<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:675576418;
mso-list-template-ids:-1915602096;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D">Hi everyone,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D">Here is a brief summary of my thoughts on why we don’t need to ask the proposed question on 6.1(e) and can rely on Bird & Bird’s existing advice.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;color:#1F497D">Proposed Question:
</span></b><span style="font-size:11.0pt;color:#1F497D">To what extent can disclosures of non-public registration data to third parties for the purposes identified in the Final Report Rec. 1 be justified under GDPR’ Article 6(1)e (public interest), in light
of the EC’s recognition that: <i>“With regard to the formulation of purpose two, the European Commission acknowledges ICANN’s central role and responsibility for ensuring the security, stability and resilience of the Internet Domain Name System and that in
doing so it acts in the public interest.”</i><o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;color:#1F497D"><o:p> </o:p></span></b></p>
<p class="MsoNormal" style="margin-bottom:6.0pt"><b><span style="font-size:11.0pt;color:#1F497D">Position:
</span></b><span style="font-size:11.0pt;color:#1F497D">We should not ask Bird & Bird whether disclosure of non-public registration data is justified under 6.1(e) because, per Bird & Bird’s existing advice, a necessary condition for the use of 6.1(e) is an
existing basis in EU or Member State law.<o:p></o:p></span></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoNormal" style="color:#1F497D;margin-bottom:6.0pt;mso-list:l0 level1 lfo1">
<span style="font-size:11.0pt">Processing of personal data is permissible under<u><a href="https://gdpr-info.eu/art-6-gdpr/"> 6.1(e)</a></u> if the “processing is necessary for the performance of a task carried out in the public interest or in the exercise
of official authority vested in the controller.” However, “[t]he basis for the processing referred to in [6.1(e)] shall be laid down by: Union law; or Member State law to which the controller is subject.” (<i>See</i><a href="https://gdpr-info.eu/art-6-gdpr/"><i>
</i>6.3</a>). <a href="https://gdpr-info.eu/recitals/no-45/"> Recital 45</a> also confirms that “[w]here processing . . . is necessary for the performance of a task carried out in the public interest or in the exercise of official authority,
<b><u>the processing should have a basis in Union or Member State law</u></b>.” (emphasis mine).<o:p></o:p></span></li><li class="MsoNormal" style="color:#1F497D;margin-bottom:6.0pt;mso-list:l0 level1 lfo1">
<span style="font-size:11.0pt">In other words, processing under 6.1(e) has two required conditions: it must be (i) necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
<b><u>AND</u></b> (ii) the processing should have a basis in Union or Member State law. (emphasis mine)<o:p></o:p></span></li><li class="MsoNormal" style="color:#1F497D;margin-bottom:6.0pt;mso-list:l0 level1 lfo1">
<span style="font-size:11.0pt">The existing memo from Bird & Bird on Question 4 confirms that a basis in Union or Member State law is required. “<a href="https://gdpr-info.eu/art-6-gdpr/">Art 6(3)</a> makes clear that
<b><u>the task or authority in question must be laid down by EU or Member State law</u></b> and that the processing must meet an objective of public interest and be proportionate to the legitimate aim pursued.” (emphasis mine)<o:p></o:p></span></li><li class="MsoNormal" style="color:#1F497D;margin-bottom:6.0pt;mso-list:l0 level1 lfo1">
<span style="font-size:11.0pt">Even assuming for the purpose of argument that the EC letter is authoritative in determining whether ICANN has an “objective of public interest”, it is apparent that ICANN currently has no authority to perform that task based
on EU or Member State law. <o:p></o:p></span></li><li class="MsoNormal" style="color:#1F497D;margin-bottom:6.0pt;mso-list:l0 level1 lfo1">
<span style="font-size:11.0pt">In light of the guidance from the ICANN Board to our committee to “avoid[] duplication and look[] to past and current efforts, where available, as there may be existing legal advice the EPDP Team could utilize,” I suggest we strike
this question since Bird & Bird’s existing advice confirms that 6.1(e) is not applicable in this context.<o:p></o:p></span></li></ul>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D">Thanks,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D">Matt<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:11.0pt">From:</span></b><span style="font-size:11.0pt"> Gnso-epdp-legal <gnso-epdp-legal-bounces@icann.org>
<b>On Behalf Of </b>Caitlin Tubergen<br>
<b>Sent:</b> Friday, October 11, 2019 12:55 PM<br>
<b>To:</b> gnso-epdp-legal@icann.org<br>
<b>Subject:</b> [Gnso-epdp-legal] Outstanding action items reminder<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Dear Phase 2 Legal Committee:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Gentle reminder of the following outstanding action items from our last meeting:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">1. Matthew, Brian, Margie, Stephanie and Hadia to provide high-level summaries of legal memos for the plenary to review by Monday, 14 October.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2. LC to review Margie’s proposed updated text to Question 11 (re: security practitioners) – question to be discussed during the next call on Tuesday, 15 October.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">3. Brian and Matthew to summarize the two positions re: questions 12 and 13 and propose whether Bird & Bird should opine on this. Legal Committee to discuss the positions during its next meeting.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Thank you.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Best regards,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Marika, Berry, and Caitlin<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Times New Roman",serif;color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>