<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body dir="auto">
<div dir="auto">Dear Councillors,</div>
<div dir="auto"><br>
</div>
<div dir="auto">FYI. For those who may not be aware of the following you may want to have a look at the following revised directive.</div>
<div dir="auto"><br>
</div>
<div dir="auto">Thanks Steve for putting this together.</div>
<div dir="auto"><br>
</div>
<div dir="auto">Regards,</div>
<div id="composer_signature" dir="auto"><br>
</div>
<div id="new_signature" dir="auto">Philippe</div>
<div id="new_signature" dir="auto"><br>
</div>
<div dir="auto"><br>
</div>
<div><br>
</div>
<div align="left" dir="auto" style="font-size:100%;color:#000000">
<div>-------- Message d'origine --------</div>
<div>De : Steve Chan <steve.chan@icann.org> </div>
<div>Date : 16/12/2020 20:55 (GMT+01:00) </div>
<div>À : gnso-chairs@icann.org </div>
<div>Objet : [gnso-chairs] Directive on Security of Network and Information Systems (NIS 2 Directive)
</div>
<div><br>
</div>
</div>
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt">Hi Philippe, Pam, Tanya,</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">You may already be aware, but we thought you might welcome being informed of a revised Directive published today by the European Commission, which will still be subject to much discussion and negotiation:
<a href="https://ec.europa.eu/digital-single-market/en/news/proposal-directive-measures-high-common-level-cybersecurity-across-union">
https://ec.europa.eu/digital-single-market/en/news/proposal-directive-measures-high-common-level-cybersecurity-across-union</a>. It may be relevant to the work of the GNSO, see Article 23 in particular:</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span></p>
<p style="text-align:center" align="center" class="MsoNormal"><span style="font-size:11.0pt; color:black">Article 23</span><span style="font-family:"Times New Roman",serif; color:black"></span></p>
<p style="text-align:center" align="center" class="MsoNormal"><span style="font-size:11.0pt; color:black">Databases of domain names and registration data</span><span style="font-family:"Times New Roman",serif; color:black"></span></p>
<p style="text-align:center" align="center" class="MsoNormal"><span style="font-size:11.0pt; color:black"> </span><span style="font-family:"Times New Roman",serif; color:black"></span></p>
<p style="margin-left:.5in" class="MsoNormal"><span style="font-size:11.0pt; color:black">1. For the purpose of contributing to the security, stability and resilience of the DNS, Member States shall ensure that TLD registries and the entities providing domain
name registration services for the TLD shall collect and maintain accurate and complete domain name registration data in a dedicated database facility with due diligence subject to Union data protection law as regards data which are personal data. </span><span style="font-family:"Times New Roman",serif; color:black"></span></p>
<p style="margin-left:.5in" class="MsoNormal"><span style="font-size:11.0pt; color:black"> </span><span style="font-family:"Times New Roman",serif; color:black"></span></p>
<p style="margin-left:.5in" class="MsoNormal"><span style="font-size:11.0pt; color:black">2. Member States shall ensure that the databases of domain name registration data referred to in paragraph 1 contain relevant information to identify and contact the holders
of the domain names and the points of contact administering the domain names under the TLDs.</span><span style="font-family:"Times New Roman",serif; color:black"></span></p>
<p style="margin-left:.5in" class="MsoNormal"><span style="font-size:11.0pt; color:black"> </span><span style="font-family:"Times New Roman",serif; color:black"></span></p>
<p style="margin-left:.5in" class="MsoNormal"><span style="font-size:11.0pt; color:black">3. Member States shall ensure that the TLD registries and the entities providing domain name registration services for the TLD have policies and procedures in place to
ensure that the databases include accurate and complete information. Member States shall ensure that such policies and procedures are made publicly available.</span><span style="font-family:"Times New Roman",serif; color:black"></span></p>
<p style="margin-left:.5in" class="MsoNormal"><span style="font-size:11.0pt; color:black"> </span><span style="font-family:"Times New Roman",serif; color:black"></span></p>
<p style="margin-left:.5in" class="MsoNormal"><span style="font-size:11.0pt; color:black">4. Member States shall ensure that the TLD registries and the entities providing domain name registration services for the TLD publish, without undue delay after the registration
of a domain name, domain registration data which are not personal data.</span><span style="font-family:"Times New Roman",serif; color:black"></span></p>
<p style="margin-left:.5in" class="MsoNormal"><span style="font-size:11.0pt; color:black"> </span><span style="font-family:"Times New Roman",serif; color:black"></span></p>
