Privacy Level Agreement

Back to discussions
Expand all | Collapse all

PLA WG call - May 11th [Meeting Minutes]

  • 1.  PLA WG call - May 11th [Meeting Minutes]

    Posted May 12, 2021 04:53:00 AM
    Edited by Lefteris Skoutaris May 12, 2021 04:55:39 AM

    Dear members,
                               please find below a summary of the discussions that took place during our recent meeting.

    Agenda Items (AIs):

    1. Specify gap descriptions for CCPA-GDPR mapping
    2. Review CCPA amendments (+ ones identified & provided by the co-chair team)
    3. Discuss CCPA-GDPR gap analysis views (by co-chair team and experts)
    4. AoB

    Participants (4):

    Paul Benedek
    Rishabh Gaikwad
    Lefteris Skoutaris (PM)
    Mark Vinkovits

    Meeting Minutes (MMs)

    1. Specify gap descriptions for CCPA-GDPR mapping
    • The specification of CCPA requirements that have been identified to be missing in GDPR is one of the next tasks for the group,
    • The exercise aims to review the identified partial and full gaps that are identified between CCPA and GDPR and draft a description which is to be used as compensating requirement to close the gap in GDPR,
    • Paul, Rishabh and Mark have agreed each to draft such a description for at least one of the partial/full gaps they have identified during the gap analysis (AP1).
    2. Review identified CCPA amendments (+ ones provided by the co-chair team)
    • Lefteris added a tab in the CCPA-GDPR mapping tool, including the amendments suggested to be included in the mapping by the co-chair team,
    • The group has agreed to review these amendments for their inclusion in the mapping, as well as investigate if further CCPA amendments should be considered for inclusion (AP2).
    3. Discuss CCPA-GDPR gap analysis views (by co-chair team and experts)
    • This action is pending from previous calls,
    • There are about 6 mappings where a different view is provided between the reviewers or further clarification is needed,
    • The co-chair team is kindly invited to join the next call session to discuss and meet consensus.
    4. AoB
    • Next call is scheduled on May 25th, 6 pm EEST (5 pm CET / 8 am PST / 11 pm EST). 


    Action Points (APs)

    AP1: Paul, Rishabh and Mark have agreed each to draft such a description for at least one of the partial/full gaps they have identified during the gap analysis.
    AP2: The group has agreed to review these amendments and agree/disagree for their inclusion in the mapping, as well as investigate if further CCPA amendments should be considered for inclusion.


    Please let me know if something essential is missed above.
    Thank you again for your attendance and support.
    Best regards,
    Lefteris

    ------------------------------
    Eleftherios Skoutaris
    Program Manager
    Cloud Security Alliance
    ------------------------------