W3C

DPVCG Meeting Call

13 FEB 2025

Attendees

Present
beatrizEsteves, delaramGolpayegani, georgKrog, harshPandit, julianFlake, julioHernandez, markLizar
Regrets
paulRyan
Chair
beatrizEsteves
Scribe
beatrizEsteves

Meeting minutes

Repository: w3c/dpv

Meeting minutes: https://w3id.org/dpv/meetings

purl for this meeting: https://w3id.org/dpv/meetings/meeting-2025-02-13

v2.1 release

<ghurlbot> Issue 198 DPV v2.1 release management (by ghurlbot)

v2.1 release candidate with open review until FEB-16; see https://lists.w3.org/Archives/Public/public-dpvcg/2025Feb/0002.html and w3c/dpv#235 for hotfixes

updates on reviewing tasks: Julio is still reviewing loc and tech extensions; julian checked GDPR extension and didn’t find any major issues; Beatriz will check justifications extension tomorrow

v2.2 roadmap

beatrizEsteves: will check offline with Georg on updates on the EHDS concepts

tyttiRintamaki: discussing with Georg - DPIA concepts - will work offline to publish an ontology for this and then will suggest it to be integrated into DPV

<ghurlbot> Issue 114 In 27560-records, how to identify the latest consent state? (by coolharsh55)

georgKrog: latest consent / nested consent – will show Signatu’s solution next meeting and we can have a discussion whether that’s more appropriate than the DCAT solution proposed in #114, towards updating the guide with our proposed approach

markLizar: how are we going to represent consent to secondary purposes?

georgKrog: discussing with Mark - clarification on the distinction of giving consent/permission and how to capture this with DPV in privacy notices

georgKrog: biometric concepts will be shared in time to the mailing list

georgKrog: represent rights from DGA and other EU laws – Beatriz is interested in this, in particular will look at the Data Act in the spring

AI Training

<ghurlbot> Issue 82 Provide vocabulary to specify purposes and permissions related to AI training (by scottkellum)

delaramGolpayegani: where are we going to get the definitions for the terms? Are there any ISO standards that we can use?

delaramGolpayegani: Maybe ISO/IEC TR 29119-11:2020 (Software and systems engineering — Software testing — Part 11: Guidelines on the testing of AI-based system) maybe has something

markLizar: Will share more solutions via mailing list - see https://lists.w3.org/Archives/Public/public-dpvcg/2025Feb/0008.html

Subjective Locations

<ghurlbot> Issue 209 [Concept]: `AtX` subjective Location concepts (by coolharsh55)

harshPandit: top concepts (private/public) have to be combined with specific ones (at home, on device). We need to agree on the top concepts by checking whether they fulfil use cases, e.g. FashionID case, cookies, wallets communicating what’s private/public, CCTV monitoring, etc.

markLizar: CCTV would be semipublic

harshPandit: semipublic is currently not on the list of concepts because there’s not good definition for it

Inverted Locations

<ghurlbot> Issue 208 [Concept]: Add Non-X (X = specific location) to represent locations that are not X (by coolharsh55)

harshPandit: currently we will support NonEU since we have support for EU jurisdiction. We can also support NonXX where XX are EU countries if required, we need to check whether there are any national laws that require this

AOB

markLizar: https://kantara.atlassian.net/wiki/spaces/WA/pages/301564731/ANCR+Transparency+Performance+Report – work on controller identification – document is open for feedback

Next Meeting

The next meeting will be on FEB-20 Thursday 13:30WET/14:30CET

Agenda will be reviewing and finalising release of v2.1, and continuing discussion on topics started under v2.2

Minutes manually created (not a transcript), formatted by scribe.perl version 217 (Fri Apr 7 17:23:01 2023 UTC).