<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";
mso-fareast-language:EN-US;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0cm;
margin-right:0cm;
margin-bottom:0cm;
margin-left:36.0pt;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";
mso-fareast-language:EN-US;}
span.EmailStyle20
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle21
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle22
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle23
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle24
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle25
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:595.0pt 842.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body bgcolor="white" lang="EN-GB" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D">Dear </span><span style="font-size:11.0pt;color:#1F497D">Madam</span><span style="font-size:11.0pt;color:#1F497D">,</span><span style="font-size:11.0pt;color:#1F497D"> Sir,</span><span style="font-size:11.0pt;color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D">Please find attached the comments on behalf of the Data Protection Unit of the Council of Europe to the revised Procedure for Handling WHOIS Conflicts with Privacy Law.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D">Best regards,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D;mso-fareast-language:EN-GB">Peter Kimpian</span></b><span style="font-family:"Times New Roman","serif";color:#1F497D;mso-fareast-language:EN-GB">
<br>
</span><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:purple;mso-fareast-language:EN-GB">Data Protection Unit</span><span style="font-family:"Times New Roman","serif";color:#1F497D;mso-fareast-language:EN-GB">
<br>
</span><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:purple;mso-fareast-language:EN-GB">Human Rights and Rule of Law
<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="FR" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:purple;mso-fareast-language:EN-GB">CONSEIL DE L'EUROPE - COUNCIL OF EUROPE</span><span lang="FR" style="font-family:"Times New Roman","serif";color:#1F497D;mso-fareast-language:EN-GB">
<br>
</span><span lang="FR" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:purple;mso-fareast-language:EN-GB">tel : + 33(0) 3 90 21 58 51</span><span lang="FR" style="font-family:"Times New Roman","serif";color:#1F497D;mso-fareast-language:EN-GB">
<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="FR" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:purple;mso-fareast-language:EN-GB"><a href="http://www.coe.int/dataprotection"><span style="color:blue">www.coe.int/dataprotection</span></a></span><span lang="FR" style="font-family:"Times New Roman","serif";color:#1F497D;mso-fareast-language:EN-GB">
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D;mso-fareast-language:EN-GB"><img border="0" width="715" height="209" id="Picture_x0020_1" src="cid:image001.png@01D2E534.DB664B20" alt="cid:image003.png@01D27D7A.9C76A8F0"></span><span lang="EN-US" style="font-size:11.0pt;color:#1F497D;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif";mso-fareast-language:EN-GB">From:</span></b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif";mso-fareast-language:EN-GB">
<a href="mailto:gac-bounces@gac.icann.org">gac-bounces@gac.icann.org</a> [<a href="mailto:gac-bounces@gac.icann.org">mailto:gac-bounces@gac.icann.org</a>]
<b>On Behalf Of </b>Fabien Betremieux<br>
<b>Sent:</b> mercredi 14 juin 2017 13:06<br>
<b>To:</b> <a href="mailto:gac@icann.org">gac@icann.org</a>; <a href="mailto:gac-pswg@icann.org">
gac-pswg@icann.org</a><br>
<b>Subject:</b> [GAC] Update - Review of ICANN’s Procedure for Handling WHOIS Conflicts with Privacy Law<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:ZH-CN">Dear GAC and PSWG Members,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Times New Roman","serif""><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:ZH-CN">Please note that the Public Comment period below was extended to 7 July 2017.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:ZH-CN"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:ZH-CN">Best Regards<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:ZH-CN">Fabien</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:ZH-CN"> </span><o:p></o:p></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="color:black">From: </span></b><span style="color:black">Fabien Betremieux <<a href="mailto:fabien.betremieux@icann.org">fabien.betremieux@icann.org</a>><br>
<b>Date: </b>Wednesday, 17 May 2017 at 02:11<br>
<b>To: </b>"<a href="mailto:gac@icann.org">gac@icann.org</a>" <<a href="mailto:gac@icann.org">gac@icann.org</a>><br>
<b>Subject: </b>Review of ICANN’s Procedure for Handling WHOIS Conflicts with Privacy Law</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Times New Roman","serif""> </span><o:p></o:p></p>
</div>
<p class="MsoNormal"><span style="font-size:11.0pt">Dear GAC Members, </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">On 3 May, a <a href="https://www.icann.org/public-comments/whois-privacy-law-2017-05-03-en">
