Meeting minutes
Approval for minutes for MAY-27 (done)
harsh: revisiting goals/deliverables for the group
Beatriz: global alliance for genomics (emails sent by Mark Lizar on mailing list) - not sure on what it means or is proposed
Georg: I agree
harsh: it would be best to reply to the email and ask for more details/clarity
Georg: there was a public call, related to use of DUO ontology including purposes; DUO purposes do not match DPV categories
harsh: I agree, DUO purposes contain what we define in DPV as purpose, processing, sometimes recipients. But they can be aligned if needed (IMO)
Georg: People from GHA and DPVCG should collaborate and discuss how to move forward - and see whether they would like to use the separation of purpose categories/processing etc as the DPV has done. If yes, then we can combine them within DPV(CG).
harsh: Mark is on call - so we can discuss this issue here
Georg: it was not clear about what is proposed - could you clarify the sentence regargind mapping with Global Health Alliance?
email: https://
Mark: the goal is to use DPV to define and/or purposes through mapping
Georg: what DUO / GHA has done is stich together sentences with multiple elements. So first activity would be to ask the GHA people if they see separation as in DPV is useful for them and then do the mapping.
Mark: The project we are working are involved in a project called Molecular You for medical research in British Columbia which uses Blockchain and DUO. The goal is to make a digital ledger for consent. GH4Ga is part of the project / they consult.
Mark: Anadi (from that group) has tried to do a test mapping
Mark: it is tricky for research related to genetics which also includes family genetic information or emotions; and these are valuable to distill separately as a research problem; and then we can think about doing this with DPV
Mark: the approach is different here where DPV can be used as a code of conduct in GH4GH in order to provide consent for medical reearch
harsh: from your perspective, what are you proposing as next steps for DPVCG?
Mark: mapping with GH4GH for DPV - and then liasing with them to work on this (summarised sentence)
Mark: we could set up a call to do this
harsh: We should discuss more on this through the mailing list in terms of interest, clarification, and work involved
harsh: Moving to topic of the group's deliverables and timelines - we should update these.
harsh: I propose to focus on use-cases, how DPV can be improved, and disseminating it to adopters for specific use-cases
Mark: (regarding ISO/IEC 29184) as an use-case and also the work been done at Kantara
Georg: expressing concern that DPV(CG) should not work in such a way to become dependant on a license with ISO
Mark: I agree we don't want licensing, but ISO represents consensus with large players which is important
harsh: to clarify, I think we should incorporate requirements from an international standard as an use-case and ensure DPV can provide e.g. machine-readable vocabulary for privacy/consent notices
Georg: that clarifies the issue for me
Mark: anyone can access ISO documents through participation in (some) group - which I will send to the group's public mailing list
Mark: (reg. ISO) after confirmation with Colin at Kantara
Mark: we worked on ISO to DPV extension using GDPR, and we were waiting for ISO 29184 to create an ISO to GDPR (with DPV mapping in appendix) to provide a single mapping source for vocabularies
… This is involved in the summer project for the GH4GH
harsh: Item 3 on the agenda was ISO/IEC - which we have discussed
harsh: My argument for DPV is that we should map to a single agreed international standard - which is ISO instead of attempting to add individual jurisdictions/
Georg: I would like to bring attention to transfer legal basis submitted by Signatu and see them added to the DPV
harsh: I would suggest sending a reminder email to the mailing list and CC'ng legal experts to get it validated. We can then do the technical work on incorporating it.
Georg: Article 13/14 regarding information to be provided - should also be incorporated / addressed by DPVCG.
Georg: Whether DPV is fully aligned to specify this information. IF not, we should assess whether DPV should include this information.
Georg: currently DPV lists elements comprising Data Processing Handling - but it does not say (in much detail) regarding relations between elements. It could be worthwhile to have a discussion to see if it is useful.
harsh: is this about a relation between e.g. processing and data category or processing and purpose? Georg: Yes.
… Georg sharing screen to display diagram about relations
… examples on screen: data storage, sensitive associated with data
harsh: We have had this discussion which influenced the design of separate concepts and a single concept intersection them (i.e. PersonalDataHandling)
harsh: Georg can share the relations / diagram to the group to say/show which relations are not considered or possible
ISSUE: Article 13/14 requirements using DPV
<trackbot> Created ISSUE-38 - Article 13/14 requirements using dpv. Please complete additional details at <https://
ACTION: Harsh to initiate discussion with group on current deliverables and timelines
<trackbot> Created ACTION-141 - Initiate discussion with group on current deliverables and timelines [on Harshvardhan J. Pandit - due 2020-06-17].
ACTION: Georg to share list of relations between DPV concepts
<trackbot> Created ACTION-142 - Share list of relations between dpv concepts [on Georg Philip Krog - due 2020-06-17].
ACTION: Mark to share how to participate/access ISO documents
<trackbot> Created ACTION-143 - Share how to participate/access iso documents [on Mark Lizar - due 2020-06-17].
harsh: Georg and Mark discussing UI/UX for human-intended privacy notices
… George Lioudakis introducing themselves : involved with data protection and ontologies for ~15 years
Georg: we also need to consider convention 108
Mark: we need to consider the global legislation vocabulary - I will follow up on this in the mailing list with Joss
… (running out of time for meeting call)