<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.paragraph, li.paragraph, div.paragraph
{mso-style-name:paragraph;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle20
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
span.EmailStyle22
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:54620466;
mso-list-type:hybrid;
mso-list-template-ids:-1023382660 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l1
{mso-list-id:583146561;
mso-list-template-ids:-1330353286;}
@list l1:level1
{mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Calibri",sans-serif;
mso-ansi-font-weight:bold;
mso-bidi-font-weight:bold;}
@list l1:level2
{mso-level-number-format:alpha-lower;
mso-level-text:"%2\)";
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:73.0pt;
text-indent:-19.0pt;}
@list l1:level3
{mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level4
{mso-level-text:"\(%4\)";
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level5
{mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level6
{mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level7
{mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level8
{mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level9
{mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l2
{mso-list-id:777717004;
mso-list-type:hybrid;
mso-list-template-ids:-874847414 67698689 67698691 -1336368414 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l2:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:1.0in;
text-indent:-.25in;
font-family:Symbol;}
@list l2:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:1.5in;
text-indent:-.25in;
font-family:"Courier New";}
@list l2:level3
{mso-level-start-at:0;
mso-level-number-format:bullet;
mso-level-text:•;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:163.0pt;
text-indent:-37.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-font-family:"Times New Roman";}
@list l2:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:2.5in;
text-indent:-.25in;
font-family:Symbol;}
@list l2:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:3.0in;
text-indent:-.25in;
font-family:"Courier New";}
@list l2:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:3.5in;
text-indent:-.25in;
font-family:Wingdings;}
@list l2:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:4.0in;
text-indent:-.25in;
font-family:Symbol;}
@list l2:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:4.5in;
text-indent:-.25in;
font-family:"Courier New";}
@list l2:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:5.0in;
text-indent:-.25in;
font-family:Wingdings;}
@list l3
{mso-list-id:841047307;
mso-list-type:hybrid;
mso-list-template-ids:-165763228 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l3:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:.75in;
text-indent:-.25in;
font-family:Symbol;}
@list l3:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:1.25in;
text-indent:-.25in;
font-family:"Courier New";}
@list l3:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:1.75in;
text-indent:-.25in;
font-family:Wingdings;}
@list l3:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:2.25in;
text-indent:-.25in;
font-family:Symbol;}
@list l3:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:2.75in;
text-indent:-.25in;
font-family:"Courier New";}
@list l3:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:3.25in;
text-indent:-.25in;
font-family:Wingdings;}
@list l3:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:3.75in;
text-indent:-.25in;
font-family:Symbol;}
@list l3:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:4.25in;
text-indent:-.25in;
font-family:"Courier New";}
@list l3:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:4.75in;
text-indent:-.25in;
font-family:Wingdings;}
@list l4
{mso-list-id:1728720017;
mso-list-template-ids:402220;}
@list l4:level1
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";
mso-ansi-font-weight:bold;
mso-bidi-font-weight:bold;}
@list l4:level2
{mso-level-number-format:alpha-lower;
mso-level-text:"%2\)";
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:73.0pt;
text-indent:-19.0pt;}
@list l4:level3
{mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l4:level4
{mso-level-text:"\(%4\)";
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l4:level5
{mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l4:level6
{mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l4:level7
{mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l4:level8
{mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l4:level9
{mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style>
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal" style="margin-bottom:12.0pt;mso-line-height-alt:11.65pt"><span class="apple-converted-space"><span style="color:black">Hi –<o:p></o:p></span></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt;mso-line-height-alt:11.65pt"><span class="apple-converted-space"><span style="color:black">Here is an updated question 12/13 for your consideration:</span></span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:10.5pt;color:black">Background: </span>
</b><span style="font-size:10.5pt;color:black">The <a href="https://www.icann.org/en/system/files/correspondence/odonohue-to-marby-03may19-en.pdf">
recent EC Letter</a> provides clarification regarding the possible legal bases for disclosure of non-public registration data to in the section entitled “Legal Bases for Processing”, and noted:<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-left:.5in"><i><span style="font-size:10.5pt;color:black">“As explained in our comments, Art. 6(1)f GDPR (legitimate interest) is one of the six possible legal bases provided under Art. 6(1) GDPR. For instance, disclosure of
nonpublic gTLD registration data could be necessary for compliance with a legal obligation to which the contracted parties are subject (see Art. 6(1)c GDPR).</span></i><span style="font-size:10.5pt;color:black">”
<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="font-size:10.5pt;color:black"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="font-size:10.5pt;color:black">and<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="font-size:10.5pt;color:black"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="font-size:10.5pt;color:black"><i>“With regard to the formulation of purpose two, the European Commission acknowledges ICANN’s central role and responsibility for ensuring the security, stability and
resilience of the Internet Domain Name System and that in doing so it acts in the public interest.”</i></span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:10.5pt;color:black">Questions:</span></b><span style="font-size:10.5pt;color:black">
<o:p></o:p></span></p>
<ul type="disc">
<li class="MsoListParagraph" style="color:black;mso-list:l0 level1 lfo6"><span style="font-size:10.5pt">In light of these statements from the EC, are there any updates to the prior memos submitted by B&B regarding the applicable bases for disclosure of non-public
registration data to third parties for the purposes identified in EPDP Phase 1 Final Report Rec. 1 (Final Report), such as the memo on 6(1)(b)? <o:p></o:p></span></li><li class="MsoListParagraph" style="color:black;mso-list:l0 level1 lfo6"><span style="font-size:10.5pt">To what extent can disclosures of non-public registration data to third parties for the purposes identified in the Final Report Rec. 1 be justified under
GDPR’ Article 6(1)e (public interest), in light of the EC’s recognition that:<o:p></o:p></span></li></ul>
<p class="MsoNormal" style="margin-left:.5in"><i><span style="font-size:10.5pt;color:black">“With regard to the formulation of purpose two, the European Commission acknowledges ICANN’s central role and responsibility for ensuring the security, stability and
resilience of the Internet Domain Name System and that in doing so it acts in the public interest.”</span></i><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">All the best,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Margie<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="color:black">From: </span></b><span style="color:black">Gnso-epdp-legal <gnso-epdp-legal-bounces@icann.org> on behalf of Caitlin Tubergen <caitlin.tubergen@icann.org><br>
<b>Date: </b>Monday, September 2, 2019 at 7:25 AM<br>
<b>To: </b>"gnso-epdp-legal@icann.org" <gnso-epdp-legal@icann.org><br>
<b>Subject: </b>[Gnso-epdp-legal] Proposed agenda - EPDP Phase 2 Legal Committee Meeting #6<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:11.0pt">Dear EPDP Phase 2 Legal Committee,
