<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Would everyone feel comfortable if, instead of submitting the question along the complete use case, we submitted the question with a summary of the situation that the use case tries to address?<div class=""><br class=""></div><div class=""><br class=""><div class="">
<div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;">Kind regards,</div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;"><br class=""></div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;"><br class=""></div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;"><br class=""></div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;">Leon Sanchez</div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;">Board Director</div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;">Internet Corporation for Assigned Names and Numbers (ICANN)</div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;"><a href="mailto:leon.sanchez@board.icann.org" class="">leon.sanchez@board.icann.org</a></div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><br class=""></div><br class="Apple-interchange-newline">
</div>
<div><br class=""><blockquote type="cite" class=""><div class="">El 9 ago 2019, a las 15:19, Tatiana Tropina <<a href="mailto:tatiana.tropina@gmail.com" class="">tatiana.tropina@gmail.com</a>> escribió:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class="">Hi Margie,<div class="">thanks for your reply. I guess then we will need to make a caveat that the case is just illustrative and is still being finalised by the group. I do find some issues with references to the legislation made in that case and the applicability of cited recitals, which possibly have to be changed or brought in conformity with applicable law/regulation. So if we submit the case fully and not just as a few lines illustrating "what's the case is about" -- there might be a problem. </div><div class="">Again, I guess we can discuss how to proceed during the next meeting of the legal team, but I want to flag this for now.</div><div class="">Cheers,</div><div class="">Tanya </div></div><br class=""><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, 9 Aug 2019 at 22:10, Margie Milam <<a href="mailto:margiemilam@fb.com" class="">margiemilam@fb.com</a>> wrote:<br class=""></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div lang="EN-US" class="">
<div class="gmail-m_-7445691938696652461WordSection1"><p class="MsoNormal">Hi Tatiana – <u class=""></u><u class=""></u></p><p class="MsoNormal"><u class=""></u> <u class=""></u></p><p class="MsoNormal">The use case is meant to be illustrative, to facilitate Bird & Bird’s general understanding in order to provide its analysis. As a result I don’t believe that the use case needs to be finalized before it is presented.<u class=""></u><u class=""></u></p><p class="MsoNormal"><u class=""></u> <u class=""></u></p><p class="MsoNormal">All the best,<u class=""></u><u class=""></u></p><p class="MsoNormal">Margie<u class=""></u><u class=""></u></p><p class="MsoNormal"><u class=""></u> <u class=""></u></p><p class="MsoNormal"><u class=""></u> <u class=""></u></p>
<div style="border-right:none;border-bottom:none;border-left:none;border-top:1pt solid rgb(181,196,223);padding:3pt 0in 0in" class=""><p class="MsoNormal"><b class=""><span style="font-size: 12pt;" class="">From: </span></b><span style="font-size: 12pt;" class="">Tatiana Tropina <<a href="mailto:tatiana.tropina@gmail.com" target="_blank" class="">tatiana.tropina@gmail.com</a>><br class="">
<b class="">Date: </b>Friday, August 9, 2019 at 10:20 AM<br class="">
<b class="">To: </b>Margie Milam <<a href="mailto:margiemilam@fb.com" target="_blank" class="">margiemilam@fb.com</a>><br class="">
<b class="">Cc: </b>Caitlin Tubergen <<a href="mailto:caitlin.tubergen@icann.org" target="_blank" class="">caitlin.tubergen@icann.org</a>>, "<a href="mailto:gnso-epdp-legal@icann.org" target="_blank" class="">gnso-epdp-legal@icann.org</a>" <<a href="mailto:gnso-epdp-legal@icann.org" target="_blank" class="">gnso-epdp-legal@icann.org</a>><br class="">
