DURI Strategic Roadmap 2022/2023

Brainstorming and Planning Document

Goal

Define the deliverables that DURI will develop and disseminate starting in 2022.

Contribution Guidelines

  1. Please use the designated template below to propose new ideas for the 2022/2023 DURI Roadmap.
  2. It is ok to add ideas that are not fully fleshed out. The purpose of this document is to brainstorm and iterate on ideas. We welcome and encourage you to add any proposals/topics that come to mind.
  3. If you would like to make comments/suggestions to the text of an already proposed deliverable, please do so in suggestion mode (this mode is available via the drop-down in the top right corner - click the pencil. Please DO NOT write over the proposal or other suggestions/comments.
  4. If you would like to declare your interest in participating in a proposed topic/deliverable, please add your name to the “+1” list.

-----------------------------------------------------------------------------------------------------

Template (copy and paste as needed)

Proposed Deliverable Name/Topic: <Add name/topic here>

Standard:

Proposed By: <Add your name here>

Proposal based on which discussions: <Plenary, connect, Work Stream discussions, Driver Project input?>

Collaborating Workstreams:

Driver Projects:

Has a use case been identified (detail below in description) Y/N?

Description: <Please describe the proposed deliverable/topic to explore. For example, what are the gaps in this space? Why is this deliverable needed?>

+1: <If you are not the proposer and you support this deliverable, please add your name here>

--------------------------------------------------------------------------------------------------------------


Document Contents

Goal

Contribution Guidelines

Template (copy and paste as needed)

Proposed Deliverable Name/Topic: <Add name/topic here>

General Thoughts for DURI 2022

New Proposals

DUO Proposals

Proposed Deliverable Name/Topic: Shortened Description Column for DUO

Proposed Deliverable Name/Topic: Common clauses for Data use/Data Access Agreements

Proposed Deliverable Name/Topic: Imaging Data Codes

Proposed Deliverable Name/Topic: Data access request approval by Data Use profile (rather than individual datasets)

Proposed Deliverable Name/Topic: Standard Data use agreement/Data use consent/DAA

Proposed Deliverable Name/Topic: DUO for non human non controlled access datasets and/or samples

Proposed Deliverable Name/Topic: DUO for non-controlled access datasets (benefit sharing, per Danny Park)

Proposed Deliverable Name/Topic: Capacity to automate share of data based on multiple DUO codes to be stored and considered per individual, rather than per dataset.

MRCG Proposals

Proposed Deliverable Name/Topic: Clarifying and Updating MRCG

Passports Proposals

Proposed Deliverable Name/Topic: Collecting detailed Passports use cases and implementers requirements

Proposed Deliverable Name/Topic: Passports v1.2

Proposed Deliverable Name/Topic: Passports v2.0

Proposed Deliverable Name/Topic:  Passports v1.2 and v2.0 communication workshop

Proposed Deliverable Name/Topic: Additional Passports Implementations

Proposed Deliverable Name/Topic: DUO Passports connector

Cross DURI sub-group Proposals

Proposed Deliverable Name/Topic: DURI Gap analysis

Proposed Deliverable Name/Topic: Integrating DURI standards with other standards organizations/obtaining certification from other standards organizations

Proposed Deliverable Name/Topic: Improving Documentation

Previous 2020 Roadmap Deliverables (completed and incomplete)

Passports

DUO

MRCG


General Thoughts for DURI 2022

We would like to ask the question “How do we think about implementations across the whole landscape of GA4GH including Work Streams and Driver Projects?”.

Can we visualize current implementations across that landscape, with each implementation across the pathway per driver project.

It would not work to conduct a gap analysis by each Work Stream without knowing what the implementer is doing with any other Work Stream or standard.

Could we instead conduct a gap analysis per implementer, across the lifecycle that GA4GH defines and identify where the missing parts/pieces are?

Then, we can then more easily identify if we are are facilitating anything and ensure that we don’t produce standards that no one uses.

Aim to produce a matrix of implementers as columns and standards as rows, then identify gaps by column or row and what is the same?

This could lead to talking to implementers and asking why are you not using this standard and why?


