W3C

DPVCG Meeting Call

01 JUN 2023

Attendees

Present
beatriz, delaram, georg, julian, markLizar, paul, TedThibodeauJr
Regrets
harsh
Chair
paul
Scribe
paul

Meeting minutes

Repository: w3c/dpv

Data Breach

Continued discussion on data breach records. See issue w3c/dpv#64 for summary and discussion.

Proposal shared on mailing list - https://lists.w3.org/Archives/Public/public-dpvcg/2023May/0007.html

Review of Data Breach Information Concepts – agreement on all concepts

Query regarding new concepts - dpv:UnknownApplicability, dpv:NotApplicable, dpv:NotAvailale

beatriz: confirmed that these concepts are part of the main DPV and not the data breach extension

markLizar: Recommendation that there should be a guideline document provided as part to the DPV Data Breach extension providing information for users on how to use/ best practices for the data breach extension.

markLizar: Dynamic Notification – indicating that data breach is notified dynamically should a breach occur

markLizar: Automated Notification – the process of sending a breach communication without intervention.
… Suggestion – when we are modeling concepts such as “assessments” which are widely used in many differing Privacy contexts, we should work towards a general high level; concept of assessment, rather than a new term for each type of assessment e.g data breach assessment, mitigation assessment etc

Next meeting

harsh: The next meeting will take place on 08 June at 14:00 WEST 15:00 CEST
… Topics will include - Finalise Data Breach extension ; and Mapping of the DGA mapping exercise updated from Georg
Harsh and Beatriz

Minutes manually created (not a transcript), formatted by scribe.perl version 217 (Fri Apr 7 17:23:01 2023 UTC).