</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Please find the agenda for the next Legal Committee call on 3 September at 14:00 UTC below.</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">As a reminder, </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraph" style="color:black;margin-top:0in;margin-bottom:0in;margin-left:.25in;margin-bottom:.0001pt;mso-list:l3 level1 lfo1">
Thomas, Volker, Brian and Margie to work together on refining Question 11. Legal Committee to review updated text during the next call.<o:p></o:p></li><li class="MsoListParagraph" style="color:black;margin-top:0in;margin-bottom:12.0pt;margin-left:.25in;mso-list:l3 level1 lfo1">
Margie to review the 6(1)(b) memo and reword Question 12/13 to add more specificity (in response to feedback from the plenary team).<o:p></o:p></li></ul>
<p class="MsoNormal"><span style="font-size:11.0pt">Thank you.</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Best regards,</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Marika, Berry, and Caitlin</span><o:p></o:p></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;color:black">--</span></b><o:p></o:p></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;color:black"> </span></b><o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><span style="font-size:11.0pt">EPDP Phase 2 Legal Committee Meeting #6</span></b><o:p></o:p></p>
<div style="border:none;border-bottom:solid windowtext 1.5pt;padding:0in 0in 1.0pt 0in">
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><span style="font-size:11.0pt">Tuesday, 3 September 14:00 UTC</span></b><o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><span style="font-size:11.0pt">Proposed Annotated Agenda</span></b><o:p></o:p></p>
</div>
<ol style="margin-top:0in" start="1" type="1">
<li class="MsoListParagraphCxSpFirst" style="color:black;margin-top:0in;margin-bottom:12.0pt;mso-add-space:auto;mso-list:l1 level1 lfo2">
<b>Roll Call & SOI Updates </b><o:p></o:p></li><li class="MsoListParagraphCxSpLast" style="color:black;margin-top:0in;margin-bottom:0in;margin-bottom:.0001pt;mso-add-space:auto;mso-list:l1 level1 lfo2">
<b>Continued Substantive Review of Priority 1 (SSAD) Legal Questions Submitted to Date</b><o:p></o:p></li></ol>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black"> </span><o:p></o:p></p>
<p class="MsoListParagraph" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:73.0pt;margin-bottom:.0001pt;mso-add-space:auto;text-indent:-19.0pt;mso-list:l1 level2 lfo2">
<![if !supportLists]><span style="mso-list:Ignore">a)<span style="font:7.0pt "Times New Roman"">
</span></span><![endif]><span style="color:black">Substantive review of SSAD questions (beginning where LC left off last week)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black"> </span><o:p></o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraph" style="margin-top:0in;margin-bottom:0in;margin-left:.5in;margin-bottom:.0001pt;mso-add-space:auto;mso-list:l2 level1 lfo3">
<b><span style="color:black;border:solid windowtext 1.0pt;padding:0in">Updated Question 11
</span></b><span style="color:black;border:solid windowtext 1.0pt;padding:0in"> </span><span style="color:black">(proposed by Margie)<i>:
</i>Is it permissible under GDPR to provide fast, automated, and non-rate limited responses (as described in SSAC 101) to nonpublic WHOIS data for properly credentialed security practitioners<sup>1
</sup>(as defined in SSAC 101) who are responsible for defense against e-crimes (including network operators, providers of online services, commercial security services, cyber-crime investigators) for use in investigations and mitigation activities to protect
their network, information systems or services (as referenced in GDPR Recital 49) and have agreed on appropriate safeguards? Or would any automated disclosure carry a potential for liability of the disclosing party, or the controllers or processors of such
data? Can counsel provide examples of safeguards (such as pseudonymization/anonymization) that should be considered?</span><o:p></o:p></li></ul>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:71.25pt"><span style="font-size:11.0pt;color:black">For purposes of this question, please assume the following safeguards are in place:
</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:71.25pt"><span style="font-size:11.0pt;color:black"> </span><o:p></o:p></p>
<ul style="margin-top:0in" type="disc">
<ul style="margin-top:0in" type="circle">
<li class="MsoListParagraphCxSpFirst" style="color:black;margin-top:0in;margin-bottom:0in;margin-left:.5in;margin-bottom:.0001pt;mso-add-space:auto;mso-list:l2 level2 lfo3">
Disclosure is required under CP’s contract with ICANN (resulting from Phase 2 EPDP policy).<o:p></o:p></li><li class="MsoListParagraphCxSpMiddle" style="color:black;margin-top:0in;margin-bottom:0in;margin-left:.5in;margin-bottom:.0001pt;mso-add-space:auto;mso-list:l2 level2 lfo3">
CP’s contract with ICANN requires CP to notify the data subject of the purposes for which, and types of entities by which, personal data may be processed. CP is required to notify data subject of this with the opportunity to opt out before the data subject
enters into the registration agreement with the CP, and again annually via the ICANN-required registration data accuracy reminder. CP has done so.<o:p></o:p></li><li class="MsoListParagraphCxSpLast" style="color:black;margin-top:0in;margin-bottom:0in;margin-left:.5in;margin-bottom:.0001pt;mso-add-space:auto;mso-list:l2 level2 lfo3">
<span style="color:windowtext">ICANN or its designee has validated/verified the requestor’s identity, and required in each instance that the requestor: </span><o:p></o:p></li></ul>
</ul>
<p class="paragraph" style="mso-margin-top-alt:5.0pt;margin-right:0in;margin-bottom:0in;margin-left:163.0pt;margin-bottom:.0001pt;text-indent:-37.0pt;mso-list:l2 level3 lfo3;vertical-align:baseline">
<![if !supportLists]><span style="font-family:"Calibri",sans-serif"><span style="mso-list:Ignore">•<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">represents that it has a lawful basis for requesting and processing the data, </span><o:p></o:p></p>
<p class="paragraph" style="mso-margin-top-alt:5.0pt;margin-right:0in;margin-bottom:0in;margin-left:163.0pt;margin-bottom:.0001pt;text-indent:-37.0pt;mso-list:l2 level3 lfo3;vertical-align:baseline">
<![if !supportLists]><span style="font-family:"Calibri",sans-serif"><span style="mso-list:Ignore">•<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">provides its lawful basis, </span><o:p></o:p></p>
<p class="paragraph" style="mso-margin-top-alt:5.0pt;margin-right:0in;margin-bottom:0in;margin-left:163.0pt;margin-bottom:.0001pt;text-indent:-37.0pt;mso-list:l2 level3 lfo3;vertical-align:baseline">
<![if !supportLists]><span style="font-family:"Calibri",sans-serif"><span style="mso-list:Ignore">•<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">represents that it is requesting only the data necessary for its purpose, </span><o:p></o:p></p>
<p class="paragraph" style="mso-margin-top-alt:5.0pt;margin-right:0in;margin-bottom:0in;margin-left:163.0pt;margin-bottom:.0001pt;text-indent:-37.0pt;mso-list:l2 level3 lfo3;vertical-align:baseline">
<![if !supportLists]><span style="font-family:"Calibri",sans-serif"><span style="mso-list:Ignore">•<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">agrees to process the data in accordance with GDPR, and </span><o:p></o:p></p>
<p class="paragraph" style="mso-margin-top-alt:5.0pt;margin-right:0in;margin-bottom:0in;margin-left:163.0pt;margin-bottom:.0001pt;text-indent:-37.0pt;mso-list:l2 level3 lfo3;vertical-align:baseline">
<![if !supportLists]><span style="font-family:"Calibri",sans-serif"><span style="mso-list:Ignore">•<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">agrees to EU standard contractual clauses for the data transfer. </span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:11.0pt;color:black"> </span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:11.0pt;color:black"> </span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:11.0pt;color:black">Footnote 1: SSAC defines “security practitioners” in SSAC 101 as those who have a responsibility to perform specific types of functions (as specified in Section 3) related
to the identification and mitigation of malicious activity, and the correction of problems that negatively affect services and users online.</span><o:p></o:p></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt"> </span></b><o:p></o:p></p>