New Proposals

  1. DUO Proposals

Proposed Deliverable Name/Topic: Shortened Description Column for DUO

Standard: DUO

Proposed By: Jonathan Lawson

Proposal based on which discussions: Specific use case discussions

Collaborating Workstreams:

Driver Projects: Australian Genomics, Google

Has a use case been identified (detail below in description) Y/N? Yes

Description: shorthand definition for UI purposes. We have clinical use cases, millions of patients and calls connected across multiple countries and accessing their own medical records. DUO codes could be a way to give control to a patient to donate their data to science, we need short codes that are coherent enough for people to understand and be able to process this on their mobile device for example. More details here: https://github.com/EBISPOT/DUO/issues/112 

+1: <If you are not the proposer and you support this deliverable, please add your name here>

Responsible

Accountable

Consulted

Informed

Lead

DURI

JL and MC

DURI

JL and MC and WSM

WSM, secretariat, DURI WSLs

secretariat , DURI

Collaborating Input

Development

Sign off and finalization

Proposed Deliverable Name/Topic: Common clauses for Data use/Data Access Agreements

Standard: DUO

Proposed By: Jonathan Lawson

Proposal based on which discussions: Work Stream Discussions

Collaborating Workstreams: REWS

Driver Projects:

Has a use case been identified (detail below in description) Y/N? Yes

Description: Use case: Broad Institute negotiating own touch points in data access agreements.

+1: <If you are not the proposer and you support this deliverable, please add your name here>

Responsible

Accountable

Consulted

Informed

Lead

Collaborating Input

Development

Sign off and finalization

Proposed Deliverable Name/Topic: Sample Submission Codes

Standard: DUO

Proposed By: Jonathan Lawson

Proposal based on which discussions: Work Stream Discussions

Collaborating Workstreams:

Driver Projects:

Has a use case been identified (detail below in description) Y/N? Yes

Description: Developing a way to standardise the way a repository accepts data, stores data and allows it to be searched, how do we get DUO attached to those? We have seen instances already where Institutes have already adapted DUO codes to incoming samples so that the whole process can be streamlined and standardised. The use case specifically is Biobanks using DUO codes to describe use permissions on samples. Is that appropriate? Do we need a separate ontology for samples given a sample can be depleted but data cannot. Therefore this would involve adding some guidance around this process, considering the balance between individual’s data rights and the public’s benefit being a litigative issue in the US.

Use case: biobanks who have reached out asking questions about DUO but we also know PMs with biobanks in order to deposit samples at biobanks already started using DUO to describe use permissions on samples. Is that appropriate? Should DUO need more terms, separate ontology for samples?

+1: Alice Mann, Melanie Courtot

Responsible

Accountable

Consulted

Informed

Lead

Collaborating Input

Development

Sign off and finalization

Proposed Deliverable Name/Topic: Imaging Data Codes

Standard: DUO

Proposed By: Jonathan Lawson

Proposal based on which discussions: Work Stream Discussions

Collaborating Workstreams:

Driver Projects:

Has a use case been identified (detail below in description) Y/N? Yes

Description: Adapting DUO for standardizing the way imaging data is managed

+1: Alice Mann

Responsible

Accountable

Consulted

Informed

Lead

Collaborating Input

Development

Sign off and finalization

Proposed Deliverable Name/Topic: Data access request approval by Data Use profile (rather than individual datasets)

Standard: DUO

Proposed By: Jonathan Lawson

Proposal based on which discussions: Work Stream Discussions

Collaborating Workstreams: REWS

Driver Projects: Wellcome Sanger Institute?

Has a use case been identified (detail below in description) Y/N? Yes (Sanger, Sarion?)

Description: 

+1: Alice Mann

Responsible

Accountable

Consulted

Informed

Lead

Collaborating Input

Development

Sign off and finalization

Proposed Deliverable Name/Topic: Standard Data use agreement/Data use consent/DAA[a]

Standard: DUO

Proposed By: Jonathan Lawson

Proposal based on which discussions: Work Stream Discussions

Collaborating Workstreams: 

Driver Projects:

Has a use case been identified (detail below in description) Y/N?

Description: 

+1: <If you are not the proposer and you support this deliverable, please add your name here>

Responsible

Accountable

Consulted

Informed

Lead

Collaborating Input

Development

Sign off and finalization

Proposed Deliverable Name/Topic: DUO for non human non controlled access datasets and/or samples[b]

Standard: DUO

Proposed By: Melanie Courtot

Proposal based on which discussions: Work Stream Discussions

Collaborating Workstreams: REWS

Driver Projects:

Has a use case been identified (detail below in description) Y/N?

