2021-01-21 Meeting Minutes ISI WG Meeting
- jim pasquale
- Former user (Deleted)
Kantara ISI WG Teleconference
Date and Time | Attendees | Apologies | Agenda | Minutes | Next Meeting
Date and Time
- Date:
- Time: 10:30 Eastern Time
Approval: 2021-02-04 Meeting Minutes ISI WG Meeting (DRAFT)
Attendees
Participant Roster - As of 2020-02-20, the quorum is 5 of 8
(Voting participants are: Andrew Hughes iainh1 NA (Unlicensed), jim pasquale, John Wunderlich, Ken Klingenstein (Unlicensed), Former user (Deleted), Former user (Deleted), Former user (Deleted), )
Voting
Non-Voting
Apologies
Agenda
- Call to order
- ISI Work Group IPR Policy
- Today's Agenda
- We’ll be doing a quick recap of The Draft PDURF document and vote to move to publish the document
- This is the main header title for the beginning of the contributions around this subject Characteristics for Respectful Tech, of which Ken's document we ask Ken to submit. If I got posting it correctly, the link is here.
- You are all encouraged to give it a look, produce your own and contribute, suggest reviews and
- Discuss the group moving forward to produce more outcomes
- Begin to Reviewing the Data Model
- We’ll be doing a quick recap of The Draft PDURF document and vote to move to publish the document
- Approval of Agenda
Approval of Minutes if a quorum
Agenda
- Director's Updates
- PDUR Framework Document
Minutes
Item | Who | Notes |
|---|---|---|
| Call to Order | Check for a quorum. (Quorum) Late Reminder about attendance policy for voting status. | |
| A reminder of IPR policy for the WG | ||
| Approval of Agenda | Moved: Seconded: | |
Approval of Minutes | Moved: Seconded: | Discussion: None Changes: None Actions arising: None |
Project Updates (Month-end Updates) (not required this meeting) | ||
|
| |
|
| |
|
| |
|
| |
WG Discussion | ||
Personal Data Use Receipt Framework | Discussion of how we might gain external input from the marketplace to obtain feedback on the data model. Group discussion on a number of issues (If you are reading this, and would like to amend notes, please email Former user (Deleted)). | |
| Announcements | All | Please enter your availability on the following link so that we might find a better time for the group: |
| Meeting Discussions | All | Discussion of new Kantara group formation and where the boundaries exist between this workgroup and our efforts in WG-ISI. Discussion around meeting times and objectives. Ken Klingenstein (Unlicensed)'s document submitted on 12/17/20: group was generally positive, however, suggested that some of the characteristics listed might better describe a specific profile; not necessarily a framework. We should develop a list of the understood Purposes of Use. Is the usage consistent w/ purpose of use? Motion to consider this when we next achieve a quorum - today (21 Jan 2021). Former user (Deleted) notes that IEEE P7012 has noted the following purposes:
John Wunderlich privacy tuples also feed into this Colin Wallis (Unlicensed) notes: Sept 2017 messers Lizar and Graves started.. : Draft: Guidelines for Defining Normative Purpose Categories for the Processing of Personal Information https://ieeexplore.ieee.org/abstract/document/9311949 (below please find add'l background discussion from 7, 14 Jan 2021) Ken Klingenstein (Unlicensed) No new trust frameworks until a comparison of existing trust frameworks have been conducted. Privacy frameworks are likely embedded within these trust frameworks, and consent frameworks within these privacy frameworks. Consent mechanisms such as duration, collection, usage, disclosure etc. should be rationalized. Suggestion to create a comparison prior to moving forwards. High-level analysis prior to a deeper dive? Places where consent is defined TODAY (in legislation, regs, etc.) John Wunderlich Suggestion to rephrase consent as an authority so that legal agreements and other appropriate bases for authorization are captured. Do 'you' have the authority to collect? Is this legitimate interest? If this is consent how is this determined? We are not looking to understand the legal basis, we are instead looking to scope this as an understanding of the MECHANISM for consent (purpose of use). IAB framework is upstream of the PDURF - we instead might want to understand if this is an allowable use based upon the mechanism itself? (e.g. publish individual's data on company newsletter – I have the data; is this purpose allowed under the basis that I hold this data?) Former user (Deleted) View https://www.thetradedesk.com to see concerns with 'absolutely verifiable' identity all the time... (privacy minimization); pseudonyms are part of our reality & the need for companies/individuals to categorically & definitively identify an individual at every juncture is disturbing |
| New Business Proposals | Moved: jim pasquale Seconded: John Wunderlich | High-level discussion and investigation of how we determine whether the data usage is consistent with the Purpose of Use. How do we derive a valid Purpose of Use? |
Next meeting | All | *** Next call 2021-01-28 10:30 am Eastern DAYLIGHT Time |
| Adjournment | Moved: jim pasquale Seconded: John Wunderlich | Motion carried |
Action Items
- Type your task here, using "@" to assign to a user and "//" to select a due date
- Please enter your availability here: https://www.when2meet.com/?10710726-4WtpV so that we might better accommodate the group's schedule
- jim pasquale to lead a poll for the group to set "breakout time" to further progress the PDURF doc
- Consider https://slite.com/features for spec / data model generation?
- Former user (Deleted) to merge changes & send to team for review
- Ken Klingenstein (Unlicensed) to share a checklist of touch-points for the next meeting