July 2023 - Policy-rules-committee

PRC 19 July 2023 - minutes
by Giuditta del Buono 20 Jul '23

20 Jul '23

Dear all, Please find on the Members Platform the minutes of yesterday's PRC - see https://membersplatform.gaia-x.eu/dashboard#/download?path=https://membersp… Best regards, Giuditta Giuditta Del Buono | Technical Product Manager Gaia-X European Association for Data and Cloud AISBL Phone: +39 339 7279869 giuditta.delbuono(a)gaia-x.eu<mailto:cosmina.gantner@gaia-x.eu> | www.gaia-x.eu<https://urldefense.com/v3/__https:/eur03.safelinks.protection.outlook.com/?…> Avenue des Arts 6-9 1210 Bruxelles/Brussels Belgium [cid:image001.png@01D9BB25.8321E140]<https://gaia-x.eu/> PRIVACY AND CONFIDENTIALITY NOTICE: For details about what personal information we collect and why, please see our Privacy Policy on our website at http://www.gaia-x.eu/privacy-policy. This e-mail message and any attachments are for the sole use of the intended recipient(s) and may contain confidential and/or legally privileged information. Any unauthorized use or disclosure, copying and/or distribution of the content of this e-mail message and attachments is prohibited. If you are not the intended recipient, please contact us by reply e-mail and destroy all copies of the original message and attachments immediately. Thank you. Please consider the environment before printing this e-mail. Save about 200ml water, 2g CO2, 0.05kWh power, and 2

1 0

PRC 19 July 2023 - agenda
by Giuditta del Buono 19 Jul '23

19 Jul '23

Dear all, Please find attached the proposed agenda for today's PRC, including the topics proposed by Bert. Best regards, Giuditta Giuditta Del Buono | Technical Product Manager Gaia-X European Association for Data and Cloud AISBL Phone: +39 339 7279869 giuditta.delbuono(a)gaia-x.eu<mailto:cosmina.gantner@gaia-x.eu> | www.gaia-x.eu<https://urldefense.com/v3/__https:/eur03.safelinks.protection.outlook.com/?…> Avenue des Arts 6-9 1210 Bruxelles/Brussels Belgium [cid:image001.png@01D9BA49.31168A40]<https://gaia-x.eu/> PRIVACY AND CONFIDENTIALITY NOTICE: For details about what personal information we collect and why, please see our Privacy Policy on our website at http://www.gaia-x.eu/privacy-policy. This e-mail message and any attachments are for the sole use of the intended recipient(s) and may contain confidential and/or legally privileged information. Any unauthorized use or disclosure, copying and/or distribution of the content of this e-mail message and attachments is prohibited. If you are not the intended recipient, please contact us by reply e-mail and destroy all copies of the original message and attachments immediately. Thank you. Please consider the environment before printing this e-mail. Save about 200ml water, 2g CO2, 0.05kWh power, and 2g wood.

2 1

PRC 12 July 2023 - minutes
by Giuditta del Buono 19 Jul '23

19 Jul '23

Dear all, Please find on the Members Platform the minutes of this week's PRC - see https://membersplatform.gaia-x.eu/dashboard#/download?path=https://membersp… Best regards, Giuditta Giuditta Del Buono | Technical Product Manager Gaia-X European Association for Data and Cloud AISBL Phone: +39 339 7279869 giuditta.delbuono(a)gaia-x.eu<mailto:cosmina.gantner@gaia-x.eu> | www.gaia-x.eu<https://urldefense.com/v3/__https:/eur03.safelinks.protection.outlook.com/?…> Avenue des Arts 6-9 1210 Bruxelles/Brussels Belgium [cid:image001.png@01D9B63B.324A34F0]<https://gaia-x.eu/> PRIVACY AND CONFIDENTIALITY NOTICE: For details about what personal information we collect and why, please see our Privacy Policy on our website at http://www.gaia-x.eu/privacy-policy. This e-mail message and any attachments are for the sole use of the intended recipient(s) and may contain confidential and/or legally privileged information. Any unauthorized use or disclosure, copying and/or distribution of the content of this e-mail message and attachments is prohibited. If you are not the intended recipient, please contact us by reply e-mail and destroy all copies of the original message and attachments immediately. Thank you. Please consider the environment before printing this e-mail. Save about 200ml water, 2g CO2, 0.05kWh power, and 2g wood.

