<div dir="ltr"><div>Thanks Laureen, I like how concise the rewrite is. My problem is twofold however:</div><div>1) It still relies on the problematic differentiation of legal vs natural which in my view does not confer an automatic benefit as the data designated as legal entity data may still contain in it protected personal information. We would be better served if we ensure the distinction is made between what type of data is actually used.</div><div>2) By comparing a voluntary disclosure decision by the registrant with a required differentiation, we are essentially comparing apples and oranges. One is consent-based, voluntary and free, and the other is forced. That in itself already leads to the obvious conclusion that both cannot easily be compared, hence my proposal to allow for a voluntary confirmation of "no personal data here" here as well. <br></div><div><br></div><div>My suggestion of shifting the disclosure to the SSAD serves two main purposes: <br></div><div>1) It prevents harvesting and collection of the data and thereby abuse that would evidently follow full disclosure in the RDS, thereby reducing legal risks.</div><div>2) It strengthens the purpose of the SSAD by ensuring it remains a tool for all RDS data sets.</div><div>3) It provides a potential path to more automation, thereby reducing response times (and increasing reliability) for requesters and reducing review times for CPs. <br></div><div><br></div><div>Best,<br></div><div></div><div><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><span lang="EN-US">-- <br>Volker A. Greimann<br>General Counsel and Policy Manager<br><b>KEY-SYSTEMS GMBH</b><br><br>T: +49 6894 9396901<br>M: +49 6894 9396851<br>F: +49 6894 9396851<br>W: </span><a href="http://www.key-systems.net/" style="color:rgb(17,85,204)" target="_blank"><span lang="EN-US">www.key-systems.net</span></a><span lang="EN-US"><br><br>Key-Systems GmbH is a company registered at the local court of Saarbruecken, Germany with the registration no. HR B 18835<br>CEO: Oliver Fries and Robert Birkner<br><br>Part of the CentralNic Group PLC (LON: CNIC) a company registered in England and Wales with company number 8576358.<br><br></span><span style="font-family:Roboto,sans-serif;font-size:14px;white-space:pre-wrap;background-color:rgb(248,249,250)">This email and any files transmitted are confidential and intended only for the person(s) directly addressed. If you are not the intended recipient, any use, copying, transmission, distribution, or other forms of dissemination is strictly prohibited. If you have received this email in error, please notify the sender immediately and permanently delete this email with any files that may be attached.</span></div></div></div></div></div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Feb 3, 2021 at 8:25 PM Kapin, Laureen <<a href="mailto:LKAPIN@ftc.gov">LKAPIN@ftc.gov</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div lang="EN-US">
<div class="gmail-m_-4428117110781403560WordSection1">
<p class="MsoNormal"><span style="font-size:14pt;font-family:"Arial",sans-serif;color:rgb(0,32,96)">Thanks to Volker and Hadia and weighing in –<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:14pt;font-family:"Arial",sans-serif;color:rgb(0,32,96)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:14pt;font-family:"Arial",sans-serif;color:rgb(0,32,96)"> This question aims at obtaining a comparative assessment of the legal risks associated with granting consent to publish personal information with publishing registrant
data after engaging in a series of protective steps with the registrant to educate and verify the election to identify the data as non-personal. Volker’s proposal seems to introduce a separate policy issue for discussion rather than focusing the question
more precisely. <u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:14pt;font-family:"Arial",sans-serif;color:rgb(0,32,96)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:14pt;font-family:"Arial",sans-serif;color:rgb(0,32,96)"> Here’s my proposed rewrite:<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:14pt;font-family:"Arial",sans-serif;color:rgb(0,32,96)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:14pt;font-family:"Arial",sans-serif;color:rgb(0,32,96)"> Please compare the legal risks for contracted parties associated with providing a registrant the opportunity to consent to publication of their data with the
requirement to identify itself as either an individual or organization (legal entity) assuming that the Registrar adopts the procedures outlined in Bird & Bird’s January 25, 2019 memo (i.e., notify/explain; confirm; verify; opportunity to correct).
<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:14pt;font-family:"Arial",sans-serif;color:rgb(0,32,96)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:14pt;font-family:"Arial",sans-serif;color:rgb(0,32,96)"> On a related note, it would be useful to get data on the amounts of fines assessed (if any) under comparable circumstances (disclosure of personal data after
reasonable steps taken to guide registrant in making an election that may result in disclosure).
