data and should be changed to consider data. For example, Purpose is defined for processing of personal data, which should be changed to processing of data.

georg and paul to go through the spreadsheet for non-personal data changes required and mark rows in bold where changes are needed or make changes where needed (edit access to all spreadsheets)

ACTION: georg and paul to go through the spreadsheet for non-personal data changes required

Updates to documentation

see live version at https://harshp.com/dpv/dpv/

Categories of Data Subjects

see email by harsh https://lists.w3.org/Archives/Public/public-dpvcg/2023Oct/0018.html

Active/Passive

<ghurlbot> Issue 116 Add Intended and Active Data Subject categories (by coolharsh55) [concepts] [question]

harsh: having Active/Passive concept for Data Subject would be useful, as stated from Delaram's use-case. For the other entities, we keep them proposed at the moment to explore clarity and usefulness.

Informed/Uninformed

harsh: discussion on whether these concepts are useful to have and for which entities other than the data subject

paul: yes, e.g. breach, rights

paul: ProcessorInformed should also be added

mark: useful to trakc status of being informed (data subject)

harsh: do we need third party being informed?

mark: shouldn't a third party be a third party controller? i.e. is it an adjective or a role

harsh: GDPR Art.4-10 defines third party as a role

georg: Califonia law requires recipient to confirm deletion of data - so this also counts as being informed

Expected/Unexpected

difference between Intended (intent with control) and Expected (expect without control)

Determination

expressed using property isDeterminedByEntity

Discussed without updates

TECH extension

NIS2/DORA concepts

Next Meeting

georg: The next meeting will be in 1 week on WED NOV-01 15:00 WET / 16:00 CET. Agenda includes discussions on: 1) Active/Passive etc. concepts ; 2) Automation and Human Involvement concepts ; 3) AOB.

Summary of action items

  1. georg and paul to go through the spreadsheet for non-personal data changes required
Minutes manually created (not a transcript), formatted by scribe.perl version 217 (Fri Apr 7 17:23:01 2023 UTC).