<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal>Dear Brian and Legal Committee Members:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Thank you for the suggestions. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>At this time, there does not appear to be a lot of support within the Legal Committee to send the Initial Report, or a portion thereof, to Bird & Bird for its review. If members of the Legal Committee feel differently, please provide additional feedback by <b><u>Friday, 13 March</u></b>. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Thank you.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Best regards,<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Marika, Berry, and Caitlin<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:12.0pt;color:black'>From: </span></b><span style='font-size:12.0pt;color:black'>"King, Brian" <brian.king@markmonitor.com><br><b>Date: </b>Thursday, March 5, 2020 at 1:24 PM<br><b>To: </b>Caitlin Tubergen <caitlin.tubergen@icann.org>, "gnso-epdp-legal@icann.org" <gnso-epdp-legal@icann.org><br><b>Subject: </b>[Ext] Initial Report Sections for Bird & Bird to Review<o:p></o:p></span></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><p class=MsoNormal>Hi Caitlin, <o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>Thoughtful suggestions, as promised: <o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>Preliminary Recommendation #1. Accreditation<o:p></o:p></p><p class=MsoNormal><i>Not as a standalone section, since this appears to be primarily technical/operational as opposed to legal. This may be helpful background for Bird & Bird in reviewing Recommendation #16.</i><o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>Preliminary Recommendation #3. Criteria and Content of Requests<o:p></o:p></p><p class=MsoNormal><i>Not as a primary focus, but would not oppose this being a bottom-tier question if we have funding. </i><o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>Preliminary Recommendation #6. Contracted Party Authorization<o:p></o:p></p><p class=MsoNormal><i>Yes, propose to ask Bird & Bird to confirm whether a Contracted Party likely carries more liability in this scenario vs. in Recommendation #7.</i><o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>Preliminary Recommendation #7. Authorization for automated disclosure requests<o:p></o:p></p><p class=MsoNormal><i>Yes, propose to ask Bird & Bird to confirm whether a Contracted Party likely carries more liability in this scenario vs. in Recommendation #6, and also whether a Contracted Party carries more liability if it has outsourced its decision making to the Central Gateway vs. voluntarily taken on decision making itself. Bird & Bird should explore whether its previous controllership and liability guidance is changed in a scenario where the Contracted Party has no visibility into who the requestor is or why the data is being requested, and is merely required to provide the data upon instruction by ICANN as controller. </i><o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>Preliminary Recommendation #10. Acceptable Use Policy<o:p></o:p></p><p class=MsoNormal><i>Not as a standalone section. This may be helpful background for Bird & Bird in reviewing Recommendation #16.</i><o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>Preliminary Recommendation #11. Disclosure Requirement<o:p></o:p></p><p class=MsoNormal><i>Not as a primary focus, but would not oppose this being a third-tier priority question if we have funding. </i><o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>Preliminary Recommendation #14. Retention and Destruction of Data<o:p></o:p></p><p class=MsoNormal><i>Not as a standalone section. This may be helpful background for Bird & Bird in reviewing Recommendation #16.</i><o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>Preliminary Recommendation #16. Automation<o:p></o:p></p><p class=MsoNormal><i>Yes, propose to ask Bird & Bird to help us list the types of requests for which disclosure can be automated. We should also ask for a list of additional types of requests that can be automated if we add or improve safeguards and limitations, and/or if we enable and require the requestor to make an affirmation or allegation. Bird & Bird should be specific and constructive. </i><o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>Preliminary Recommendation #17. Logging<o:p></o:p></p><p class=MsoNormal><i>Only consider this section if analyzing logging is helpful to their analysis on automation. </i><o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>Preliminary Recommendation #18. Audits<o:p></o:p></p><p class=MsoNormal><i>Only consider this section if analyzing audits is helpful to their analysis on automation. </i><o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>Preliminary Recommendation #19. Mechanism for the evolution of SSAD<o:p></o:p></p><p class=MsoNormal><i>Yes, propose to ask Bird & Bird to confirm whether a Contracted Party likely carries more liability in this scenario if ICANN as controller may unilaterally evolve the SSAD to automate and take on decision making for different request types. Do Contracted Parties remain controllers in this scenario? How does their liability change (if at all)? </i><o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal><b><span lang=EN-GB style='font-size:10.0pt;color:black'>Brian J. King </span></b><span lang=EN-GB style='font-size:10.0pt;color:black'> <br>Director of Internet Policy and Industry Affairs</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-GB style='font-size:10.0pt;color:black'> </span><o:p></o:p></p><p class=MsoNormal><span lang=EN-GB style='font-size:10.0pt;color:black'>T +1 443 761 3726</span><u><span style='font-size:10.0pt;color:#0563C1'><a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__www.markmonitor.com&d=DwMFAg&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=8K75qGdDlOta4kh6k2F0jrT195M3tF3J_Fxcz6EvuG2kYKDeA67ZTEnthHXAPVXH&m=Yokcqp3-wDmupEiTUZWU25reSJGZ5RV4FH0PlFjZggI&s=1PBA3PaF9eIKl-JKiZ4CDrMeRpqze2Z_ZcgcfAYwPgE&e="><span lang=EN-GB style='color:#0563C1'><br></span><span style='color:#0563C1'>markmonitor.com</span> [markmonitor.com]</a></span></u><o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal><b><span lang=EN-GB style='font-size:10.0pt;color:black'>MarkMonitor<br></span></b><span lang=EN-GB style='font-size:10.0pt;color:black'>Protecting companies and consumers in a digital world</span><o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p></div></body></html>