<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
p.MsoFootnoteText, li.MsoFootnoteText, div.MsoFootnoteText
{mso-style-priority:99;
mso-style-link:"Footnote Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Calibri",sans-serif;}
span.MsoFootnoteReference
{mso-style-priority:99;
vertical-align:super;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:8.0pt;
margin-left:.5in;
mso-add-space:auto;
line-height:106%;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.MsoListParagraphCxSpFirst, li.MsoListParagraphCxSpFirst, div.MsoListParagraphCxSpFirst
{mso-style-priority:34;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
mso-add-space:auto;
line-height:106%;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.MsoListParagraphCxSpMiddle, li.MsoListParagraphCxSpMiddle, div.MsoListParagraphCxSpMiddle
{mso-style-priority:34;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
mso-add-space:auto;
line-height:106%;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.MsoListParagraphCxSpLast, li.MsoListParagraphCxSpLast, div.MsoListParagraphCxSpLast
{mso-style-priority:34;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:8.0pt;
margin-left:.5in;
mso-add-space:auto;
line-height:106%;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.FootnoteTextChar
{mso-style-name:"Footnote Text Char";
mso-style-priority:99;
mso-style-link:"Footnote Text";}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
/* Page Definitions */
@page
{mso-endnote-separator:url("cid:header.htm\@01D54C47.23936970") es;
mso-endnote-continuation-separator:url("cid:header.htm\@01D54C47.23936970") ecs;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:44377474;
mso-list-type:hybrid;
mso-list-template-ids:1316532472 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:73.0pt;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:109.0pt;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:145.0pt;
text-indent:-.25in;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:181.0pt;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:217.0pt;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:253.0pt;
text-indent:-.25in;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:289.0pt;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:325.0pt;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:361.0pt;
text-indent:-.25in;
font-family:Wingdings;}
@list l1
{mso-list-id:79454558;
mso-list-type:hybrid;
mso-list-template-ids:415922152 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l1:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:109.0pt;
text-indent:-.25in;
font-family:Symbol;}
@list l1:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:145.0pt;
text-indent:-.25in;
font-family:"Courier New";}
@list l1:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:181.0pt;
text-indent:-.25in;
font-family:Wingdings;}
@list l1:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:217.0pt;
text-indent:-.25in;
font-family:Symbol;}
@list l1:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:253.0pt;
text-indent:-.25in;
font-family:"Courier New";}
@list l1:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:289.0pt;
text-indent:-.25in;
font-family:Wingdings;}
@list l1:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:325.0pt;
text-indent:-.25in;
font-family:Symbol;}
@list l1:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:361.0pt;
text-indent:-.25in;
font-family:"Courier New";}
@list l1:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:397.0pt;
text-indent:-.25in;
font-family:Wingdings;}
@list l2
{mso-list-id:93717053;
mso-list-type:hybrid;
mso-list-template-ids:235677344 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l2:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:73.0pt;
text-indent:-.25in;
font-family:Symbol;}
@list l2:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:109.0pt;
text-indent:-.25in;
font-family:"Courier New";}
@list l2:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:145.0pt;
text-indent:-.25in;
font-family:Wingdings;}
@list l2:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:181.0pt;
text-indent:-.25in;
font-family:Symbol;}
@list l2:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:217.0pt;
text-indent:-.25in;
font-family:"Courier New";}
@list l2:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:253.0pt;
text-indent:-.25in;
font-family:Wingdings;}
@list l2:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:289.0pt;
text-indent:-.25in;
font-family:Symbol;}
@list l2:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:325.0pt;
text-indent:-.25in;
font-family:"Courier New";}
@list l2:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:361.0pt;
text-indent:-.25in;
font-family:Wingdings;}
@list l3
{mso-list-id:200366096;
mso-list-type:hybrid;
mso-list-template-ids:944518440 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l3:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:91.0pt;
text-indent:-.25in;
font-family:Symbol;}
@list l3:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:127.0pt;
text-indent:-.25in;
font-family:"Courier New";}
@list l3:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:163.0pt;
text-indent:-.25in;
font-family:Wingdings;}
@list l3:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:199.0pt;
text-indent:-.25in;
font-family:Symbol;}
@list l3:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:235.0pt;
text-indent:-.25in;
font-family:"Courier New";}
@list l3:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:271.0pt;
text-indent:-.25in;
font-family:Wingdings;}
@list l3:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:307.0pt;
text-indent:-.25in;
