...

• Peter Capek
• Gershon Jannsen
• Jeff Stollman
• Colin Wallis

Minutes & Notes

Administration

...

2. Privacy Assessment Criteria

Termination clause.

Jeff – how can you enforce this be enforced?

Suggested language from the group:

"As part of the accreditation process, the CSP must demonstrate that it has sufficient means and process, e.g escrow, to support the protection of PII in the event that it ceases to provide CSP services, until the PII preservation is no longer required by law."

In the event that the Subject decides to terminate use of the Service:

As part the accreditation process, the CSP must demonstrate that, in the event that the Subject terminates their agreement with use of the CSP Service and requests destruction of their PII, that the CSP will do so, unless otherwise precluded from doing so by law.

There was a discussion regarding the Clear trusted traveler program and how the PII were "escrowed" in that case by the US government.   No further details were available on the call, but it appeared that it would be interesting to understand more about this process.

It was stated that Tom would likely have some good input on the proposed text above.

Colin Example of Clear –

No knowledge and specifics.

...