Add/Expand Purpose Categories

[coolharsh55]

Propose a specific concept to be added/modified within the purpose hierarchy in DPV, or a reference from where to extract purposes and align them within DPV's existing structure.

[Paul-Ryan76]

Belgian ROPA template purpose types .xlsx
Here is a List of the purpose types taken from the Belgian Register of Processing Template. This might be a good starting point

[Paul-Ryan76]

https://ec.europa.eu/justice/article-29/documentation/opinion-recommendation/files/2013/wp203_en.pdf

EDPB have provided some guidance on "purpose" and its need to be "specific" and "explicit"

[Paul-Ryan76]

The UK ROPA template https://icosearch.ico.org.uk/s/redirect?collection=ico-meta&url=https%3A%2F%2Fico.org.uk%2Fmedia%2Ffor-organisations%2Fdocuments%2F2172937%2Fgdpr-documentation-controller-template.xlsx&auth=o%2F5L4ed0ZLz63IoYJ5p%2Flg&profile=_default&rank=3&query=article+30 (file download) doesn't really add very much here in terms of purposes. they mention only 4 terms, which are: Payroll, Personnel File, Recruitment & Direct marketing

[besteves4]

The CCPA section 1798.140 (d) has definitions for business purposes https://ccpa-info.com/home/1798-140-definitions/

[coolharsh55]

For the purposes of DPV v1, I think we're in a decent spot. Next step would be to pick specific examples from the above sources and see how they fit with DPV's structure i.e. applying DPV to DPA guidelines and case-law. The issue is kept open for relevant discussions on these. We can also expand this work to provide a separate guide on how purposes should be documented using DPV (has to be based on specifics, e.g. GDPR).

[coolharsh55]

We discussed in today's meeting and are okay with the current list, closing as completed.