Date
2017-0910-2812
Status of Minutes
DRAFTApproved
Approved at: <<Insert link to minutes showing approval>> 2019-12-12 Meeting notes (CR) DRAFT
Attendees
Voting
- Andrew Hughes
- Mark LizarJim Pasquale
- Rupert Graves
- Jim PasqualeJohn Wunderlich
- Mark Lizar
Non-Voting
- David Turner
- Tom JonesRobert Lapes
- Colin WallisDorota Filipczuk
- Chris Cooper
- Tom Jones
- David Turner
Info | ||
---|---|---|
| ||
Meeting was << status>>quorate |
Info | ||
---|---|---|
| ||
Participant Roster (2016) - Quorum is 5 of 8 as of 2017-08-24 Iain Henderson, Mary Hodder, Harri Honko, MarkLizar, Jim Pasquale, John Wunderlich, Andrew Hughes, Rupert Graves |
Discussion Items
Time | Item | Who | Notes |
---|---|---|---|
4 mins |
| ||
1 min |
| All | Please review these blogs offline for current status on Kantara and all the DG/WG: |
5 min | Discuss 'sprint' process diagram |
All | What is left to do for v1.1?
|
| |||
10 min | Discuss work backlog priorities for CR v1.1 | David not present | Github Issues: https://github.com/KantaraInitiative/CISWG/issues |
- Some regulations allow the possibility of having more than one Data Controller - so the CR v1.1 has to be able to support this
- General consensus on the call
- Leave it as it is for this version
- Future implementations may wish to declare very specific 'types'ofconsentthatare specifically bound to other things
- RG: does this section include 'soft consent'?
- Discussion - perhaps the discussion is more about pseudonymity versus identified entities
- This is a longer discussion about device fingerprints being usedasindentifyingdata
30 min | Draft of publication synopsis for new WG | Andrew | The purpose of the Consent Management Solutions – Best Current Practices publication is to establish an open standard of good practice for the management of an individual’s consent to process their personal data in electronic systems. The publication describes the practices used by leading organizations to manage the full lifecycle of an individual’s consent |
- General
- Consent Management Life Cycle
- Regulations
- Privacy Notice
- Collection of consent
- Management of consent records
- Interoperability of consent records
to process their personal data. |
Proposed Table of Contents
((Andrew is late finalizing the drafts for circulation)) |
Discussion
- There is a new wiki page that will hold all the known implementations of Consent Receipts
- Includes a space to describe how the implementation uses the Kantara CR spec
- Discussion about Consent Management Solutions BCP TOC
- Link the BCP into Data Governance and Data Management practices
- This is a pre-requisite
- Link the BCP into Data Governance and Data Management practices
- General discussion about the implementations listing page
- John provided an interesting link to read: https://theconversation.com/nobody-reads-privacy-policies-heres-how-to-fix-that-81932
- Note: Iain Henderson has started a wiki that has some analysis of DPA guidance docs - GDPR language for businesses and people - crafted phrasing - to assist the User Terms work