font-family:Symbol;}
@list l3:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:343.0pt;
text-indent:-.25in;
font-family:"Courier New";}
@list l3:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:379.0pt;
text-indent:-.25in;
font-family:Wingdings;}
@list l4
{mso-list-id:355161539;
mso-list-template-ids:-1056531978;}
@list l4:level1
{mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l4:level2
{mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l4:level3
{mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l4:level4
{mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l4:level5
{mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l4:level6
{mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l4:level7
{mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l4:level8
{mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l4:level9
{mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l5
{mso-list-id:583146561;
mso-list-template-ids:-455318540;}
@list l5:level1
{mso-level-start-at:2;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-weight:normal;
mso-bidi-font-weight:normal;}
@list l5:level2
{mso-level-number-format:alpha-lower;
mso-level-text:"%2\)";
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:73.0pt;
text-indent:-19.0pt;}
@list l5:level3
{mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l5:level4
{mso-level-text:"\(%4\)";
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l5:level5
{mso-level-start-at:7;
mso-level-number-format:bullet;
mso-level-text:-;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Calibri",sans-serif;
mso-fareast-font-family:Calibri;
color:windowtext;}
@list l5:level6
{mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l5:level7
{mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l5:level8
{mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l5:level9
{mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l6
{mso-list-id:873807750;
mso-list-type:hybrid;
mso-list-template-ids:2086820510 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l6:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:1.0in;
text-indent:-.25in;
font-family:Symbol;}
@list l6:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:1.5in;
text-indent:-.25in;
font-family:"Courier New";}
@list l6:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:2.0in;
text-indent:-.25in;
font-family:Wingdings;}
@list l6:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:2.5in;
text-indent:-.25in;
font-family:Symbol;}
@list l6:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:3.0in;
text-indent:-.25in;
font-family:"Courier New";}
@list l6:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:3.5in;
text-indent:-.25in;
font-family:Wingdings;}
@list l6:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:4.0in;
text-indent:-.25in;
font-family:Symbol;}
@list l6:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:4.5in;
text-indent:-.25in;
font-family:"Courier New";}
@list l6:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:5.0in;
text-indent:-.25in;
font-family:Wingdings;}
@list l7
{mso-list-id:1346135419;
mso-list-type:hybrid;
mso-list-template-ids:907821370 67698703 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l7:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l7:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l7:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l7:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l7:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l7:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l7:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l7:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l7:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l8
{mso-list-id:2022315160;
mso-list-type:hybrid;
mso-list-template-ids:1983122724 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l8:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:1.0in;
text-indent:-.25in;
font-family:Symbol;}
@list l8:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:1.5in;
text-indent:-.25in;
font-family:"Courier New";}
@list l8:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:2.0in;
text-indent:-.25in;
font-family:Wingdings;}
@list l8:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:2.5in;
text-indent:-.25in;
font-family:Symbol;}
@list l8:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:3.0in;
text-indent:-.25in;
font-family:"Courier New";}
@list l8:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:3.5in;
text-indent:-.25in;
font-family:Wingdings;}
@list l8:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:4.0in;
text-indent:-.25in;
font-family:Symbol;}
@list l8:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:4.5in;
text-indent:-.25in;
font-family:"Courier New";}
@list l8:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:5.0in;
text-indent:-.25in;
font-family:Wingdings;}
@list l9
{mso-list-id:2076735197;
mso-list-type:hybrid;
mso-list-template-ids:-1767357524 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l9:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:73.0pt;
text-indent:-.25in;
font-family:Symbol;}
@list l9:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:109.0pt;
text-indent:-.25in;
font-family:"Courier New";}
@list l9:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:145.0pt;
text-indent:-.25in;
font-family:Wingdings;}
@list l9:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:181.0pt;
text-indent:-.25in;
font-family:Symbol;}
@list l9:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:217.0pt;
text-indent:-.25in;
font-family:"Courier New";}
@list l9:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:253.0pt;
