Re: [sacm] [draft-ietf-sacm-requirements] Do we need a privacy section (#55)

I had another thought after I sent my last message that should be helpful as you develop language prior to IETF last call.  Make sure the privacy considerations are not country specific.  The IETF references will help with that.  If you use NIST's, you'll also need to look at guidance from other countries, and that can get tricky.

Thanks,
Kathleen 

Sent from my iPhone

> On Aug 7, 2015, at 5:38 PM, Jim Schaad <notifications@github.com> wrote:
> 
> Adam,
> 
> While it is true that we are focused on the single enterprise systems. I will be shocked if there are not third parties that will offer to do the monitoring on my behalf. This means that they are going to have to ability to look not only at the systems and users in my enterprise, but potentially compare them against systems and users in other enterprises.
> 
> Also, although we are looking at single enterprise systems, my ISP is a single enterprise and can do the monitoring against me and anybody in my enterprise.
> 
> —
> Reply to this email directly or view it on GitHub.
> 
> _______________________________________________
> sacm mailing list
> sacm@ietf.org
> https://www.ietf.org/mailman/listinfo/sacm