<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Cyntia,<div class=""><br class=""></div><div class="">Just to be clear, the initial suggestion by Michael Palage incorporated in itself a mechanism, instead of relying on Privacy Shield. Perhaps Privacy Shield certification could be use to achieve some of its requirements in order to save for organizations already subscribed for it, instead of being the only option. </div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">Rubens</div><div class=""><br class=""><div class=""><div><br class=""><blockquote type="cite" class=""><div class="">Em 19 de jun de 2018, à(s) 14:58:000, Cyntia King <<a href="mailto:cking@modernip.com" class="">cking@modernip.com</a>> escreveu:</div><br class="Apple-interchange-newline"><div class=""><div class="WordSection1" style="page: WordSection1; caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Century Gothic", sans-serif; color: rgb(13, 13, 13);" class="">Easy for whom?<br class="">I'm a small business owner & this is daunting, to say the least.<br class="">And there are multiple fees involved.<o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Century Gothic", sans-serif; color: rgb(13, 13, 13);" class=""><o:p class=""> </o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Century Gothic", sans-serif; color: rgb(13, 13, 13);" class="">Are we suggesting that this should be ICANN’s enforcement mechanism for accessing Whois data? This would be on top of the accreditation & fees we’re already discussing, right?<o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Century Gothic", sans-serif; color: rgb(13, 13, 13);" class=""><o:p class=""> </o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Century Gothic", sans-serif; color: rgb(13, 13, 13);" class="">What about ‘foreign’ companies - are we asking non-US companies to self-certify w/ the Us govt?<o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Century Gothic", sans-serif; color: rgb(13, 13, 13);" class=""><o:p class=""> </o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Century Gothic", sans-serif; color: rgb(13, 13, 13);" class="">I don’t see how this solves much of anything, but it would certainly make accreditation more difficult & expensive.<o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Century Gothic", sans-serif; color: rgb(13, 13, 13);" class=""><o:p class=""> </o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Century Gothic", sans-serif; color: rgb(13, 13, 13);" class=""><o:p class=""> </o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><b class=""><span style="font-size: 12pt; font-family: "Century Gothic", sans-serif; color: rgb(13, 13, 13);" class="">Cyntia King<o:p class=""></o:p></span></b></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-family: "Century Gothic", sans-serif; color: rgb(13, 13, 13);" class="">O: +1 816.633.7647<o:p class=""></o:p></span></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-family: "Century Gothic", sans-serif; color: rgb(13, 13, 13);" class="">C: +1 818.209.6088<o:p class=""></o:p></span></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-family: "Century Gothic", sans-serif; color: rgb(13, 13, 13);" class=""><span id="cid:image001.jpg@01D407CD.35EF6AC0"><image001.jpg></span><o:p class=""></o:p></span></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Century Gothic", sans-serif; color: rgb(13, 13, 13);" class=""><o:p class=""> </o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Century Gothic", sans-serif; color: rgb(13, 13, 13);" class="">-----Original Message-----<br class="">From: Accred-Model <<a href="mailto:accred-model-bounces@icann.org" class="">accred-model-bounces@icann.org</a>> On Behalf Of Rubens Kuhl<br class="">Sent: Tuesday, June 19, 2018 12:48 PM<br class="">To: John R. Levine <<a href="mailto:johnl@iecc.com" class="">johnl@iecc.com</a>><br class="">Cc: <a href="mailto:accred-model@icann.org" class="">accred-model@icann.org</a><br class="">Subject: Re: [Accred-Model] Version 1.6 of the Accreditation and Access Model</div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Century Gothic", sans-serif; color: rgb(13, 13, 13);" class=""><o:p class=""> </o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Century Gothic", sans-serif; color: rgb(13, 13, 13);" class=""><o:p class=""> </o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Century Gothic", sans-serif; color: rgb(13, 13, 13);" class=""><o:p class=""> </o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Century Gothic", sans-serif; color: rgb(13, 13, 13);" class="">> Em 19 de jun de 2018, à(s) 14:32:000, John R. Levine <<a href="mailto:johnl@iecc.com" style="color: rgb(149, 79, 114); text-decoration: underline;" class=""><span style="color: rgb(13, 13, 13); text-decoration: none;" class="">johnl@iecc.com</span></a>> escreveu:<o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Century Gothic", sans-serif; color: rgb(13, 13, 13);" class="">><span class="Apple-converted-space"> </span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Century Gothic", sans-serif; color: rgb(13, 13, 13);" class="">>> It's great when there is actually an easy solution. At least for the many US companies, law firms, cybersecurity firms, and others (and this a huge part of the group seeking access), they should "self-certify" to the EU-US Privacy Shield, via procedures set up by the US Department of Commerce and Federal Trade Commission.<o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Century Gothic", sans-serif; color: rgb(13, 13, 13);" class="">><span class="Apple-converted-space"> </span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Century Gothic", sans-serif; color: rgb(13, 13, 13);" class="">> Well, at least until the EU courts kill privacy shield like they did Safe Harbor.<o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Century Gothic", sans-serif; color: rgb(13, 13, 13);" class="">><span class="Apple-converted-space"> </span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Century Gothic", sans-serif; color: rgb(13, 13, 13);" class="">> Banks and non-profits such as CAUCE are not eligible for Privacy Shield (they're not regulated by the FTC or DOT.) For small organizations the PS rules are extremely conplex and there's a mandatory annual payment to cover potential arbitration costs.<o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Century Gothic", sans-serif; color: rgb(13, 13, 13);" class="">><span class="Apple-converted-space"> </span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Century Gothic", sans-serif; color: rgb(13, 13, 13);" class="">> Can we back up and explain what problem this overcomplex "solution" is supposed to be solving here?<o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Century Gothic", sans-serif; color: rgb(13, 13, 13);" class=""><o:p class=""> </o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Century Gothic", sans-serif; color: rgb(13, 13, 13);" class=""><o:p class=""> </o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Century Gothic", sans-serif; color: rgb(13, 13, 13);" class="">Having redress mechanisms for data subjects that have their data privacy rights violated. With great power, there must also come great responsibility.<o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Century Gothic", sans-serif; color: rgb(13, 13, 13);" class=""><o:p class=""> </o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Century Gothic", sans-serif; color: rgb(13, 13, 13);" class=""><o:p class=""> </o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Century Gothic", sans-serif; color: rgb(13, 13, 13);" class=""><o:p class=""> </o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: "Century Gothic", sans-serif; color: rgb(13, 13, 13);" class="">Rubens</div></div></div></blockquote></div><br class=""></div></div></body></html>