Description: Several use cases from Chris Hunter and Danny Park about using DUO in different contexts

+1: <If you are not the proposer and you support this deliverable, please add your name here>

jlawson@broadinstitute.orgshould we add https://duos.broadinstitute.org/data_sharing_language_tool?

Responsible

Accountable

Consulted

Informed

Lead

Collaborating Input

Development

Sign off and finalization

Proposed Deliverable Name/Topic: DUO for non-controlled access datasets (benefit sharing, per Danny Park)

Standard: DUO

Proposed By: 

Proposal based on which discussions: Work Stream Discussions

Collaborating Workstreams: 

Driver Projects:

Has a use case been identified (detail below in description) Y/N?

Description: 

+1: <If you are not the proposer and you support this deliverable, please add your name here>

Responsible

Accountable

Consulted

Informed

Lead

Collaborating Input

Development

Sign off and finalization

Proposed Deliverable Name/Topic: Capacity to automate share of data based on multiple DUO codes to be stored and considered per individual, rather than per dataset.

Standard: DUO

Proposed By: Andrew Patterson, Kylie Davies.

Proposal based on which discussions: NAGIM Prototypers (Australia)

Collaborating Workstreams: 

Driver Projects: AGHA

Has a use case been identified (detail below in description) Y/N?

Description: Is it possible to store DUO codes alongside a patient record (multiple if needed) and share virtual datasets with individual records selected and deselected according to consent? As part of NAGIM prototyping exercise in Australia this discussion point was raised and explored with a simple (non-func) prototype developed by Dr Andrew Patterson for ease of understanding.

+1: <If you are not the proposer and you support this deliverable, please add your name here>

Responsible

Accountable

Consulted

Informed

Lead

Collaborating Input

Development

Sign off and finalization

  1. MRCG Proposals

Proposed Deliverable Name/Topic: Clarifying and Updating MRCG

Standard: MRCG

Proposed By: Jonathan Lawson

Proposal based on which discussions: Work Stream Discussions

Collaborating Workstreams: REWS

Driver Projects:

Has a use case been identified (detail below in description) Y/N?

Description: Does this standard now sit in REWS or DURI? [c][d]Update documentation and add information. MC proposes to host MRCG under GH repository and have shared access.

+1: Alice Mann, Melanie Courtot

Responsible

Accountable

Consulted

Informed

Lead

DURI, Jonathan Lawson

DURI, Jonathan Lawson

REWS coordinators and leads

REWS/DURI

Collaborating Input

DURI leads

DURI leads

REWS

REWS/DURI

Development

DURI

DURI

REWS

Sign off and finalization

DURI, REWS

DURI, REWS

DURI, REWS

DURI, REWS

  1. Passports Proposals

Proposed Deliverable Name/Topic: Collecting detailed Passports use cases and implementers requirements

Standard: Passports

Proposed By: Alice Mann

Proposal based on which discussions: Work Stream Discussions

Collaborating Workstreams: 

Driver Projects:

Has a use case been identified (detail below in description) Y/N? NA

Description: In working on Passports v1.2 it was discussed that having a record of detailed use cases should be the starting point for the development of standards. This will enable us to assess requirements and deliver a solution based on solving those requirements. We could engage with DPs and implementers to obtain detailed use cases. This has been started but we could share these more widely, and also add more detail, for example adding schemas of flow in each use cases.

Use cases already collected are detailed here.

+1: Kylie Davies<If you are not the proposer and you support this deliverable, please add your name here>

Proposed Deliverable Name/Topic: Passports v1.2

Standard: Passports

Proposed By: Passports Technical working group as detailed in these minutes 

Proposal based on which discussions: Feedback on DRS + Passports integration in the FASP groups, identifying some ambiguity in Passports v1.0 specification and ensuring interoperability between two slightly variable implementations/use cases at NIH and ELIXIR.

Collaborating Workstreams: Data Security

Driver Projects: ELIXIR, NIH, Australian Genomics, DNAStack

Has a use case been identified (detail below in description) Y/N? Yes use cases are identified here

Description: Passports version 1.2 will add Token Exchange endpoint for releasing all Passport Visas in a signed token separated from other personal information.

