...
- Bill Braithwaite
- Mark Lizar
- Anna Slomovic
- Colin Soutar
- Quorum is was attained with 4 of 7 voting members present.
Non-Voting
- Peter Capek
- Gershon Jannsen
- Jeff Stollman
- Colin Wallis
...
2. Privacy Assessment Criteria
Termination clause.
Jeff – how can this be enforced?
...
In the event that the Subject decides to terminate use of the Service:
"As part the accreditation process, the CSP must demonstrate that, in the event that the Subject terminates use of the CSP Service and requests destruction of their PII, that the CSP will do so, unless otherwise precluded from doing so by law."
There was a discussion regarding the Clear trusted traveler program and how the PII were "escrowed" in that case by the US government. No further details were available on the call, but it appeared that it would be interesting to understand more about this process.
It was stated that Tom would likely have some good input on the proposed text above.
Colin Example of Clear –
No knowledge and specifics.
Jeff
Transfer of ownership
Does accreditation flow with an organization - does it need to be re-accredited.
In order to maintain the accreditation – notice must be provided to Kantara
Changes in the Service
Suggested language from the group
"At the time of accreditation, the CSP must provide to the accreditor the process that it would use to notify Changes of Services, along with an example. The notification should include the following: indication that the changes should be clearly highlighted; and the Subject is given the option to continue participation or to terminate, in which case the Subject’s PII are deleted."
Transfer of ownership was also discussed, as a specific Change in Service.
Does accreditation automatically flow with an acquired organization - or does it need to be re-accredited.
It was proposed that in order to maintain the accreditation – notice must be provided by the CSP to Kantara, who may then chose to have all or parts of the Service re-accredited.
Action
Colin to seek clarification from the ARB, copying IAWG.
Call closes
3. AOB
Face to face meeting in Washington DC
In addition to the items that were included in the August face to face agenda, the group considered that it would be useful to provide a Powerpoint overview of the progress to date on the PAC.
4. Adjourn
Call closed @ 12:06 EDT