<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:-webkit-standard;
panose-1:2 11 6 4 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:453137921;
mso-list-type:hybrid;
mso-list-template-ids:2031153486 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:110.0pt;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:146.0pt;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:182.0pt;
text-indent:-.25in;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:218.0pt;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:254.0pt;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:290.0pt;
text-indent:-.25in;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:326.0pt;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:362.0pt;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:398.0pt;
text-indent:-.25in;
font-family:Wingdings;}
@list l1
{mso-list-id:618487355;
mso-list-template-ids:1983120742;}
@list l1:level1
{mso-level-start-at:2;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level3
{mso-level-start-at:2;
mso-level-number-format:alpha-lower;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l2
{mso-list-id:849026519;
mso-list-template-ids:-98930868;}
@list l2:level1
{mso-level-start-at:2;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l2:level3
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3
{mso-list-id:1142116746;
mso-list-template-ids:-609195254;}
@list l3:level1
{mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3:level2
{mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3:level3
{mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3:level4
{mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3:level5
{mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3:level6
{mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3:level7
{mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3:level8
{mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3:level9
{mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l4
{mso-list-id:1239362011;
mso-list-template-ids:-829895472;}
@list l4:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l4:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l4:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l4:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l4:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l4:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l4:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l4:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l4:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l5
{mso-list-id:1417937783;
mso-list-template-ids:1251640358;}
@list l5:level1
{mso-level-start-at:3;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l5:level2
{mso-level-number-format:alpha-lower;
mso-level-text:"%2\)";
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:74.0pt;
text-indent:-20.0pt;}
@list l5:level3
{mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l5:level4
{mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l5:level5
{mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l5:level6
{mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l5:level7
{mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l5:level8
{mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l5:level9
{mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l6
{mso-list-id:1701929107;
mso-list-template-ids:1438033374;}
@list l6:level1
{mso-level-start-at:2;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l6:level2
{mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l6:level3
{mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l6:level4
{mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l6:level5
{mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l6:level6
{mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l6:level7
{mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l6:level8
{mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l6:level9
{mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l7
{mso-list-id:1816877133;
mso-list-type:hybrid;
mso-list-template-ids:914910384 -1037401690 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l7:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:.8in;
text-indent:-.25in;
mso-ansi-font-size:12.0pt;}
@list l7:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:1.3in;
text-indent:-.25in;}
@list l7:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
margin-left:1.8in;
text-indent:-9.0pt;}
@list l7:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:2.3in;
text-indent:-.25in;}
@list l7:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:2.8in;
text-indent:-.25in;}
@list l7:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
margin-left:3.3in;
text-indent:-9.0pt;}
@list l7:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:3.8in;
text-indent:-.25in;}
@list l7:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:4.3in;
text-indent:-.25in;}
@list l7:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
margin-left:4.8in;
text-indent:-9.0pt;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style>