text-indent:-.25in;
font-family:Wingdings;}
@list l9:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:289.0pt;
text-indent:-.25in;
font-family:Symbol;}
@list l9:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:325.0pt;
text-indent:-.25in;
font-family:"Courier New";}
@list l9:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:361.0pt;
text-indent:-.25in;
font-family:Wingdings;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style></head><body lang=EN-US link="#0563C1" vlink="#954F72"><div class=WordSection1><p class=MsoNormal style='margin-bottom:12.0pt'><b>EPDP Phase 2 Legal Committee Meeting #3<o:p></o:p></b></p><p class=MsoNormal style='margin-bottom:12.0pt'><b><u>Action Items<o:p></o:p></u></b></p><p class=MsoListParagraphCxSpFirst style='margin-bottom:12.0pt;mso-add-space:auto;text-indent:-.25in;mso-list:l7 level1 lfo1'><![if !supportLists]><span style='font-size:12.0pt;line-height:106%'><span style='mso-list:Ignore'>1.<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><b><span style='font-size:12.0pt;line-height:106%'>Updated Merged Questions 2 and 5</span></b><span style='font-size:12.0pt;line-height:106%'>: LC to continue reviewing the updated text and suggest changes (if any) in advance of the next LC meeting on Tuesday, 20 August 2019. LC to be prepared to discuss the text and proposed updates during next LC call.<o:p></o:p></span></p><ol style='margin-top:0in' start=2 type=1><li class=MsoListParagraphCxSpMiddle style='margin-left:0in;mso-add-space:auto;mso-list:l7 level1 lfo1'><b><span style='font-size:12.0pt;line-height:106%'>Updated Question 4</span></b><span style='font-size:12.0pt;line-height:106%'>: Brian and Volker to work together on redrafting question 4, specifically with respect to clarifying whose legal basis for processing the question refers to.<o:p></o:p></span></li></ol><p class=MsoListParagraphCxSpMiddle style='margin-bottom:12.0pt;mso-add-space:auto;text-indent:-.25in;mso-list:l7 level1 lfo1'><![if !supportLists]><span style='font-size:12.0pt;line-height:106%'><span style='mso-list:Ignore'>3.<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><b><span style='font-size:12.0pt;line-height:106%'>Updated Question 7</span></b><span style='font-size:12.0pt;line-height:106%'>: As no objections were received, this question will be forwarded to the EPDP Team for sign-off and, pending no objection, forwarded to outside counsel for its review.<o:p></o:p></span></p><ol style='margin-top:0in' start=4 type=1><li class=MsoListParagraphCxSpMiddle style='margin-left:0in;mso-add-space:auto;mso-list:l7 level1 lfo1'><b><span style='font-size:12.0pt;line-height:106%'>Updated Question 9</span></b><span style='font-size:12.0pt;line-height:106%'>: Hadia and Margie to work together to redraft the question to clarify ambiguities. (Note: in redrafting Q9, Hadia and Margie may want to consider the text of updated Q2/5.<o:p></o:p></span></li></ol><p class=MsoListParagraphCxSpMiddle style='margin-bottom:12.0pt;mso-add-space:auto;text-indent:-.25in;mso-list:l7 level1 lfo1'><![if !supportLists]><span style='font-size:12.0pt;line-height:106%'><span style='mso-list:Ignore'>5.<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><b><span style='font-size:12.0pt;line-height:106%'>Updated Question 11</span></b><span style='font-size:12.0pt;line-height:106%'>: Question on hold for now. Margie to update the text of the question to include a specific use case.<o:p></o:p></span></p><p class=MsoListParagraphCxSpLast style='margin-bottom:12.0pt;mso-add-space:auto;text-indent:-.25in;mso-list:l7 level1 lfo1'><![if !supportLists]><span style='font-size:12.0pt;line-height:106%'><span style='mso-list:Ignore'>6.<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><b><span style='font-size:12.0pt;line-height:106%'>Updated Question 12</span></b><span style='font-size:12.0pt;line-height:106%'>: LC to review simplified question before sending to EPDP Team for sign off: In light of the <a href="https://www.icann.org/en/system/files/correspondence/odonohue-to-marby-03may19-en.pdf">3 May 2019 correspondence from the European Commission</a>, are any updates on the <a href="https://community.icann.org/download/attachments/102138857/6%281%29%28b%29%20Memo.docx?version=1&modificationDate=1548874809000&api=v2">previous memo on 6(1)(b)</a> necessary? <o:p></o:p></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><b><u>Notes<o:p></o:p></u></b></p><p class=MsoNormal style='margin-bottom:12.0pt'><b>Proposed Agenda<o:p></o:p></b></p><p class=MsoNormal style='margin-bottom:12.0pt'>Tuesday, 6 August 14:00 UTC<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:12.0pt;margin-left:.25in;text-indent:-.25in;mso-list:l4 level1 lfo2'><![if !supportLists]><span style='color:black'><span style='mso-list:Ignore'>1.<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span style='color:black'>Roll Call & SOI Updates <o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:12.0pt;margin-left:.25in;text-indent:-.25in;mso-list:l4 level1 lfo2'><![if !supportLists]><span style='color:black'><span style='mso-list:Ignore'>2.