Meeting 2020-04-08 AdvCIS

Date

08 Apr 2020

Attendee

• Former user (Deleted)
• vitor jesus (Unlicensed)
• Salvatore D'Agostino (Unlicensed)
• Mark Lizar (Unlicensed)
• John Wunderlich
• Former user (Deleted)
• James Hazard
• Tom Jones
• Colin Wallis (Unlicensed)
• Jan Lundquist
• Burak
• Andadi Pandharkar
• Ken Klingenstein

IPR Notice

Goals

Use case

Vitor Jesus (Use Case Lead) Present health care use case (slides link)

Discussion of the range of use cases in health care and how consent and notice and their extent is varied.

How do we manage the relationships?  In order to represent these there needs to be a full picture.

JH → My sense, as lawyer, is that we need to work at a more abstract level.  That we cannot hope to know what the interaction requirements are, since they vary so greatly from one ocntext to another.  I.e., as lawyer, I think that we are in a certain sense attempting to define the substance, to"legislate."  What is needed is general method.  Law - "contract" in the economic sense is "incomplete" - Hart and Holmtrom

JW → My point was that if you are going to write a general receipt use case, it should recognize that the likelihood of the notice having been read varies between use cases, and similarly that the likelihood of the expression of consent varies between use cases.

HJP → (paraphrased..) Too general the receipt becomes a contract document, in a receipt you can't capture all the use cases.  So you need to have a structured receipt.  If you go outside of that you either extend it or you move to a formal contract.

JW → Here's the use case in health care that I talked about: https://kantarainitiative.org/confluence/display/archive/Alice+participates+in+Bob%27s+Research+Stu It comes from the Blockchain and Smart Contracts Kantara report here: https://kantarainitiative.org/reports-recommendations/# UMA Case Studies are here: https://kantara.atlassian.net/wiki/display/uma/Case+Studies

JH → and the critical thing is to make the system open - to let the user tweak - and to have a system observe  https://bit.ly/2p6jQQY

JH → My GA4GH stuff is here http://www.commonaccord.org/index.php?action=list&file=G/GA4GH/ "identities" - http://www.commonaccord.org/index.php?action=source&file=G/Agt-NDA-CmA/Demo/Acme-Ang/0.md

Also of interest is the ISO - LEI registrations (legal entity identifiers)

Spec Review

Reviewed Section 1. 

Reviewed numbering scheme 1.7 goes to 1.9 for LC and then 2.0 when Kantara approved.

HJP → looking at Irish DPO Report on Tracking as consideration for the next section.

https://www.dataprotection.ie/en/news-media/publications/report-dpc-use-cookies-and-other-tracking-technologies

Discussion of relationship to V "next" and relationship to Personal Data Use receipt and "sticky", e.g. does policy stick to receipt or does receipt stick to the policy.

Discussion of the relationship to other work such as UMA.  

AOB

Use the WG-ISI list to for discussion

Discussion items

Action items