<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Times New Roman \(Body CS\)";
panose-1:2 11 6 4 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1173185618;
mso-list-type:hybrid;
mso-list-template-ids:526533698 -667624998 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l0:level1
{mso-level-start-at:5;
mso-level-number-format:bullet;
mso-level-text:\F06E ;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;
mso-fareast-font-family:Calibri;
mso-bidi-font-family:Calibri;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:\F0A7 ;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:\F0B7 ;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7 ;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:\F0B7 ;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7 ;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style>
</head>
<body lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:12.0pt">Please accept this comment from the CANN Business Constituency (BC), regarding the
<a href="https://www.about.us/policies/ustld-stakeholder-council/ustld-privacy-recommendation">
comment opportunity on the .us TLD privacy plan</a>.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">The BC appreciates the details shared by the Stakeholder Council on its plan to allow .US domain name registrants to use a registry-level privacy service.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">We believe the importance of this proposed policy and its potential impact on BC members and Internet users justifies calling out the following 3 high level concerns. </span><span style="font-size:12.0pt"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">First, As you know the ICANN community has been busy setting several policies related to WHOIS data, including the Privacy/Proxy Service Accreditation Issues (PPSAI) Policy and the various policies
related to bringing the ICANN WHOIS system in line with the EU’s GDPR (a.k.a the Phase 1 and Phase 2 EPDP). As such we feel the
</span><span style="font-size:12.0pt"><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.about.us_assets_us-2Dprivacy-2Dservices-2Dplan-2DPUBLIC-2DCOMMENT-2D2016-2DDec-2D14.pdf&d=DwMFaQ&c=XRWvQHnpdBDRh-yzrHjqLpXuHNC_9nanQc6pPG_SpT0&r=eKUxmgsVmOm8t0ie_17sBbRQFRMaduKLJTinJPAvqdE&m=2hSaEKdr0c2IINol_zR3rmuCw1W64dvIiyqNqzGRirA&s=vgjCQjwSzuGhLoTapwaSP417WeknS4KLer73Y7xqKT4&e=">.US
Based Registry Privacy Service Plan</a><span style="color:black">, which we note was drafted in September 2016, should be updated and be informed by both the PPSAI and EPDP policies. For example, we note that the proposed Whois output column in Appendix
A goes far beyond what is even specified in the EPDP Phase 1 report. At a minimum the full contact details of the .US privacy service should be published / displayed. </span><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">Second, given the importance the role contactability of the registrant behind the privacy services plays in mitigating abuse, we would like to see standardization of the email address published
in the Whois response and suggest an email address similar to the following would be helpful: <.us domain name>@</span><span style="font-size:12.0pt"><a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__privateregistration.us&d=DwMFaQ&c=XRWvQHnpdBDRh-yzrHjqLpXuHNC_9nanQc6pPG_SpT0&r=eKUxmgsVmOm8t0ie_17sBbRQFRMaduKLJTinJPAvqdE&m=2hSaEKdr0c2IINol_zR3rmuCw1W64dvIiyqNqzGRirA&s=GiiV2N3Wa5IQpGcjo0p7dsG75EtNsilbTve-4tLuQAk&e=">privateregistration.us</a><span style="color:black">
(e.g. </span><a href="mailto:example.us@privateregistration.us">example.us@privateregistration.us</a><span style="color:black">)</span><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">Third, detail on how both private 3rd parties and law enforcement agencies request access to registrant data from the privacy service is inadequate. Any privacy service policy must detail, at
a minimum, how requests can be made, what information is required and the timeline requestors should expect for a response. In addition, our initial read of the .US Registry Based Privacy Service Plan seemed to be focused solely on the release of information
to Law Enforcement Agencies (LEA). Upon closer reading we do note that private parties and LEA are included, so we urge the council to update the language to ensure clarity in this regard. </span><span style="font-size:12.0pt"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">In conclusion, given the issues touched upon above, it is our view that
<b>more work is required</b> before this policy is implemented for .US registrants.</span><span style="font-size:12.0pt"><o:p></o:p></span></p>
<div>
<div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt">Sincerely,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt">Steve DelBianco<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt">Vice chair for policy coordination<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt">ICANN Business Constituency (BC)
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
</div>
</div>
</div>
</div>
</div>
</body>
</html>