<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span style='color:black'>Continued Substantive Review of Updated Priority 1 (SSAD) Legal Questions Submitted to Date<o:p></o:p></span></p><p class=MsoListParagraphCxSpFirst style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:55.0pt;margin-bottom:.0001pt;mso-add-space:auto;text-indent:-19.0pt;line-height:normal;mso-list:l5 level2 lfo3'><![if !supportLists]><span style='font-size:12.0pt;color:black'><span style='mso-list:Ignore'>a)<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span style='font-size:12.0pt;color:black'>Substantive review of updated SSAD questions <o:p></o:p></span></p><p class=MsoListParagraphCxSpMiddle style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:55.0pt;margin-bottom:.0001pt;mso-add-space:auto;line-height:normal'><span style='font-size:12.0pt;color:black'><o:p> </o:p></span></p><ul style='margin-top:0in' type=disc><li class=MsoListParagraphCxSpMiddle style='color:black;margin-bottom:0in;margin-left:55.0pt;margin-bottom:.0001pt;mso-add-space:auto;line-height:normal;mso-list:l3 level1 lfo4'><span style='font-size:12.0pt'>Thank you to Brian and Margie for delivering their homework<o:p></o:p></span></li><li class=MsoListParagraphCxSpLast style='color:black;margin-bottom:0in;margin-left:55.0pt;margin-bottom:.0001pt;mso-add-space:auto;line-height:normal;mso-list:l3 level1 lfo4'><span style='font-size:12.0pt'>The first updated question is the merged questions 2 and 5:<o:p></o:p></span></li></ul><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><b>Updated Merged Questions 2 and 5</b>: Consider a System for Standardized Access/Disclosure where contracted parties “CPs” are required to disclose personal data over RDAP to requestors either directly or through an intermediary request accreditation/authorization body. Assuming the following safeguards are in place, what risk, if any, would the CP face for the processing activity of disclosure in this context? If any risk exists, what improved or additional safeguards would eliminate<a style='mso-footnote-id:ftn1' href="#_ftn1" name="_ftnref1" title=""><span class=MsoFootnoteReference><span class=MsoFootnoteReference><span style='font-size:12.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:EN-US'>[1]</span></span></span></a> this risk. In this scenario, would the CP be a controller or a processor<a style='mso-footnote-id:ftn2' href="#_ftn2" name="_ftnref2" title=""><span class=MsoFootnoteReference><span class=MsoFootnoteReference><span style='font-size:12.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:EN-US'>[2]</span></span></span></a>, and to what extent, if at all, is the CP’s liability impacted by this controller/processor distinction? <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><ul style='margin-top:0in' type=disc><li class=MsoListParagraphCxSpFirst style='margin-bottom:0in;margin-left:55.0pt;margin-bottom:.0001pt;mso-add-space:auto;mso-list:l3 level1 lfo4'><span style='font-size:12.0pt;line-height:106%'>Disclosure is required under CP’s contract with ICANN (resulting from Phase 2 EPDP policy).<o:p></o:p></span></li></ul><p class=MsoListParagraphCxSpMiddle style='margin-bottom:0in;margin-bottom:.0001pt;mso-add-space:auto'><span style='font-size:12.0pt;line-height:106%'><o:p> </o:p></span></p><ul style='margin-top:0in' type=disc><li class=MsoListParagraphCxSpMiddle style='margin-bottom:0in;margin-left:55.0pt;margin-bottom:.0001pt;mso-add-space:auto;mso-list:l3 level1 lfo4'><span style='font-size:12.0pt;line-height:106%'>CP’s contract with ICANN requires CP to notify the data subject of the purposes for which, and types of entities by which, personal data may be processed. CP is required to notify data subject of this with the opportunity to opt out before the data subject enters into the registration agreement with the CP, and again annually via the ICANN-required registration data accuracy reminder. CP has done so. <o:p></o:p></span></li></ul><p class=MsoListParagraphCxSpMiddle style='margin-bottom:0in;margin-bottom:.0001pt;mso-add-space:auto'><span style='font-size:12.0pt;line-height:106%'><o:p> </o:p></span></p><ul style='margin-top:0in' type=disc><li class=MsoListParagraphCxSpMiddle style='margin-bottom:0in;margin-left:55.0pt;margin-bottom:.0001pt;mso-add-space:auto;mso-list:l3 level1 lfo4'><span style='font-size:12.0pt;line-height:106%'>ICANN or its designee has validated the requestor’s identity, and required that the requestor: <o:p></o:p></span></li><ul style='margin-top:0in' type=circle><li class=MsoListParagraphCxSpMiddle style='margin-bottom:0in;margin-left:55.0pt;margin-bottom:.0001pt;mso-add-space:auto;mso-list:l3 level2 lfo4'><span style='font-size:12.0pt;line-height:106%'>represents that it has a lawful basis for requesting and processing the data, <o:p></o:p></span></li><li class=MsoListParagraphCxSpMiddle style='margin-bottom:0in;margin-left:55.0pt;margin-bottom:.0001pt;mso-add-space:auto;mso-list:l3 level2 lfo4'><span style='font-size:12.0pt;line-height:106%'>provides its lawful basis,<o:p></o:p></span></li><li class=MsoListParagraphCxSpMiddle style='margin-bottom:0in;margin-left:55.0pt;margin-bottom:.0001pt;mso-add-space:auto;mso-list:l3 level2 lfo4'><span style='font-size:12.0pt;line-height:106%'>represents that it is requesting only the data necessary for its purpose, <o:p></o:p></span></li><li class=MsoListParagraphCxSpMiddle style='margin-bottom:0in;margin-left:55.0pt;margin-bottom:.0001pt;mso-add-space:auto;mso-list:l3 level2 lfo4'><span style='font-size:12.0pt;line-height:106%'>agrees to process the data in accordance with GDPR, and <o:p></o:p></span></li><li class=MsoListParagraphCxSpMiddle style='margin-bottom:0in;margin-left:55.0pt;margin-bottom:.0001pt;mso-add-space:auto;mso-list:l3 level2 lfo4'><span style='font-size:12.0pt;line-height:106%'>agrees to standard contractual clauses for the data transfer. <o:p></o:p></span></li></ul></ul><p class=MsoListParagraphCxSpMiddle style='margin-bottom:0in;margin-bottom:.0001pt;mso-add-space:auto'><span style='font-size:12.0pt;line-height:106%'><o:p> </o:p></span></p><ul style='margin-top:0in' type=disc><li class=MsoListParagraphCxSpLast