2017-08-17 Meeting Notes (CR)

2017-08-17 Meeting Notes (CR)

Date

2017-08-17

Status of Minutes

Approved

Approved at: <<Insert link to minutes showing approval>>

Attendees

Voting

 

Non-Voting

  • David Turner

  • Robert Lapes

  • Tom Jones

  • Colin Wallis

Quorum Status

Meeting was quorate

 

 

Voting participants

Participant Roster (2016) - Quorum is 4 of 7 as of 2016-10-06

Iain Henderson, Mary Hodder, Harri Honko, MarkLizar, Jim Pasquale, John Wunderlich, Andrew Hughes

Discussion Items

Time

Item

Who

Notes

Time

Item

Who

Notes

4 mins

  • Roll call

  • Agenda bashing

@Former user (Deleted)

 

1 min

  • Organization updates

All

Please review these blogs offline for current status on Kantara and all the DG/WG:

 

  • Mark has scheduled a CIS WG call to discuss Purposes on August 18 07:00 Pacific. Details were sent to the list.

2 min

  • MyData Conference update

  • CIAM World Tour workshop

All

Any specific sessions about Consent Receipts and Consent Management?

5 min

"Motion to accept CR v1.1.0 DRAFT 2 as posted to the wiki on July 13, 2017"

This is the resulting output from Sprint 1 and Sprint 2.

Chair

Moved by: Andrew Hughes

Seconded by: Mark Lizar

Discussion: Note that JW and others have some comments that are pending - due to unforeseen scheduling circumstances, they have not been able to contribute the material. This draft is accepted with the understanding that the delayed comments will be contributed at a later 'document consolidation' period.

Result: Motion carried.

5 min

Discuss 'sprint' process diagram

Andrew

 Refresh on where we are in the cycle

August 17, should be at:

  • End of WG Contributions to Sprint 4

  • End of WG review of updates resulting from Sprint 3

  • Start of WG Contributions to Sprint 5

 

40 min

Discuss work backlog priorities for CR v1.1

David

Github Issues: https://github.com/KantaraInitiative/CISWG/issues

 

Discussion

  • We will slip one more week

  • Sprint 3 proposal has been with the WG and needs more WG comment - see the list for the text

  • Sprint 4 - tomorrow's meeting is needed to deal with Sprint 4 topics

  • ACTION: Andrew to update the Sprint schedule

  • Mark proposes that the topic of 'Termination' and 'Retention' be put to Implementers to see how they are dealing with it

  • Mark proposes that a list of Implementations is created on the wiki

  • Consensus is to proceed with both items

  • Question: If a user revokes the consent, is it the expectation that a second receipt is generated to memorialize this change in status?

    • Discussion about how to record changes in state of the consent - it all presupposes that there is a log kept of all state changes

  • Question: How does the 'right to be forgotten' or purging of information impact the receipts? e.g. retention of data for public safety lawful purposes

    • Discussion - this is possibly a different justification for processing

    • This topic was discussed at a recent IAPP meeting in NYC - lots of different perspectives raised

  • Note: See Lawful processing: https://ico.org.uk/for-organisations/data-protection-reform/overview-of-the-gdpr/key-areas-to-consider/

 

ISO 29184 contributions

  • Deadline for contributions and comments is September 15 to ISO - so the Kantara group needs to submit at least a week prior.