<div dir="ltr">Hi Margie,<div>a question - is this the case we discussed on the call yesterday? I just wonder if there is a need to reach a general agreement within the bigger EPDP team on this use case before we forward the question to legal -- there were some questions about the use case yesterday and SSAC said they would reply. I think there is a need to wait until at least the issues with the case are resolved before sending the question to legal? - but would listen to what others say. </div><div>But as we have 1,5 weeks before the next meeting, maybe this could be sorted. </div><div>Wish you and all others a great weekend,</div><div>Cheers,</div><div>Tanya </div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, 9 Aug 2019 at 18:55, Margie Milam <<a href="mailto:margiemilam@fb.com">margiemilam@fb.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div lang="EN-US">
<div class="gmail-m_-7161246621767108659WordSection1">
<p class="MsoNormal" style="margin-right:0in;margin-bottom:2pt;margin-left:0in">
<span style="font-size:12pt;color:black">Hi-<u></u><u></u></span></p>
<p class="MsoNormal" style="margin-right:0in;margin-bottom:2pt;margin-left:0in">
<span style="font-size:12pt;color:black">Following up on the action items from Tuesday’s call - I added the use case we discussed on yesterday’s call to Question 11.<u></u><u></u></span></p>
<p class="MsoNormal" style="margin-right:0in;margin-bottom:2pt;margin-left:0in">
<b><span style="font-size:12pt;color:black"><u></u> <u></u></span></b></p>
<p class="MsoNormal" style="margin-right:0in;margin-bottom:2pt;margin-left:0in">
<b><span style="font-size:12pt;color:black">Updated Question 11</span></b><span style="font-size:12pt;color:black">: Can legal counsel be consulted to determine whether GDPR prevents fast automated, and non-rate limited responses (as described in SSAC 101)
to nonpublic WHOIS data <span style="background:yellow">with regards to the SSAC use case (</span></span><span style="color:black;background:yellow">Overarching Purpose: Crime and abuse investigation by non-law enforcement
parties)</span><span style="color:black"> f</span><span style="font-size:12pt;color:black">or properly credentialed security practitioners (as defined in SSAC 101), who have agreed on appropriate safeguards? If such access is not prohibited, can counsel
provide examples of safeguards (such as pseudonymization) that should be considered? (BC)</span><b><span style="color:black"><u></u><u></u></span></b></p>
<p class="MsoNormal" style="margin-left:255pt"><span style="font-size:12pt;color:black"> <u></u><u></u></span></p>
<p class="MsoNormal">All the best,<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Margie<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div style="border-right:none;border-bottom:none;border-left:none;border-top:1pt solid rgb(181,196,223);padding:3pt 0in 0in">
<p class="MsoNormal"><b><span style="font-size:12pt;color:black">From: </span></b><span style="font-size:12pt;color:black">Gnso-epdp-legal <<a href="mailto:gnso-epdp-legal-bounces@icann.org" target="_blank">gnso-epdp-legal-bounces@icann.org</a>> on behalf of Caitlin Tubergen <<a href="mailto:caitlin.tubergen@icann.org" target="_blank">caitlin.tubergen@icann.org</a>><br>
<b>Date: </b>Tuesday, August 6, 2019 at 11:07 AM<br>
<b>To: </b>"<a href="mailto:gnso-epdp-legal@icann.org" target="_blank">gnso-epdp-legal@icann.org</a>" <<a href="mailto:gnso-epdp-legal@icann.org" target="_blank">gnso-epdp-legal@icann.org</a>><br>
<b>Subject: </b>[Gnso-epdp-legal] Notes and action items - EPDP Phase 2 Legal Committee Meeting #3<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<p class="MsoNormal" style="margin-left:255pt;font-variant-caps:normal;text-align:start;word-spacing:0px">
<b><span style="font-size:12pt;color:black">Updated Question<span class="gmail-m_-7161246621767108659apple-converted-space"> </span>11</span></b><span style="font-size:12pt;color:black">: Can legal counsel be consulted to determine whether GDPR prevents fast automated, and non-rate
limited responses (as described in SSAC 101) to nonpublic WHOIS data for properly credentialed security practitioners (as defined in SSAC 101), who have agreed on appropriate safeguards? If such access is not prohibited, can counsel provide examples of safeguards
(such as pseudonymization) that should be considered? (BC)<u></u><u></u></span></p>
<p class="MsoNormal" style="margin-left:255pt;font-variant-caps:normal;text-align:start;word-spacing:0px">
<span style="font-size:12pt;color:black"> <u></u><u></u></span></p>
</div>
</div>
_______________________________________________<br>
Gnso-epdp-legal mailing list<br>
<a href="mailto:Gnso-epdp-legal@icann.org" target="_blank">Gnso-epdp-legal@icann.org</a><br>
<a href="https://mm.icann.org/mailman/listinfo/gnso-epdp-legal" rel="noreferrer" target="_blank">https://mm.icann.org/mailman/listinfo/gnso-epdp-legal</a><br>
_______________________________________________<br>
By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (<a href="https://www.icann.org/privacy/policy" rel="noreferrer" target="_blank">https://www.icann.org/privacy/policy</a>) and the website Terms of Service (<a href="https://www.icann.org/privacy/tos" rel="noreferrer" target="_blank">https://www.icann.org/privacy/tos</a>). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.</blockquote></div>