style='color:black;margin-bottom:0in;margin-left:55.0pt;margin-bottom:.0001pt;mso-add-space:auto;line-height:normal;mso-list:l3 level1 lfo4'><span style='font-size:12.0pt;color:windowtext'>ICANN or its designee logs requests for non-public registration data, regularly audits these logs, takes compliance action against suspected abuse, and makes these logs available upon request by the data subject. </span><span style='font-size:12.0pt'><o:p></o:p></span></li></ul><p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p><p class=MsoNormal style='margin-left:55.0pt;text-indent:.5in'>LC Feedback:<span style='color:black'><o:p></o:p></span></p><ul style='margin-top:0in' type=disc><li class=MsoListParagraphCxSpFirst style='color:black;margin-left:73.0pt;mso-add-space:auto;mso-list:l1 level1 lfo5'><span style='font-size:12.0pt;line-height:106%;color:windowtext'>Will the Team be making a decision on this legal question today? It is very long – would it be possible to have a few extra days to review the question.</span><span style='font-size:12.0pt;line-height:106%'><o:p></o:p></span></li><div style='mso-element:para-border-div;border:none;border-bottom:solid windowtext 1.5pt;padding:0in 0in 1.0pt 0in;margin-left:91.0pt;margin-right:0in'><li class=MsoListParagraphCxSpLast style='color:black;margin-left:-.25in;mso-add-space:auto;mso-list:l1 level1 lfo5;border:none;padding:0in'><span style='font-size:12.0pt;line-height:106%'>Yes, the Team can have extra time to review the questions. For now, the Team can continue with the rest of the questions and allow everyone to respond in advance of the next LC call.<o:p></o:p></span></li></div></ul><p class=MsoNormal style='margin-left:91.0pt'><span style='color:black'><o:p> </o:p></span></p><p class=MsoNormal style='margin-left:91.0pt'><b>Updated Question 4</b>: European LEAs need to have a legal basis for requesting disclosure. Based on that, they approach the contracted party, which can then disclose based on Art. 6 I c GDPR to fulfil a legal obligation.<o:p></o:p></p><p class=MsoNormal style='margin-left:91.0pt'> <o:p></o:p></p><p class=MsoNormal style='margin-left:91.0pt'>Where no legal basis for requesting data exists, no disclosure can take place.<o:p></o:p></p><p class=MsoNormal style='margin-left:91.0pt'> <o:p></o:p></p><p class=MsoNormal style='margin-left:91.0pt'>Art. 6 I c GDPR is limited to European laws. As a consequence, non-EU LEA cannot use a European legal basis for requesting data and the contracted party can therefore not disclose based on 6 I c GDPR.<o:p></o:p></p><p class=MsoNormal style='margin-left:91.0pt'> <o:p></o:p></p><p class=MsoNormal style='margin-left:91.0pt'>That would leave us with disclosure based on 6 I f GDPR and to the potentially problematic situation in which a domestic European LEA must be able to base its request on a national law while non-EU LEA “only” needs to have a legitimate interest. Remember that even public authorities must not base their processing on 6 I f GDPR in performing their core activities. I trust there is common understanding that investigating crime is the core activity of LEAs and thus it might be a contradiction to have domestic European LEAs blocked from basing their requests on 6 I f GDPR, while non-EU LEA can use that para as a legal basis and also to have the contracted party disclose based on 6 I f GDPR, while in domestic EU cases, only 6 I c GDPR would be applicable.<o:p></o:p></p><p class=MsoNormal style='margin-left:91.0pt'> <o:p></o:p></p><p class=MsoNormal style='margin-left:91.0pt'>Remember that disclosing data to LEA is much more impactful for the data subject than in civil cases and that therefore, the law makers have included the aforementioned safeguards into the GDPR, which we might be bypassing by using 6 I f GDPR.<o:p></o:p></p><p class=MsoNormal style='margin-left:91.0pt'> <o:p></o:p></p><p class=MsoNormal style='margin-left:91.0pt'>I am not saying this cannot be made work, but we should get confirmation that such disclosure is lawful.<o:p></o:p></p><p class=MsoListParagraphCxSpFirst style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:146.0pt;margin-bottom:.0001pt;mso-add-space:auto;line-height:normal'><span style='font-size:12.0pt;color:black'><o:p> </o:p></span></p><p class=MsoListParagraphCxSpMiddle style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:146.0pt;margin-bottom:.0001pt;mso-add-space:auto;line-height:normal'><span style='font-size:12.0pt;color:black'>LC Feedback: <o:p></o:p></span></p><ul style='margin-top:0in' type=disc><li class=MsoListParagraphCxSpMiddle style='color:black;margin-left:128.0pt;mso-add-space:auto;mso-list:l2 level1 lfo6'><span style='font-size:12.0pt;line-height:106%'>The Team should be really clear about whose legal basis for the processing activity applies. The second sentence in the fourth paragraph – when we are talking about LEA processing vs. the process of disclosing to the LEA. <o:p></o:p></span></li><div style='mso-element:para-border-div;border:none;border-bottom:solid windowtext 1.5pt;padding:0in 0in 1.0pt 0in;margin-left:55.0pt;margin-right:0in'><li class=MsoListParagraphCxSpMiddle style='color:black;margin-left:73.0pt;mso-add-space:auto;mso-list:l2 level1 lfo6;border:none;padding:0in'><span style='font-size:12.0pt;line-height:106%'>Action: Brian and Volker to work together on redrafting question 4, specifically with respect to clarifying whose legal basis for processing the question refers to.