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;color:black">Happy New Year!<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black">Here’s my homework regarding territorial scope:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black"> </span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">Rewritten Question:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"> <o:p></o:p></span></p>
<p class="MsoNormal" style="caret-color: rgb(0, 0, 0);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="color:black">In light of the Right to Be Forgotten Case regarding the reach of GDPR, and the recent guidelines published by the
<a href="https://edpb.europa.eu/sites/edpb/files/files/file1/edpb_guidelines_3_2018_territorial_scope_after_public_consultation_en.pdf">
EDPB on Geographic Scope</a>,<o:p></o:p></span></p>
<p class="MsoNormal" style="font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;caret-color: rgb(0, 0, 0);word-spacing:0px">
<span style="color:black"> <o:p></o:p></span></p>
<p class="MsoNormal" style="font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;caret-color: rgb(0, 0, 0);word-spacing:0px">
<span style="color:black">Does this ruling and the Guidelines affect:<o:p></o:p></span></p>
<ol start="1" type="1">
<li class="MsoListParagraph" style="color:black;margin-bottom:12.0pt;margin-left:.3in;mso-list:l7 level1 lfo8">
The advice given in<span class="apple-converted-space"> </span><a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Furldefense.proofpoint.com%2Fv2%2Furl%3Fu%3Dhttps-3A__nam06.safelinks.protection.outlook.com_-3Furl-3Dhttps-253A-252F-252Fcommunity.icann.org-252Fdownload-252Fattachments-252F102138857-252FICANN-252520-2D-252520Memo-252520on-252520Territorial-252520Scope-252520.docx-253Fversion-253D1-2526modificationDate-253D1552176561000-2526api-253Dv2-26data-3D02-257C01-257CMarksv-2540microsoft.com-257C0fc10369b86b4fb54cdb08d745d81ad8-257C72f988bf86f141af91ab2d7cd011db47-257C1-257C1-257C637054666773951714-26sdata-3D85hB3n-252BgHO5zltdzTm5Pmd-252FUeu0T7OL-252F4bywkCcb7dg-253D-26reserved-3D0%26d%3DDwMGaQ%26c%3DOGmtg_3SI10Cogwk-ShFiw%26r%3DqQNCXqU_XE2XIdXbawYmk-YDflYH6pd8ffXlzxU37OA%26m%3DqgqaikAoSyJzElcg7C-u09feQBWajzhT1JT2LBv05jg%26s%3D8TCbK69KiXCKrPpNO-KL9rKcsRkCISjzvCof8uKQBRs%26e%3D&data=02%7C01%7CMarksv%40microsoft.com%7C2925832daae546b63e0408d745f74dba%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637054800792839937&sdata=exadgrNqqCKVQ%2FLTBKZXXJMnBkfDjA9SNSTaJuX%2FH4Q%3D&reserved=0" title="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Furldefense.proofpoint.com%2Fv2%2Furl%3Fu%3Dhttps-3A__nam06.safelinks.protection.outlook.com_-3Furl-3Dhttps-253A-252F-252Fcommunity.icann.org-252Fdownload-252Fattachments-252F102138857-252FI"><span style="color:#954F72">Phase
1 Regarding Territorial Scope</span></a>, in Sections 4.2 or 6.2- 6.9? <span style="font-size:11.0pt"><o:p></o:p></span></li><li class="MsoListParagraph" style="color:black;margin-left:.3in;mso-list:l7 level1 lfo8">
<span style="font-family:-webkit-standard">The advice given in Q1-2 with respect to liability (Section 4 of the memo)?<o:p></o:p></span></li></ol>
<p class="MsoNormal" style="font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;caret-color: rgb(0, 0, 0);word-spacing:0px">
<span style="color:black">In light of this ECJ decision and the <a href="https://edpb.europa.eu/sites/edpb/files/files/file1/edpb_guidelines_3_2018_territorial_scope_after_public_consultation_en.pdf">
Geographic Scope Guidelines</a>, using the same assumptions identified for Q1 and Q2, would there be less risk under GDPR to contracted parties if:<o:p></o:p></span></p>
<ol start="2" type="1">
<ol start="1" type="1">
<ol start="1" type="a">
<li class="MsoListParagraph" style="color:black;mso-list:l2 level3 lfo6">the SSAD allowed automated disclosure responses to requests submitted by accredited entities for redacted data of registrants and/or controllers located outside of the EU, for legitimate
purposes (such as cybersecurity investigations and mitigation)<span class="apple-converted-space"><b> </b></span>and/or other fundamental rights<span class="apple-converted-space"> </span>such as<span class="apple-converted-space"> </span>intellectual property<span class="apple-converted-space"> </span>infringement
investigations<span class="apple-converted-space"> </span>(See Article 17, Section 2<span class="apple-converted-space"> </span><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__nam06.safelinks.protection.outlook.com_-3Furl-3Dhttps-253A-252F-252Feur-2Dlex.europa.eu-252Flegal-2Dcontent-252FEN-252FTXT-252F-253Furi-253DCELEX-253A12012P-252FTXT-26data-3D02-257C01-257CMarksv-2540microsoft.com-257C2925832daae546b63e0408d745f74dba-257C72f988bf86f141af91ab2d7cd011db47-257C1-257C1-257C637054800792819948-26sdata-3DRxgqL9eYdRavnaFqIDjzDOT4GPHJRSsmQ1-252Favz10vKw-253D-26reserved-3D0&d=DwMGaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=_4XWSt8rUHZPiRG6CoP4Fnk_CCk4p550lffeMi3E1z8&m=VLG2NlF9SKlO5Br01dwddo_lA4oncgv7PkSSSsw8ZV4&s=fPD2dxvOeBSKNBXQT0rUNkNPmaova0kNQcFCii_4G6Y&e=" title="https://urldefense.proofpoint.com/v2/url?u=https-3A__nam06.safelinks.protection.outlook.com_-3Furl-3Dhttps-253A-252F-252Feur-2Dlex.europa.eu-252Flegal-2Dcontent-252FEN-252FTXT-252F-253Furi-253DCELEX-253A12012P-252FTXT-26data-3D02-257C01-257CMarksv-2540mic"><span style="color:#954F72">https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:12012P/TXT</span></a>);and/or
<span style="font-size:11.0pt"><o:p></o:p></span></li></ol>
</ol>
</ol>
<ol start="2" type="1">
<ol start="1" type="1">
<ol start="2" type="a">
<li class="MsoListParagraph" style="color:black;mso-list:l1 level3 lfo7">ICANN served as the sole entity making disclosure decisions for the SSAD, and directly provided access to the redacted data from a processing center outside of the EU (such as from ICANN’s
Los Angeles Headquarters)?<o:p></o:p></li></ol>
</ol>
</ol>
<p class="MsoNormal" style="font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;caret-color: rgb(0, 0, 0);word-spacing:0px">
<span style="color:black"> All the best,<o:p></o:p></span></p>
<p class="MsoNormal" style="caret-color: rgb(0, 0, 0);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="color:black"> <o:p></o:p></span></p>
<p class="MsoNormal" style="caret-color: rgb(0, 0, 0);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="color:black"> Margie<o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:13.8pt;caret-color: rgb(0, 0, 0);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<b><span style="font-family:"Arial",sans-serif;color:#627C8E"> </span></b><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:13.8pt;caret-color: rgb(0, 0, 0);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<b><span style="font-family:"Arial",sans-serif;color:#627C8E"><img border="0" width="128" height="22" style="width:1.3333in;height:.2291in" id="Picture_x0020_2" src="cid:image001.gif@01D5C48D.7A2510E0"></span></b><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:13.8pt;caret-color: rgb(0, 0, 0);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<b><span style="font-size:8.0pt;font-family:"Arial",sans-serif;color:#627C8E">Margie Milam</span></b><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:13.8pt;caret-color: rgb(0, 0, 0);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="font-size:8.0pt;font-family:"Arial",sans-serif;color:#627C8E">Online IP Enforcement & Protection Lead | Legal IP</span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="caret-color: rgb(0, 0, 0);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="font-size:5.5pt;font-family:"Arial",sans-serif;color:#44546A">NOTICE: This email (including any attachments) may contain information that is private, confidential, or protected by attorney-client or other privilege. Unless you are the intended
recipient, you may not use, copy, or retransmit the email or its contents.</span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="caret-color: rgb(0, 0, 0);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="font-size:5.5pt;color:black"> </span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="caret-color: rgb(0, 0, 0);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="color:black"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="color:black">From: </span></b><span style="color:black">Gnso-epdp-legal <gnso-epdp-legal-bounces@icann.org> on behalf of Caitlin Tubergen <caitlin.tubergen@icann.org><br>
<b>Date: </b>Monday, January 6, 2020 at 5:22 AM<br>
<b>To: </b>"gnso-epdp-legal@icann.org" <gnso-epdp-legal@icann.org><br>
<b>Subject: </b>[Gnso-epdp-legal] Proposed Agenda - Legal Committee Meeting #13 - Tuesday, 7 Jan 2020 15:00 UTC<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black">Dear Legal Committee,</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black">Happy New Year!</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black">Please find below the proposed agenda for tomorrow’s Legal Committee call. As a reminder, the outstanding items from the last meeting, which are due in advance of tomorrow’s meeting, include:</span><o:p></o:p></p>
<p style="mso-margin-top-alt:10.0pt;margin-right:0in;margin-bottom:12.0pt;margin-left:0in;vertical-align:baseline">
<b><span style="color:black">Action Items associated with additional priority 1 and priority 2 questions</span></b><o:p></o:p></p>
<div style="border:none;border-bottom:solid windowtext 1.5pt;padding:0in 0in 1.0pt 0in">
<p class="MsoNormal"><span style="color:black">1. Margie to rephrase territorial scope question to address the question of if the finalized guidelines have any effect on the applicability of GDPR to registration data about registrants who are not residents
within the EEA? Previously-worded question: In light of the finalized guidelines on the territorial scope of the GDPR and the ECJ opinion on regarding the right to be forgotten (Google case), are there any modifications you would propose to your previous memo
on the territorial scope of the GDPR?</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:black"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:black">2. Tara to rephrase the SSAC Legal v. Natural question to rephrase the issue regarding transferring consent. Tara to review the
</span><a href="https://community.icann.org/pages/viewpage.action?pageId=105386422">Technical Contact memo from Phase 1</a><span style="color:black">. Additionally, Tara to refer to specific excerpts of guidance from the cited sources.
</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:black"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:black">Previously-worded question: </span>
<o:p></o:p></p>
<p class="MsoNormal"><span style="color:black"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:black">Registration data submitted by legal person registrants may contain the data of natural persons. A Phase 1 memo stated that registrars can rely on a registrant's self-identification as legal or natural person,
especially if risk is mitigated by taking further steps to ensure the accuracy of the registrant's designation. </span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:black"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:black">As a follow-up to that memo: what are the consent issues and requirements related to such designations? Can registrars state that it is the responsibility of a legal person registrant to obtain consent from any
natural person whose data it submits? </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:"Times New Roman",serif"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:black">As part of the analysis, please examine the GDPR policies and practices of the Internet protocol (IP address) registries RIPE NCC (the registry in Europe, based in the Netherlands) and ARIN (the registry in North
America, which has customer contacts in Europe). These registries publish the data of natural person contacts who are subject to the GDPR, publicly via their WHOIS services, by placing the choice and responsibility on their registrants, who are legal persons.
These IP address registries state mission justifications and collection purposes similar to those in ICANN's Temporary Specification.</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:"Times New Roman",serif"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:black">Please see:</span><o:p></o:p></p>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:12.0pt;margin-right:0in;margin-bottom:12.0pt;margin-left:0in">
<span style="color:black">1) “How We're Implementing the GDPR: Legal Grounds for Lawful Personal Data Processing and the RIPE Database”:</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:12.0pt;margin-right:0in;margin-bottom:12.0pt;margin-left:0in">
<a href="https://labs.ripe.net/Members/Athina/gdpr-legal-grounds-for-lawful-personal-data-processing-and-the-ripe-database%20%5blabs.ripe.net%5d">https://labs.ripe.net/Members/Athina/gdpr-legal-grounds-for-lawful-personal-data-processing-and-the-ripe-database
[labs.ripe.net]</a><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:12.0pt;margin-right:0in;margin-bottom:12.0pt;margin-left:0in">
<span style="color:black">2) “How We're Implementing the GDPR: The RIPE Database”:
</span><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__labs.ripe.net_Members_Athina_how-2Dwe-2Dre-2Dimplementing-2Dthe-2Dgdpr-2Dthe-2Dripe-2Ddatabase&d=DwMFaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=8K75qGdDlOta4kh6k2F0jrT195M3tF3J_Fxcz6EvuG2kYKDeA67ZTEnthHXAPVXH&m=9Y9HB3OlTZfz1no1-rFIekmLoJGp-tuExNdcqd9C86s&s=MHkNDZD5npTHhFCww7h37jH0dZVXjP3J6gC_3_MlKMA&e="><span style="color:black">https://labs.ripe.net/Members/Athina/how-we-re-implementing-the-gdpr-the-ripe-database
[labs.ripe.net]</span></a><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:12.0pt;margin-right:0in;margin-bottom:12.0pt;margin-left:0in">
<span style="color:black">3) "Personal Data Privacy Considerations At ARIN": </span>
<a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__teamarin.net_2018_03_20_personal-2Ddata-2Dprivacy-2Dconsiderations-2Dat-2Darin_&d=DwMFaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=8K75qGdDlOta4kh6k2F0jrT195M3tF3J_Fxcz6EvuG2kYKDeA67ZTEnthHXAPVXH&m=9Y9HB3OlTZfz1no1-rFIekmLoJGp-tuExNdcqd9C86s&s=pk0huv2aNSfvLj6S90UIZ4QJUIpAr9Ht-yJyf7pEC2g&e="><span style="color:black">https://teamarin.net/2018/03/20/personal-data-privacy-considerations-at-arin/
