<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Cambria;
panose-1:2 4 5 3 5 4 6 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:57948382;
mso-list-template-ids:-1165076784;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Yeah, definitely although that might be too broad which is why I was glad you posted what you did. Let’s get a little more granular<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> h.raiche@internode.on.net [mailto:h.raiche@internode.on.net]
<br>
<b>Sent:</b> Tuesday, July 10, 2018 9:44 PM<br>
<b>To:</b> Jonathan Zuck <JZuck@innovatorsnetwork.org>; h.raiche@internode.on.net; ALAC List <alac@atlarge-lists.icann.org>; A t <staff@atlarge.icann.org><br>
<b>Subject:</b> Re: [ALAC] Draft Principles for GDPR<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">Thanks Jonathan<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Agreed. And as soon as there is an agreed wiki for this, please put your comments there.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">(I find that putting ANYTHING down on paper (so to speak) makes it easier for others to comment - so the more text we put down, the better)<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Holly<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Would other principels be something like:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">general agreement with the TempSec?<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal"><br>
----- Original Message -----<o:p></o:p></p>
<div>
<div>
<p class="MsoNormal" style="background:#E4E4E4"><b>From:<o:p></o:p></b></p>
</div>
<p class="MsoNormal" style="background:#E4E4E4">"Jonathan Zuck" <<a href="mailto:JZuck@innovatorsnetwork.org">JZuck@innovatorsnetwork.org</a>><o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><b>To:<o:p></o:p></b></p>
</div>
<p class="MsoNormal">"<a href="mailto:h.raiche@internode.on.net">h.raiche@internode.on.net</a>" <<a href="mailto:h.raiche@internode.on.net">h.raiche@internode.on.net</a>>, "ALAC List" <<a href="mailto:alac@atlarge-lists.icann.org">alac@atlarge-lists.icann.org</a>>,
"A t" <<a href="mailto:staff@atlarge.icann.org">staff@atlarge.icann.org</a>><o:p></o:p></p>
<div>
<p class="MsoNormal"><b>Cc:<o:p></o:p></b></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><b>Sent:<o:p></o:p></b></p>
</div>
<p class="MsoNormal">Tue, 10 Jul 2018 21:27:15 +0000<o:p></o:p></p>
<div>
<p class="MsoNormal"><b>Subject:<o:p></o:p></b></p>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt">Re: [ALAC] Draft Principles for GDPR<br>
<br>
<o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Thanks Holly for getting this started. I guess what we’re after are some basic principles on our
<i>perspective</i> on the GDPR. The temp spec is the temp spec so some of this will apply for sure, if we reach some consensus on these but there are areas that are simply part of the law over which we don’t have influence. A principle might be something like<o:p></o:p></p>
<p> <o:p></o:p></p>
<ol start="1" type="1">
<li class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1">
The ALAC feels responsible to represent the interests of non-registrants more so than registrants as they represent the majority of users.<o:p></o:p></li></ol>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">I’m not saying we’ve agreed to that but that’s the kind of filter we could send our reps in with?<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Jonathan<o:p></o:p></p>
<p> <o:p></o:p></p>
<p> <o:p></o:p></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><span style="font-size:12.0pt;color:black">From:
</span></b><span style="font-size:12.0pt;color:black">ALAC <<a href="mailto:alac-bounces@atlarge-lists.icann.org">alac-bounces@atlarge-lists.icann.org</a>> on behalf of "<a href="mailto:h.raiche@internode.on.net">h.raiche@internode.on.net</a>" <<a href="mailto:h.raiche@internode.on.net">h.raiche@internode.on.net</a>><br>
<b>Reply-To: </b>"<a href="mailto:h.raiche@internode.on.net">h.raiche@internode.on.net</a>" <<a href="mailto:h.raiche@internode.on.net">h.raiche@internode.on.net</a>><br>
<b>Date: </b>Tuesday, July 10, 2018 at 5:22 PM<br>
<b>To: </b>ALAC List <<a href="mailto:alac@atlarge-lists.icann.org">alac@atlarge-lists.icann.org</a>>, A t <<a href="mailto:staff@atlarge.icann.org">staff@atlarge.icann.org</a>><br>
<b>Subject: </b>[ALAC] Draft Principles for GDPR</span><o:p></o:p></p>
</div>
<div>
