Re: ISSUE-7: Are the legal grounds except consent and legitimate interest actualy purposes?

Thank you very much for the clarification Harsh, and apologies to 
everyone for the noise.

We have a similar situation in one of our use case and for that reason 
we tentatively introduced a purpose ComplianceWithFinancialRegulations.

I am aware, however, that this kind of purposes is difficult to 
standardize: each application domain in principle may have its own set 
of applicable/relevant laws and we have no tentative list of reference 
communities to involve.

Maybe someone in the CG has clearer ideas about what a core set of 
"legal areas" of common interest could be? One could start from there to 
develop dedicated sub-vocabularies.

On the other side of the spectrum, if we are satisfied with a high-level 
upper ontology, then a generic purpose expressing compliance with law 
requirements could be enough, maybe equipped with an attribute that 
contains a reference to the law being considered.

Now that I think about it, maybe there is some standard for encoding 
such references? (i.e. a sort of URI for laws and regulations).  The 
members of the CG with legal background may have an answer.

Best
Piero

On 10/12/18 17:11, Harshvardhan J. Pandit wrote:
> Thanks for this Piero.
> I agree that legal basis and purposes should be kept separate from the 
> points you mention.
> 
> The concerns of today's discussion was how to model cases where the data 
> is said to be used for the 'purpose' of following some legal basis other 
> than consent or legitimate interest.
> E.g. we collect this information because some law XYZ requires us to do 
> so. In this case, we have processing (collection) and legal basis 
> (adherence to some legal obligation).
> What should be the purpose in this case?
> 
> - Harsh
> 
> On 10/12/18 3:37 PM, Piero Bonatti wrote:
>> Sorry for junping in asynchronously. Please let me share my long 
>> standing knowledge representation experience with the group.
>>
>> Mixing up purposes and legal basis is likely to introduce confusion 
>> (hence mistakes when the vocabularies are used).
>>
>> All points a--f in Art.6.1 are on an equal basis. They are either all 
>> legal basis or all purposes.  Actually they are all legal basis 
>> because they constitute the reason why a particular kind of processing 
>> is legal.
>>
>> My apologies for not following the discussion more closely so far. 
>> There, it may have been argued that some legal basis *look like* a 
>> purpose.  Then let it be: there will be purposes tightly related to 
>> some legal basis.
>>
>> Best regards,
>> Piero Bonatti (SPECIAL)
>>
>>
>> On 10/12/18 14:50, Data Privacy Vocabularies and Controls Community 
>> Group Issue Tracker wrote:
>>> ISSUE-7: Are the legal grounds except consent and legitimate interest 
>>> actualy purposes?
>>>
>>> https://www.w3.org/community/dpvcg/track/issues/7
>>>
>>> Raised by:
>>> On product:
>>>
>>>
>>>
>>>
>>>
>>>
>>
>>
>

Received on Tuesday, 11 December 2018 06:53:09 UTC