21:59:15 RRSAgent has joined #dpvcg 21:59:15 logging to https://www.w3.org/2022/05/25-dpvcg-irc 21:59:26 Zakim has joined #dpvcg 21:59:30 ScribeNick: harsh 21:59:32 Meeting: DPVCG Meeting Call 21:59:35 Chair: harsh 21:59:44 Present: harsh, georg, paul, julian, beatriz 21:59:51 Date: 25 MAY 2022 22:00:04 Agenda: https://lists.w3.org/Archives/Public/public-dpvcg/2022May/0002.html 22:00:54 Note -> Today is GDPR's 6th anniversary since publication, and 4th since enforcement. Happy GDPR Day! 22:01:06 Topic: Technology Concepts 22:03:20 In the previous meeting, we stopped the discussion where technology concepts were to be re-ordered to better align with the Processing taxonomy. In this meeting, we continue that discussion. 22:03:45 georg: Why separate technology? It would be better to have this written down as explanation / motivation. 22:05:10 Note to write technology extension text specifying: 1) Why we need separation of concepts 2) Relation with Tech/Org Measures 3) Modelling capability vs concept of technology 4) Benefits regarding providing expandable concepts in terms of taxonomy as well as ontological model separate from DPV and 5) Better aligning with sources such as ENISA and ISO 22:05:32 Harsh presents a different structure for the taxonomy 22:06:19 Top concepts `DataTechnology` and `ProcessingTechnology` that represent technologies acting on data and technologies performing or enabling processing 22:07:02 These are further expanded as: Data - (same as processing) DataUseTechnology, DataStorageTechnology, etc. Processing - Application, Device, VM, Server, etc. - anything on which processing happens or takes place. 22:07:34 These two can be combined to specify things such as Server (processing) for Storage (data) as `DataStorageServer` 22:08:28 Service and Product etc. as _market defined terms_ are removed from scope. Instead, the focus is on modelling how these represent a model of utilising technology, i.e. standalone app or software or a subscription that is continous or sporadically used 22:09:49 Terms for actors regarding technology - `TechnologyProvider` for who provides it, `TechnologyDeveloper` for who develops it, `TechnologyUser` for who uses it, `TechnologySubject` for upon whom it is used. These terms are directly related to those defined within the AI Act i.e. AIProvider etc. 22:10:52 The location where a technology is applied or used is separated as the concept `TechnologyLocation` to specify things such as on device, on a server, some specific geographical location 22:11:36 Technologies which provide only an algorithm are specified as `AlgorithmicTechnology` and those that only provide management are `ManagementTechnology`. 22:12:32 A `TechnologicalSystem` is a technology provided as a system e.g. software or app - it is sufficiently complete on its own, `TechnologicalComponent` is a technology provided as a component - e.g. plugin or script or library. 22:13:13 The communication performed by technologies is represented by `CommunicationMechanism` which specifies how technologies communicate e.g. internet connectivity, wifi, bluetooth, etc. 22:14:07 To associate technologies with specific concepts in DPV, e.g. processor or TOMS or actors, the property `relatedTo` is provided as a hint or guidance for where that technology can be useful 22:14:26 georg: In all these, Data Security should be a priority for modelling based on practical needs 22:14:41 julian: PETs (Privacy Enhancing Technologies) should also be modelled 22:14:49 There was a discussion on Data Security vs Data Safety 22:15:24 We discussed technologies based on how security, safety, and risk management is performed. 22:15:41 Current proposal is to have SecurityTechnology with subconcepts for SecurityTech - Detection, Prevention, Mitigation, Monitoring 22:16:15 Where detection refers to identifying vulnerabilities, prevention is preventing those from being exploited, mitigation is reducing impact, and monitoring is identifying if those have taken place 22:16:28 Topic: Next Meeting 22:16:44 We will meet again in one week, JUN-01 WED 14:00 CEST 22:17:09 We will continue the discussion on technologies. This proposal will be cleaned up, organised, and shared by Harsh on the mailing list. 22:17:11 zakim, bye 22:17:11 leaving. As of this point the attendees have been harsh, georg, paul, julian, beatriz 22:17:11 Zakim has left #dpvcg 22:17:17 rrsagent, publish minutes v2 22:17:17 I have made the request to generate https://www.w3.org/2022/05/25-dpvcg-minutes.html harsh 22:17:19 rrsagent, set logs world-visible 22:18:10 rrsagent, bye 22:18:10 I see no action items