P3WG Meeting Minutes 2010-07-15

Agenda

1.       Roll call
2.       Action Item updates
a.       Liaisons relationship with OASIS Privacy Management TC and ETSI (Abbie)
b.      P3wg outreach to corporate CPOs (Robin)
c.       Privacy policy rights vs. new technology Terms Of Service (Jeff)
3.      Approve minutes from previous meeting
a.       Minutes from 17 JUN
4.      Conference Attendance
a.      Smart Card Alliance pre-conference workshop demo (Joni/Anna)
b.      OECD in Israel 25-26 October (Abbie)
c.       KI Fall Meeting in Paris for joint session w/IAwg & HIAwg (Joni/Anna)
d.      ISO Privacy Steering Committee meeting in Berlin 8-9 OCT
5.      Privacy news updates
a.       Hansen Privacy Terminology (Trent)
b.      Privacy concerns regarding National Strategy for Trusted Identities in Cyberspace
c.       Kantara Initiative at UK EEMA (Abbie, Robin)
d.      UK Govt - IMSPG meeting (Robin)
6.      Strategic foci reports
a.       Privacy Module (Trent, Robin, Colin S)
b.      Privacy Management Framework (Mark)
c.       Rosetta Stone document (Robin)
d.      Collaboration w/IAWG on LOA and Privacy Agreements/Privacy Module white paper (Colin S)
e.       Managing Liaison w/SC27 & other standards bodies (Robin, Colin W, Abbie)
f.        Enhancing Certificate/Signature Semantics (Robin)
g.       Privacy Risk Assessment (Jeff)
h.       Standard Privacy Policy
i.         Consent and Anti-patterns
j.        Identifiers in Public Sector e-Procurement
k.      Space/Time Data and Identity position paper
l.         Pro-active Privacy Scan of other KI groups
m.     Government Assurance Levels White Paper
n.       Observatory on Identity/Policy Initiatives
7.      All other business
8.      Update Roll Call
9.      Review Action Items
 

Minutes

1. Roll Call

Attendees 

  1. Abbie
  2. Trent
  3. Jeff
  4. Mark

NON Voting

  1. Joni
  2. Ian Glazer
  3. Anna

Apologies

  1. Susan Landau

Discussed removing people from the voting list.  Agreed to move Robin from voting list to achieve quorum

Abbie Update:  Susan Landau is going to be the P3WG liason to Oasis Privacy TC sponsored by the IDTrust

Action: Abbie to send email to list about LIason

Trent explains there is formal liason list needed to be sent to Joni.

Action: Add Abbie to the Liason LIst for ITU-T

Abbie: Kantara was mentioned - in realtion to ID-C - in ?? meeting - NASPO? Privacy experts needed to be involved in some of the meetings

next meeting in Washington in September, there was a good showing with 28 attendee's Abbie thinking that Kantara should attend.

Joni: This was discussed in LC.. in the group there was not enough strong support to make a recommendation to put in the necessary funding to sit at this table.  LC needs a clear direction from the stakeholders to put recommendation forward.  Although Kantara does fully support NASPO but wants to wait to see what direction this work will be going in before they will be ready to get more actively involved.

Abbie:  Recommends that Kantara should go and participate.  Needs a person to go and provide assessment of ???  

Jeff:  This was discussed last week as a wait and see, and that there is a LC discussion.

Abbie:  Is involved but is there on behalf of his employer (The Bank)

Trent: LC is looking for someone to put this through and put time and energy..

Abbie: Action:  will send email to the staff-list and the

2. Action Item updates

CPO - Outreach

Jeff:  Brought up the issue of new issues with technology.  Geo-location etc. Iphone providing geo-lo - check europrise but thinks there is a gap .  Jeff suggests this being a work foci and finding a place on the wiki

Abbie: This should be a whitepaper.

Trent: Geo work going on at the IETF - RFC 3693

Mark: Maybe this coincides with the idea of a standard in  Notice that I have been looking into a global standard of notice to inform the privacy issues when using a product also useful for updating privacy issues when things change.

Jeff; Ok I will liase with you on this.

Trent: This would be a good idea for a sub-group we have discussed a standard in notice and we are supportive of this. 

Jeff: Action: to send to list outline of whitepaper

3. Approve minutes from previous meeting

Approved

4. Conferences

- SmartCard -

- OECD Israel

Update on Paris Meeting

- So far no other groups confirmed attendance

Action: Update time change to Thursday on event Matrx.

Trent: IETF Process Explaind Quick - An internet draft - a document submitted to the IETF system and published for 6 month period of time, raise a flag that work is being done, this can be moved towards a chartered work group. "Terminology for Talking about Privacy by Data Minimization: Anonymity, Unlinkability, Undetectability, Unobservability, Pseudonymity, and Identity Management. Terminology in and around privacy .

- Hannes is inviting P3 to be involved in this

- Trent suggests for us to read and make notesabout high level issues and discuss gapping holes or red flags.. Send these notes to Hannes,

-

Mark: Good idea to work towards reviewing this for use with the P3 and eventually referencing this  through the wiki

Trent: Suggest we work towards referencing these efforts. Great effort to use as platform for building on.

Jeffl - NSTIC - This document keeps getting mentioned

Abbie: Heavily involved.  Abbie thinks that this needs a KI response.  This isnt a inclusive document

Trent: Kantara was invited to participate on the formation of these document months ago..  There is Kantara response happening to this document.

Joni: It did take place.  P3 needs to put all comments into Joni before Monday - this will then be used to help in response.

Trent: We should send comments to Joni.. 

Abbie: we dont have time to have a P3 list ???

Trent: Sort it by consensus and then in an annex in non-consensus view. so Joni can complie a consensus veiw and present this to Kantara for presentation to the organisation

Jeff: Why Monday  -- BC deadline

Abbie: Format of the comment needs to be put in a format that can be defended, consumed and is from the organisation.

Trent: Clarification to send comments to Joni and trust Joni to complie one Kantara respones

Joni: Yes this is her role

Trent: Worthwhile to put together a post on the Kantara blog that Kantara P3 has contributed comments - To Address Abbie issues that P3 needs to be active

Joni: Implemenation doc is not public..  Need to have all in for SOB on Monday.  There is a call to wrap into call. Send Joni an email if interested in participating in the call - she will check and see if people can be involved  details.

4. Subgroup Reports

- No Sub Group Reports

5. All Other Business
6. Review Action Items

ACTION ITEMS

Next Meeting

  • Date: Thursday, 29 July, 2010
  • Time: 8:00 PDT | 11:00 EDT | 15:00 UTC (Time Chart)Dial-in details:
  • US/Canada toll-free number: 1.866.305.1460 begin_of_the_skype_highlighting              1.866.305.1460      end_of_the_skype_highlighting begin_of_the_skype_highlighting              1.866.305.1460      end_of_the_skype_highlighting
  • Direct dial (toll) number: +1.416.620.1296
  • Attendee Code: 9247530
  • International toll-free numbers:
    o UK: 0800 917 5847
    o Netherlands: 08002659007
    o Belgium: 080079491
    o Japan: 00531160345
    These toll-free numbers are generously provided by BIPAC.