<o:p></o:p></span></li></div></ul><p class=MsoListParagraphCxSpLast style='margin-left:219.0pt;mso-add-space:auto'><span style='font-size:12.0pt;line-height:106%;color:black'><o:p> </o:p></span></p><p class=MsoNormal style='margin-left:146.0pt'><b><span style='color:black'>Updated Question 7</span></b><span style='color:black'>: </span>To what extent, if any, are contracted parties liable when a third party that accesses non-public WHOIS data under an accreditation scheme where by the accessor is accredited for the stated purpose, commits to certain reasonable safeguards similar to a code of conduct regarding use of the data, but misrepresents their intended purposes for processing such data, and subsequently processes it in a manner inconsistent with the stated purpose. Under such circumstances, if there is possibility of liability to contracted parties, are there steps that can be taken to mitigate or reduce the risk of liability to the contracted parties? (BC)<o:p></o:p></p><p class=MsoNormal style='margin-left:146.0pt'><span style='color:black'><o:p> </o:p></span></p><p class=MsoNormal style='margin-left:146.0pt'><span style='color:black'> LC Feedback:<o:p></o:p></span></p><ul style='margin-top:0in' type=disc><li class=MsoListParagraphCxSpFirst style='color:black;margin-left:182.0pt;mso-add-space:auto;mso-list:l6 level1 lfo7'><span style='font-size:12.0pt;line-height:106%'>No objection to the proposed wording.<o:p></o:p></span></li><div style='mso-element:para-border-div;border:none;border-bottom:solid windowtext 1.5pt;padding:0in 0in 1.0pt 0in;margin-left:.75in;margin-right:0in'><li class=MsoListParagraphCxSpLast style='color:black;margin-left:128.0pt;mso-add-space:auto;mso-list:l6 level1 lfo7;border:none;padding:0in'><span style='font-size:12.0pt;line-height:106%'>Close this question so that it can be forwarded to Legal Counsel. <o:p></o:p></span></li></div></ul><p class=MsoNormal style='margin-left:236.0pt'><span style='color:black'><o:p> </o:p></span></p><p class=MsoNormal style='margin-left:200.0pt'><b><span style='color:black'>Updated Question 9</span></b>: Assuming that there is a policy that allows accredited parties to access non-public WHOIS data through an SSAD (and requires the accredited party to commit to certain reasonable safeguards similar to a code of conduct), is it legally possible to have automated disclosures to third parties that have requested access under 6(1)(f)? If it is possible, please provide any guidance for how this can be accomplished. For example, is it legally permissible to define specific categories of requests (e.g. rapid response to a malware attack or contacting a non-responsive IP infringer) to identify types of user groups or processing activities that reduce the need for manual review? In addition, please describe the circumstances (if any) where a manual review is required under 6(1)(f), and any guidance for how to perform this balancing test.<o:p></o:p></p><p class=MsoNormal style='margin-left:200.0pt'><span style='color:black'><o:p> </o:p></span></p><p class=MsoNormal style='margin-left:200.0pt'><span style='color:black'> LC Feedback:<o:p></o:p></span></p><ul style='margin-top:0in' type=disc><li class=MsoListParagraphCxSpFirst style='color:black;margin-left:237.0pt;mso-add-space:auto;mso-list:l0 level1 lfo8'><span style='font-size:12.0pt;line-height:106%'>In the last sentence can text about a manual review for disclosure be added to this question? <o:p></o:p></span></li><li class=MsoListParagraphCxSpMiddle style='color:black;margin-left:237.0pt;mso-add-space:auto;mso-list:l0 level1 lfo8'><span style='font-size:12.0pt;line-height:106%'>Question is confusing as written. What do we mean by automated disclosure?<o:p></o:p></span></li><li class=MsoListParagraphCxSpMiddle style='color:black;margin-left:237.0pt;mso-add-space:auto;mso-list:l0 level1 lfo8'><span style='font-size:12.0pt;line-height:106%'>We are asking legal counsel whether we can build a mechanism that would provide the requestors with information without the need to go through a balancing test with each and every request a “legitimate requestor” makes. Can this process be automated, or does it need to be manual?<o:p></o:p></span></li><li class=MsoListParagraphCxSpMiddle style='color:black;margin-left:237.0pt;mso-add-space:auto;mso-list:l0 level1 lfo8'><span style='font-size:12.0pt;line-height:106%'>Action item: Hadia and Margie to work together to redraft the question to clarify any ambiguities.<o:p></o:p></span></li><div style='mso-element:para-border-div;border:none;border-bottom:solid windowtext 1.5pt;padding:0in 0in 1.0pt 0in;margin-left:55.0pt;margin-right:0in'><li class=MsoListParagraphCxSpLast style='color:black;margin-left:182.0pt;mso-add-space:auto;mso-list:l0 level1 lfo8;border:none;padding:0in'><span style='font-size:12.0pt;line-height:106%'>There may be commonalities in the updated, merged Question 2 and 5<o:p></o:p></span></li></div></ul><p class=MsoNormal style='margin-left:255.0pt'><b><span style='color:black'><o:p> </o:p></span></b></p><p class=MsoNormal style='margin-left:255.0pt'><b><span style='color:black'>Updated Question </span></b><b>11</b>: Can legal counsel be consulted to determine whether GDPR prevents fast automated, and non-rate limited responses (as described in SSAC 101) to nonpublic WHOIS data for properly credentialed security practitioners (as defined in SSAC 101), who have agreed on appropriate safeguards? If such access is not prohibited, can counsel provide examples of safeguards (such as pseudonymization) that should be considered? (BC)<o:p></o:p></p><p class=MsoNormal style='margin-left:255.0pt'><span style='color:black'><o:p> </o:p></span></p><p class=MsoNormal style='margin-left:255.0pt'><span style='color:black'> LC Feedback:<o:p></o:p></span></p><ul style='margin-top:0in' type=disc><li class=MsoListParagraphCxSpFirst style='color:black;margin-left:292.0pt;mso-add-space:auto;mso-list:l9 level1 lfo9'><span style='font-size:12.0pt;line-height:106%'>The question is much clearer than it was before, but the answer to the first clause is yes, legal counsel can be consulted.