Meeting minutes
Persistent ID for current minutes: https://
Meeting minutes: https://
Previous minutes: https://
intro - Victoria -- doing a PhD at TCD in the HARNESS project, working on AI disclosures in research
Admin
- managing examples w3c/
- managing requirements, use-cases
- guide for DPV contributors on semantics
- guide for creating legal concepts from law for DPV
Harsh to post page on wiki with work items and members, will share on mailing list
DPV 2.4
- proposed work program https://
fix IRIs (breaking change)
w3c/
in 2.4 we mark as sunset and then in 2.5 we make the change with new concept
Beatriz: +1
Julian: +1
Harsh: +1
accepted
DPV-ODRL
Harsh: w3c/
Beatriz: people can check the guidance document and the mapping document in the dev link https://
Beatriz: need to think about how to automate this in the future e.g. how can all dpv:Data concept be represented in as odrl:Asset concepts -- haven't added this as a RDF yet. Other mappings in the document are in RDF. Hopefully we can also have this as a result of the next result. We can also show this to ODRL CG and see if there are any feedback or comments.
Beatriz: create a GH issue to automate the definition of DPV Data/Processing/Entity concepts as ODRL Asset/Action/Party concepts
ODRL workshop
Beatriz: https://
Harsh: don't know the dates yet, but DPVCG should present our work
Beatriz: It was mentioned that it would be co-located with the GAIA-X event in May in Athens. But since W3C policy is to announce 2 months in advance, it means the CFP should be declared this week. If it happens in Athens, I can go and present.
new legal concepts for KR, TW, VN AI
Beatriz: law w3c/
… - Art: No updates
agreed to add these laws
Next step: to create concept for AI Law and AI authorities as a proposal for discussion in next meeting
India's DPDP
Beatriz: w3c/
Ajay: We are (hopefully) meeting next week where we will prioritise Articles to work on, and then start the work
EHDS
Ajay: w3c/
Beatriz: we will have a proposal but we are still working on it, no updates
DE-GDNG
Beatriz: w3c/
JulianFlake: we are doing a write up of lessons learned
AI Use Transparency
JulianFlake: w3c/
Harsh: clarity on the request -- concept representing AI outputs used as is, used with modification, or not used -- as a human activity/decision/review
Muhsin: We were contacted by uni. regarding AI use disclosures by students. So this could be a use-case for DPV in terms of the solution that we want to come up with. The case study is more about how the students used AI Specially in writing related cases.
Harsh: we also have the human involvement concepts but I don't think they represent the same stuff
Muhsin: Haven't looked at Human Involvement concepts
Harsh: okay so on github we can discuss where human involvement concepts fit and what is the need for the new concept
Victoria: related to PhD work, have the link to the github issue, will look/discuss there
AI model openness
w3c/
ArthitSuriyawongkul: we can go with this as a Status, but then then this could also be an Assessment.
Art: do we have examples for modelling like this?
Harsh: Data Quality assessments and statuses -- existing and proposed are similar to this as we assess and then represent the outcome as a status
Art: okay, makes sense
Harsh: On the github issue we write the definitions and how this works, and then we make the proposal
Harsh: want to change spreadsheet naming
AI Documentation
Harsh: (e.g. Datasheets and Model Cards) w3c/
Beatriz: I'm reviewing a paper for an ESWC workshop on this, might have interesting stuff there (https://
AI Documentation proposal
Beatriz: from Fabian: AI Act https://
Delaram: did you look at DQV?
Harsh: Yes, we have two approaches: we add these concepts to DPV. Or we can create an AI version of the DQV https://
Delaram: We looked at this, and DQV can be used for AI but it doesn't mention this explicitly
Harsh: we emailed the editor who said to just use it anyway but the concepts specifically say "data" and don't mention "AI" or any other uses
fix outdated version footer in 2.2
Harsh: w3c/
AOB
Dave Lewis: ECMA-424 CycloneDX Bill of materials specification https://
DPIA modelling updates (Tytti, Harsh): w3c/
FRIA modelling updates (Tytti, Harsh): w3c/
GDPR and NIS2 mappings being done by Ruhi
Georg presented DPV at https://
DPV mentioned in MLDCAT-AP issue on alignments SEMICeu/
NXDG workshop 2026 Beatriz, Harsh, Ruhi https://
Omnibus discussions Georg
Harsh: Signatu Privacy Signal Manager related to Article 88b
set preferences e.g. automated refusal only or you can choose purpose-compatible automation
it uses DPV purposes as options for what consent should be managed for
there is a history / log that also notes what trackers were bypassed or not
there is an export option for ISO 27560 consent record in JSON / JSON-LD format
there is an option to report it to data protection authority e.g. Google bypassed without any consent given
implemented all GDPR authorities, you can download the complaint, and you can describe what the issue is about
implications arising from FashionID where any resource that enters into your browser is within your 'privacy sphere' and the default position in the law as per the ePrivacy Directive is that everything is foribbden to be loaded unless there is a reason
Harsh: <explanation of Article 88b and what's missing>
Georg: In DPV, whenever a script or pixel image is loaded before consent is given, and that resource is not excempt, how do you represent this for ePD? To the end-user to understand what is happening e.g. script was loaded prior to consent. And on the controller's side how do you express it.
Harsh: this is for ePD or the GDPR?
Georg: Primarily ePD, but also as secondary uses for GDPR.