4 3

PRC 5 July - minutes
by Giuditta del Buono 12 Jul '23

12 Jul '23

Dear all, Please find attached and on the Members Platform<https://membersplatform.gaia-x.eu/dashboard#/download?path=https://membersp…> the minutes of today's PRC. Thank you if you can check if I have correctly reported and summarised the sometimes confusing conversation we had. Best regards, Giuditta Giuditta Del Buono | Technical Product Manager Gaia-X European Association for Data and Cloud AISBL Phone: +39 339 7279869 giuditta.delbuono(a)gaia-x.eu<mailto:cosmina.gantner@gaia-x.eu> | www.gaia-x.eu<https://urldefense.com/v3/__https:/eur03.safelinks.protection.outlook.com/?…> Avenue des Arts 6-9 1210 Bruxelles/Brussels Belgium [cid:image001.png@01D9AF4E.4761EC50]<https://gaia-x.eu/> PRIVACY AND CONFIDENTIALITY NOTICE: For details about what personal information we collect and why, please see our Privacy Policy on our website at http://www.gaia-x.eu/privacy-policy. This e-mail message and any attachments are for the sole use of the intended recipient(s) and may contain confidential and/or legally privileged information. Any unauthorized use or disclosure, copying and/or distribution of the content of this e-mail message and attachments is prohibited. If you are not the intended recipient, please contact us by reply e-mail and destroy all copies of the original message and attachments immediately. Thank you. Please consider the environment before printing this e-mail. Save about 200ml water, 2g CO2, 0.05kWh power, and 2g wood.

2 2

WG Compliance 11 July 2023 - minutes and analysis of feedback from Lighthouse projects
by Giuditta del Buono 12 Jul '23

12 Jul '23

Dear all, Please find attached the minutes of yesterday's WG Compliance meeting, together with the Excel file reporting the analysis of the feedback from Lighthouse initiatives and related decisions following yesterday's discussion in the WG. I'm currently having a problem with the synchronisation of the documents between SharePoint and the Platform - you'll find the documents also on the Platform as soon as the issue is solved. Best regards, Giuditta Giuditta Del Buono | Technical Product Manager Gaia-X European Association for Data and Cloud AISBL Phone: +39 339 7279869 giuditta.delbuono(a)gaia-x.eu<mailto:cosmina.gantner@gaia-x.eu> | www.gaia-x.eu<https://urldefense.com/v3/__https:/eur03.safelinks.protection.outlook.com/?…> Avenue des Arts 6-9 1210 Bruxelles/Brussels Belgium [cid:image001.png@01D9B4B9.BA70E2D0]<https://gaia-x.eu/> PRIVACY AND CONFIDENTIALITY NOTICE: For details about what personal information we collect and why, please see our Privacy Policy on our website at http://www.gaia-x.eu/privacy-policy. This e-mail message and any attachments are for the sole use of the intended recipient(s) and may contain confidential and/or legally privileged information. Any unauthorized use or disclosure, copying and/or distribution of the content of this e-mail message and attachments is prohibited. If you are not the intended recipient, please contact us by reply e-mail and destroy all copies of the original message and attachments immediately. Thank you. Please consider the environment before printing this e-mail. Save about 200ml water, 2g CO2, 0.05kWh power, and 2g wood.

1 0

DT input on introduction of "basic conformity" into gaiax policy rules - interplay with EU
by Jakob.Greiner＠telekom.de 11 Jul '23