<b class="">Subject: </b>Re: [Gnso-epdp-legal] Notes and action items - EPDP Phase 2 Legal Committee Meeting #3<u class=""></u><u class=""></u></span></p>
</div>
<div class=""><p class="MsoNormal"><u class=""></u> <u class=""></u></p>
</div>
<div class=""><p class="MsoNormal">Hi Margie, <u class=""></u><u class=""></u></p>
<div class=""><p class="MsoNormal">a question - is this the case we discussed on the call yesterday? I just wonder if there is a need to reach a general agreement within the bigger EPDP team on this use case before we forward the question to legal -- there were some questions
about the use case yesterday and SSAC said they would reply. I think there is a need to wait until at least the issues with the case are resolved before sending the question to legal? - but would listen to what others say. <u class=""></u><u class=""></u></p>
</div>
<div class=""><p class="MsoNormal">But as we have 1,5 weeks before the next meeting, maybe this could be sorted. <u class=""></u><u class=""></u></p>
</div>
<div class=""><p class="MsoNormal">Wish you and all others a great weekend,<u class=""></u><u class=""></u></p>
</div>
<div class=""><p class="MsoNormal">Cheers,<u class=""></u><u class=""></u></p>
</div>
<div class=""><p class="MsoNormal">Tanya <u class=""></u><u class=""></u></p>
</div>
</div><p class="MsoNormal"><u class=""></u> <u class=""></u></p>
<div class="">
<div class=""><p class="MsoNormal">On Fri, 9 Aug 2019 at 18:55, Margie Milam <<a href="mailto:margiemilam@fb.com" target="_blank" class="">margiemilam@fb.com</a>> wrote:<u class=""></u><u class=""></u></p>
</div>
<blockquote style="border-top:none;border-right:none;border-bottom:none;border-left:1pt solid rgb(204,204,204);padding:0in 0in 0in 6pt;margin-left:4.8pt;margin-right:0in" class="">
<div class="">
<div class=""><p class="MsoNormal" style="margin-bottom:2pt"><span style="font-size: 12pt;" class="">Hi-</span><u class=""></u><u class=""></u></p><p class="MsoNormal" style="margin-bottom:2pt"><span style="font-size: 12pt;" class="">Following up on the action items from Tuesday’s call - I added the use case we discussed on yesterday’s call to Question 11.</span><u class=""></u><u class=""></u></p><p class="MsoNormal" style="margin-bottom:2pt"><b class=""><span style="font-size: 12pt;" class=""> </span></b><u class=""></u><u class=""></u></p><p class="MsoNormal" style="margin-bottom:2pt"><b class=""><span style="font-size: 12pt;" class="">Updated Question 11</span></b><span style="font-size: 12pt;" class="">: Can legal counsel be consulted to determine whether GDPR prevents
fast automated, and non-rate limited responses (as described in SSAC 101) to nonpublic WHOIS data
<span style="background:yellow" class="">with regards to the SSAC use case (</span></span><span style="background-color: yellow; background-position: initial initial; background-repeat: initial initial;" class="">Overarching Purpose: Crime and abuse investigation by non-law enforcement parties)</span><span style="" class=""> f</span><span style="font-size: 12pt;" class="">or
properly credentialed security practitioners (as defined in SSAC 101), who have agreed on appropriate safeguards? If such access is not prohibited, can counsel provide examples of safeguards (such as pseudonymization) that should be considered? (BC)</span><u class=""></u><u class=""></u></p><p class="MsoNormal" style="margin-left:255pt">
<span style="font-size: 12pt;" class=""> </span><u class=""></u><u class=""></u></p><p class="MsoNormal">All the best,<u class=""></u><u class=""></u></p><p class="MsoNormal"> <u class=""></u><u class=""></u></p><p class="MsoNormal">Margie<u class=""></u><u class=""></u></p><p class="MsoNormal"> <u class=""></u><u class=""></u></p>
<div style="border-right:none;border-bottom:none;border-left:none;border-top:1pt solid rgb(181,196,223);padding:3pt 0in 0in" class=""><p class="MsoNormal"><b class=""><span style="font-size: 12pt;" class="">From:
