W3C

DPVCG Meeting Call

08 DEC 2021

Attendees

Present
georg, harsh, julian, paul
Regrets
inah
Chair
harsh
Scribe
harsh

Meeting minutes

Previous minutes https://www.w3.org/2021/12/01-dpvcg-minutes.html

Previous minutes about today's agenda https://www.w3.org/2021/11/24-dpvcg-minutes.html

Data Entities categories and sub-classes

In previous meeting(s), we agreed to include only those categories that are relevant and important e.g. mentioned by a legal obligation so as to include in core DPV instead of an extension

julian: this list will not be comprehensive, and is dynamic and industry-specific in real-world

georg: so in cases of e.g. ROPA, there would DataSubject as the field and an open text field to specify information about what data subject categories

julian: these labels are not formalised in the sense that their interpretation is not clear, unambigious, or uniform across use-cases. For example, 'WebsiteVisitors' is applicable to a visitor to a website, but if there is embedded Twitter content on that website then are they also visitors?

julian: some of these categories are subclasses of LegalEntity but not DataSubject, why so?

georg: In some cases, e.g. GDPR A.9(2-d), where members may not be data subjects until certain conditions are met

julian: in this case, Member should be in dpv-gdpr rather than dpv

georg: we can think in terms of legal entities, so as to see which groups of data subjects are associated with each legal entity ; then we can think of what categories to model
… Everyone agrees to the proposal. Georg will be sharing a preliminary categorisation on the mailing list.

Personal Data Categories ambiguity and resolution

georg: Proposal earlier talked about prefixing concept IRIs (e.g. Location) with pd_ to make it pd_Location so as to disambiguate it from other uses of Location e.g. StorageLocation as adopters are incorrectly using Location (which is personal data) to denote other forms of non-personal-data locations e.g. company location

julian: prefer modular approach i.e. extract personal data to separate module and use as dpv-pd:Location

paul: like the concepts all being in one place, but okay to go with consensus

harsh: Piero denoted preference for modular approach as well

harsh: I prefer modular approach as well
… Harsh will enquire with Georg and the group will make a decision in next week's meeting

Next Meeting

harsh: We will meet again on WED 15-DEC 13:00 WET / 14:00 CET

Minutes manually created (not a transcript), formatted by scribe.perl version 217 (Fri Apr 7 17:23:01 2023 UTC).