11 Jul '23

Dear colleagues from PRC and PRD, as discussions on the introduction of a new notion of "basic conformity" have been ongoing for some weeks now, we'd like to share once again our view on this development - and its interplay with the policy rules and labels - as it is our feeling that a lot of things are getting mixed up in the debate. To start with, here's our view on what we tried so far - for the past 2 years - to achieve with the policy rules (last formal version for reference: https://docs.gaia-x.eu/policy-rules-committee/policy-rules-labelling/) 1. As the preamble says, the aim of the rules is to have clear controls in place demonstrate European values of Gaia-X. 2. We have then also made clear that each (!) offering by a Cloud Service Provider under Gaia-X needs to comply with all (!) of the objectives defined in the document. * What should be noted: except for Chapter 5, all remaining rules stipulate (=) Label Level 1. This was always common understanding within Gaiax, level 1 being the basic level to comply with, that's why we didn't even mention "label level 1" anywhere in those rules (except for under chapter 5 in the intro). * What should also be noted: if a CSP choses to offer its services also in levels 2 and/or 3 - then the rules laid down in Chapter 5 are compulsory (!) to the CSP, and not optional. What is optional is naturally the decision of a CSP to offer services under label levels 2 and 3. Long story short: if I as CSP don't pitch in levels 2 and 3, the rules for 2 and 3 obviously don't apply to me when following the Gaia rules - and the other way around if I pitch. With this understanding (of which I hope all of you agree with), lets move to the new idea to introduce a new concept in Gaia-X and into the policy rules, called "basic conformity". We understand from the supporters of this concept that this introduction should aim for the following: while basic conformity sticks to and describes the values (e.g. transparency, interoperability etc) that Gaia wants to stand for, it strips away any special reference to the EU, as this is intended for services from CSPs that are offered outside of the EU (e.g. Japan). This means e.g. excluding the reference to "contract under Union or EU/EEA law" and excluding references to the GDPR. If we were to follow through with the introduction of such concept, we fundamentally disagree that in consequence, "label level 1" and as such (as described above) all rules except chapter 5 of the PRD, should become OPTIONAL. This is in so far already difficult to explain, as a CSP, who wants to offer its services in the EU, is subject to the EU legislative acquis and as such, needs to anyways observe e.g. the GDPR. You cannot make legal compliance "optional". Should the concept of basic conformity be introduced, this means we have essentially two options to decide upon: 1. Complete deletion of Label Level 1 and replace it with "basic conformity" for all services offered under Gaia, no matter from where (outside EU, inside EU) - as the specific requirements of the GDPR need to be observed in any way (preamble: "In general, full adherence to applicable EU/EEA legislation (e.g., in areas such as data protection and security) is a prerequisite and thus not waived or affected by the following policies and rules.") 2. Label Level 1 and its references to GDPR/EU are maintained as is, but it is made clear that this is NOT an OPTIONAL Label, but rather defines the baseline/basic requirements of services when offered within the EU. And yes, this would lead in consequence to two requirements for a CSP who offers services in and outside EU (basic conformity, label level 1). But please don't shoot the messenger, DT didn't introduce the new idea for Gaia transforming into a global and not anymore a European initiative..... * Our clear proposition: Keep Option 2, as GaiaX was always set-up with the aim to reflect European (!) values (just read through the website, label framework etc for reference...) and as such, make adherence to European legislation more transparent through demonstrated compliance (such as through CoCs). Stripping of references to e.g., European contracts would mean getting rid of what Gaia essentially stands for. * As for the additional concept of basic conformity, if the majority of members wants to keep this introduced, then it should be made clear at minimum that this is solely to reflect service offerings provided outside the EU. And by that, here's a last observation. The idea of introducing basic conformity for outside EU services is what we consider an add-on to the GaiaX initiative which is and will be based on European values - not the other way around. Thus, we don't consider deleting references to "European" in the PRD the right way forward. Following the above, I think it becomes clearer why we propose a merge request to an - in our view - otherwise flawed Preamble, which ultimately, DT would no longer be willing to stand for and support. Change proposal: The intent of the policy rules is to identify clear controls to demonstrate the core European values of Gaia-X: openness, transparency, data protection, security, and portability. Basic conformity defines the minimal set of requirements to be able to participate in a Gaia-X conformant ecosystem. Its use is intended exclusively for services offered outside of the EU/EEA. For Gaia-X compliant services offered within the EU/EEA, the optional Label levels define additional relevant criteria and additional conformance ensuring measures such as certificates, to achieve additional levels of assurance and trust, with focus on European values and based on EU/EEA legislation. These initial Labels can be extended, and additional Labels can be added in the future, to accommodate for sectorial or geographical needs. I unfortunately won't be able to join tomorrow's PRC call from the beginning, that's why I considered it important to make these points transparent to all of you, in light of forthcoming meetings. Looking forward to discuss! Best regards Jakob Dr. Jakob Greiner Deutsche Telekom AG Group Headquarters Vice President European Affairs Public and Regulatory Affairs Friedrich-Ebert-Allee 140, 53113 Bonn, Germany phone: +49 228 181-99220 mobile: +49 151 72941410 E-Mail: jakob.greiner(a)telekom.de<mailto:jakob.greiner@telekom.de> www.telekom.com/public-and-regulatory-affairs<http://www.telekom.com/public-and-regulatory-affairs> Life is for sharing. You can find the obligatory information on www.telekom.com/compulsory-statement<http://www.telekom.com/compulsory-statement> Big changes start small - conserve resources by not printing every e-mail.

