DPV v2.1 update: changelist / review tasks

Hi.
I have updated all of our documents based on recent discussions in 
preparation for the 2.1 release. As agreed before, we are going to 
finalise the release in December (ideally by DEC-18), review it, and if 
all goes well - publish the release in JAN'25.

Below is a summary of new/changed content with links for review. In 
general, I will be working on updating the HTML with more/missing 
descriptions as well adding more examples as I work through our previous 
discussions and resolve issues and ensure things are consistent. Pleae 
help this by volunteering to help with content addition, reviewing, 
updating diagrams, and other tasks - any help small or large is appreciated.

All updates are made on the dev branch and published on our dev website 
at https://dev.dpvcg.org/ and we use 
https://github.com/w3c/dpv/milestone/5 to manage issues/tasks on GitHub.

## DPV https://dev.dpvcg.org/2.1-dev/dpv/

- Contract concepts 
https://dev.dpvcg.org/2.1-dev/dpv/#vocab-legal-basis-contract
- Rules status concepts https://dev.dpvcg.org/2.1-dev/dpv/#vocab-rules
- Organisation categories 
https://dev.dpvcg.org/2.1-dev/dpv/#vocab-entities-organisation
- Create 'Human Subject' as a broad concept that subsumes Data/Tech/AI 
subject https://dev.dpvcg.org/2.1-dev/dpv/#vocab-entities-datasubject 
(to be discussed)
- Section on profiling and tracking (discuss adding tracking as a 
concept) https://dev.dpvcg.org/2.1-dev/dpv/#issue-container-generatedID-12

## TECH https://dev.dpvcg.org/2.1-dev/tech/

- New core concepts: InputOutput, Function, IntendedUse 
https://dev.dpvcg.org/2.1-dev/tech/#vocab-core
- Function and IntendedUse examples 
https://dev.dpvcg.org/2.1-dev/tech/#vocab-intended-use
- Provision (BREAKING CHANGE: discuss change in terms by adding suffix 
-Provision to avoid mixups e.g. Service -> ServiceProvision) 
https://dev.dpvcg.org/2.1-dev/tech/#vocab-provision
- Input/Output types (added from VAIR data types) 
https://dev.dpvcg.org/2.1-dev/tech/#vocab-io
- Tools (added new concepts e.g. System, Model to align with AI 
extension) https://dev.dpvcg.org/2.1-dev/tech/#vocab-tools

## AI https://dev.dpvcg.org/2.1-dev/ai/

- Should this extention be updated from draft to stable?
- Integrated AIRO/VAIR techniques and capabilities, systems and models, data
- Added VAIR risk concepts https://dev.dpvcg.org/2.1-dev/ai/#vocab-risks 
with separate sections for data and bias
- Lifecycle concepts (TECH lifecycle concepts proposed for v2.2) 
https://dev.dpvcg.org/2.1-dev/ai/#vocab-lifecycle

## LOC https://dev.dpvcg.org/2.1-dev/loc/

- Added subdivision concepts
- HTML layout is changed to accommodate the large number of concepts (~3000)
- Discuss: to add a note proposing concepts such as Non-EU, Non-IE, etc. 
for each country/union in v2.2

## RISK https://dev.dpvcg.org/2.1-dev/risk/

- New core concepts related to CIA security model, potential 
risk/impacts etc. https://dev.dpvcg.org/2.1-dev/risk/#vocab-core
- To add section on risk management and assessment for new concepts 
https://dev.dpvcg.org/2.1-dev/risk/#risk-management
- Added VAIR Controls 
https://dev.dpvcg.org/2.1-dev/risk/#vocab-risk-controls
- Taxonomy (discuss: should we keep the 'unstable vocabulary' message or 
are we confident about what we have?) 
https://dev.dpvcg.org/2.1-dev/risk/#vocab-risk-taxonomy
- new Rights Impact concepts/section 
https://dev.dpvcg.org/2.1-dev/risk/#risk-rights-impacts

## EU-GDPR https://dev.dpvcg.org/2.1-dev/legal/eu/gdpr/

- new Rights impacts concepts/section 
https://dev.dpvcg.org/2.1-dev/legal/eu/gdpr/#vocab-rights-impacts with 
example of experimental granular impacts
- discuss: whether we add a table mapping GDPR concepts to DPV concepts 
in this version and say it is work in progress or do it in next version?

## EU-DGA https://dev.dpvcg.org/2.1-dev/legal/eu/dga/

- new Compliance status concepts
- (same as GDPR) discuss: whether we add a table mapping DGA concepts to 
DPV concepts in this version and say it is work in progress or do it in 
next version?

## EU-NIS2 https://dev.dpvcg.org/2.1-dev/legal/eu/nis2/

- new Compliance status concepts
- (same as GDPR) discuss: whether we add a table mapping NIS2 concepts 
to DPV concepts in this version and say it is work in progress or do it 
in next version?

## EU Fundamental Rights https://dev.dpvcg.org/2.1-dev/legal/eu/rights/

- Should this extention be updated from draft to stable?
- new Impact concepts 
https://dev.dpvcg.org/2.1-dev/legal/eu/rights/#vocab-impacts with 
example of experimental granular impacts

## EU-AIAct https://dev.dpvcg.org/2.1-dev/legal/eu/aiact/

- Should this extention be updated from draft to stable?
- more Documentation concepts 
https://dev.dpvcg.org/2.1-dev/legal/eu/aiact/#vocab-docs from AIRO/VAIR
- new statuses for predetermined change 
https://dev.dpvcg.org/2.1-dev/legal/eu/aiact/#vocab-docs
- new Compliance status concepts
- (same as GDPR) discuss: whether we add a table mapping AI Act concepts 
to DPV concepts in this version and say it is work in progress or do it 
in next version?
- new Sector concepts 
https://dev.dpvcg.org/2.1-dev/legal/eu/aiact/#vocab-sector
- discuss: whether to add section showing future proposed use of DPV for 
high-risk and prohibited system representation 
https://dev.dpvcg.org/2.1-dev/legal/eu/aiact/#high-risk-prohibited

## EU-EHDS https://dev.dpvcg.org/2.1-dev/legal/eu/ehds/

- NEW extension supporting EU Health Data Spaces
- reuses work from Beatriz's EHDS concepts

## Sector https://dev.dpvcg.org/2.1-dev/sector/

- NEW extension providing sector-specific concepts
- Fix title (Justifications -> Sector) - will be automatically done
- discuss: whether to provide all concepts together in one page, like it 
is currently, or to split it in smaller sub-extensions e.g. for 
education, finance, and so on (similar to what we did with legal extensions)

Regards,
-- 
---
Harshvardhan J. Pandit, Ph.D
Assistant Professor
ADAPT Centre, Dublin City University
https://harshp.com/

Received on Monday, 9 December 2024 21:49:20 UTC