P3WG Meeting Minutes 2010-09-09

Owned by Mark Lizar (Unlicensed)
Last updated: Aug 30, 2013 by Former user (Deleted)
3 min read

Minutes

1. Roll Call

Attendees 

  1. Abbie
  2. Jeff
  3. Mark

NON Voting

  1. Anna Ticktin
  2.  Anna Slomovic

Apologies

  1. Susan
  2. Rich
  3. Trent

AGENDA:
1.      Roll call
2.       Action Item updates
a.       Liaisons relationship with OASIS Privacy Management TC and ITUT (Abbie)
b.      P3wg outreach to corporate CPOs (Darrell)
c.       Privacy policy rights vs. new technology Terms Of Service (Jeff)
d.      Tracking list of Regulatory Activities and Call for Papers on wiki (Mark)
3.      Approve minutes from previous meeting
4.      Liaison w/HIAWG and IAWG (Jeff)
5.      Privacy news updates
a.       NASPO support
b.      Hansen Privacy Terminology (Trent)
6.      Strategic foci reports
a.       Privacy Module (Trent, Robin, Colin S)
b.      Privacy Management Framework (Mark)
c.       Rosetta Stone document (Robin)
d.      Collaboration w/IAWG on LOA and Privacy Agreements/Privacy Module white paper (Colin S)
e.       Managing Liaison w/SC27 & other standards bodies (Robin, Colin W, Abbie)
f.        Enhancing Certificate/Signature Semantics (Robin)
g.       Privacy Risk Assessment (Jeff)
h.       Standard Privacy Policy
i.         Consent and Anti-patterns
j.        Identifiers in Public Sector e-Procurement
k.      Space/Time Data and Identity position paper
l.         Pro-active Privacy Scan of other KI groups
m.     Government Assurance Levels White Paper
n.       Observatory on Identity/Policy Initiatives
7.      All other business
8.      Update Roll Call
9.      Review Action Items

Call did not reach quorum.

Jeff asks Anna about outreach to  IAPP (International Association of Privacy Professionals)

Anna asks for a marketing message for the IAPP that indicates what P3 is about and shows an effort worthy of interest.  Something worth the time of people P3 would like to attract to the P3 Work Group.  We need to explain why people should spend my money on Kantara.

- Anna asks what is the message P3 would like to deliver to IAPP?

Anna also suggest presenting at a conference or focusing on the board at IAPP.

Abbie suggests pointing the IAPP to the work that we have and the charter although he supports a marketing strategy that makes sense and should be on the list. Explaining that P3 performs a support and advisory role bridging many different efforts.

Anna suggests that she can make a story that fits with P3 and pass it around for comment.  Anna is here for a specific business reasons and her company is interested inthe privacy aspects of KI 

Kantara Trust Framework, Kantara Privacy Principles .

Action ITEM - Abbie raised the need for better information to promote P3 and have a one click to answers. Abbie indicates this should be a work item for the entire group.  She will draft and pass around

Jeff - still working on draft for whitepaper - Privacy Policy Rights versus new technology. 

Mark - Posted to wiki calls for regulation, sent email to the list

KI - Meeting in Paris, no one will be in physical attendance but Abbie and Mark can attend via dial in.

Abbie - Status on NASPO - as it stand there is a presentation being put forward but as it stands now there is not a lot of support.

Hansen Privacy Terminology Discussion -  We agree that its of too narrow of a focus for use. 

Anna: Describes there are issues of scope.  E.g. What identity attributes are relevant for what ? What authority? 

Abbie: we can comment on the list further but that this terminology doc is not progressing at the IETF. 

Update Collin Wallis noted that Robin was working on SC27 before leaving for new job.  Collin noted that there may be a position for a Editor. Abbie noted that he could be a editor

Abbie - First meeting of OASIS Privacy WG will be happening in the end of Sept 27-28 in Washington DC, Abbie chairing one session, reducing risk in privacy transaction. Will report on Sept 30 Call. - discussing Privacy and Authentication.

Abbie will be sending joint work around regarding authentication and assurance levels which he thinks is very important.

Jeff cycled through existing action items for a refresh with no additional updates before ending the call .