Item
Who
Notes
Check for a quorum.
Reminder about attendance policy for voting status.
Moved:
Seconded:
Approval of Minutes
Moved:
Seconded:
Discussion: None
Changes: None
Actions arising: None
Project Updates (Month-end Updates) (not required this meeting)
- AdvCIS
- Deliverables
- ?
- Status:
- Issues:
- ?
- Next Steps:
- Intentcasting
- Deliverables
- Report on Intentcasting
- Status:
- Issues:
- Resourcing
- Next Steps:
- Resume in 2021
- Personal Data Use Receipt Framework
- Deliverables
- PDUR Framework
- Status:
- Issues:
- Draft report comments and review located here - Personal Data Use Receipt Framework Contribution
- Next Steps:
- ?
- Privacy-Preserving Information Sharing
- Deliverables
- Survey Report
- Recommendation Report
- Status:
- Issues:
- Insufficient availability to proceed at this point
- Next Steps:
- Find a new lead to move the project forward OR
- Resume when available
WG Discussion
Personal Data Use Receipt Framework
Group discussion on a number of issues (if you are reading this, please email Kate Downing or make changes to reflect your actual comments located in the v0.2 Word document
- Discussion around the review of comments in v0.2 of the PDURF
- Notes from a conversation held within the document comments
Please enter your availability on the following link so that we might find a better time for the group:
Kenneth Klingenstein No new trust frameworks until a comparison of existing trust frameworks have been conducted. Privacy frameworks are likely embedded within these trust frameworks, and consent frameworks within these privacy frameworks. Consent mechanisms such as duration, collection, usage, disclosure etc. should be rationalized. Suggestion to create a comparison prior to moving forwards. High-level analysis prior to a deeper dive? Places where consent is defined TODAY (in legislation, regs, etc.)
Motion to consider this when we next achieve a quorum.
John Wunderlich Suggestion to rephrase consent as an authority so that legal agreements and other appropriate bases for authorization are captured. Do 'you' have the authority to collect? Is this legitimate interest? If this is consent how is this determined? We are not looking to understand the legal basis, we are instead looking to scope this as an understanding of the MECHANISM for consent (purpose of use).
IAB framework is upstream of the PDURF - we instead might want to understand if this is an allowable use based upon the mechanism itself?
(perhaps this is a deeper-dive?) is the usage consistent w/ purpose of use?
(e.g. publish individual's data on company newsletter – I have the data; is this purpose allowed under the basis that I hold this data?)
Mary Hodder View https://www.thetradedesk.com to see concerns with 'absolutely verifiable' identity all the time... (privacy minimization); pseudonyms are part of our reality & the need for companies/individuals to categorically & definitively identify an individual at every juncture is disturbing
Next meeting
*** Next call 2021-01-21 10:30 am Eastern DAYLIGHT Time
Moved:
Seconded: