<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>I think we need to add in the liability analysis to complete the
picture. Even if something is not strictly prohibited, it may
carry the risk of liability. <br>
</p>
<p>Volker<br>
</p>
<div class="moz-cite-prefix">Am 10.08.2019 um 21:39 schrieb Leon
Sanchez:<br>
</div>
<blockquote type="cite"
cite="mid:55A16C00-366F-4E16-9D06-2D2838B9EE86@board.icann.org">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
Would everyone feel comfortable if, instead of submitting the
question along the complete use case, we submitted the question
with a summary of the situation that the use case tries to
address?
<div class=""><br class="">
</div>
<div class=""><br class="">
<div class="">
<div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);
font-family: Helvetica; font-size: 12px; font-style: normal;
font-variant-caps: normal; font-weight: normal;
letter-spacing: normal; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-size-adjust:
auto; -webkit-text-stroke-width: 0px; text-decoration:
none;">Kind regards,</div>
<div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);
font-family: Helvetica; font-size: 12px; font-style: normal;
font-variant-caps: normal; font-weight: normal;
letter-spacing: normal; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-size-adjust:
auto; -webkit-text-stroke-width: 0px; text-decoration:
none;"><br class="">
</div>
<div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);
font-family: Helvetica; font-size: 12px; font-style: normal;
font-variant-caps: normal; font-weight: normal;
letter-spacing: normal; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-size-adjust:
auto; -webkit-text-stroke-width: 0px; text-decoration:
none;"><br class="">
</div>
<div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);
font-family: Helvetica; font-size: 12px; font-style: normal;
font-variant-caps: normal; font-weight: normal;
letter-spacing: normal; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-size-adjust:
auto; -webkit-text-stroke-width: 0px; text-decoration:
none;"><br class="">
</div>
<div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);
font-family: Helvetica; font-size: 12px; font-style: normal;
font-variant-caps: normal; font-weight: normal;
letter-spacing: normal; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-size-adjust:
auto; -webkit-text-stroke-width: 0px; text-decoration:
none;">Leon Sanchez</div>
<div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);
font-family: Helvetica; font-size: 12px; font-style: normal;
font-variant-caps: normal; font-weight: normal;
letter-spacing: normal; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-size-adjust:
auto; -webkit-text-stroke-width: 0px; text-decoration:
none;">Board Director</div>
<div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);
font-family: Helvetica; font-size: 12px; font-style: normal;
font-variant-caps: normal; font-weight: normal;
letter-spacing: normal; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-size-adjust:
auto; -webkit-text-stroke-width: 0px; text-decoration:
none;">Internet Corporation for Assigned Names and Numbers
(ICANN)</div>
<div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);
font-family: Helvetica; font-size: 12px; font-style: normal;
font-variant-caps: normal; font-weight: normal;
letter-spacing: normal; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-size-adjust:
auto; -webkit-text-stroke-width: 0px; text-decoration:
none;"><a href="mailto:leon.sanchez@board.icann.org"
class="" moz-do-not-send="true">leon.sanchez@board.icann.org</a></div>
<div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);
font-family: Helvetica; font-size: 12px; font-style: normal;
font-variant-caps: normal; font-weight: normal;
letter-spacing: normal; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-size-adjust:
auto; -webkit-text-stroke-width: 0px; text-decoration:
none;" class=""><br class="">
</div>
<br class="Apple-interchange-newline">
</div>
<div><br class="">
<blockquote type="cite" class="">
<div class="">El 9 ago 2019, a las 15:19, Tatiana Tropina
<<a href="mailto:tatiana.tropina@gmail.com" class=""
moz-do-not-send="true">tatiana.tropina@gmail.com</a>>
escribió:</div>
<br class="Apple-interchange-newline">
<div class="">
<div dir="ltr" class="">Hi Margie,
<div class="">thanks for your reply. I guess then we
will need to make a caveat that the case is just
illustrative and is still being finalised by the
group. I do find some issues with references to the
legislation made in that case and the applicability of
cited recitals, which possibly have to be changed or
brought in conformity with applicable law/regulation.
So if we submit the case fully and not just as a few
lines illustrating "what's the case is about" -- there
might be a problem. </div>
<div class="">Again, I guess we can discuss how to
proceed during the next meeting of the legal team, but
I want to flag this for now.</div>
<div class="">Cheers,</div>
<div class="">Tanya </div>
</div>
<br class="">
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On Fri, 9 Aug 2019 at
22:10, Margie Milam <<a
href="mailto:margiemilam@fb.com" class=""
moz-do-not-send="true">margiemilam@fb.com</a>>
wrote:<br class="">
</div>
<blockquote class="gmail_quote" style="margin:0px 0px
0px 0.8ex;border-left:1px solid
rgb(204,204,204);padding-left:1ex">
<div class="" lang="EN-US">
<div
class="gmail-m_-7445691938696652461WordSection1">
<p class="MsoNormal">Hi Tatiana – </p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">The use case is meant to be
illustrative, to facilitate Bird & Bird’s
general understanding in order to provide its
analysis. As a result I don’t believe that the
use case needs to be finalized before it is
presented.</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">All the best,</p>
<p class="MsoNormal">Margie</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal"> </p>
<div
style="border-right:none;border-bottom:none;border-left:none;border-top:1pt
solid rgb(181,196,223);padding:3pt 0in 0in"
class="">
<p class="MsoNormal"><b class=""><span
style="font-size: 12pt;" class="">From: </span></b><span
style="font-size: 12pt;" class="">Tatiana
Tropina <<a
href="mailto:tatiana.tropina@gmail.com"
target="_blank" class=""
moz-do-not-send="true">tatiana.tropina@gmail.com</a>><br
class="">
<b class="">Date: </b>Friday, August 9,
2019 at 10:20 AM<br class="">
<b class="">To: </b>Margie Milam <<a
href="mailto:margiemilam@fb.com"
target="_blank" class=""
moz-do-not-send="true">margiemilam@fb.com</a>><br
class="">
<b class="">Cc: </b>Caitlin Tubergen <<a
href="mailto:caitlin.tubergen@icann.org"
target="_blank" class=""
moz-do-not-send="true">caitlin.tubergen@icann.org</a>>,
"<a href="mailto:gnso-epdp-legal@icann.org"
target="_blank" class=""
moz-do-not-send="true">gnso-epdp-legal@icann.org</a>"
<<a
href="mailto:gnso-epdp-legal@icann.org"
target="_blank" class=""
moz-do-not-send="true">gnso-epdp-legal@icann.org</a>><br
class="">
<b class="">Subject: </b>Re:
[Gnso-epdp-legal] Notes and action items -
EPDP Phase 2 Legal Committee Meeting #3</span></p>
</div>
<div class="">
<p class="MsoNormal"> </p>
</div>
<div class="">
<p class="MsoNormal">Hi Margie, </p>
<div class="">
<p class="MsoNormal">a question - is this the
case we discussed on the call yesterday? I
just wonder if there is a need to reach a
general agreement within the bigger EPDP
team on this use case before we forward the
question to legal -- there were some
questions about the use case yesterday and
SSAC said they would reply. I think there is
a need to wait until at least the issues
with the case are resolved before sending
the question to legal? - but would listen to
what others say. </p>
</div>
<div class="">
<p class="MsoNormal">But as we have 1,5 weeks
before the next meeting, maybe this could be
sorted. </p>
</div>
<div class="">
<p class="MsoNormal">Wish you and all others a
great weekend,</p>
</div>
<div class="">
<p class="MsoNormal">Cheers,</p>
</div>
<div class="">
<p class="MsoNormal">Tanya </p>
</div>
</div>
<p class="MsoNormal"> </p>
<div class="">
<div class="">
<p class="MsoNormal">On Fri, 9 Aug 2019 at
18:55, Margie Milam <<a
href="mailto:margiemilam@fb.com"
target="_blank" class=""
moz-do-not-send="true">margiemilam@fb.com</a>>
wrote:</p>
</div>
<blockquote
style="border-top:none;border-right:none;border-bottom:none;border-left:1pt
solid rgb(204,204,204);padding:0in 0in 0in
6pt;margin-left:4.8pt;margin-right:0in"
class="">
<div class="">
<div class="">
<p class="MsoNormal"
style="margin-bottom:2pt"><span
style="font-size: 12pt;" class="">Hi-</span></p>
<p class="MsoNormal"
style="margin-bottom:2pt"><span