[teamarin.net]</span></a><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:12.0pt;margin-right:0in;margin-bottom:12.0pt;margin-left:0in">
<span style="color:black">4) ARIN "Data Accuracy": </span><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.arin.net_reference_materials_accuracy_&d=DwMFaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=8K75qGdDlOta4kh6k2F0jrT195M3tF3J_Fxcz6EvuG2kYKDeA67ZTEnthHXAPVXH&m=9Y9HB3OlTZfz1no1-rFIekmLoJGp-tuExNdcqd9C86s&s=ckReulFNZOhT8xWNRFYx6OBfLxsYr0RaqxOEgr_Em6c&e="><span style="color:black">https://www.arin.net/reference/materials/accuracy/
[arin.net]</span></a><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:12.0pt;margin-right:0in;margin-bottom:12.0pt;margin-left:0in">
<span style="color:black">5) ARIN Registration Services Agreement, paragraph 3: </span>
<a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.arin.net_about_corporate_agreements_rsa.pdf&d=DwMFaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=8K75qGdDlOta4kh6k2F0jrT195M3tF3J_Fxcz6EvuG2kYKDeA67ZTEnthHXAPVXH&m=9Y9HB3OlTZfz1no1-rFIekmLoJGp-tuExNdcqd9C86s&s=A__4cvbv8CN_aWnGqBhNkF9hSAUmtHzIDL2uiGtMtLI&e="><span style="color:black">https://www.arin.net/about/corporate/agreements/rsa.pdf
[arin.net]</span></a><o:p></o:p></p>
<div style="border:none;border-bottom:solid windowtext 1.5pt;padding:0in 0in 1.0pt 0in">
<p class="MsoNormal"><span style="color:black">6) ARIN Privacy Policy: </span><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.arin.net_about_privacy_&d=DwMFaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=8K75qGdDlOta4kh6k2F0jrT195M3tF3J_Fxcz6EvuG2kYKDeA67ZTEnthHXAPVXH&m=9Y9HB3OlTZfz1no1-rFIekmLoJGp-tuExNdcqd9C86s&s=99xt1m5gH1mu0-Pt3ERCRTLchE2_nxsr0OLfK-0uyls&e="><span style="color:black">https://www.arin.net/about/privacy/
[arin.net]</span></a><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:"Times New Roman",serif"> </span><o:p></o:p></p>
</div>
<p style="mso-margin-top-alt:10.0pt;margin-right:0in;margin-bottom:12.0pt;margin-left:0in;vertical-align:baseline">
<span style="color:black">3. Laureen to review the previously-submitted questions on WHOIS accuracy and ARS and note if the questions are still relevant. If they are, Laureen to provide a rationale as how this question will assist the EPDP Team in moving forward.
The numbers below correspond to the </span><a href="https://docs.google.com/document/d/1pS9Pibanj-Hp6LztZpeERtxdoLsnp4y_-do0vU5VJuw/edit">WHOIS Accuracy and ARS Priority 2 worksheet</a><span style="color:black">.</span><o:p></o:p></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" style="border-collapse:collapse">
<tbody>
<tr style="height:16.0pt">
<td valign="top" style="border:solid black 1.0pt;background:#D9E2F3;padding:0in 5.75pt 0in 5.75pt;height:16.0pt">
<p class="MsoNormal" style="mso-margin-top-alt:2.0pt;margin-right:0in;margin-bottom:2.0pt;margin-left:0in">
<span style="color:black">4. If current verification statistics provide that a number of data is inaccurate, would that be considered a metric to deduce that the accuracy principle is not served in a reasonable manner as demanded by the GDPR? (GAC)</span><o:p></o:p></p>
</td>
</tr>
<tr style="height:16.0pt">
<td valign="top" style="border:solid black 1.0pt;border-top:none;background:#D9E2F3;padding:0in 5.75pt 0in 5.75pt;height:16.0pt">
<p class="MsoNormal" style="mso-margin-top-alt:2.0pt;margin-right:0in;margin-bottom:2.0pt;margin-left:0in">
<span style="color:black">5. According to the GDPR all personal data are processed based on the principle that they are necessary for the purpose for which they are collected. If those data are necessary, how can the purpose be served while the data are inaccurate?