<o:p></o:p></span></li><li class=MsoListParagraphCxSpMiddle style='color:black;margin-left:292.0pt;mso-add-space:auto;mso-list:l9 level1 lfo9'><span style='font-size:12.0pt;line-height:106%'>Perhaps change “can legal counsel…” to “does GDPR prevent fast …”<o:p></o:p></span></li><li class=MsoListParagraphCxSpMiddle style='color:black;margin-left:292.0pt;mso-add-space:auto;mso-list:l9 level1 lfo9'><span style='font-size:12.0pt;line-height:106%'>This question seems like a fishing expedition. Does GDPR prevent – probably not, but how would that work in practice. It may not be the best use of the limited outside counsel budget.<o:p></o:p></span></li><li class=MsoListParagraphCxSpMiddle style='color:black;margin-left:292.0pt;mso-add-space:auto;mso-list:l9 level1 lfo9'><span style='font-size:12.0pt;line-height:106%'>This question is very relevant to the use cases the Team is currently working on.<o:p></o:p></span></li><li class=MsoListParagraphCxSpMiddle style='color:black;margin-left:292.0pt;mso-add-space:auto;mso-list:l9 level1 lfo9'><span style='font-size:12.0pt;line-height:106%'>Once questions have been signed off by the Legal Committee, the questions will be sent to the EPDP Team for its review.<o:p></o:p></span></li><li class=MsoListParagraphCxSpMiddle style='color:black;margin-left:292.0pt;mso-add-space:auto;mso-list:l9 level1 lfo9'><span style='font-size:12.0pt;line-height:106%'>Perhaps the question could be reworded to clothe it in a strong use case<o:p></o:p></span></li><li class=MsoListParagraphCxSpMiddle style='color:black;margin-left:292.0pt;mso-add-space:auto;mso-list:l9 level1 lfo9'><span style='font-size:12.0pt;line-height:106%'>This is an important question, but it would be helpful to use an example rather than asking such a general question – perhaps local law enforcement in its own jurisdiction could be a good example, rather than asking for general legal advice. <o:p></o:p></span></li><li class=MsoListParagraphCxSpMiddle style='color:black;margin-left:292.0pt;mso-add-space:auto;mso-list:l9 level1 lfo9'><span style='font-size:12.0pt;line-height:106%'>Action: Margie to update question to include a specific use case.<o:p></o:p></span></li><div style='mso-element:para-border-div;border:none;border-bottom:solid windowtext 1.5pt;padding:0in 0in 1.0pt 0in;margin-left:55.0pt;margin-right:0in'><li class=MsoListParagraphCxSpMiddle style='color:black;margin-left:237.0pt;mso-add-space:auto;mso-list:l9 level1 lfo9;border:none;padding:0in'><span style='font-size:12.0pt;line-height:106%'>Question on hold for now.<o:p></o:p></span></li></div></ul><p class=MsoListParagraphCxSpLast style='margin-left:383.0pt;mso-add-space:auto'><span style='font-size:12.0pt;line-height:106%;color:black'><o:p> </o:p></span></p><p class=MsoNormal style='margin-left:310.0pt'><b><span style='color:black'>Updated Question </span></b><b>12</b>: Under B&B’s memo regarding the applicability of 6(1)(b) as purpose for processing registration data, B & B cites from German commentators that state that it is possible to rely on a contract with the data subject even if controller is not a party to the contract. In that situation, the memo notes that- “it will be necessary to require that the specific third party or at least the processing by the third party is, at least abstractly, already known to the data subject at the time the contract is concluded and that the controller, as the contractual partner, informs the data subject of this prior to the transfer to the third party.” Could legal advice be sought on whether an appropriate notice could be drafted to notify the registrant that its non-public WHOIS data will be disclosed to third parties for the purposes identified in ICANN’s policy.<o:p></o:p></p><p class=MsoNormal style='margin-left:310.0pt'><o:p> </o:p></p><p class=MsoNormal style='margin-left:310.0pt'>Under the same memo, B&B’s analysis in Section b focuses on only 1 purpose for processing data (DNS abuse), instead of examining all of the purposes identified in the Phase 1 Final Report. In light of the recent EC letters and input to ICANN that clarified how GDPR could be applied to the new WHOIS policy, B&B’s prior legal advice should be reexamined and updated. For example, in light of the EC’s recognition that ICANN has a broad purpose to:<o:p></o:p></p><p class=MsoNormal style='margin-left:310.0pt'><o:p> </o:p></p><p class=MsoNormal style='margin-left:310.0pt'>‘contribute to the maintenance of the security, stability, and resiliency of the Domain Name System in accordance with ICANN's mission’, which is at the core of the role of ICANN as the “guardian” of the Domain Name System.”<o:p></o:p></p><p class=MsoNormal style='margin-left:310.0pt'><o:p> </o:p></p><p class=MsoNormal style='margin-left:310.0pt'>and that:<o:p></o:p></p><p class=MsoNormal style='margin-left:310.0pt'><o:p> </o:p></p><p class=MsoNormal style='margin-left:310.0pt'>“With regard to the formulation of purpose two, the European Commission acknowledges ICANN’s central role and responsibility for ensuring the security, stability and resilience of the Internet Domain Name System and that in doing so it acts in the public interest.”<o:p></o:p></p><p class=MsoNormal style='margin-left:310.0pt'><o:p> </o:p></p><p class=MsoNormal style='margin-left:310.0pt'>legal advice should be obtained on the applicability of each of the possible legal bases under 6(1) (a-f)) to support the disclosure to third parties under an SSAD of nonpublic WHOIS data.