<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"Century Gothic";
panose-1:2 11 5 2 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Arial","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:159663547;
mso-list-template-ids:-882857118;}
@list l0:level1
{mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level2
{mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level3
{mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level4
{mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level5
{mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level6
{mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level7
{mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level8
{mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level9
{mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1
{mso-list-id:386611107;
mso-list-template-ids:1571469614;}
@list l1:level1
{mso-level-start-at:2;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level2
{mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level3
{mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level4
{mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level5
{mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level6
{mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level7
{mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level8
{mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level9
{mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple" style="word-wrap: break-word;-webkit-nbsp-mode: space;line-break:after-white-space">
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial","sans-serif"">Hi Rubens,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial","sans-serif"">As far as standardized processes go, are you aware of any public examples that folks could look at?<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial","sans-serif"">I am aware e.g., of the Nominet
<a href="https://s3-eu-west-1.amazonaws.com/nominet-prod/wp-content/uploads/2018/05/22101442/Data-request-form.pdf" target="_blank">
Data Release Request</a></span><span style="font-size:10.0pt;font-family:"Arial","sans-serif""> which asks requestors to “explain who you are and the reason that you are requesting the non-public data”.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif"">Similarly, the EURid
<a href="https://eurid.eu/d/1236566/request_form_disclosure_personal_data_en.docx">
Personal Data Disclosure Form</a> requires requestors to describe “your legitimate interest regarding the disclosure of personal data; [and] how you intend to use the requested data”.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial","sans-serif"">These examples, as well as
</span><span style="font-size:10.0pt;font-family:"Arial","sans-serif"">v1.7 of the model being discussed on this list,
</span><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial","sans-serif"">go beyond the “Trust me I'm a lawyer” mischaracterization.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif"">Arguably going significantly beyond what these European ccTLDs require, version 1.7 of the A&A Model (at page 4) states inter alia that requestors should have “a specific and
delineated purpose for their access to and use of non-public data” and moreover that they should certify “that access to and use of non-public data is for a legitimate and lawful purpose and limited to the purpose for which it is sought.”<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif"">If there are other standardized models you (or others) are aware of, it would be helpful if you could share those to see if a set of best practices/request elements could be
pulled together.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif"">Thanks, and best regards,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif"">Brian
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Accred-Model [mailto:accred-model-bounces@icann.org]
<b>On Behalf Of </b>Rubens Kuhl<br>
<b>Sent:</b> Wednesday, July 25, 2018 11:03 PM<br>
<b>To:</b> accred-model@icann.org; gdpr@icann.org<br>
<b>Subject:</b> Re: [Accred-Model] Codes of conduct<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><br>
<br>
<o:p></o:p></p>
<div>
<p class="MsoNormal">On 25 Jul 2018, at 17:50, Cyntia King <<a href="mailto:cking@modernip.com">cking@modernip.com</a>> wrote:<o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Century Gothic","sans-serif";color:#0D0D0D">Agreed that the GDPR should empower Data Subjects to have more control over their PII.</span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Century Gothic","sans-serif";color:#0D0D0D">However, this isn’t the only consideration:</span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Century Gothic","sans-serif";color:#0D0D0D"> </span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<ol style="margin-top:0in" start="1" type="1">
<li class="MsoNormal" style="color:#0D0D0D;margin-bottom:6.0pt;mso-list:l0 level1 lfo1">
<span style="font-size:11.0pt;font-family:"Century Gothic","sans-serif"">The GDPR also states: “The right to the protection of personal data is not an absolute right; it must be considered in relation to its function in society and be balanced against other
fundamental rights, in accordance with the principle of proportionality.” (Recital 4)</span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""><o:p></o:p></span></li></ol>
