Agenda for tomorrow's DPVCG call and some thoughts on strategy ahead

Dear group,

Here's the agenda for our call tomorrow, 

       6 November 16:00 CET (no more summer time, at least in Europe, BTW ;-))

For dial-in info, cf. https://lists.w3.org/Archives/Member/internal-dpvcg/2018Aug/0000.html <https://lists.w3.org/Archives/Member/internal-dpvcg/2018Aug/0000.html> 
Also, please join us on IRC: http://irc.w3.org/ <http://irc.w3.org/> <http://irc.w3.org/ <http://irc.w3.org/>> --> join channel #dpvcg

Agenda:
1) Roll call, select scribe, agenda
2) Approval of last telcon's minutes:
        https://www.w3.org/2018/10/16-dpvcg-minutes <https://www.w3.org/2018/10/16-dpvcg-minutes>
3) Go through action items (we might want to keep this short)
https://www.w3.org/community/dpvcg/track/actions/open <https://www.w3.org/community/dpvcg/track/actions/open> 
4) Progress since last time (which we may not discuss in detail, but rather table, discuss action items around:
Discussion around categories of legitimation categories/lawfulness of processing https://lists.w3.org/Archives/Public/public-dpvcg/2018Oct/0027.html <https://lists.w3.org/Archives/Public/public-dpvcg/2018Oct/0027.html> -> I would like to task someone to summarize these and make a proposal to the group we can discuss.
Elements of consent/competency questions for consent https://lists.w3.org/Archives/Public/public-dpvcg/2018Oct/0025.html <https://lists.w3.org/Archives/Public/public-dpvcg/2018Oct/0025.html>, https://lists.w3.org/Archives/Public/public-dpvcg/2018Oct/0038.html <https://lists.w3.org/Archives/Public/public-dpvcg/2018Oct/0038.html> -> I would like to task someone to summarize these and make a proposal to the group we can discuss, e.g. based on what we had in the minutes last time:
consent = agreement through an [affirmative action] at a specific [time] with a [data controller] to specific [processing] and [storage] of specific [data categories] for specific [purpose] and [duration]
which of these aspects are similarly relevant for other forms of legitmation than consent?
Harsh's mail on collecting terms from vocabularies: https://lists.w3.org/Archives/Public/public-dpvcg/2018Oct/0041.html <https://lists.w3.org/Archives/Public/public-dpvcg/2018Oct/0041.html>, https://www.w3.org/community/dpvcg/wiki/Taxonomy <https://www.w3.org/community/dpvcg/wiki/Taxonomy>
5) Strategy/schedule ahead, see below.
6) Plan/fix F2F in Dec, cf. doodle: https://doodle.com/poll/ki85vyxm44ixat28 <https://doodle.com/poll/ki85vyxm44ixat28>
7) AOB


----------------

As for the strategy/schedule forward, I suggest the following for sticking to our plan and in order to be most productive until the planned F2F meeting and beyond.

What we have achieved so far:
 a) we have collected a list of relevant use cases
 b) we have collected a list of potentially relevant input vocabularies
 c) we have agreed on a scope on which categories of taxonomies we want to focus on and started to group terms from existing vocabularies from those.
 
 As for the F2F meeting, I think we should make some progress by then to have at least a better idea of some concrete instances we need to be reperesented in our taxonomies.

To this end, I would like to go - in tomorrow's call to go through the Use Case Stakeholders
https://www.w3.org/community/dpvcg/wiki/Use-Cases,_Requirements,_Vocabularies#Use-Cases <https://www.w3.org/community/dpvcg/wiki/Use-Cases,_Requirements,_Vocabularies#Use-Cases>
and task them to add subections on top of each use cases to describe, in bullet points, the aspects we agreed [1] (plus the means of ligitmation discussed in [2] to focus on in each use case:

1. categories of personal data involved
2. purposes for personal data handling
3. different kinds of processing involved
4. data subjects, controllers, processors, and recipients involved
5. storage & security aspects:
    * storage locations
    * storage duration
    * security measures (including e.g. anonymisation "levels", pseudonymisation)
6. means of legitimation for personal data processing
    e.g. consent, legitimate interest, etc. ...


I would propose we should add these headings for each use case, and fill them, which would serve us better than the current template proposal [3] which is likely too heavy.

As next steps after tomorrow's call, then I would suggest:
Collect 1)-6) as conctetely as possible, for all our current use cases
Task different people to summarize and try to collect proposals to structure them for each item 1)-6) in our next TelConf. Nov 20th
As for the F2F (December 3rd or 5th), we should then do the following:
Present and discuss those one after the other in the F2F 
Schedule and prioritize next steps to reach our goal (as per our charter):

"The current goal is to agree on first public drafts of minimal sets of vocabularies to be finished by December 2018, with first stable working drafts being reached latest on 25 May 2019."
 

https://www.w3.org/2018/09/18-dpvcg-minutes#x07 <https://www.w3.org/2018/09/18-dpvcg-minutes#x07>
https://www.w3.org/2018/10/16-dpvcg-minutes <https://www.w3.org/2018/10/16-dpvcg-minutes>
https://www.w3.org/community/dpvcg/wiki/Template_for_use-cases <https://www.w3.org/community/dpvcg/wiki/Template_for_use-cases>
--
Prof. Dr. Axel Polleres
Institute for Information Business, WU Vienna
url: http://www.polleres.net/  twitter: @AxelPolleres