PROPOSED AGENDA - PbD-SE TC - 20 February 2013

pbd-se message

Subject: PROPOSED AGENDA - PbD-SE TC - 20 February 2013

From: Gershon Janssen <gershon@qroot.com>

To: pbd-se@lists.oasis-open.org

Date: Sat, 16 Feb 2013 00:05:09 +0100

Privacy by Design Documentation for Software Engineers (PbD-SE) TC

20 February 2013, 1:30-2:30 PM EST / 19.30-20.30 CET

* Call-In Information:

Conference Reference: 147385

Participant Access Code: 9793565 #

Dial in numbers:

- North America:

877-385-4099 + Conference Access Code

- Overseas Locations provided with the exception of Greece:

International Access Code + 800-8358-7111 + Conference Access Code

* DRAFT AGENDA

Please see the attached Draft Agenda document for APPENDIX A, B and C.

1. Call to Order

2. New Business / Approval of Agenda

3. Approval of Previous Meeting Minutes

https://www.oasis-open.org/committees/document.php?document_id=48163&wg_abbrev=pbd-se

4. Usage of Google Sites wiki at https://sites.google.com/site/pbdsewiki/

5. Proposed Committee Work Plan (Appendix A)

6. Discuss PbD Principle #2: Privacy as the Default Setting (Appendix B)

7. Review of privacy engineering guidance and information resources/tools (Appendix C)

8. Assignment of Roles/Activities

9. Adjourn

---

Regards,

Gershon Janssen

DRAFT MINUTES PbD-SE TC Meeting 09 January 2013, 01:30pm to 02:30pm EST 1. Roll call, Agenda review Meeting Attendees: Ann Cavoukian Gershon Janssen Dawn Jutla Sander Fieten Darrell O'Donnell Patrick Pyette Stuart Shapiro Aaron Temin Michael Willett Kevin McDonald This meeting quorates. Agenda was adopted. 2. Approval of Minutes – Dec 5, 2012 URL: https://www.oasis-open.org/committees/document.php?document_id=47837&wg_abbrev=pbd-se Gershon moves to approve the minutes of the December 5, 2012 meeting. Seconded by Dawn. Motion approved by unanimous consent. 3. Discussion of a proposal for international UML Asset Collection from Healthcare to help map PbD principles to privacy controls/processes/services and then to UML specifications - Paper NIST 800-53 Appendix J’s AR-7 was highlighted. Very solid and fits nicely with our work; provides for good guidance. - Dawn talks the committee through the proposal that was distributed beforehand: URL: https://lists.oasis-open.org/archives/pbd-se/201301/msg00002.html - Kevin notes he would like to start with a health use case; it allows us to look at the individual’s perspective - Ann like the idea of the user's / individual's perspective - Michael notes the PMRM reference fits in great; the PMRM document is out for Public Review URL to PMRM work: https://lists.oasis-open.org/archives/pbd-se/201301/msg00003.html - Patrick notes he can help by providing relevant links and documents to the TC as starting points Next step: - We should develop a work plan / roadmap - Ann proposed to work from the 2nd principle of privacy: 'Privacy as the Default Setting'. Try to figure out things that are not policy related, but how to create systems and environment that allow a policy to be implemented. Focus on a particular set to start with as to how software engineer can implement privacy as a default setting. This is one of 7 pbd's; once going through one, known what the process is for the others. - Ann's team will start to work on this and provide a framework for discussion before the next call. - Members are encouraged to think about what they are able to take on and provide the Chair with ideas on how to proceed. 4. Volunteer assignments Deferred. 5. Other Business * TC Collaboration Tool: - The TC agrees on using Google Docs / Sites as a collaboration space for informal sharing of documents amongst its members, though keeping the OASIS tools as the official ones. 6. Adjournment Next call: Feb 6, 2013 @ 1.30 EST Meeting Adjourned.