Data Privacy Vocabularies and Controls Community Group Teleconference

Hi all!

hmm, seems there was some confusion about today's telco through my emails.

schedule, milestones
… use cases, we need more

Axel: we definitly have a good set of vocabularies

Axel: we can have more use cases, and we have to decide where we want to go with the requirements

Axel: in the F2F we said we want taxonomy for purposes, GDPR terms... etc. I think we need use cases for these things and use cases covering these terms. I think we should be OK and do not extend requirements now

Rigo: I would support it

<AxelPollleres> Harald: I would maybe have more requirements from thelegalt side

Harald: I can add more requirements from our internal discussions

Rigo: I would not do as an exercise, but take one by one use cases in the CG and expand it in a taxonomy

Axel: Extending on use cases is OK, I advertised it in mydata

<AxelPollleres> Rigo: let's not do an "explaining-the-world-exercises", but take 1-by-1 the use cases by the community group and cover them

Stefano: is there a collection of use cases that we can build upon?

<AxelPollleres> Axel: mydata has a collection, AFAIK

Axel: There is something from mydata meeting

<Harald_ULD> Axel: More use cases encouraged. Axel proposed joining dpvcg at MyData, Helsinki last week.

ACTION: Stefano to explore list of mydata use cases.

<trackbot> Created ACTION-18 - Explore list of mydata use cases. [on Stefano Bocconi - due 2018-09-11].

Axel: Axel will provide link to MyData use cases

minutes from last time

<AxelPollleres> no comments

ACTIONS

<AxelPollleres> https://www.w3.org/community/dpvcg/track/actions/open

Axel: Bert will provide overview of SPECIAL use cases

<AxelPollleres> ACTION-10 done

<AxelPollleres> trackbot, close ACTION-10

<trackbot> Closed ACTION-10.

<AxelPollleres> trackbot, close ACTION-13

<trackbot> Closed ACTION-13.

Axel: anybody active in ieee 7012? Axel willl try to reach out

<AxelPollleres> close ACTION-15

<trackbot> Closed ACTION-15.

<AxelPollleres> close ACTION-16

<trackbot> Closed ACTION-16.

report back from Mydata, Helsinki

Axel: We need to discuss in order to define the scope of the WG. I talked of Interoperability, consent and transparency

axel: positive feedback, nobody is working in integrating the efforts in this area, only us

<Harald_ULD> Axel: No one seems to have efforts on integrateing the approaches except us (DPVCG-group).

axel: they talked a lot of standards but for identity, authentication,... , we can keep an eye and have liasons

Axel: some other topics: distributed identities, authentication standardisation, credential community group (standards for credential exchange)
… They mostly focus on the protocol but not in our scope, e.g. data categories, we have a quite unique scope

<AxelPollleres> 5) Social Activity ⟶ Activity Streams

<AxelPollleres> 4) Consent & Transparency ⟶ DPVCG

<AxelPollleres> 3) Credentials ⟶ Credentials CG

<AxelPollleres> 2) Identity⟶ DID, national eIDs, …

<AxelPollleres> 1) Authentication? ⟶ Oauth, DIDAuth, Webauthn

Axel: In this categories, privacy and consent would be one level below

<AxelPollleres> https://aic.ai.wu.ac.at/~polleres/presentations/20180830MyData2018_Interop_and_Transparency.pdf

Axel: slides are available in the link above, feedback is welcomed!

Stefano: It

Stefano: It's surprising nobody is doing this effort

Axel: For web browsers there is another w3c workshop in California, september, but they are not aware of our efforts

<AxelPollleres> https://www.w3.org/Privacy/permissions-ws-2018/cfp.html

<Harald_ULD> Rigo: there is another workgroup re-establishing the android-permissions in the context of an US-understanding privacy.

Rigo: Not surprising, the browsers are like a modern TV :)

<AxelPollleres> https://www.w3.org/community/dpvcg/wiki/Use-Cases,_Requirements,_Vocabularies

<Harald_ULD> Axel: a

<rigo> Harald_ULD: I oppose the US understanding of privacy/secrecy to the EU understanding of data protection. The latter is more about dossiers than about secrecy

Axel: added more vocabularies, e.g. CDMM, ActivityStreams...

<rigo> AxelPollleres: may look into schema.org vocabs

<rigo> ... consent received work by Kantara

<rigo> ... data categories from schema.org to be explored

Bert: So mydata.org is creating a foundation...