(GAC)</span><o:p></o:p></p>
</td>
</tr>
<tr style="height:16.0pt">
<td valign="top" style="border:solid black 1.0pt;border-top:none;background:#D9E2F3;padding:0in 5.75pt 0in 5.75pt;height:16.0pt">
<p class="MsoNormal" style="mso-margin-top-alt:2.0pt;margin-right:0in;margin-bottom:2.0pt;margin-left:0in">
<span style="color:black">6. Can you provide an analysis on the third parties mentioned in para 19 on which "ICANN and the relevant parties may rely on to confirm the accuracy of personal data if it is reasonable to do so"? Do they become in such a scenario
data processors? (GAC)</span><o:p></o:p></p>
</td>
</tr>
<tr style="height:16.0pt">
<td valign="top" style="border:solid black 1.0pt;border-top:none;background:#D9E2F3;padding:0in 5.75pt 0in 5.75pt;height:16.0pt">
<p class="MsoNormal" style="mso-margin-top-alt:2.0pt;margin-right:0in;margin-bottom:2.0pt;margin-left:0in">
<span style="color:black">7. How is the accuracy principle in connection to the parties' liability has to be understood in light of the accountability principle of the GDPR? What are the responsibilities of ICANN and the contracted parties (who are subject
to the GDPR) under Chapter IV of the GDPR? If the contracted parties (as data controllers) engage third entities as processors (e.g. to provide data back-up services), what are the responsibilities of these entities? What does this mean in terms of liabilities
(in light of Art. 82 GDPR)? (GAC)</span><o:p></o:p></p>
</td>
</tr>
<tr style="height:16.0pt">
<td valign="top" style="border:solid black 1.0pt;border-top:none;background:#D9E2F3;padding:0in 5.75pt 0in 5.75pt;height:16.0pt">
<p class="MsoNormal" style="mso-margin-top-alt:2.0pt;margin-right:0in;margin-bottom:2.0pt;margin-left:0in">
<span style="color:black">8. While it is up to the registrants to provide accurate details about themselves and it is up to the registrants not to mistakenly identify themselves as natural or legal persons, the Memo on "Natural vs Legal persons" provides interesting
ideas/suggestions for the contracted parties to proactively ensuring the reliability of information provided, including through measures to independently verify the data. Could similar mechanisms be identified also for ensuring the reliability of the contact
details of the registrant? Can best practices be drawn from the ccTLDs? (GAC)</span><o:p></o:p></p>
</td>
</tr>
</tbody>
</table>
<p style="mso-margin-top-alt:10.0pt;margin-right:0in;margin-bottom:12.0pt;margin-left:0in;vertical-align:baseline">
<span style="color:black">Thank you.</span><o:p></o:p></p>
<p style="mso-margin-top-alt:10.0pt;margin-right:0in;margin-bottom:12.0pt;margin-left:0in;vertical-align:baseline">
<span style="color:black">Best regards, </span><o:p></o:p></p>
<p style="mso-margin-top-alt:10.0pt;margin-right:0in;margin-bottom:12.0pt;margin-left:0in;vertical-align:baseline">
<span style="color:black">Marika, Berry, and Caitlin</span><o:p></o:p></p>
<p style="mso-margin-top-alt:10.0pt;margin-right:0in;margin-bottom:12.0pt;margin-left:0in;vertical-align:baseline">
<span style="color:black">--</span><o:p></o:p></p>
<p class="MsoNormal"><b>EPDP Phase 2 Legal Committee Meeting #13</b><o:p></o:p></p>
<p class="MsoNormal"><b>7 January 2020</b><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in;text-indent:-.25in"> <o:p></o:p></p>
<ol style="margin-top:0in" start="1" type="1">
<li class="MsoNormal" style="color:black;mso-list:l3 level1 lfo1"><b>Roll Call & SOI Updates </b><o:p></o:p></li></ol>
<p class="MsoNormal" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:12.0pt;margin-left:73.0pt">
<b><span style="color:black"> </span></b><o:p></o:p></p>
<ol style="margin-top:0in" start="2" type="1">
<li class="MsoNormal" style="color:black;mso-list:l6 level1 lfo2"><b>Continued Substantive Review of Priority 1 (SSAD) Legal Questions Submitted to Date</b><o:p></o:p></li></ol>
<p class="MsoNormal"><span style="color:black"> </span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:73.0pt;text-indent:-19.0pt"><span style="color:black">a)</span><span style="font-size:7.0pt;font-family:"Times New Roman",serif;color:black"> </span><span style="color:black">Substantive review of SSAD questions
(awaiting updated territorial scope question from Margie)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:black"> </span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:1.25in;text-indent:-.25in;mso-list:l4 level1 lfo3">
<![if !supportLists]><span style="font-size:10.0pt;font-family:Symbol"><span style="mso-list:Ignore">·<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><b><u><span style="color:black">Updated Territorial Scope Question</span></u></b><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:1.25in;text-indent:-.25in;mso-list:l4 level1 lfo3">
<![if !supportLists]><span style="font-size:10.0pt;font-family:Symbol"><span style="mso-list:Ignore">·<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="color:black">Note: Margie to rephrase territorial scope question to address the question of if the finalized guidelines have any effect on the applicability of GDPR to registration data about registrants who are not
