<div dir="ltr">Dear Olivier, <div><br></div><div>Thank you for sharing the update. </div><div><br></div><div>With regards, </div><div>Wale </div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Oct 19, 2017 at 7:55 AM, Olivier MJ Crépin-Leblond <span dir="ltr"><<a href="mailto:ocl@gih.com" target="_blank">ocl@gih.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF">
Hello all,<br>
<br>
since privacy is a major topic for EURALO ALSes - here's an update.<br>
<div class="m_1064544566231240650moz-forward-container"><br>
-------- Forwarded Message --------
<table class="m_1064544566231240650moz-email-headers-table" cellspacing="0" cellpadding="0" border="0">
<tbody>
<tr>
<th nowrap valign="BASELINE" align="RIGHT">Subject:
</th>
<td>[So-ac-sg-cleaders] Data Protection and Privacy Update -
ICANN Blog by Akram Atallah, Theresa Swinehart</td>
</tr>
<tr>
<th nowrap valign="BASELINE" align="RIGHT">Date: </th>
<td>Thu, 19 Oct 2017 00:45:16 +0000</td>
</tr>
<tr>
<th nowrap valign="BASELINE" align="RIGHT">From: </th>
<td>David Olive <a class="m_1064544566231240650moz-txt-link-rfc2396E" href="mailto:david.olive@icann.org" target="_blank"><david.olive@icann.org></a></td>
</tr>
<tr>
<th nowrap valign="BASELINE" align="RIGHT">To: </th>
<td><a class="m_1064544566231240650moz-txt-link-abbreviated" href="mailto:so-ac-sg-cleaders@icann.org" target="_blank">so-ac-sg-cleaders@icann.org</a>
<a class="m_1064544566231240650moz-txt-link-rfc2396E" href="mailto:so-ac-sg-cleaders@icann.org" target="_blank"><so-ac-sg-cleaders@icann.org></a></td>
</tr>
</tbody>
</table>
<br>
<br>
<div class="m_1064544566231240650WordSection1">
<p class="MsoNormal"><a href="https://www.icann.org/news/blog/data-protection-and-privacy-update" target="_blank">https://www.icann.org/news/<wbr>blog/data-protection-and-<wbr>privacy-update</a><u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><b><span style="font-size:24.0pt">Data Protection and Privacy
Update<u></u><u></u></span></b></p>
<p class="MsoNormal"><img id="m_1064544566231240650Picture_x0020_1" src="cid:part2.BF2FDE62.6BDD1914@gih.com" alt="ata
protection privacy update 753x425 18oct17 en" height="425" width="753" border="0"><u></u><u></u></p>
<p class="MsoNormal">There
has been a lot of activity since our last
<a href="https://www.icann.org/news/blog/data-protection-and-privacy-progress-update-and-next-steps" target="_blank">
update</a> on 11 September. Here's a brief recap on where we
are and a look-ahead at upcoming activities.<u></u><u></u></p>
<p class="MsoNormal">On
4 October we held a webinar to discuss data protection/privacy
activities related to the European Union's
<a href="http://ec.europa.eu/justice/data-protection/reform/index_en.htm" target="_blank">General Data Protection Regulation
(GDPR)</a>. If you missed it, we have published the
presentation, audio recordings and transcripts in multiple
languages, and responses to unanswered questions on our <a href="https://www.icann.org/dataprotectionprivacy" target="_blank">data protection/privacy page</a>. The
user story matrix can also be found on this page.<u></u><u></u></p>
<p class="MsoNormal">As
previously communicated, we engaged the European law firm
Hamilton to provide an independent legal analysis, that will
be developed in phases.<u></u><u></u></p>
<p class="MsoNormal">We
are pleased to note that the first part of the initial
independent legal analysis was
<a href="https://www.icann.org/en/system/files/files/gdpr-memorandum-part1-16oct17-en.pdf" target="_blank">
published</a> [PDF, 252 KB] today, which includes an
appendix with the general questions we provided to Hamilton as
"food for thought" in analyzing GDPR in relation to gTLD
registration data.<u></u><u></u></p>
<p class="MsoNormal">This
first memo focuses on potentially challenging areas with
existing requirements for registries and registrars to provide
open, publicly available WHOIS services. It provides a general
overview of key concepts in the GDPR (e.g. personal data,
consent, the role of data controllers and processers and data
protection authorities, etc.) and how these concepts relate to
gTLD WHOIS services.<u></u><u></u></p>
<p class="MsoNormal">The
memo highlights the complexity of these issues in the domain
name space, and concludes that the current open, publicly
available WHOIS services cannot remain unchanged. The WHOIS
system has to become adaptable to address the GDPR from the
European perspective, as well as other changing regulations
around the world.<u></u><u></u></p>
<p class="MsoNormal">Since
GDPR will likely effect how WHOIS data is displayed, it could
impact our ability to maintain a single global WHOIS system.