</span></b><span style="font-size: 12pt;" class="">Gnso-epdp-legal <<a href="mailto:gnso-epdp-legal-bounces@icann.org" target="_blank" class="">gnso-epdp-legal-bounces@icann.org</a>> on behalf of Caitlin Tubergen <<a href="mailto:caitlin.tubergen@icann.org" target="_blank" class="">caitlin.tubergen@icann.org</a>><br class="">
<b class="">Date: </b>Tuesday, August 6, 2019 at 11:07 AM<br class="">
<b class="">To: </b>"<a href="mailto:gnso-epdp-legal@icann.org" target="_blank" class="">gnso-epdp-legal@icann.org</a>" <<a href="mailto:gnso-epdp-legal@icann.org" target="_blank" class="">gnso-epdp-legal@icann.org</a>><br class="">
<b class="">Subject: </b>[Gnso-epdp-legal] Notes and action items - EPDP Phase 2 Legal Committee Meeting #3</span><u class=""></u><u class=""></u></p>
</div>
<div class=""><p class="MsoNormal"> <u class=""></u><u class=""></u></p>
</div><p class="MsoNormal" style="margin-left:255pt;font-variant-caps:normal;text-align:start;word-spacing:0px">
<b class=""><span style="font-size: 12pt;" class="">Updated Question<span class="gmail-m_-7445691938696652461gmail-m-7161246621767108659apple-converted-space"> </span>11</span></b><span style="font-size: 12pt;" class="">: Can legal counsel be consulted to determine whether GDPR prevents
fast automated, and non-rate limited responses (as described in SSAC 101) to nonpublic WHOIS data for properly credentialed security practitioners (as defined in SSAC 101), who have agreed on appropriate safeguards? If such access is not prohibited, can counsel
provide examples of safeguards (such as pseudonymization) that should be considered? (BC)</span><u class=""></u><u class=""></u></p><p class="MsoNormal" style="margin-left:255pt;font-variant-caps:normal;text-align:start;word-spacing:0px">
<span style="font-size: 12pt;" class=""> </span><u class=""></u><u class=""></u></p>
</div>
</div><p class="MsoNormal">_______________________________________________<br class="">
Gnso-epdp-legal mailing list<br class="">
<a href="mailto:Gnso-epdp-legal@icann.org" target="_blank" class="">Gnso-epdp-legal@icann.org</a><br class="">
<a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__mm.icann.org_mailman_listinfo_gnso-2Depdp-2Dlegal&d=DwMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=_4XWSt8rUHZPiRG6CoP4Fnk_CCk4p550lffeMi3E1z8&m=4Ct67L7B_OjiOzhFeRkGiZRNhJIU_MbBQeGI63cNa5I&s=euxVLQNefiEYd-TqfcuyjR1kybnG8vqVeVwoDX9xeRo&e=" target="_blank" class="">https://mm.icann.org/mailman/listinfo/gnso-epdp-legal</a><br class="">
_______________________________________________<br class="">
By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (<a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_privacy_policy&d=DwMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=_4XWSt8rUHZPiRG6CoP4Fnk_CCk4p550lffeMi3E1z8&m=4Ct67L7B_OjiOzhFeRkGiZRNhJIU_MbBQeGI63cNa5I&s=R9nOdr9ruR6dzN9mAoEy3HqOqKeXAxluNM0CPWYOHQc&e=" target="_blank" class="">https://www.icann.org/privacy/policy</a>)
and the website Terms of Service (<a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_privacy_tos&d=DwMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=_4XWSt8rUHZPiRG6CoP4Fnk_CCk4p550lffeMi3E1z8&m=4Ct67L7B_OjiOzhFeRkGiZRNhJIU_MbBQeGI63cNa5I&s=FQVQkCt49mSrAD_a0inmlfD8HcQRjSFCSfnphDTMIy0&e=" target="_blank" class="">https://www.icann.org/privacy/tos</a>).
You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.<u class=""></u><u class=""></u></p>
</blockquote>
</div>
</div>
</div>
</blockquote></div>
_______________________________________________<br class="">Gnso-epdp-legal mailing list<br class=""><a href="mailto:Gnso-epdp-legal@icann.org" class="">Gnso-epdp-legal@icann.org</a><br class="">https://mm.icann.org/mailman/listinfo/gnso-epdp-legal<br class="">_______________________________________________<br class="">By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.</div></blockquote></div><br class=""></div></body></html>