Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Date

2018-11-1428

Status of Minutes


DRAFT

Approved at: <<Insert link to minutes showing approval>>

...

  1. Call to order
    1. Roll Call & Determination of quorum status
    2. Agenda bashing
    3. Kantara Organization updates 
  2. WG Motions
  3. Discussion 
    1. The nature of the publication for EIC
    2. Detailed timeline towards publication at EIC
  4. Upcoming conferences and events
  5. All Other Business (AOB)
  6. Adjourn

...

  • Corné van Rooij
  • Jim Pasquale
  • Andrew Hughes
  • John Wunderlich

Non-Voting

  • David Turner
  • Ken Klingenstein
  • Colin Wallis
  • Sal D'Agostino

Regrets

Quorum Status


Meeting was <<<>>> quorate


Voting participants

Participant roster (CMS) - Quorum is 4 of 6 as of 2018-04-02

...

item
  • ISO 29184 Privacy Notices and Consent - is at the last committee draft stage
  • The general plan was for Kantara to contribute the Kantara Consent Receipt spec into this work
  • Colin has asked the WG 5 mailing list about this idea - low response but generally positive
  • The deadline for submissions is around February 24, 2019 - need to assign editor time to it

Time

Item

Who

Notes

5 min
  • Call to order
  • Roll call
  • Agenda bashing
  • Organization updates
Chair


5 5 minWG Motions
Quorum required 
Chair

Motion to approve all prior meeting minutes and notes

Moved by: Andrew Hughes

Seconded: Jim Pasquale

Discussion: none

Result: Carried


5 min

Introductions

All

Welcome!


30 minDiscussion on document draftingCorné
  • They discover the mandatory minimum data to deliver the service; data processed under other legal bases (collection is permitted but not mandatory); voluntary data where consent is needed
  • Q: Noted that "workforce" is listed in the first slide - do the workshops cover employee data? Normally the workshops are directed at the 'consumer' interaction. 
  • ACTION: The Employee use case should be covered in the consent use cases.
  • They work through the customer journey to define the data model - registration and initial data collection, data collection at later stages
  • The process highlights where additional data is wanted by the company but is not in the data model - requires further analysis by the team
  • The workshop then defined processing purposes for each of Mandatory, Other legal basis, and Voluntary data collection/processing
  • Note that these analysis processes are independent of the specific architecture implemented
  • Corné showed how the metadata could be used to give transparency and user controls in the mobile UI
  • Q: Should there be a "consent notice" in addition to the "privacy notice"?
  • Patterns that we should analyse
  • One time data collection, single use
  • One time data collection, multiple use
  • Periodic data collection
  • 'Continuous' data collection from a data connection

    The draft is in a Google doc - feel free to comment - Chairs and Editor will control acceptance of material.

  • Review this Powerpoint deck
  • Corné gave an overview of the process steps iWelcome goes through during customer workshops. 
  • The workshops deal with Information Management, data flows, and eventually what user consents are required by the customer systems.
  • They talk about the customer journey (UI and consumer facing) and the iWelcome digital platform (API and platform facing)
  • Definethe data model, the data processing purposes and consumer control capabilities
  • Need to get started writing in order to hit the EIC target deadline

    Corne walked through a timeline

    Image Added

    • Discussion on audiences and perspectives/points of view
      • E.G. from the individual's pov versus the B2B pov
    • Discussion about communication of consent preferences
    • Next WG call will be to bash through the TOC and update it
    • A Survey Monkey will be circulated next week for input and feedback
    FYIDiscussion on the Interview QuestionsAll

    The first draft of the interview questions is in a Google doc - please comment.

    5 minUpcoming conferences and eventsAndrew

    Events that Kantara will have an active role: https://kantarainitiative.org/events/

    • Corné presented a draft WG timeline leading up to EIC in May
    • Colin suggests that KNOW Identity and Connect:ID might be good targets
    • Solove - Privacy and Security conference in DC - CfC ends this week
    5 minAOBChairAt the Kantara member member meeting - Paul Knowles presented the Blinding Identity Taxonomy and Schema Overlays - put on the agenda for a future meetingJLINC to present their solution at next call

    AdjournChair

    Next WG meeting Wednesday, November 21December 12, 2018 10:00 Eastern Standard Time / 14:00 GMT

    ...