<div style="border:none;border-bottom:solid windowtext 1.5pt;padding:0in 0in 1.0pt 0in">
<p class="MsoNormal"><b><span style="font-size:11.0pt;background:yellow;mso-highlight:yellow">Status:
</span></b><span style="font-size:11.0pt;background:yellow;mso-highlight:yellow">Thomas, Volker, Brian and Margie to work together on refining this question. Legal Committee to review during the next call.</span><o:p></o:p></p>
</div>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraph" style="color:black;margin-top:0in;margin-bottom:12.0pt;margin-left:.5in;mso-add-space:auto;line-height:11.65pt;mso-list:l2 level1 lfo3">
<b><span style="border:solid windowtext 1.0pt;padding:0in">Updated Question 12 and 13
</span></b>: LC to review simplified question before sending to EPDP Team for sign off: In light of the<span class="apple-converted-space"> </span><span style="color:windowtext"><a href="https://www.icann.org/en/system/files/correspondence/odonohue-to-marby-03may19-en.pdf" title="https://www.icann.org/en/system/files/correspondence/odonohue-to-marby-03may19-en.pdf"><span style="color:#954F72">3
May 2019 correspondence from the European Commission</span></a></span>, are any updates on the<span class="apple-converted-space"> </span><span style="color:windowtext"><a href="https://community.icann.org/download/attachments/102138857/6%281%29%28b%29%20Memo.docx?version=1&modificationDate=1548874809000&api=v2"><span style="color:#954F72">previous
memo on 6(1)(b)</span></a></span><span class="apple-converted-space"> </span>necessary?<span class="apple-converted-space"> </span><o:p></o:p></li></ul>
<div style="border:none;border-bottom:solid windowtext 1.5pt;padding:0in 0in 1.0pt 0in">
<p class="MsoNormal" style="margin-bottom:12.0pt;line-height:11.65pt"><span class="apple-converted-space"><b><span style="font-size:11.0pt;color:black;background:yellow;mso-highlight:yellow">Status</span></b></span><span class="apple-converted-space"><span style="font-size:11.0pt;color:black;background:yellow;mso-highlight:yellow">:
Further to the feedback from the plenary team, Margie to review the </span></span><span style="font-size:11.0pt"><a href="https://community.icann.org/download/attachments/102138857/6%281%29%28b%29%20Memo.docx?version=1&modificationDate=1548874809000&api=v2"><span style="color:#954F72;background:yellow;mso-highlight:yellow">previous
memo on 6(1)(b)</span></a><span class="apple-converted-space"><span style="color:black;background:yellow;mso-highlight:yellow"> and propose updated and specific language for review by the Legal Committee.</span></span></span><o:p></o:p></p>
</div>
<ul type="disc">
<li class="MsoListParagraph" style="color:black;margin-left:.5in;mso-add-space:auto;mso-list:l2 level1 lfo3">
<b><span style="border:solid windowtext 1.0pt;padding:0in">Question 6 </span></b><b><i>:
</i></b>Within the context of an SSAD, in addition to determining its own lawful basis for disclosing data, does the requestee (entity that houses the requested data) need to assess the lawful basis of the third-party requestor? (Question from ICANN65 from
GAC/IPC)<o:p></o:p></li></ul>
<div style="border:none;border-bottom:solid windowtext 1.5pt;padding:0in 0in 1.0pt 0in">
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><span style="font-size:11.0pt;color:black;background:yellow;mso-highlight:yellow">Status</span></b><span style="font-size:11.0pt;color:black;background:yellow;mso-highlight:yellow">:
awaiting updated text from Brian/Georgios</span><o:p></o:p></p>
</div>
<ol start="3" type="1">
<li class="MsoListParagraph" style="color:black;mso-list:l1 level1 lfo2">Additional questions/issues raised for discussion<o:p></o:p></li></ol>
<p class="MsoListParagraphCxSpMiddle" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:73.0pt;margin-bottom:.0001pt;mso-add-space:auto;text-indent:-19.0pt;mso-list:l1 level2 lfo2">
<![if !supportLists]><span style="mso-list:Ignore">a)<span style="font:7.0pt "Times New Roman"">
</span></span><![endif]><span style="color:black">Suggestion from Farzaneh: Add a general question about how to carry out the balancing test
</span><o:p></o:p></p>
<p class="MsoListParagraphCxSpMiddle" style="margin-left:73.0pt;mso-add-space:auto;text-indent:-19.0pt;line-height:11.65pt;mso-list:l1 level2 lfo2">
<![if !supportLists]><span style="mso-list:Ignore">b)<span style="font:7.0pt "Times New Roman"">
</span></span><![endif]><span style="color:black">Draft question from Hadia: </span>
<o:p></o:p></p>
<p class="MsoListParagraphCxSpMiddle" style="margin-left:73.0pt;mso-add-space:auto;line-height:11.65pt">
<span style="color:black"> </span><o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:73.0pt;line-height:11.65pt"><span style="color:black">Part of the rights that GDPR gives to individual users are in relation to automated decision making. In the context of gTLD registration data, automated decision
making could be particularly useful when evaluating requests for disclosure of non public registration data. The decision making would typically involve examining the request, the supporting documents and the lawful basis of the controller/processor for disclosure
in addition, to performing the balancing test in case article 6(1)f is being used as the lawful basis for disclosure. The decision would typically be based on factual information/data as well as maybe digitally created data. The automated decision would particularly
lead to quicker and consistent decisions especially where a large number of requests are being analyzed.</span><o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:73.0pt;line-height:11.65pt"><span style="color:black">The EPDP team would appreciate Bird & Bird answers to the following:</span><o:p></o:p></p>
<ul type="circle">
<ol start="1" type="a">
<ol start="1" type="1">
<li class="MsoListParagraph" style="color:black;line-height:11.65pt;mso-list:l4 level3 lfo4">
The potential risks to the controllers/processors associated with automated decision making especially that a margin of error could always exist<o:p></o:p></li><li class="MsoListParagraph" style="color:black;line-height:11.65pt;mso-list:l4 level3 lfo4">
The conditions/precautions that should be applied if automated decision making is to be used.<o:p></o:p></li><li class="MsoListParagraph" style="color:black;line-height:11.65pt;mso-list:l4 level3 lfo4">
Could a balancing test be used to weigh up the risks of using the results and how could this be best done.<o:p></o:p></li></ol>
</ol>
</ul>
<p class="MsoListParagraph" style="margin-left:1.0in;line-height:11.65pt"><span style="color:black"> </span><o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:1.0in;line-height:11.65pt"><span style="color:black;background:yellow;mso-highlight:yellow">Note: Legal Committee agreed to review legal advice received from first batch of questions and assess whether this question,
or a permutation thereof, is needed.</span><o:p></o:p></p>
<p class="MsoListParagraphCxSpLast" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:73.0pt;margin-bottom:.0001pt;mso-add-space:auto;text-indent:-19.0pt;mso-list:l1 level2 lfo2">
<![if !supportLists]><span style="mso-list:Ignore">c)<span style="font:7.0pt "Times New Roman"">
</span></span><![endif]><span style="color:black">Agree on next steps</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black"> </span><o:p></o:p></p>
<ol style="margin-top:0in" start="4" type="1">
<li class="MsoListParagraphCxSpFirst" style="color:black;margin-top:0in;margin-bottom:0in;margin-bottom:.0001pt;mso-add-space:auto;mso-list:l1 level1 lfo2">
<b>Wrap and confirm next meeting to be scheduled </b><o:p></o:p></li></ol>
<p class="MsoListParagraphCxSpMiddle" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:73.0pt;margin-bottom:.0001pt;mso-add-space:auto;text-indent:-19.0pt;mso-list:l1 level2 lfo2">
<![if !supportLists]><span style="mso-list:Ignore">a)<span style="font:7.0pt "Times New Roman"">
</span></span><![endif]><span style="color:black">Confirm action items</span><o:p></o:p></p>
<p class="MsoListParagraphCxSpLast" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:73.0pt;margin-bottom:.0001pt;mso-add-space:auto;text-indent:-19.0pt;mso-list:l1 level2 lfo2">
<![if !supportLists]><span style="mso-list:Ignore">b)<span style="font:7.0pt "Times New Roman"">
</span></span><![endif]><span style="color:black">The next LC Meeting will take place on Tuesday, 17 September at 14:00 UTC.</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
</div>
</body>
</html>