residents within the EEA? </span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:1.25in"><span style="color:black"> </span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:1.25in"><span style="color:black">Previously-worded question: In light of the finalized guidelines on the territorial scope of the GDPR and the ECJ opinion on regarding the right to be forgotten (Google case), are there
any modifications you would propose to your previous memo on the territorial scope of the GDPR?</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:1.25in"><span style="color:black"> </span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:73.0pt;text-indent:-19.0pt"><span style="color:black">b)</span><span style="font-size:7.0pt;font-family:"Times New Roman",serif;color:black"> </span><span style="color:black">Agree on next steps</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:73.0pt;text-indent:-19.0pt"><span style="color:black"> </span><o:p></o:p></p>
<ol start="3" type="1">
<li class="MsoListParagraph" style="color:black;mso-list:l5 level1 lfo4"><b><span style="font-family:"Calibri",sans-serif">Continue review of Priority 2 Legal Questions
</span></b><o:p></o:p></li></ol>
<p class="MsoListParagraph" style="margin-left:74.0pt;text-indent:-20.0pt;mso-list:l5 level2 lfo4">
<![if !supportLists]><span style="mso-list:Ignore">a)<span style="font:7.0pt "Times New Roman"">
</span></span><![endif]><span style="font-family:"Calibri",sans-serif;color:black">Substantive review of Priority 2 Legal Questions:</span><o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:.5in"><span style="font-family:"Calibri",sans-serif;color:black">i.<b> Legal vs. Natural</b> (awaiting updated question from Tara):</span><o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:.5in"><span style="font-family:"Calibri",sans-serif;color:black">Previously-worded question: Registration data submitted by legal person registrants may contain the data of natural persons. A Phase 1 memo stated
that registrars can rely on a registrant's self-identification as legal or natural person, especially if risk is mitigated by taking further steps to ensure the accuracy of the registrant's designation.
</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="color:black">As a follow-up to that memo: what are the consent issues and requirements related to such designations? Can registrars state that it is the responsibility of a legal person registrant
to obtain consent from any natural person whose data it submits? </span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="color:black"> </span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="color:black">As part of the analysis, please examine the GDPR policies and practices of the Internet protocol (IP address) registries RIPE NCC (the registry in Europe, based in the Netherlands) and
ARIN (the registry in North America, which has customer contacts in Europe). These registries publish the data of natural person contacts who are subject to the GDPR, publicly via their WHOIS services, by placing the choice and responsibility on their registrants,
who are legal persons. These IP address registries state mission justifications and collection purposes similar to those in ICANN's Temporary Specification.</span><o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:.5in"><span style="font-family:"Calibri",sans-serif;color:black">Please see:</span><o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:.5in"><span style="font-family:"Calibri",sans-serif;color:black">1) “How We're Implementing the GDPR: Legal Grounds for Lawful Personal Data Processing and the RIPE Database”:</span><o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:.5in"><span style="font-family:"Calibri",sans-serif;color:black">https://labs.ripe.net/Members/Athina/gdpr-legal-grounds-for-lawful-personal-data-processing-and-the-ripe-database [labs.ripe.net]</span><o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:.5in"><span style="font-family:"Calibri",sans-serif;color:black">2) “How We're Implementing the GDPR: The RIPE Database”: https://labs.ripe.net/Members/Athina/how-we-re-implementing-the-gdpr-the-ripe-database
[labs.ripe.net]</span><o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:.5in"><span style="font-family:"Calibri",sans-serif;color:black">3) "Personal Data Privacy Considerations At ARIN": https://teamarin.net/2018/03/20/personal-data-privacy-considerations-at-arin/ [teamarin.net]</span><o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:.5in"><span style="font-family:"Calibri",sans-serif;color:black">4) ARIN "Data Accuracy": https://www.arin.net/reference/materials/accuracy/ [arin.net]</span><o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:.5in"><span style="font-family:"Calibri",sans-serif;color:black">5) ARIN Registration Services Agreement, paragraph 3: https://www.arin.net/about/corporate/agreements/rsa.pdf [arin.net]</span><o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:.5in"><span style="font-family:"Calibri",sans-serif;color:black">6) ARIN Privacy Policy: https://www.arin.net/about/privacy/ [arin.net]</span><o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:.5in"><span style="font-family:"Calibri",sans-serif;color:black">ii.
