Mr. Chair, there does indeed appear to be a degree of overlap or duplication, since CPC-27 applies generally and CPC-28 focuses on personal or de-identified information.
CPC-28 also introduces a concept of collective belief on behalf of the government entities involved, which is also not something I've encountered before. It could create some confusion about how to determine a group agreement on the question at hand.