In turn, this will likely impact either ICANN's agreements or
its ability to enforce contractual compliance of its
agreements using a single and consistent approach. In the
short term, we need to work together to understand the scope
of this impact and find the right balance between maintaining
the current WHOIS services and compliance with local laws.<u></u><u></u></p>
<p class="MsoNormal">On
the engagement front we continued to interact with a range of
stakeholders to raise awareness about ICANN's privacy- and
data protection- related work. We participated in the annual <a href="https://www.privacyconference2017.org/eng/index.html" target="_blank">international DPAs conference</a> in
Hong Kong, the European Commission's High Level Group on
Internet Governance and the
<a href="https://www.centr.org/events/upcoming-events/58th-centr-general-assembly.html" target="_blank">
CENTR General Assembly</a> in Brussels, where GDPR was a
major topic of discussion. These events provided a further
opportunity to hear many perspectives and learn about existing
practices in this area.<u></u><u></u></p>
<p class="MsoNormal">Next
up is
<a href="https://meetings.icann.org/en/abudhabi60" target="_blank">ICANN60</a>, which will be held in
Abu Dhabi, and is just around the corner. We encourage you to
attend the cross-community
<a href="https://schedule.icann.org/event/CbHj/cross-community-session-general-data-protection-regulation-gdpr-implications-for-icann" target="_blank">
"General Data Protection Regulation (GDPR) Implications for
ICANN"</a> session, which is planned for Thursday, 2
November at 10:30am local time (UTC +4). Remote participation
is offered if you can't be there in person.<u></u><u></u></p>
<p class="MsoNormal"><b><span style="font-size:13.5pt">A Look Ahead<u></u><u></u></span></b></p>
<p class="MsoNormal">ICANN,
like many other organizations, is looking at the new
regulation to see how it is relevant and determine how best to
comply with the new framework with respect to the data we
collect and process for internal and external services, as
well as the implications for the ICANN community and its
policies and procedures more widely.<u></u><u></u></p>
<p class="MsoNormal">As
a reminder, this legal analysis is intended to serve as
building block for community discussions about how to approach
GDPR issues in the domain name space.<u></u><u></u></p>
<p class="MsoNormal">Here's
where we need help from the multistakeholder community:<u></u><u></u></p>
<p class="MsoNormal">Please
review the initial legal analysis and provide feedback. This
includes identifying possible questions, and how best to
interact with data protection agencies and others to get to
the next step of the analysis.<u></u><u></u></p>
<p class="MsoNormal">It
will be helpful to receive your feedback at the earliest
opportunity, so as to inform the upcoming discussions at
ICANN60, and to feed into future iterations of the legal
analysis. Either reach out to us directly or email <a href="mailto:gdpr@icann.org" target="_blank">gdpr@icann.org</a>.<u></u><u></u></p>
<p class="MsoNormal">For
those of you traveling to Abu Dhabi, we wish you safe travels
and look forward to seeing you in person. If you aren't making
the trip, we hope you will participate remotely.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt">David A.
Olive<br>
Senior Vice President<u></u><u></u></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-size:9.0pt">Policy Development Support</span><span style="font-size:9.0pt;font-family:"PMingLiU",serif"><br>
</span><span style="font-size:9.0pt">Internet Corporation
for Assigned Names and Numbers (ICANN)<u></u><u></u></span></p>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
</div>
</div>
<br>______________________________<wbr>_________________<br>
EURO-Discuss mailing list<br>
<a href="mailto:EURO-Discuss@atlarge-lists.icann.org">EURO-Discuss@atlarge-lists.<wbr>icann.org</a><br>
<a href="https://atlarge-lists.icann.org/mailman/listinfo/euro-discuss" rel="noreferrer" target="_blank">https://atlarge-lists.icann.<wbr>org/mailman/listinfo/euro-<wbr>discuss</a><br>
<br>
Homepage for the region: <a href="http://www.euralo.org" rel="noreferrer" target="_blank">http://www.euralo.org</a><br></blockquote></div><br></div>