2021-05-18 Security, Privacy and Data Protection Drafting Group Meeting Notes

Attendees

• Abdul Sattar
• Alan Whittemore
• Chuck Curran
• Drummond Reed
• Jan Lindquist
• Kaliya Young
• Ken Adler, co-chair
• Lukas Svec
• Pagona Tsormpatzoudi, co-chair
• Trev Harmon, PM

Agenda Items

Recording - Link

Notes

• Antitrust and IP announcement.
• Discussed the revised introductory sections of our draft.
• Jan pointed out that the user-centric values need to be more prominent. We discussed several ways to accomplish this, and eventually decided to swap paragraph order to accomplish it.
• We discussed the terms around “personal identity data”, such as “personal data”, “personally identifiable information”, etc. Different standards use different terms for this, and the primary thing is that there needs to be consistency.
• We added another paragraph to emphasize the importance of there not just being standards, but in the effort and processes people used to comply with them.
• With no dissenting voice, the updated version of the introductory material was approved, and the draft will now go to copy editing.
• The appendix to our document was a start at material for an implementation guide. Plans for such a guide are currently at the stage of “general agreement across groups that we want such a guide”. It was moved to its own document to make sure that none of it (including comments) were lost in the interim.
• The diagram was removed from Problem #10 because all items listed in the problem recommendations apply equally to all issuers and verifiers. The concern was that the diagram may have suggested otherwise to some readers.

Chat Log

00:16:02	Trev Harmon:	https://docs.google.com/document/d/1SmzYdwmDgXm1MJvgH66LEue7xq4DpQTS0ykLTy4UYNg/edit#
00:16:32	Trev Harmon:	^^ Document showing the revised introductions of all of the drafts.
00:29:31	Jan Lindquist:	2.9
personally identifiable information
PII
any information that (a) can be used to identify the PII principal to whom such information relates, or (b) is or might be directly or indirectly linked to a PII principal
Note 1 to entry: To determine whether a PII principal is identifiable, account should be taken of all the means which can reasonably
00:29:38	Jan Lindquist:	ISO 29100
00:51:26	Trev Harmon:	https://docs.google.com/presentation/d/1zw2EE6Z75RPDBZKRwO2RKV2Ik1dyJFfXBm5XJtDk0T8/edit#slide=id.gd9c6d0c29a_0_0
00:59:10	Trev Harmon:	https://docs.google.com/document/d/1Kznth0dRg2xdFe9MX0p4rE-FLI0w_Nmt1ceip9gdMmo/

Action Items

1. No action items. Drafts are going to copy editors.