public comment period</a> was opened in connection with a <a href="https://gnso.icann.org/en/council/resolutions#20170216-1">
GNSO Council resolution</a> which called for ICANN to review the effectiveness of the recently revised
<a href="https://www.icann.org/resources/pages/whois-privacy-conflicts-procedure-2008-01-17-en">
Procedure for Handling WHOIS Conflicts with Privacy Law</a>. As you may be aware, this is happening in the context of the changing landscape in Data Protection Law around the world, in particular with the
<a href="http://ec.europa.eu/justice/data-protection/reform/index_en.htm">EU General Data Protection Regulation (GDPR).</a></span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">On 15 May, a <a href="https://www.icann.org/en/system/files/correspondence/atallah-to-schneider-12may17-en.pdf">
letter from the ICANN GDD President to the GAC Chair</a> was released on ICANN’s <a href="https://www.icann.org/resources/pages/correspondence">
Correspondence page</a>. In this letter, considering the GAC’s stated interest in these matters (most recently in the
<a href="https://gacweb.icann.org/display/gacweb/Governmental+Advisory+Committee">
Copenhagen Communiqué</a>), ICANN is inviting GAC comments on its <a href="https://www.icann.org/en/system/files/files/whois-privacy-conflicts-procedure-03may17-en.pdf">
staff paper</a>, including through participation of National Data Protection Agencies (DPA).
</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">The deadline for Public Comments is set to 12 June 2017.</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><u><span style="font-size:11.0pt">Additional Information: </span>
</u><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">The <a href="https://www.icann.org/resources/pages/whois-privacy-conflicts-procedure-2008-01-17-en">
Procedure for Handling WHOIS Conflicts with Privacy Law</a> is designed for contracted parties to request exemptions from their contracts with ICANN in case there is a conflict between their obligations and Privacy Laws. While it is in place since 2016, it
has never been used because it original trigger has been considered unrealistic: an entity would have to be under a judicial or administrative proceeding to benefit from it.</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Recognizing this, a first revision process was undertaken in 2015 and led to the addition of a new trigger. However, some contracted parties did not think this would be any more practical. In fact, as indicated
during the recent <a href="https://www.icann.org/gddsummit">ICANN GDD Summit</a>, Dutch new gTLD Registries (.AMSTERDAM, .FRL) reportedly had to breach their contract obligations to comply with Dutch Privacy Law for lack of meeting any of the triggers of this
procedure.</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">ICANN is now asking for GAC and DPAs input on 4 questions included in the staff paper (among others):</span><o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:54.0pt;text-indent:-18.0pt">1.<span style="font-size:7.0pt;font-family:"Times New Roman","serif"">
</span><i><span style="font-size:11.0pt">How feasible is it for data protection agencies to provide a party with a written statement indicating that a WHOIS obligation in an ICANN contract conflicts with national law?
</span></i><o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:54.0pt;text-indent:-18.0pt">2.<span style="font-size:7.0pt;font-family:"Times New Roman","serif"">
</span><i><span style="font-size:11.0pt">What type of evidence or documentation should a requesting party provide to the data protection agencies?
</span></i><o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:54.0pt;text-indent:-18.0pt">3.<span style="font-size:7.0pt;font-family:"Times New Roman","serif"">
</span><i><span style="font-size:11.0pt">What challenges, if any, will data protection agencies face in terms of providing a party with a written statement indicating that a WHOIS obligation in an ICANN contract conflicts with national law?
</span></i><o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:54.0pt;text-indent:-18.0pt">4.<span style="font-size:7.0pt;font-family:"Times New Roman","serif"">
</span><i><span style="font-size:11.0pt">What improvements or changes could be made to better engage data protection agencies in this process, i.e., Would direct contact with ICANN make the process more efficient?
</span></i><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Thank you for your attention</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Best Regards</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black">--</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black">Fabien Betremieux</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black">GAC Relations Advisor</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black">Policy Development Support | ICANN</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black">FR: +33 7 60 09 09 40 | US: +1 310 463 5334 | Skype: fabien.betremieux</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
</div>
</body>
</html>