P3WG Meeting Minutes 2010-04-22
This call was not quorate and these meeting notes have not yet been approved.
NOTE: Next meeting is May 6th - P3 meeting for 29th of April is Cancelled!!
Date and Time
- Date: Thursday, 22 April, 2010
- Time: 08:00 PDT | 11:00 EDT | 16:00 UTC
Meeting Minutes:
Attendees
- Aaron
- Bob Pinheiro
- Lindi
- Joni
- Abbie
- Jeff
- Mark
- Trent
Apologies
Susan Landau
Robin Wilton
2. Action Item updates
a. Liaisons relationship with OASIS Privacy Management TC and ETSI (Abbie)
b. FTC feed back on “harm”as a measure of privacy impact (Bob Pineiro)
i. Passed until next week due to Bob’s unavailability
c. OECD in Israel 25-26 October (Abbie)
i. Abbie seeking travel funding to support this; nothing yet
1. Update Christine with results: Christine Runnegar <runnegar@isoc.org>
d. Privacy module update (Robin ,Trent Colin S)
i. ACTION: Robin, Colin, & Trent will make a decision by the next call with suggested path forward
ii. ACTION Robin will circulate one more layer of details to the people that signed up for duty call
iii. No action taken yet
e. P3wg outreach to corporate CPOs (Robin)
i. No new update, Robin unavailable
1. Darrel Schull (through his affiliation with BIPAC) communicates regularly with CPOs.
2. He is willing to distribute a 1-page letter with his newsletter
3. Robin has drafted the letter and submit to Darrel for his approval
4. We will then submit approved letter to group for approval
f. Sharing documents with OECD (Joni)
i. Jeff raised issue at LC meeting 14 APR
ii. Roger Martin Kantara Interim Executive Director entered his opinion to support the creation of a special distribution list and section in the wiki to house limited distribution documents obtained from other organizations to comply with their need for restricted distribution
iii. Roger emphasized that this approach would not apply to limiting distribution of KI documents; they are all to remain in the public arena
3. Approve minutes from previous meeting
a. Minutes from 28 JAN
b. Minutes from 04 FEB
c. Minutes from 18 FEB
d. Minutes from 25 FEB
e. Minutes from 25 MAR
f. Minutes from 01 APR
g. Minutes from 08 APR
h. Not voted on due to quorum:
4. Strategic foci approach (Jeff)
a. We will let the various project proceed on their own initiative
b. Project leaders will report status (or lack thereof) during each call to gain feedback from the group
c. ACTION: Jeff will identify leaders for each project group at subsequent meetings
5. All Other Business
a. Bi-weekly meeting
i. Discussed the possibility of bi-weekly meetings to increase attendance as everyone is so busy
b. Discussed possible liasons with other groups in Kantara, along with the role of the privacy module in this activity once the strawman is developed this can then be used to liase with other working groups.
ACTION ITEMS
a. Liaisons relationship with OASIS Privacy Management TC and ETSI (Abbie)
i. No update
b. FTC feed back on “harm”as a measure of privacy impact (Bob Pineiro)
i. Map the Gaps workshop (sponsored by Internet society) mapped gaps between legal system and identity problems
1. Relationship based
a. Relationship implies obligation duty of care to protect user
2. Rights based
a. Data is maintained by repository with which you have no relationship (e.g., Choicepoint)
i. Duty of care still seems appropriate
b. Data is stolen and used to impersonate you with a vendor with whom you have no relationship
i. Under rights basis, because your identity is being used, there may still exist a commercially reasonable duty of care (e.g., Wolf v. MBNA)
c. OECD in Israel 25-26 October (Abbie)
i. Abbie seeking travel funding to support this;
ii. ACTION: Abbie will send out an email to follow up on funding for OECD travel
iii. nothing yet
1. Update Christine with results: Christine Runnegar <runnegar@isoc.org>
d. Privacy module update (Trent)
i. Robin, Colin, & Trent have met
1. Want a technology agnostic module (or deployment profile) to go along with IAWG’s Identity Assurance Framework
2. Research identified three parallel workstreams in other organizations
a. OASIS privacy framework Technical Committee
i. International Trust and Privacy Alliance developed proposed description in 2005 and submitted it to OASIS
ii. OASIS seeking to determine if there is enough support to go forward with it
iii. Our module would be in direct competition with this
iv. P3 group will evaluate it to determine if we should support this, rather than go in parallel path
v. Abbie suggests that we review the proposal as a group
b. Second framework (forgot the organization name) also being reviewed
c. Also some consent modeling going on in EU that may be applicable
i. Trent will meet with these folks next week in DC
3. ACTION: Trent, Colin, and Robin will summarize the OASIS framework, second framework, and consent modeling for P3 to facilitate P3 making a decision on whether or not to support one or more of these efforts.
i. This needs to be done by 20 MAY to allow us a few weeks review prior to Robin’s presentation on 07 JUN
e. P3wg outreach to corporate CPOs (Robin)
i. No new update, Robin unavailable
1. Darrel Schull (through his affiliation with BIPAC) communicates regularly with CPOs.
2. He is willing to distribute a 1-page letter with his newsletter
3. Robin has drafted the letter and submit to Darrel for his approval
4. We will then submit approved letter to group for approval
f. Sharing documents with OECD (Jeff)
i. Unofficial plan to go forward
1. Use/distribution of restricted documents will be the responsibility of those who have them without any direct support from KI
ii. KI won’t support restricted documents because
1. KI wants to maintain transparency
2. While respecting restricted distribution of other group’s documents, KI wants to avoid liability of accidental exposure of such documents hosted by KI
g. Group poll on meeting frequency (Jeff)
i. Doodle Poll supported reverting to bi-weekly meetings
3. Approve minutes from previous meeting
a. Minutes from 28 JAN
b. Minutes from 04 FEB
c. Minutes from 18 FEB
d. Minutes from 25 FEB
e. Minutes from 25 MAR
f. Minutes from 01 APR
g. Minutes from 08 APR
h. Minutes from 15 APR
i. Minutes from 22 APR
j. Not voted on due to quorum
4. Strategic foci approach (Jeff)
a. We will let the various project proceed on their own initiative
b. Project leaders will report status (or lack thereof) during each call to gain feedback from the group
c. ACTION: Jeff will identify leaders for each project group at subsequent meetings
r. ACTION: Jeff (with Mark) to try to determine best way to address
i. Revising current descriptions of strategic foci
ii. Determining when to drop an item from the list
iii. Determining interest in leading a sub-group
iv. Determining interest in actively supporting a sub-group
5. All other business
6. Update Roll Call
7. Review Action Items
a. ACTION: Abbie will send out an email to follow up on funding for OECD travel
b. ACTION: Trent, Colin, and Robin will summarize the OASIS framework, second framework, and consent modeling for P3 to facilitate P3 making a decision on whether or not to support one or more of these efforts.
1. This needs to be done by 20 MAY to allow us a few weeks review prior to Robin’s presentation on 07 JUN
c. ACTION: Jeff (with Mark) to try to determine best way to address
i. Revising current descriptions of strategic foci
ii. Determining when to drop an item from the list
iii. Determining interest in leading a sub-group
iv. Determining interest in actively supporting a sub-group