1 0

New mailing lists will soon be used - please check your participation in Working Groups on the Members Platform
by Giuditta del Buono 10 Jul '23

10 Jul '23

Dear all, Since the current mailing lists will be replaced in a few weeks by new mailing lists linked to the new Members Platform, I kindly ask you to check as soon as possible if your participation in WGs is correctly represented on the Platform. You can see what are the groups where you are listed as a member and you can ask to join or leave a WG using the "Subscription Preferences" option that you can find by clicking on the account icon - on the top right. It is very important that you check, to avoid no longer receiving meeting invitations or losing access rights linked to your participation in working groups. Thank you for your cooperation, kind regards Giuditta Giuditta Del Buono | Technical Product Manager Gaia-X European Association for Data and Cloud AISBL Phone: +39 339 7279869 giuditta.delbuono(a)gaia-x.eu<mailto:cosmina.gantner@gaia-x.eu> | www.gaia-x.eu<https://urldefense.com/v3/__https:/eur03.safelinks.protection.outlook.com/?…> Avenue des Arts 6-9 1210 Bruxelles/Brussels Belgium [cid:image001.png@01D9B35A.A97D25C0]<https://gaia-x.eu/> PRIVACY AND CONFIDENTIALITY NOTICE: For details about what personal information we collect and why, please see our Privacy Policy on our website at http://www.gaia-x.eu/privacy-policy. This e-mail message and any attachments are for the sole use of the intended recipient(s) and may contain confidential and/or legally privileged information. Any unauthorized use or disclosure, copying and/or distribution of the content of this e-mail message and attachments is prohibited. If you are not the intended recipient, please contact us by reply e-mail and destroy all copies of the original message and attachments immediately. Thank you. Please consider the environment before printing this e-mail. Save about 200ml water, 2g CO2, 0.05kWh power, and 2g wood.

1 0

PRC presentation - Informal BoD 26 June 2023
by Giuditta del Buono 06 Jul '23

06 Jul '23

Dear all, Please find attached the slides presented by Ulrich at the last Informal BoD meeting. Best regards, Giuditta Giuditta Del Buono | Technical Product Manager Gaia-X European Association for Data and Cloud AISBL Phone: +39 339 7279869 giuditta.delbuono(a)gaia-x.eu<mailto:cosmina.gantner@gaia-x.eu> | www.gaia-x.eu<https://urldefense.com/v3/__https:/eur03.safelinks.protection.outlook.com/?…> Avenue des Arts 6-9 1210 Bruxelles/Brussels Belgium [cid:image001.png@01D9B037.528F1960]<https://gaia-x.eu/> PRIVACY AND CONFIDENTIALITY NOTICE: For details about what personal information we collect and why, please see our Privacy Policy on our website at http://www.gaia-x.eu/privacy-policy. This e-mail message and any attachments are for the sole use of the intended recipient(s) and may contain confidential and/or legally privileged information. Any unauthorized use or disclosure, copying and/or distribution of the content of this e-mail message and attachments is prohibited. If you are not the intended recipient, please contact us by reply e-mail and destroy all copies of the original message and attachments immediately. Thank you. Please consider the environment before printing this e-mail. Save about 200ml water, 2g CO2, 0.05kWh power, and 2g wood.

1 0

PRC meeting
by Giuditta del Buono 05 Jul '23

05 Jul '23

As agreed this morning in the PRC ________________________________________________________________________________ Microsoft Teams meeting Join on your computer, mobile app or room device Click here to join the meeting<https://teams.microsoft.com/l/meetup-join/19%3ameeting_MmFmNGZjYjktMWExOS00…> Meeting ID: 364 605 606 39 Passcode: YpBKEw Download Teams<https://www.microsoft.com/en-us/microsoft-teams/download-app> | Join on the web<https://www.microsoft.com/microsoft-teams/join-a-meeting> Learn More<https://aka.ms/JoinTeamsMeeting> | Help<https://support.microsoft.com/en-us/office/join-a-teams-meeting-078e9868-f1…> | Meeting options<https://teams.microsoft.com/meetingOptions/?organizerId=b4f707b0-251e-452e-…> | Legal<https://gaia-x.eu/privacy-policy/> ________________________________________________________________________________

1 0