<p> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Folks<o:p></o:p></p>
</div>
<div>
<p> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Since we all think principles are a good idea, I have set down the basics from the Temporary Spec - very simplistic, but it's a start. What we need now is discussion on the principles.<o:p></o:p></p>
</div>
<div>
<p> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Evin - I'm not sure if you have a new wiki page for discussion on the temporary spec, but if not, would you create on.<o:p></o:p></p>
</div>
<div>
<p> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">And Olivier - the Temporary Spec necessarily will deal with access - at the least, guiding principles, so whoever is on the EPDP will have some guidance on our red lines on access.<o:p></o:p></p>
</div>
<div>
<p> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">So please everyone - comments<o:p></o:p></p>
</div>
<div>
<p> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Thanks<o:p></o:p></p>
</div>
<div>
<p> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Holly<o:p></o:p></p>
</div>
<div>
<p> <o:p></o:p></p>
</div>
<div>
<p style="margin-bottom:.1pt"><b><span style="font-size:16.0pt">Temporary Specification for gTLD Registration Data
</span></b><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b>Principles for requirements to replace the RAA/Registry Requirements</b><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><i>(within the context of compliance with the GDPR)</i><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><i> </i><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b>Purpose of Collection of Data</b><o:p></o:p></p>
<p style="margin-bottom:.1pt"><span style="font-size:12.0pt;font-family:"Cambria",serif">Quoting from the Temporary Spec – which is quoting from the ICANN Bylaws:</span><o:p></o:p></p>
<p style="margin-bottom:.1pt"><i><span style="font-size:12.0pt;font-family:"Cambria",serif">purpose is to coordinate the bottom-up, multistakeholder development and implementation of policies “[f]or which uniform or coordinated resolution is reasonably necessary
to facilitate the openness, interoperability, resilience, security and/or stability of the DNS including, with respect to gTLD registrars and registries”
</span></i><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><i>Purpose includes</i><o:p></o:p></p>
<p style="mso-margin-top-alt:5.0pt;margin-right:0in;margin-bottom:.1pt;margin-left:.5in;text-indent:-.25in">
<span style="font-family:Symbol">·</span><span style="font-size:7.0pt;font-family:"Times New Roman",serif">
</span><span style="font-size:12.0pt;font-family:"Cambria",serif"></span><span style="font-size:12.0pt;font-family:"Cambria",serif"> resolution of disputes regarding the registration of domain names (as opposed to the use of such domain names, but including
where such policies take into account use of the domain names); </span><o:p></o:p></p>
<p style="mso-margin-top-alt:5.0pt;margin-right:0in;margin-bottom:.1pt;margin-left:.5in;text-indent:-.25in">
<span style="font-family:Symbol">·</span><span style="font-size:7.0pt;font-family:"Times New Roman",serif">
</span><span style="font-size:12.0pt;font-family:"Cambria",serif"></span><span style="font-size:12.0pt;font-family:"Cambria",serif"> maintenance of and access to accurate and up-to-date information concerning registered names and name servers;
</span><o:p></o:p></p>
<p style="mso-margin-top-alt:5.0pt;margin-right:0in;margin-bottom:.1pt;margin-left:.5in;text-indent:-.25in">
<span style="font-family:Symbol">·</span><span style="font-size:7.0pt;font-family:"Times New Roman",serif">
</span><span style="font-size:12.0pt;font-family:"Cambria",serif"></span><span style="font-size:12.0pt;font-family:"Cambria",serif"> procedures to avoid disruptions of domain name registrations due to suspension or termination of operations by a registry
operator or a registrar (e.g., escrow); and </span><o:p></o:p></p>
<p style="mso-margin-top-alt:5.0pt;margin-right:0in;margin-bottom:.1pt;margin-left:.5in;text-indent:1476.8pt">
<span style="font-family:Symbol">·</span><span style="font-size:7.0pt;font-family:"Times New Roman",serif">
</span><span style="font-size:12.0pt;font-family:"Cambria",serif"></span><span style="font-size:12.0pt;font-family:"Cambria",serif"> the transfer of registration data upon a change in registrar sponsoring one or more registered names.