<b>WHOIS Accuracy and ARS</b> (Awaiting for Laureen’s confirmation/analysis that question is still needed, specifically in light of already-approved questions related to accuracy):</span><o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:.5in"><span style="font-family:"Calibri",sans-serif;color:black">4. If current verification statistics provide that a number of data is inaccurate, would that be considered a metric to deduce that the accuracy
principle is not served in a reasonable manner as demanded by the GDPR? (GAC)</span><o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:.5in"><span style="font-family:"Calibri",sans-serif;color:black">5. According to the GDPR all personal data are processed based on the principle that they are necessary for the purpose for which they are collected.
If those data are necessary, how can the purpose be served while the data are inaccurate? (GAC)</span><o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:.5in"><span style="font-family:"Calibri",sans-serif;color:black">6. Can you provide an analysis on the third parties mentioned in para 19 on which "ICANN and the relevant parties may rely on to confirm the accuracy
of personal data if it is reasonable to do so"? Do they become in such a scenario data processors? (GAC)</span><o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:.5in"><span style="font-family:"Calibri",sans-serif;color:black">7. How is the accuracy principle in connection to the parties' liability has to be understood in light of the accountability principle of the GDPR?
What are the responsibilities of ICANN and the contracted parties (who are subject to the GDPR) under Chapter IV of the GDPR? If the contracted parties (as data controllers) engage third entities as processors (e.g. to provide data back-up services), what
are the responsibilities of these entities? What does this mean in terms of liabilities (in light of Art. 82 GDPR)? (GAC)</span><o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:.5in"><span style="font-family:"Calibri",sans-serif;color:black">8. While it is up to the registrants to provide accurate details about themselves and it is up to the registrants not to mistakenly identify themselves
as natural or legal persons, the Memo on "Natural vs Legal persons" provides interesting ideas/suggestions for the contracted parties to proactively ensuring the reliability of information provided, including through measures to independently verify the data.
Could similar mechanisms be identified also for ensuring the reliability of the contact details of the registrant? Can best practices be drawn from the ccTLDs? (GAC)</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:73.0pt;text-indent:-19.0pt"><span style="color:black">b)</span><span style="font-size:7.0pt;font-family:"Times New Roman",serif;color:black"> </span><span style="color:black">Agree on next steps</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:1.0in"><b><span style="color:black"> </span></b><o:p></o:p></p>
<ol start="4" type="1">
<li class="MsoListParagraph" style="color:black;mso-list:l5 level1 lfo4"><b><span style="font-family:"Calibri",sans-serif">Wrap and confirm next meeting to be scheduled </span></b><o:p></o:p></li></ol>
<p class="MsoListParagraph" style="margin-left:74.0pt;text-indent:-20.0pt;mso-list:l5 level2 lfo4">
<![if !supportLists]><span style="mso-list:Ignore">a)<span style="font:7.0pt "Times New Roman"">
</span></span><![endif]><span style="font-family:"Calibri",sans-serif;color:black">Confirm action items</span><o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:74.0pt;text-indent:-20.0pt;mso-list:l5 level2 lfo4">
<![if !supportLists]><span style="mso-list:Ignore">b)<span style="font:7.0pt "Times New Roman"">
</span></span><![endif]><span style="font-family:"Calibri",sans-serif;color:black">AOB</span><o:p></o:p></p>
<ul type="disc">
<li class="MsoListParagraph" style="color:black;margin-left:74.0pt;mso-list:l0 level1 lfo5">
<span style="font-family:"Calibri",sans-serif">Note: No objections received re: Bird and Bird’s updates to the memo summaries by the pre-holiday deadline. The summaries are now included in the Initial Report Google Doc.</span><o:p></o:p></li><li class="MsoListParagraph" style="color:black;margin-left:74.0pt;mso-list:l0 level1 lfo5">
<span style="font-family:"Calibri",sans-serif">Note: No objections received regarding questions to submit for plenary review by the pre-holiday deadline. Following this call, EPDP Support Staff forward the questions to the plenary for its review (with highlighting
removed). </span><o:p></o:p></li></ul>
<p class="MsoListParagraph" style="margin-left:74.0pt;text-indent:-20.0pt;mso-list:l5 level2 lfo4">
<![if !supportLists]><span style="mso-list:Ignore">c)<span style="font:7.0pt "Times New Roman"">
</span></span><![endif]><span style="font-family:"Calibri",sans-serif;color:black">The next Legal Committee meeting is scheduled for
<b>Tuesday, 21 January at 15:00 UTC.</b></span><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p style="mso-margin-top-alt:10.0pt;margin-right:0in;margin-bottom:12.0pt;margin-left:0in;vertical-align:baseline">
<span style="color:black"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Times New Roman",serif;color:black"> </span><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
</body>
</html>