Privacy Level Agreement

PLA WG call - April 13th [Meeting Minutes]

  • 1.  PLA WG call - April 13th [Meeting Minutes]

    Posted Apr 16, 2021 04:01:00 AM

    Dear members,
                               please find below a summary of the discussions that took place during our recent meeting.

    Agenda Items (AIs):

    1. Progress status check on the CCPA-GDPR Gap Analysis Activity and next steps
    2. AoB

    Participants (5):

    Martim T. Barata
    Paul Benedek
    Ramon Codina
    Rishabh Gaikwad
    Lefteris Skoutaris (PM)


    Meeting Minutes (MMs)

    1. Progress status check on the CCPA-GDPR Gap Analysis Activity and next steps
    • The objective of the gap analysis is determining what are the CCPA provisions which bring, in full or partially, additional compliance requirements, when compared to the mapped GDPR articles,
    • The PLA WG has completed both the mapping and gap analysis between the CCPA and the GDPR,
    • Paolo (co-chair) and his team have reviewed the gap analysis results and have posted their feedback (agree/disagree with justification) under column 'I' of the mapping tool and gap analysis tab for discussing at the next call,
    • All reviewers that participate in the gap analysis exercise are kindly invited to review the input provided from the co-chair team, and highlighted in 'yellow' under column 'i" and reply with their view under column 'J' (AP1),
    • Lefteris (PM) will contact reviewer's and invite them to review those cells where their reply is needed, in order to discuss out our next call (AP2),
    • Martim informed the panel that the co-chair's team is working to identify the recently applied CCPA amendments, and how these might possibly affect the current mapping & gap analysis exercise. Results of this analysis are to be presented at the next group call (AP3).
    • The next step, after meeting consensus with respect to the identified gaps (or deltas to the GDPR), the group will be tasked to compare those with the PLA CoP, and propose an addendum that will extend the PLA CoC to offer compliance to the CCPA as well.

      2. AoB
      • Next call is scheduled on April 27th , 6 pm EEST (5 pm CET / 9 am PST / 12 pm EST). 


      Action Points (APs)

      AP1: All reviewers that participate in the gap analysis exercise are kindly invited to review the input provided from the co-chair team, and highlighted in 'yellow' under column 'i" and reply with their view under column 'J'.
      AP2: Lefteris (PM) will point reviewer's to those cells where their reply is needed, in order to discuss out our next call.
      AP3: The co-chair's team will present to group the CCPA amendments and how these might affect the CCPA-GDPR mapping and gap analysis the WG is conducting.

      Please let me know if something essential is missed above.
      Thank you again for your attendance and support.
      Best regards,
      Lefteris

      ------------------------------
      Eleftherios Skoutaris
      Program Manager
      Cloud Security Alliance
      ------------------------------