w3c
Proposal to change DPV scope to include Non-Personal Data
Current concepts in DPV are centered around personal data, e.g. Purpose is about the purpose of processing personal data. This issue is for tracking discussions regarding the proposal to include concepts that also relate to non-personal data, e.g. Purpose of processing Personal and NonPersonalData.
This proposal has major impacts on DPV as it represents a significant change in scope. Please indicate your preference or objections.
See https://lists.w3.org/Archives/Public/public-dpvcg/2023Jul/0003.html for summary.
Q1: Should DPVCG consider non-personal data concepts? Q2: If answer to Q1 is yes, how should these be integrated? Options:
- Change core concepts, e.g.
Purpose, to represent generic data. Represents major change to DPV interpretation. Possibility to have separate namespace, e.g./dpv/v2if needed to retain existing DPV compatibility. - Create a separate extension for non-personal data concepts. Will not affect existing uses of DPV. Will result in large duplication of concepts, e.g. replicate purpose taxonomy in non-personal data.
- Discard the proposal.
- Same as Option 1, but done under a new name, e.g. General Data Processing Vocabulary (GDPV) so as to make major changes. Will require people to opt-in, will discard existing reputation and usefulness of DPV as a known work.
tracking feedback/replies
- Q1: yes x 4
- Q2-1: yes x 4
- Q2-4: maybe x 1
minutes recording replies and decisions
Comment by @coolharsh55 via IRC channel #dpvcg on irc.w3.org
the group discussed the responses received so far, and will summarise the decision in the next meeting
There are already many non-PII vocabulary's, and there are all PII related or relative, in terms of providence, governance, contribution or attribution.
Can you please provide or point to the reasons and rationale why this is being considered?
Hi. You can see the rationale proposal email: https://lists.w3.org/Archives/Public/public-dpvcg/2023Jul/0003.html . tldr; We are getting several new laws that relate to both personal and non-personal data (DGA, AI Act), so while the focus of DPVCG will remain on personal data, it makes the use of DPV compatible with non-personal data concepts. E.g. Purpose can be purpose of processing personal data or non-personal data.
Comment by @coolharsh55 via IRC channel #dpvcg on irc.w3.org
this proposal has been tentatively accepted, with the expectation to go live by SEP-30. Objections and issues can still be raised until then, otherwise the change will go live. Editing taxonomies to include this scope change will commence from SEP-01.
meeting minutes: https://w3id.org/dpv/meetings/meeting-2023-08-31
Discussed in meeting 11 OCT - this will be implemented along with #107 restructure repo layout and #113 rdfs+skos as default serialisation.
Changes to be completed include:
- [x] describing the scope in DPV spec
- [x] describing the scoep in primer
- [x] verifying the DPV top concepts refer to data and technologies in the abstract rather than being restricted only to personal data