Dear members,
Please find the minutes from the last PLA WG call on the 12th of September:
Work in '2023_04_13_CPRA - PLA_CoP_Mapping (WiP)' document:
The chairs addressed the comments made by the WG contributors regarding the yellow cells, column I.
Action needed to be done: Revise the existing mapping of CCPA provisions in the yellow cells to the GDPR and comment in column J whether agree or not and why.
When revising a yellow cell that is already revised by another WG member (look at column J) please write your input in column I following the previous examples there.
Action items:
- Marina to go through the document and correct the content of columns I and J. Column J needs to contain the name and vote of the initial member revising a specific provision like it has been appointed on the WG call. Column I is where other members of the WG comment on agreeing/disagreeing about specific provision being mapped to the GDPR article it is.
- Chairs to revise row 266 by Verrion.
- Yellow cells allocated to a WG member for next call:
- Row 43 to 49 allocated to Louis Pinault
- Row 71: Mattia and Isabella
- Rows 97-98: Chairs
- Row 100-105: Louis Pinault
- Row 108-111: chairs
- Row 134 and 140: Chairs
- Row 205-211, 223, 247: Louis Pinault
- Row 265: Author to be defined
- Row 328, and 356-358: chairs
- Row 281-284: Author to be defined
- Row 296-298: Author to be defined
- Row 306-315: Author to be defined
- Rows 364, 365: Author to be defined
- Rows 432 to 449: Author to be defined
- Rows 463 to 478: Author to be defined
Whoever is interested in revising any of the remaining yellow provisions please let me know, or write your name in column J of that row.
Note: Document logic (color codes):
The document shows the CCPA provisions after the CPRA changes applied to them:
Yellow cells indicate that the provision has been updated from its previous state, thus this GDPR mapping needs to be revised.
- Column B are the CCPA/CPRA provisions,
- Column C are the GDPR articles (some are already mapped to those CCPA/CPRA provisions from our previous work).
- Column D describes the type of provision. It only contains 2 kinds to choose from: Obligation or Definition and Procedures.
- Column E is about the identified CSA Code of Conduct (CoC) controls that the cloud providers can check to show compliance with GDPR to their customers.
- Column J: the name of the volunteer who wants and is working on the specific red cell provision. Mapping CCPA with GDPR for the red cells that are in scope.
Green cells show that the specific provision is as before, and nothing has been added.
In red cells are the new provisions introduced by the CPRA that didn't exist earlier. Here there is the need to do a new complete mapping to the GDPR as the specific provision appears for the first time.
Description of the second step being implemented:
- Working on step 2: Revision of YELLOW cells.
- Revise yellow cells and check if the GDPR mapping continues to be valid or needs to be updated. (columns B and C)
- Please put your names in column J when you have reviewed a provision. Column I is for commenting, and voting if you agree or don't agree with the mapping in addition to the initial commenter.
Note: Highlighted in yellow are the cells containing previous CCPA provisions that have been amended under the CPRA (are now slightly changed to what they included before);
To connect on the call tomorrow:
Time: 08:00 a.m. PST / 11:00 EST / 16:00 GMT / 17:00 CET.
URL: https://cloudsecurityalliance.zoom.us/j/82987382695?pwd=amZ6cEljSCtXVU01OUVRbUUyTTNRdz09 (Meeting ID: 829 8738 2695, Passcode: 794440)
Kind regards,
Marina
------------------------------
Marina Bregkou,
Senior Research Analyst,
CSA
------------------------------