Axel: yes, it is organized by country, but they are thinking of building a more formal structure.
… the origin in Finland and they are thinking of how to organize and make it attractive

Javier: Is someone from mydata joining the group?

Axel: Probably 1 or 2, not sure if they will join the telcos, trying to have people from Kantara makes a lot of sense
… I particularly talked to people with use cases and invited them to post the use case and join the calls

<AxelPollleres> https://www.w3.org/community/dpvcg/wiki/OwnYourData/Data_Donation

Axel: For example, https://www.w3.org/community/dpvcg/wiki/OwnYourData/Data_Donation, by the founder of ownyourdata

new use cases and templates

Axel: Already mentioned the new use cases, Ownyourdata, also digi.me, but it needs more details

ACTION: Axel to contact digi.me again for a more detailed use case description

<trackbot> Created ACTION-19 - Contact digi.me again for a more detailed use case description [on Axel Polleres - due 2018-09-11].

Axel: is there anybody else planning to add more use cases?

Harald: do we need to link use cases and requirements?
… we can maybe add something regarding data processing by public entities
… more regarding to transmission, public archives, police... etc. Are there legal reasons to transmit personal data?

ACTION: harald proposes use case about public entities handling personal data

<trackbot> Created ACTION-20 - Proposes use case about public entities handling personal data [on Harald Zwingelberg - due 2018-09-11].

Axel: We have the list of requirements we should cover. How should we proceed? Should we vote, are we missing something...?

<AxelPollleres> thoughts on additional requirements? use cases?

Stefano: We are still collecting use cases and this can cover more requirements

Axel: Should we then wait for more use cases?

Stefano: We need enough coverage to have relevance

Axel: If use cases are general enough then it is not tragic

Axel: I tried to convince people to add use cases even if they do not join the calls, in order to have enough coverage

Axel: We might then try to have more use cases and try to expand if needed

Sabrina: if you want to make progress, maybe organize another workshop with industry, maybe co-located with Big Data Value Vienna

Axel: We might have some locals, but we are a bit tight on time

Sabrina: One could find the people already registered/attending

<AxelPollleres> Sabrina: run a workshop on industry use cases around BDVA-Forum

Axel: I can try to find out, but it is rather soon

Sabrina: Maybe we can ask Big Data PPP for support
… they already contacted Eva

<Sabrina> https://www.european-big-data-value-forum.eu/

<AxelPollleres> http://www.bdva.eu/

Axel: if we agree when we can organize the meeting, then we can see if we can reach the companies
… From me it could be hard, except for the 13th but companies will be in the meeting

Sabrina: Maybe try via the PPP

Rigo: Yes, this can go via Eva, she is well connected there

<AxelPollleres> Use cases for Privacy session at BDVA

Rigo: was in Versaille last meeting, and it was a bit caotic, last minute

Axel: can we put an action to Eva?

Harald: For the vienna conference in november, Eva will be there potentially

ACTION: Harald to talk to Eva to get in touch with BDVA about a session slot in the European Bid Data Value Forum.

<trackbot> Created ACTION-21 - Talk to eva to get in touch with bdva about a session slot in the european bid data value forum. [on Harald Zwingelberg - due 2018-09-11].

Harald: there could be a pannel session
… I will ask Eva to ask and report to the group

Axel: Of course we can present what we have now, but in general we need a slot to get to know how companies are doing with GDPR

Sabrina: already registered but in the first two days

Axel: I can try to join the first days

<AxelPollleres> Sabrina, Harald, Eva, planning to go to BDVA, maybe Axel, Javier, ...

<Ramisa> not me

ACTION: Stefano to ask around whether DECODE is willing to participate in BDVA-Forum

<trackbot> Created ACTION-22 - Ask around whether decode is willing to participate in bdva-forum [on Stefano Bocconi - due 2018-09-11].

Next steps and strategy

Axel: Bert and I have to talk and maybe discuss with the group in the next telco

ACTION: Bert and Axel tallk about refining the schedule/scope of the group and come back with a proposal how to order the input collected so far

<trackbot> Created ACTION-23 - And axel tallk about refining the schedule/scope of the group and come back with a proposal how to order the input collected so far [on Bert Bos - due 2018-09-11].

AOB

Harald: I presented DPVCG at ARES 2018 in Hamburg last Monday inviting potential participants from other EU-projects to join.

<Ramisa> thank you

Axel: Next telco in two weeks

<AxelPollleres> thanks! talk soon!