</span><o:p></o:p></p>
<p style="mso-margin-top-alt:5.0pt;margin-right:0in;margin-bottom:.1pt;margin-left:.5in">
<span style="font-size:12.0pt;font-family:"Cambria",serif"> </span><o:p></o:p></p>
<p style="mso-margin-top-alt:5.0pt;margin-right:0in;margin-bottom:.1pt;margin-left:.25in">
<span style="font-size:12.0pt;font-family:"Cambria",serif">the Bylaws specifically obligate ICANN, in carrying out its mandate, to “adequately address issues of competition, consumer protection, security, stability and resiliency, malicious abuse issues, sovereignty
concerns, and rights protection” </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><i> </i><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b>Geographic Coverage of EPDP Outcome:</b><o:p></o:p></p>
<p class="MsoListParagraph" style="text-indent:-.25in"><span style="font-family:Symbol">·</span><span style="font-size:7.0pt;font-family:"Times New Roman",serif">
</span>Apply globally <b>or</b><o:p></o:p></p>
<p class="MsoListParagraph" style="text-indent:-.25in"><span style="font-family:Symbol">·</span><span style="font-size:7.0pt;font-family:"Times New Roman",serif">
</span>Apply only to European Economic Area (the coverage of the GD<br>
R) and otherwise lesser requirements (existing RAA requirements?)<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b>Data Collected</b><o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:.75in;text-indent:-.25in"><span style="font-family:Symbol">·</span><span style="font-size:7.0pt;font-family:"Times New Roman",serif">
</span>‘Thick Whois” – based on the differing uses of the data is listed in the purpose above – OR<o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:.75in;text-indent:-.25in"><span style="font-family:Symbol">·</span><span style="font-size:7.0pt;font-family:"Times New Roman",serif">
</span>Some lesser amount of information<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b>Consent</b><o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:.75in;text-indent:-.25in"><span style="font-family:Symbol">·</span><span style="font-size:7.0pt;font-family:"Times New Roman",serif">
</span>Registrants must be told, at the time of collection, what personal information is collected, why the collection is necessary to achieve the purposes, who will have access and in what circumstances access will be given to what information, and all circumstances
in which the data will be transferred (to Registry, Escrow) and where heldThey must also be told their consent can be withdrawn at any time (and consequences of withdrawal) and how to withdraw consent<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b>Access to Data – Tiered access (largely what is in the Technical Specification)</b><o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:.75in;text-indent:-.25in"><span style="font-family:Symbol">·</span><span style="font-size:7.0pt;font-family:"Times New Roman",serif">
</span>Applies to all Registrants – natural or corporate persons<o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:.75in;text-indent:-.25in"><span style="font-family:Symbol">·</span><span style="font-size:7.0pt;font-family:"Times New Roman",serif">
</span>Information generally publicly available<o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:1.25in;text-indent:-.25in"><span style="font-family:"Courier New"">o</span><span style="font-size:7.0pt;font-family:"Times New Roman",serif">
</span>Registrant name<o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:1.25in;text-indent:-.25in"><span style="font-family:"Courier New"">o</span><span style="font-size:7.0pt;font-family:"Times New Roman",serif">
</span>Anonymised email or other anonymous contact means<o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:.75in;text-indent:-.25in"><span style="font-family:Symbol">·</span><span style="font-size:7.0pt;font-family:"Times New Roman",serif">
</span>Access to other personal information – <o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:1.25in;text-indent:-.25in"><span style="font-family:"Courier New"">o</span><span style="font-size:7.0pt;font-family:"Times New Roman",serif">
</span>Only to accredited entities (not individuals)– <o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:1.25in;text-indent:-.25in"><span style="font-family:"Courier New"">o</span><span style="font-size:7.0pt;font-family:"Times New Roman",serif">
</span>Only in specific circumstances that warrant access<o:p></o:p></p>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:12.0pt"><o:p> </o:p></p>
</div>
</blockquote>
</div>
</body>
</html>