style="font-size: 12pt;" class="">Following
up on the action items from Tuesday’s
call - I added the use case we
discussed on yesterday’s call to
Question 11.</span></p>
<p class="MsoNormal"
style="margin-bottom:2pt"><b class=""><span
style="font-size: 12pt;" class=""> </span></b></p>
<p class="MsoNormal"
style="margin-bottom:2pt"><b class=""><span
style="font-size: 12pt;" class="">Updated
Question 11</span></b><span
style="font-size: 12pt;" class="">:
Can legal counsel be consulted to
determine whether GDPR prevents fast
automated, and non-rate limited
responses (as described in SSAC 101)
to nonpublic WHOIS data
<span style="background:yellow"
class="">with regards to the SSAC
use case (</span></span><span
style="background-color: yellow;
background-position: initial initial;
background-repeat: initial initial;"
class="">Overarching Purpose: Crime
and abuse investigation by non-law
enforcement parties)</span><span
style="" class=""> f</span><span
style="font-size: 12pt;" class="">or
properly credentialed security
practitioners (as defined in SSAC
101), who have agreed on appropriate
safeguards? If such access is not
prohibited, can counsel provide
examples of safeguards (such as
pseudonymization) that should be
considered? (BC)</span></p>
<p class="MsoNormal"
style="margin-left:255pt">
<span style="font-size: 12pt;" class=""> </span></p>
<p class="MsoNormal">All the best,</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Margie</p>
<p class="MsoNormal"> </p>
<div
style="border-right:none;border-bottom:none;border-left:none;border-top:1pt
solid rgb(181,196,223);padding:3pt 0in
0in" class="">
<p class="MsoNormal"><b class=""><span
style="font-size: 12pt;" class="">From:
</span></b><span style="font-size:
12pt;" class="">Gnso-epdp-legal <<a
href="mailto:gnso-epdp-legal-bounces@icann.org" target="_blank" class=""
moz-do-not-send="true">gnso-epdp-legal-bounces@icann.org</a>>
on behalf of Caitlin Tubergen <<a
href="mailto:caitlin.tubergen@icann.org" target="_blank" class=""
moz-do-not-send="true">caitlin.tubergen@icann.org</a>><br
class="">
<b class="">Date: </b>Tuesday,
August 6, 2019 at 11:07 AM<br
class="">
<b class="">To: </b>"<a
href="mailto:gnso-epdp-legal@icann.org"
target="_blank" class=""
moz-do-not-send="true">gnso-epdp-legal@icann.org</a>"
<<a
href="mailto:gnso-epdp-legal@icann.org"
target="_blank" class=""
moz-do-not-send="true">gnso-epdp-legal@icann.org</a>><br
class="">
<b class="">Subject: </b>[Gnso-epdp-legal]
Notes and action items - EPDP Phase
2 Legal Committee Meeting #3</span></p>
</div>
<div class="">
<p class="MsoNormal"> </p>
</div>
<p class="MsoNormal"
style="margin-left:255pt;font-variant-caps:normal;text-align:start;word-spacing:0px"><b
class=""><span style="font-size:
12pt;" class="">Updated Question<span
class="gmail-m_-7445691938696652461gmail-m-7161246621767108659apple-converted-space"> </span>11</span></b><span
style="font-size: 12pt;" class="">:
Can legal counsel be consulted to
determine whether GDPR prevents fast
automated, and non-rate limited
responses (as described in SSAC 101)
to nonpublic WHOIS data for properly
credentialed security practitioners
(as defined in SSAC 101), who have
agreed on appropriate safeguards? If
such access is not prohibited, can
counsel provide examples of safeguards
(such as pseudonymization) that should
be considered? (BC)</span></p>
<p class="MsoNormal"
style="margin-left:255pt;font-variant-caps:normal;text-align:start;word-spacing:0px"><span
style="font-size: 12pt;" class=""> </span></p>
</div>
</div>
<p class="MsoNormal">_______________________________________________<br
class="">
Gnso-epdp-legal mailing list<br class="">
<a href="mailto:Gnso-epdp-legal@icann.org"
target="_blank" class=""
moz-do-not-send="true">Gnso-epdp-legal@icann.org</a><br
class="">
<a
href="https://urldefense.proofpoint.com/v2/url?u=https-3A__mm.icann.org_mailman_listinfo_gnso-2Depdp-2Dlegal&d=DwMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=_4XWSt8rUHZPiRG6CoP4Fnk_CCk4p550lffeMi3E1z8&m=4Ct67L7B_OjiOzhFeRkGiZRNhJIU_MbBQeGI63cNa5I&s=euxVLQNefiEYd-TqfcuyjR1kybnG8vqVeVwoDX9xeRo&e="