<o:p></o:p></p><p class=MsoNormal style='margin-left:310.0pt'> LC Feedback:<o:p></o:p></p><ul style='margin-top:0in' type=disc><li class=MsoListParagraphCxSpFirst style='color:black;margin-left:346.0pt;mso-add-space:auto;mso-list:l8 level1 lfo10'><span style='font-size:12.0pt;line-height:106%'>Would asking for this update be useful for the Team’s work in Phase 2?<o:p></o:p></span></li><li class=MsoListParagraphCxSpMiddle style='color:black;margin-left:346.0pt;mso-add-space:auto;mso-list:l8 level1 lfo10'><span style='font-size:12.0pt;line-height:106%'>The wording of the question may be leading. <o:p></o:p></span></li><li class=MsoListParagraphCxSpMiddle style='color:black;margin-left:346.0pt;mso-add-space:auto;mso-list:l8 level1 lfo10'><span style='font-size:12.0pt;line-height:106%'>The wording of the question could be simplified – maybe ask B&B to update the previous advice in light of the new letters from the European Commission.<o:p></o:p></span></li><li class=MsoListParagraphCxSpMiddle style='color:black;margin-left:346.0pt;mso-add-space:auto;mso-list:l8 level1 lfo10'><span style='font-size:12.0pt;line-height:106%'>Action item: simplify the language of the question – and include analysis on legal basis from 6(1)(a) to 6(1)(f). <o:p></o:p></span></li></ul><p class=MsoListParagraphCxSpLast style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:365.0pt;margin-bottom:.0001pt;mso-add-space:auto;text-indent:-19.0pt;line-height:normal;mso-list:l5 level2 lfo3'><![if !supportLists]><span style='font-size:12.0pt;color:black'><span style='mso-list:Ignore'>b)<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span style='font-size:12.0pt;color:black'>Agree on next steps<o:p></o:p></span></p><p class=MsoNormal style='margin-left:310.0pt'><span style='color:black'><o:p> </o:p></span></p><p class=MsoListParagraph style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:328.0pt;margin-bottom:.0001pt;mso-add-space:auto;text-indent:-.25in;line-height:normal;mso-list:l5 level1 lfo3'><![if !supportLists]><span style='font-size:12.0pt;color:black'><span style='mso-list:Ignore'>3.<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span style='font-size:12.0pt;color:black'>Wrap and confirm next meeting to be scheduled <o:p></o:p></span></p><p class=MsoNormal style='margin-left:310.0pt'><b><span style='color:black'><o:p> </o:p></span></b></p><p class=MsoListParagraphCxSpFirst style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:365.0pt;margin-bottom:.0001pt;mso-add-space:auto;text-indent:-19.0pt;line-height:normal;mso-list:l5 level2 lfo3'><![if !supportLists]><span style='font-size:12.0pt;color:black'><span style='mso-list:Ignore'>a)<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span style='font-size:12.0pt;color:black'>Confirm action items<o:p></o:p></span></p><p class=MsoListParagraphCxSpLast style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:365.0pt;margin-bottom:.0001pt;mso-add-space:auto;text-indent:-19.0pt;line-height:normal;mso-list:l5 level2 lfo3'><![if !supportLists]><span style='font-size:12.0pt;color:black'><span style='mso-list:Ignore'>b)<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span style='font-size:12.0pt;color:black'>The next LC Meeting will take place on Tuesday, 20 August at 14:00 UTC.<o:p></o:p></span></p><p class=MsoNormal style='margin-left:310.0pt'><span style='color:black'><o:p> </o:p></span></p><p class=MsoNormal style='margin-left:310.0pt'><span style='color:black'><o:p> </o:p></span></p><p class=MsoNormal style='margin-left:310.0pt'><o:p> </o:p></p><p class=MsoNormal style='margin-left:310.0pt'><o:p> </o:p></p><p class=MsoNormal style='margin-left:310.0pt'><span style='color:black'><o:p> </o:p></span></p><p class=MsoNormal style='margin-left:310.0pt'><b><o:p> </o:p></b></p><p class=MsoNormal style='margin-left:310.0pt'><span style='font-size:11.0pt;font-family:"Times New Roman",serif;color:black'><o:p> </o:p></span></p><p class=MsoNormal style='margin-left:310.0pt'><o:p> </o:p></p></div><div style='mso-element:footnote-list'><br clear=all><hr align=left size=1 width="33%"><div style='mso-element:footnote' id=ftn1><p class=MsoFootnoteText style='margin-left:310.0pt'><a style='mso-footnote-id:ftn1' href="#_ftnref1" name="_ftn1" title=""><span class=MsoFootnoteReference><span class=MsoFootnoteReference><span style='font-size:10.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:EN-US'>[1]</span></span></span></a> “Here it is important to highlight the special role that safeguards may play in reducing the undue impact on the data subjects, and thereby changing the balance of rights and interests to the extent that the data controller’s legitimate interests will not be overridden.“ (https://iapp.org/media/pdf/resource_center/wp217_legitimate-interests_04-2014.pdf)<o:p></o:p></p></div><div style='mso-element:footnote' id=ftn2><p class=MsoFootnoteText style='margin-left:310.0pt'><a style='mso-footnote-id:ftn2' href="#_ftnref2" name="_ftn2" title=""><span class=MsoFootnoteReference><span class=MsoFootnoteReference><span style='font-size:10.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:EN-US'>[2]</span></span></span></a> <a href="https://ec.europa.eu/info/law/law-topic/data-protection/reform/rules-business-and-organisations/obligations/controller-processor/what-data-controller-or-data-processor_en">https://ec.europa.eu/info/law/law-topic/data-protection/reform/rules-business-and-organisations/obligations/controller-processor/what-data-controller-or-data-processor_en</a> <o:p></o:p></p></div></div></body></html>