DRAFT 2019-04-17 Meeting notes

• Call to order
• Roll call
• Agenda bashing
• Organization updates

• Meeting was called to order and the roll was called
• Please ensure that you sign the Group Participation Agreement

• Please review these blogs offline for current status on Kantara and all the DG/WG:

  • 2019: March
  • Work + Discussion Group Activity

• Colin and Andrew attended ISO SC 27/WG 5 meetings in Tel Aviv a couple weeks ago
  • WG 5 accepted Kantara's submission of a summary of the Kantara Consent Receipt specification as an annex to ISO 29184 Online Notices and Consent standard
  • THEN the WG 5 group asked that a Study Period start to look into the feasibility of a new standard for Consent Receipt and Record. Colin and Andrew are leading that Study Period. Stay tuned as this develops.
• UMA 2 has been contributed/proposed to IETF as a candidate for standardization

Motion to ...

Moved by:

Seconded:

Discussion:

Result:

Introductions

All

Welcome!

• Leadership team has decided to write a short current-future-roadmap analysis document around "consent management"
• https://docs.google.com/document/d/1gtD96hH7QpJyVj9n1CYLDfK8HaFHNIo_-COkJ-jPJgw/edit?usp=sharing
• Switched to live edit of the document

2019-04-17 call notes:

• This WG should clarify how "consent" should be considered and represented
  • Is 'consent' a binary relationship? Can it be 'transferred'?
  • It could be any of the above - the idea with the receipt is that it is a person-side record of the event - Kantara can specialize this in any way that is useful
• This WG should look to documented/published policy/rules/regulations produced by specific 'verticals' and interpret those documents
• How should this WG address the topic of 'meaningful consent'?
• Look at: 
• https://www.healthit.gov/topic/meaningful-consent-overview
  
• https://www.priv.gc.ca/en/privacy-topics/collecting-personal-information/consent/gl_omc_201805/
• https://iapp.org/news/a/opc-releases-guidelines-on-meaningful-consent/
• https://www.priv.gc.ca/en/privacy-topics/collecting-personal-information/consent/gl_omc_201805/

How do we incorporate meaningfulconsent.org from Southampton University?

Look into submitting papers to:

SOUPS conference:

https://www.usenix.org/conference/soups2019

August 11–13, 2019, at the Hyatt Regency Santa Clara in Santa Clara, CA, USA

PEPR'19

2019 USENIX Conference on Privacy Engineering Practice and Respect

https://www.usenix.org/conference/pepr19

AUGUST 12–13, 2019 SANTA CLARA, CA USA

The first draft of the interview questions are in a Google doc - please comment.

Events that Kantara will have an active role: https://kantarainitiative.org/events/

ACTIONS:

• ALL: review web sites from these notes - identify potential verticals and the differences between them (e.g. who/what is the 'regulator' that sets and enforces the 'rules') - Please put your notes into the Gap Analysis docs.
• ALL: look at SOUPS and PEPR conferences - each to decide on attendance.
• Jim/Andrew: CISWG and / or CMS WG to consider submitting a paper to PEPR (the Personal Data Control Panel Demo)

Next WG meeting Wednesday, May 1, 2019 10:00 Eastern Daylight Time / 14:00 GMT