...
- Anna---P3 should define "Privacy Requirements" as this is the forum with privacy SMEs.
- Susan---believes that the PAC could be both informative and normative with sections clearly highlighted in the document for assessors. If they remain in separate documents, they could go unread and the PAC could loose lose it's teeth.
- Colin S.--- elevates the concern about drafting a document that current laws don't regulate.
- Colin W.--- currently, we have requirements and no assessment criteria. That guidance was needed: yesterday!
- Colin S.--- adding jurisdictional requirement could be impractical re: version control.
...