target="_blank" class=""
moz-do-not-send="true">https://mm.icann.org/mailman/listinfo/gnso-epdp-legal</a><br
class="">
_______________________________________________<br class="">
By submitting your personal data, you
consent to the processing of your personal
data for purposes of subscribing to this
mailing list accordance with the ICANN
Privacy Policy (<a
href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_privacy_policy&d=DwMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=_4XWSt8rUHZPiRG6CoP4Fnk_CCk4p550lffeMi3E1z8&m=4Ct67L7B_OjiOzhFeRkGiZRNhJIU_MbBQeGI63cNa5I&s=R9nOdr9ruR6dzN9mAoEy3HqOqKeXAxluNM0CPWYOHQc&e="
target="_blank" class=""
moz-do-not-send="true">https://www.icann.org/privacy/policy</a>)
and the website Terms of Service (<a
href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_privacy_tos&d=DwMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=_4XWSt8rUHZPiRG6CoP4Fnk_CCk4p550lffeMi3E1z8&m=4Ct67L7B_OjiOzhFeRkGiZRNhJIU_MbBQeGI63cNa5I&s=FQVQkCt49mSrAD_a0inmlfD8HcQRjSFCSfnphDTMIy0&e="
target="_blank" class=""
moz-do-not-send="true">https://www.icann.org/privacy/tos</a>).
You can visit the Mailman link above to
change your membership status or
configuration, including unsubscribing,
setting digest-style delivery or disabling
delivery altogether (e.g., for a vacation),
and so on.</p>
</blockquote>
</div>
</div>
</div>
</blockquote>
</div>
_______________________________________________<br
class="">
Gnso-epdp-legal mailing list<br class="">
<a href="mailto:Gnso-epdp-legal@icann.org" class=""
moz-do-not-send="true">Gnso-epdp-legal@icann.org</a><br
class="">
<a class="moz-txt-link-freetext" href="https://mm.icann.org/mailman/listinfo/gnso-epdp-legal">https://mm.icann.org/mailman/listinfo/gnso-epdp-legal</a><br
class="">
_______________________________________________<br
class="">
By submitting your personal data, you consent to the
processing of your personal data for purposes of
subscribing to this mailing list accordance with the ICANN
Privacy Policy (<a class="moz-txt-link-freetext" href="https://www.icann.org/privacy/policy">https://www.icann.org/privacy/policy</a>) and
the website Terms of Service
(<a class="moz-txt-link-freetext" href="https://www.icann.org/privacy/tos">https://www.icann.org/privacy/tos</a>). You can visit the
Mailman link above to change your membership status or
configuration, including unsubscribing, setting
digest-style delivery or disabling delivery altogether
(e.g., for a vacation), and so on.</div>
</blockquote>
</div>
<br class="">
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
Gnso-epdp-legal mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Gnso-epdp-legal@icann.org">Gnso-epdp-legal@icann.org</a>
<a class="moz-txt-link-freetext" href="https://mm.icann.org/mailman/listinfo/gnso-epdp-legal">https://mm.icann.org/mailman/listinfo/gnso-epdp-legal</a>
_______________________________________________
By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (<a class="moz-txt-link-freetext" href="https://www.icann.org/privacy/policy">https://www.icann.org/privacy/policy</a>) and the website Terms of Service (<a class="moz-txt-link-freetext" href="https://www.icann.org/privacy/tos">https://www.icann.org/privacy/tos</a>). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.</pre>
</blockquote>
<div class="moz-signature">-- <br>
Volker A. Greimann<br>
General Counsel and Policy Manager<br>
<strong style="border-bottom: 3px solid #5C46B5">KEY-SYSTEMS GMBH</strong><br>
<br>
T: +49 6894 9396901<br>
M: +49 6894 9396851<br>
F: +49 6894 9396851<br>
W: <a class="moz-txt-link-abbreviated" href="http://www.key-systems.net">www.key-systems.net</a><br>
<br>
Key-Systems GmbH is a company registered at the local court of
Saarbruecken, Germany with the registration no. HR B 18835<br>
CEO: Alexander Siffrin<br>
<br>
Part of the CentralNic Group PLC (LON: CNIC) a company registered
in England and Wales with company number 8576358.</div>
</body>
</html>