<p style="margin-left:.5in" class="MsoNormal"><span style="font-size:11.0pt; color:black">5. Member States shall ensure that the TLD registries and the entities providing domain name registration services for the TLD provide access to specific domain name registration
data upon lawful and duly justified requests of legitimate access seekers, in compliance with Union data protection law. Member States shall ensure that the TLD registries and the entities providing domain name registration services for the TLD reply without
undue delay to all requests for access. Member States shall ensure that policies and procedures to disclose such data are made publicly available.</span><span style="font-family:"Times New Roman",serif; color:black"></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; color:black"> </span><span style="font-family:"Times New Roman",serif; color:black"></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; color:black">Once the NIS2 Directive proposal is agreed upon and consequently adopted, Member States will have to transpose it within 18 months. I will leave it up to you three to determine if this should
be forwarded to the full Council list.</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; color:black"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; color:black">Best,</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; color:black">Steve</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; color:black"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; color:black"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt">Steven Chan</span></b><b><span style="font-size:11.0pt; font-family:"MS Gothic"">
</span></b><b><span style="font-size:11.0pt"></span></b></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Senior Director, GNSO Support</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; color:black"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; color:black">Internet Corporation for Assigned Names and Numbers (ICANN) </span><span style="font-size:11.0pt"></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">12025 Waterfront Drive, Suite 300</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Los Angeles, CA 90094-2536</span><span style="font-size:11.0pt; font-family:"MS Gothic"">
</span><span style="font-size:11.0pt"></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">
</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Email: <a href="mailto:steve.chan@icann.org">
<span style="color:#0563C1">steve.chan@icann.org</span></a></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Skype: steve.chan55</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Mobile: +1.310.339.4410</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; color:black">Find out more about the GNSO by visiting: <a title="https://urldefense.proofpoint.com/v2/url?u=https-3A__learn.icann.org_&d=DwMGaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=DRa2dXAvSFpCIgmkXhFzL7ar9Qfqa0AIgn-H4xR2EBk&m=jLNFXvpu9gNdUeHi-G6sjWNCF9w4_AwhzzUDFZy2elE&s=o7Auz997kA-HPv9PHJCjFVZw7Pgo8krw4Mxf" href="https://urldefense.proofpoint.com/v2/url?u=https-3A__learn.icann.org_&d=DwMGaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=DRa2dXAvSFpCIgmkXhFzL7ar9Qfqa0AIgn-H4xR2EBk&m=jLNFXvpu9gNdUeHi-G6sjWNCF9w4_AwhzzUDFZy2elE&s=o7Auz997kA-HPv9PHJCjFVZw7Pgo8krw4MxfqCwBrIU&e="><span style="color:#0563C1">https://learn.icann.org/</span></a></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; color:black">Follow @GNSO on Twitter: <a title="https://urldefense.proofpoint.com/v2/url?u=https-3A__twitter.com_ICANN-5FGNSO&d=DwMGaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=DRa2dXAvSFpCIgmkXhFzL7ar9Qfqa0AIgn-H4xR2EBk&m=jLNFXvpu9gNdUeHi-G6sjWNCF9w4_AwhzzUDFZy2elE&s=kWw4fQPNjw2lVKy1UjTxS2F0BmjE" href="https://urldefense.proofpoint.com/v2/url?u=https-3A__twitter.com_ICANN-5FGNSO&d=DwMGaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=DRa2dXAvSFpCIgmkXhFzL7ar9Qfqa0AIgn-H4xR2EBk&m=jLNFXvpu9gNdUeHi-G6sjWNCF9w4_AwhzzUDFZy2elE&s=kWw4fQPNjw2lVKy1UjTxS2F0BmjEAzaDFWNmsYywbmE&e="><span style="color:#0563C1">https://twitter.com/ICANN_GNSO</span></a></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; color:black">Transcripts and recordings of GNSO Working Group and Council events are located on the <a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__gnso.icann.org_en_group-2Dactivities_calendar&d=DwMGaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=DRa2dXAvSFpCIgmkXhFzL7ar9Qfqa0AIgn-H4xR2EBk&m=jLNFXvpu9gNdUeHi-G6sjWNCF9w4_AwhzzUDFZy2elE&s=-L6chFfv0OperrXHHpTF722WnH3FZIutn4cS16IvpOg&e="><span style="color:#0563C1">GNSO
Master Calendar</span><span style="color:#954F72"> </span></a></span></p>
</div>
<PRE>_________________________________________________________________________________________________________________________
Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.
This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
Thank you.
</PRE></body>
</html>