W3C

DPVCG Meeting Call

15 OCT 2024

Attendees

Present
beatrizEsteves, delaramGolpayegani, georgKrog, harshPandit, julianFlake, julioHernandez, paulRyan
Regrets
tyttiRintamaki
Chair
-
Scribe
harsh, harshPandit

Meeting minutes

Repository: w3c/dpv

Meeting minutes: https://w3id.org/dpv/meetings

purl for this meeting: https://w3id.org/dpv/meetings/meeting-2024-10-15

Discrimination concepts

<ghurlbot> Issue 190 [Concept]: Discrimination Concepts in RISK (by coolharsh55)

harsh: We can use the existing discrimination law to get the concepts e.g. take from law e.g. Ireland has 8 concepts we can use https://www.citizensinformation.ie/en/employment/equality-in-work/equality-in-the-workplace/

georgKrog: we should also map it to ECHR https://en.wikipedia.org/wiki/European_Convention_on_Human_Rights

Rights Impact concepts

<ghurlbot> Issue 184 Add Rights Impact concepts for each Right (by coolharsh55)

harsh: see if our impact categories e.g. delayed, denied make sense for each right e.g. non-discrimination and delayed doesn't make much sense ; so we provide some help to identify impacts on rights ; timeline is Nov end as the next release is planned for Dec

georgKrog: will need to read up on this to understand rights impacts

harsh: okay, so we can start with one concept representing impact to entire right / article and then have a hierarchy under it to model more specific impacts

georgKrog: looking at case law, e.g. the word used there is deterrent

harsh: impact concepts in GDPR

beatrizEsteves: for specific rights, also put in rights guide

harsh: in the previous call, the deadline mentioned as November end was based on DPV 2.1 being planned for a December release. Since we have a 6 month release cycle planned, it would be good to have some rights impacts concepts as the FRIA under AI Act is trending.

Legal Bases

<ghurlbot> Issue 111 Model information about legal bases (by coolharsh55)

harsh: Georg asked about power of attorney, but this is not considered in GDPR legal bases or other legal bases for consent. For contract, etc. this is also not a legal basis on its own - or I don't think we should get in to that level of detail just yet.

group discussed validity under GDPR for consent

harsh: concluding this, we need to make sure that DPV is capable for expressing consent given by parent - recording the relation / role

ACTION: ensure DPV can express role of parent/guardian for consent by delegation

Updates / Mentions

the following were discussed regarding updates

Proposed DPIA concepts in GDPR by Tytti w3c/dpv#183

Linking DPV concepts to GDPR (proposed by Prinon Das): w3c/dpv#186

Guide for Machine-Actionable Rights w3c/dpv#191

Alignment with ODRL w3c/dpv#130

Next Meeting

next meeting will be in 1 week on TUESDAY 22 October at 13:30 WEST / 14:40 CEST. Agenda will be selecting the next set of items/issues on GitHub with any updates on github/mailing list and AOB.

Summary of action items

  1. ensure DPV can express role of parent/guardian for consent by delegation
Minutes manually created (not a transcript), formatted by scribe.perl version 217 (Fri Apr 7 17:23:01 2023 UTC).