<div style="margin-left:.5in">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Century Gothic","sans-serif";color:#0D0D0D">I think Rod’s suggestions are a good faith effort to achieve that proportionality.</span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div style="margin-left:.5in">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Century Gothic","sans-serif";color:#0D0D0D"> </span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<ol style="margin-top:0in" start="2" type="1">
<li class="MsoNormal" style="color:#0D0D0D;margin-bottom:6.0pt;mso-list:l1 level1 lfo2">
<span style="font-size:11.0pt;font-family:"Century Gothic","sans-serif"">In meetings w/ the European Commission (28-May-18), the commission said they shared the concerns of trademark rights advocates that there be standardized & predictable access to necessary
WHOIS information.</span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""><o:p></o:p></span></li></ol>
<p class="MsoListParagraph" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:6.0pt;margin-left:.5in">
<span style="font-size:11.0pt;font-family:"Century Gothic","sans-serif";color:#0D0D0D">I believe the Commission is aware that an ad hoc system of response is not only chaotic, but potentially unsafe.<span class="apple-converted-space"> </span></span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Century Gothic","sans-serif";color:#0D0D0D"> </span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Century Gothic","sans-serif";color:#0D0D0D">A consistent & reliable system that balances the privacy rights of certain individuals against the threat of harm to (potentially countless) others,
will be a difficult - but not impossible - balancing act.</span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Century Gothic","sans-serif";color:#0D0D0D"> </span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">A system that grants more access than a situation allows under GDPR is also problematic. So when going from ad hoc to standardised, the standard can't have less information than would be required in ad hoc mode, specially information specific
to that request, like a power-of-attorney from an specific brand holder. Simply saying "Trust me I'm a lawyer" doesn't cut it.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Rubens<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Rubens<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
<table border="0" cellpadding="0" cellspacing="0" style="width:285px">
<tbody>
<tr>
<td style="text-align:left; vertical-align:top; width:8px"> </td>
<td style="text-align:left; vertical-align:center; width:103px"><a href="http://www.wipo.int/gii/?utm_source=wipomail&utm_medium=signature&utm_campaign=gii2018" style="text-decoration: none;"><img alt="The image of the 2018 GII cover shows crashing waves captured within the outline of a battery cell, representing the raw power of innovation." height="59" id="" src="http://www.wipo.int/export/sites/www/shared/pics/gii_2018_icon_sm.png" width="103"></a></td>
<td style="text-align:left; vertical-align:top; width:10px"> </td>
<td style="text-align:left; vertical-align:top; width:157px"><span style="color:#054356; font-size:20px"><strong><span style="font-family:helvetica,arial">GLOBAL</span></strong></span><br>
<span style="color:#054356; font-size:20px"><strong><span style="font-family:arial,helvetica,sans-serif">INNOVATION</span></strong></span><br>
<span style="color:#054356"><span style="font-family:arial,helvetica,sans-serif"><strong><span style="font-size:20px">INDEX</span>
</strong></span></span><strong><span style="font-size:20px"><span style="color:#2d9ec0"><span style="font-family:arial,helvetica,sans-serif">2018</span></span></span></strong></td>
<td style="text-align:left; vertical-align:top; width:10px"> </td>
</tr>
</tbody>
</table>
<table border="0" cellspacing="0" cellpadding="0" style="width:285px">
<tbody>
<tr>
<td style="text-align:left; vertical-align:top; width:8px"> </td>
<td style="text-align:left; vertical-align:top; width:" 267px?=""><span style="color:#054356; font-size:16px"><span style="font-family:arial,helvetica,sans-serif">Energizing the World with Innovation</span></span></td>
<td style="text-align:left; vertical-align:top; width:10px"> </td>
</tr>
</tbody>
</table>
<table border="0" cellspacing="0" cellpadding="0" style="width:285px">
<tbody>
<tr>
<td style="text-align:left; vertical-align:top; width:8px"> </td>
<td style="text-align:left; vertical-align:top; width:113px"><span style="color:#2d9ec0; font-size:11px"><span style="font-family:arial,helvetica,sans-serif">Launch July 10</span></span></td>
<td style="text-align:left; vertical-align:top; width:87px"><a href="http://www.wipo.int/gii/?utm_source=wipomail&utm_medium=signature&utm_campaign=gii2018" style="text-decoration: none;"><span style="color:#2d9ec0; font-size:11px"><span style="font-family:arial,helvetica,sans-serif">www.wipo.int/gii</span></span></a></td>
<td style="text-align:right; vertical-align:top; width:59px">
<div align="right"><span style="color:#2d9ec0; font-size:11px"><span style="font-family:arial,helvetica,sans-serif">#GII2018</span></span></div>
</td>
<td style="text-align:left; vertical-align:top; width:18px"> </td>
</tr>
</tbody>
</table>
<p> </p>
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;
mso-fareast-font-family:"Times New Roman"">World Intellectual Property Organization Disclaimer: This electronic message may contain privileged, confidential and copyright protected
information. If you have received this e-mail by mistake, please immediately notify the sender and delete this e-mail and all its attachments. Please ensure all e-mail attachments are scanned for viruses prior to opening or using.
<o:p></o:p></span></p>
</div>
</body>
</html>