Page Comparison

Date

15 Mar 2021

Agenda

• Welcome/Introductions

• Antitrust

• Introductions to Information Privacy Adhoc Committee Chairs

• Define Charter

• Committee Goals

  • Steps to take to achieve those Goals

Meeting Minutes

• The Antitrust statement was read and agreed upon.

• Paul kicked off the meeting by thanking the co-chairs, Lance Vannalom, Caliber, and Steve Betley, Car-Part.com.

• Lance Vannalom, the committee co-chair, introduced himself as the information privacy manager at Caliber.

• Paul shared that the Executive Committee asked to create an ad hoc committee to discuss CIECA’s role as it relates to the topic of Information Privacy.

• The objectives are to:

  • Identify what role CIECA can realistically play in the area of information privacy, and

  • Develop recommendations for CIECA’s position on the topic.

• The deliverables:

  • Initial recommendations for review by the Executive Committee

  • Final recommendations for review by the Board of Trustees

• Paul shared a slide with the three elements of an Information Privacy Program:

  • Data Security-the physical and logical protection against authorization access,

  • Data Privacy-Internal policies and procedures to protect how data is used and shared (SOX / SOC 2), and

  • Data Segregation / Segmentation-Limiting what information is contained in data exports and shared outside the organization.

• A discussion was held about CIECA’s role in all three of the above and it was suggested that Data Segregation is an area where CIECA has potential to provide input to the industry. All agreed.

• Paul mentioned that there has been some confusion in the industry about CIECA’s role in these areas. Information included on CIECA’s website that might have been confusing or misleading to some, has since been taken down. The committee said that it might be helpful to have a statement on the website about CIECA’s position in these areas and recommend companies contact their department and also provide a link to resources for more information. Phil and Lance were going to look into this.

• The committee’s charter was discussed next.

  • Mission

    • Identify what role CIECA can realistically play in the area of Information Privacy

      • Develop recommendations for CIECA’s position on the topics of

        • Data Security

        • Data Privacy

        • Data Segregation / Segmentation

  • Problem Statement

    • There are misunderstandings within the industry on what role CIECA plays as it relates to Data Security, Privacy and Segregation.

      Information Privacy has evolved greatly in the last 20 years. We need to be more precise and clear in our terminology and definitions as it relates to the topics of data security, privacy and segregation.

Scope:

• The scope is CIECA’s position / role as it relates to Data Segregation.

• Keep the scope narrow to what CIECA can do and not take on the broader role of education

Not in scope:

• Any security or information privacy related topics that go beyond those areas that CIECA can directly influence.

  • Not in scope:

    • Any security or information privacy related topics that go beyond those areas that CIECA can directly influence.

    • There are misunderstandings within the industry on what role CIECA plays as it relates to Data Security, Privacy and Segregation.

      Information Privacy has evolved greatly in the last 20 years. We need to be more precise and clear in our terminology and definitions as it relates to the topics of data security, privacy and segregation.

       

      All segments are being changed and driven by digitalization. This digitalization creates new companies, new data sources, new data, new business concepts, new workflows and new data sharing requirements that will require new data sharing standards.  

      This committee will attempt to bring together companies and individuals from all segments to gather feedback and then document the data, workflows and data sharing requirements that enables commerce, communication and connectivity between all segments..

       

      This committee will also help enhance CIECA messages and code lists and help build relationships to resolve issues outside of CIECA. 

  • Outcomes this Committee would like to see

    • Potential Output of Committee

      • White Papers may be included in the outcome

      • The outcome may be development of new sub committees or activation of current committees to develop standards.

      • Business Data flow will help identify the messages, actors and the data that we need standards for.

      • Code List

      • Messages

      • Data Standards

      • Anything else that comes up in the committee

😁 Great Kickoff Meeting Everyone and thank you for your participation and support. Have a Great Week!

Up Next

• Antitrust Agreement and Meeting minutes acceptance

• I

Action items

•  Send a reoccurring invite out to committee
•  Paul to work with co-chairs Steve and Lance to develop a first draft of a position
•  Lance & Phil to research good generic industry resources for Data Security & Information Privacy

Decisions