CITZ Digital Office - Azure Secondary Review and Completion Process

[bspeersbcgov]

Describe the issue Privacy review of Azure services as they pertain to the Common Components PIA.

Additional context Azure stands as a platform for a wide-range of services across government. There is a new Azure landing page that warrants additional analysis.

In order to ensure privacy best practices are followed for each tool an additional secondary review process will be required to walk through this tool.

This steps focus on all the secondary review processes for the above completed review.

How does this benefit the users of our platform? Users of our platform can make use of this assessment to help build program and use-case specific assessments. This assessment is also necessary for legal review of any new Azure agreement terms, particularly for any AI tools.

Definition of done Completed review from CPO and Legal, including updates and any required sign-off.

Deliverables

• [x] Gather Azure use cases and info from program area
• [x] Develop Azure assessment draft
• [x] Review assessment with program
• [x] Develop final advice and guidance
• [x] Provide assessment to CPO for any review and filing
• [x] Provide findings to affected programs and users

[bspeersbcgov]

Completed, will need revisions over time