+1: <If you are not the proposer and you support this deliverable, please add your name here>

Proposed Deliverable Name/Topic: Passports v2.0

Standard: Passports

Proposed By: Passports Technical working group as detailed in these minutes 

Proposal based on which discussions: Feedback on DRS + Passports integration in the FASP groups, identifying some ambiguity in Passports v1.0 specification and ensuring interoperability between two slightly variable implementations/use cases at NIH and ELIXIR

Collaborating Workstreams: Data Security

Driver Projects: ELIXIR, NIH, Australian Genomics, DNAStack

Has a use case been identified (detail below in description) Y/N? Yes use cases are identified here

Description: Passports version 2.0 will define work-order token with limited permissions for computational workflows

+1: <If you are not the proposer and you support this deliverable, please add your name here>

Proposed Deliverable Name/Topic:  Passports v1.2 communication workshops

Standard: Passports

Proposed By: Alice Mann, Susan Fairley

Proposal based on which discussions: Work Stream, Implementer and secretariat discussions

Collaborating Workstreams: Data Security

Driver Projects:

Has a use case been identified (detail below in description) Y/N?

Description: Many people have already expressed an interest in implementing passports and are waiting for the progress on v1.2 and v2.0. We need to communicate this out to wider teams to ensure that the direction works for their use cases.

I propose a workshop or possibly two workshops. These could happen at April 2022 connect, where we summarise the progress on Passports v1.2 but also by giving enough context as to what motivated this change and the migration story. We can then explain the technical direction, along with a comparison of how this differs from v1.0.

We can also ask Driver Projects to present their use cases, perhaps in a second workshop to ensure we have time to collect their thoughts on the proposed direction of Passports v1.2.

Then we should hold a similar workshop on v2.0 because the new product approval process, which v2.0 will need to go through will require collaboration and communication of new standards or major changes.

+1: <If you are not the proposer and you support this deliverable, please add your name here>

Proposed Deliverable Name/Topic: Additional Passports Implementations

Standard: Passports

Proposed By: Tommi Nyrönen

Proposal based on which discussions: Work Stream Discussions

Collaborating Workstreams: 

Driver Projects:

Has a use case been identified (detail below in description) Y/N?

Description: Once we have identified the direction of the new Passports versions (see above for v1.2 and v2.0), we could aim to support further implementations of Passports (at the same time as collecting use cases for informing future version development). This could form outreach, building on an initial survey that was sent to Driver Projects summarized here. We could extend this externally, out of GA4GH and then plan how to support interested groups to implement Passports.  

  1. Cross DURI sub-group Proposals

Proposed Deliverable Name/Topic: DURI Gap analysis

Standard: All

Proposed By: Jaime Guidry Auvril  

Proposal based on which discussions: Work Stream Discussions

Collaborating Workstreams: 

Driver Projects:

Has a use case been identified (detail below in description) Y/N?

Description: We would have some mature standards and some still evolving but all central to GA4GH’s strategic goals. To understand better what the future directions could be for these standards but also what new standards DURI could propose, we would like to conduct a gap analysis of the space that DURI operates in. This would involve creating a matrix, perhaps of functionality of each standard and those implementers who are interested in this/using this particular functionality. This could identify areas that are not addressed by DURI standards also.

+1: <If you are not the proposer and you support this deliverable, please add your name here>

Proposed Deliverable Name/Topic: Integrating DURI standards with other standards organizations/obtaining certification from other standards organizations

Standard: Passports

Proposed By: Tommi Nyronen

Proposal based on which discussions: Work Stream Discussions

Collaborating Workstreams: 

Driver Projects:

Has a use case been identified (detail below in description) Y/N?

Description: IEEE or ISO certification of DUO or Passports could be explored.

+1: <If you are not the proposer and you support this deliverable, please add your name here>

Proposed Deliverable Name/Topic: Improving Documentation

Standard: cross-Standards

Proposed By: Alice Mann

Proposal based on which discussions: Work Stream Discussions

Collaborating Workstreams: 

Driver Projects:

Has a use case been identified (detail below in description) Y/N?

Description: this has been mentioned in various discussions. GA4GH will have technical writing support for this but it may be something we want to define specifically and our requirements here, which would ultimately add implementation.

