Meeting minutes
Previous minutes => https://
DPV Primer
We have comments from Georg and Piero.
No other comments or observations in the room.
Comments related to description of topics and typos have been resolved.
---
Regarding expression of DPV using SKOS or OWL, there has been a discussion the mailing list.
Currently, the choice is to provide both within the Primer. We await Piero & Luigi's text/material for this.
Primer will be updated along with other documentation after this.
---
For other examples (and expression of use-cases), Harsh can provide SKOS examples.
For OWL examples, we need a volunteer. If willing, email Harsh.
---
georg: In Signatu, we use DPV. The CTO says that adoption rate will depend on approaches, and will be different for different ones.
georg: Our clients prefer natural language expressions, which we turn into a JSON structure. Nothing more.
Technology
In the previous meeting, we discussed `Technology` as a concept, and agreed on its necessity and inclusion.
Proposals related to specific forms of technology, e.g. database or algorithm, are being proposed.
jan: In these, does `algorithm` refer to, e.g. anonymisation algorithm? If so, how to express this?
harsh: We have anonymisation and pseudo-anonymisation as measures. It would be preferable to express concepts related to those under that e.g. specific types of anonymisation techniques.
harsh: That being said, there is no restriction to also declare those as types of algorithms if doing so is necessary or needed, e.g. in an implementation.
---
Conclusion of discussion -> For now, we include `Technology` as a concept, and for the rest, we look towards sources from ENISA / ISO / NIST / etc. for categories and concepts.
We have the option to provide these as a separate extension if the concepts we collect and provide are _opinionated_ rather than formal/universal.
Entities and their Categorisation
Currently in DPV, we have the `DataController` and similar concepts sitting alongside proposed concepts of `NonProfitOrganisation` and `NonGovernmentalOrganisation`.
Proposal is to have concept `LegalRole` to provide a separation between concepts such as controller and processors from organisation types.
jan: `IndustryConsortium` as a broad categorisation of `Organisation` is okay as specific types of consortium could be extended if needed.
The source of concepts is the ADMS vocabulary, with additional concepts added to balance expression e.g. Profit and NonProfit.
julian: In GDPR Art.91, there is "church and religious associations or communities" mentioned as an organisation. These should also be provided for completion.
Discussion on what term to use for this did not conclude with any agreement. For now, we consider `ReligiousAssociation` as a proposed term awaiting further discussion.
--
---
The following concepts are accepted in today's meeting: `LegalRole`, `JointDataControllers`, `Organisation`, `IndustryConsortium`, `GovernmentalOrganisation`, `NonGovernmentalOrganisation`, `ForProfitOrganisation`, `NonProfitOrganisation`, `AcademicScientificOrganisation`, `NationalAuthority`, `RegionalAuthority`, `SupraNationalAuthority`
Property `hasEntity` as parent property of entity-related properties.
Term `ThirdCountry` to represent countries outside applicable jurisdiction (within whatever context it is used in).
Next Meeting
We will meet again in +1 week on 09-FEB at 13:00 WET / 14:00 CET
Discussion will continue on resolving concepts proposed in spreadsheet, and other items on Agenda.