18F/privacy-tools

[Sprint 4] Create a production data Google Spreadsheet

Closed this issue · 4 comments

What:
Create a production data Google Spreadsheet.

Why:
Our partners in the GSA privacy office want to interact with the PII Inventory data in a Google Spreadsheet.

Two open questions:

  • Do we need any data validation within the sheet?
  • How to present the PII fields:
    • Separate PII fields?
    • One PII field with comma separated terms?

Acceptance:

  • Sheet is owned by Richard and whoever he delegates.
  • It is accessible by our team still.
  • The Google Script can run on it.
  • Any needed data validation is set.
  • We've decided how to present the PII fields.
  • Get the spreadsheet whitelisted by emailing cloudlockinfo@gsa.gov
  • Make Richard the owner and see if it still all works.

How to learn about permissions:

  • Create a new spreadsheet.
  • Attach a simple script.
  • Transfer ownership of the sheet to a teammate.
  • See if the script still runs.

I've requested that cloudlock whitelist the spreadsheet itself.

I've also drafted an email to Richard and Marcela, that I'll send after the script gets whitelisted too.

Cloudlock replied. The spreadsheet doesn't need to be whitelisted unless it is shared domain wide as viewable without the link. They can't preemptively whitelist it either.

Richard is the owner and the script still works.