+1: <If you are not the proposer and you support this deliverable, please add your name here>


Previous 2020 Roadmap Deliverables (completed and incomplete)

Passports

Type

Status

Description

v1.0

Publication

Complete

Cell Genomics Passports Standard publication

v1.2

Integration/Minor Version

WIP

Sync 3 specs across DURI (Passports), Cloud (DRS), and Security (AAI)

  • Patch to v1.0, then enhancement v1.2 land by end of quarter
  • Connect with Discovery, Beacon, Cloud etc that expect an access token.
  • Create end-to-end technical demonstration with these teams
  • Take feedback and enhance Passport spec to clarify for use with FASP scenarios

See

https://bit.ly/passport-proposals-v1-1

Passport design doc

Custom token vs using OAuth2 passport

4k Compact Passports

Passport discussion outcome summary

Summary of discussions October 2021

Summary current status of Passports v1.2 discussion

v1.3

Enhancement/Minor Release

Not delivered

Additional Role Values

  • Clinical Care Professionals & Industry researchers
  • Explore the model of Institutional Signing Official status visa in their Passport to indicate that the holder of this visa is an institutional SO and can co-sign a data access agreement/application together with the researcher. Find a solution to making researcher verification as lightweight as possible.

v1.3

Enhancement/Minor Release

Not delivered

No driver projects, so will consider proposing this until v2.0

Passports spec & Driver adoption, e.g. broader trust framework:

  • Assurance levels (identity proofing) - with DSWS
  • Visa flow into and out of the EU regarding Researcher PII
  • Audit logging
  • Requirements scoping
  • Mechanism for logging
  • What gets audited? Policy of exposure.
  • Data sensitivity guidance for access policy
  • Example implementations, testbeds, explanatory documentation or users and brokers

v1.4

Enhancement/Minor Release

Not delivered

Prioritize when drivers are ready; otherwise will delay for v2.0

DUO-Passport Connector

  • Streamlining DAC review processes using DUO codes and Passports together as part of the application - Passports used by DACs for applicant “identity” information
  • DACs issue ControlledAccessGrant Visas - SO pre-approval visa for PIs to apply to DAC (see Library Cards)
  • Partner engagement Cohorts/DACs/data holders NHGRI, Sanger, THL, AGHA, CanDIG, MSSNG, AMED/GEM etc. Collect technical resources from the DPs: main contact, contact for data access procedures, key adoption contacts
  • Possibly build an integrated solution for use cases from national and continental scale (e.g. Cohorts surveyed in the CINECA project)

v2.0

Not delivered

Awaiting Shape of v1.3

Rework Passport visa container structure (is a list in v1.0) to improve inspection/unpacking and versioning.

  • Change rules for how to handle missing Visa fields to improve future backwards compatibility.

DUO

Type

Status

Description

v1.0

Publication

Complete

Cell Genomics Passports Standard publication

v1.0

Feature set

Mixed

Internal DUOS beta version

Expand DUO Documentation for easier use

  • Use of Mondo guideline including mapping to other ontologies
  • SchemaBlocks Representation & tooling
  • ‘Code your Dataset with DUO’ tool
  • Translate DUO terms and definitions to top 2 most requested languages (Japanese and Spanish)

v1.0

Minor release/feature set

Not delivered

Extend DUO to work with outside resources

  • Add ADA-M based atomic terms on request from the ADA-M/REWS/driver projects
  • “Request” could mean driver projects can express their intended use with suitable DUO codes

v1.0

Minor release

Not delivered

Work with FHIR Resource Consent to have them embed/map to DUO terms

  • xSDO activity

v2.0

Minor release

Not delivered

Introduce Risk levels or modifiers within the DUO-Passport interoperability plan

  • Bypass automatic access granting for high risk data sets
  • Ex. datasets with indigenous data that require further approval.
  • AGHA and dbGap

MRCG

Type

Status

Description

v1

Guide

IRB(s)/fundings publish consent form templates using the standard clauses

v1.0

Major version/Guide

Complete

Linking human readable and machine readable data terms of use

Publicly available guidance document on GA4GH website (https://drive.google.com/file/d/102_I0_phOGs9YSmPx7It9CSt1sHFJ87C/view)

V1.1 (?)

Minor release/update to Guide

WIP

Update to MRCG guide

v2.0

Major version/Guide

?

Publicly available consent form templates using the standard sharing language on GA4GH website

v3.0

Major version/Guide

?

An eConsent Form using the standard language is implemented/demonstrated/used


[a]I wonder if this is more of a policy/REWS activity. Would fit well with MRCG though.

[b]is tis the same as "Sample Submission Codes" above?

[c]I believe technically REWS but it's worth clarifying and if so, finding a lead/owner in REWS

[d]Given it is highly dependent on DUO evolutions, it may make sense to bring it formally into DURI