<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:14pt;font-family:"Arial",sans-serif;color:rgb(0,32,96)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:14pt;font-family:"Arial",sans-serif;color:rgb(0,32,96)"> On a separate note, I think Volker’s proposal for automated disclosure by the SSAD is creative and warrants further discussion. Because this mechanism would
still shield information that is not protected by the GDPR, however, I would propose we also discuss a “quarantine” period to hold the data for a limited amount of time for verification prior to publication. This would reduce the risk of inadvertent disclosures
of personal information. <u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:14pt;font-family:"Arial",sans-serif;color:rgb(0,32,96)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:14pt;font-family:"Helvetica",sans-serif;color:rgb(88,0,176)">Kind regards,<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:14pt;font-family:"Helvetica",sans-serif;color:rgb(88,0,176)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:14pt;font-family:"Helvetica",sans-serif;color:rgb(88,0,176)">Laureen Kapin<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:14pt;font-family:"Helvetica",sans-serif;color:rgb(88,0,176)">Counsel for International Consumer Protection<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:14pt;font-family:"Helvetica",sans-serif;color:rgb(88,0,176)">Federal Trade Commission<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:14pt;font-family:"Helvetica",sans-serif;color:rgb(88,0,176)">(202) 326-3237
<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:14pt;font-family:"Arial",sans-serif;color:rgb(0,32,96)"><u></u> <u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:11pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11pt;font-family:"Calibri",sans-serif"> Gnso-epdp-legal <<a href="mailto:gnso-epdp-legal-bounces@icann.org" target="_blank">gnso-epdp-legal-bounces@icann.org</a>>
<b>On Behalf Of </b>Volker Greimann<br>
<b>Sent:</b> Wednesday, February 3, 2021 12:17 PM<br>
<b>To:</b> Hadia El Miniawi <<a href="mailto:hadiaminiawi@yahoo.com" target="_blank">hadiaminiawi@yahoo.com</a>><br>
<b>Cc:</b> <a href="mailto:gnso-epdp-legal@icann.org" target="_blank">gnso-epdp-legal@icann.org</a><br>
<b>Subject:</b> Re: [Gnso-epdp-legal] Question 1: | EPDP-Phase 2A - Legal Sub-team call | Tuesday, 02 February 2021 at 14:00 UTC<u></u><u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal">Thank you Hadia, for kicking this off.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Here is my take on the question:<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Recommendation number 6 of EPDP phase one report will require registrars to provide the opportunity for the registered name holder to provide consent to publish their contact information as well as their email addresses in the RDS of the
sponsoring registrar by means of a yet-to-be-defined process. <br>
Assuming the CPs were similarly required by ICANN policy to permit registered name holders to declare whether their registration data contains personal information or is strictly limited to non-personal information, along with implementing all the safeguards
indicated in the Bird & Bird legal memo, such as providing a well-crafted notice in clear and plain language explaining the consequences of this declaration such as registration data declared as containing only non-personal information being subject to automated
disclosure to requestors in the SSAD, requiring registered name holders to acknowledge the notice and the automated disclosure of their registration data in consequence of declaring their data as non-personal information, how then would the risk associated
with the disclosure of the registration data in this case be different from the risk posed through the publication of the registration data based on the registrant’s consent?
<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Rationale:<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">We need to stop making the false differentiation between the legal nature of the registrant and start focussing on the nature of their information, hence the shift to personal vs non-personal information.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Further, by shifting the focus from all-out publication to automated disclosure in the SSAD, more safeguards are in place against abuse and data harvesting.
<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal">-- <br>
Volker A. Greimann<br>
General Counsel and Policy Manager<br>
<b>KEY-SYSTEMS GMBH</b><br>
<br>
T: +49 6894 9396901<br>
M: +49 6894 9396851<br>
F: +49 6894 9396851<br>
W: <a href="http://www.key-systems.net/" target="_blank"><span style="color:rgb(17,85,204)">www.key-systems.net</span></a><br>
<br>
Key-Systems GmbH is a company registered at the local court of Saarbruecken, Germany with the registration no. HR B 18835<br>
CEO: Oliver Fries and Robert Birkner<br>
<br>
Part of the CentralNic Group PLC (LON: CNIC) a company registered in England and Wales with company number 8576358.<br>
<br>
<span style="font-size:10.5pt;font-family:"Arial",sans-serif;background:rgb(248,249,250) none repeat scroll 0% 0%">This email and any files transmitted are confidential and intended only for the person(s) directly addressed. If you are not the intended recipient, any use, copying, transmission,
distribution, or other forms of dissemination is strictly prohibited. If you have received this email in error, please notify the sender immediately and permanently delete this email with any files that may be attached.</span><u></u><u></u></p>
</div>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal">On Wed, Feb 3, 2021 at 10:33 AM Hadia El Miniawi <<a href="mailto:hadiaminiawi@yahoo.com" target="_blank">hadiaminiawi@yahoo.com</a>> wrote:<u></u><u></u></p>
</div>
<blockquote style="border-color:currentcolor currentcolor currentcolor rgb(204,204,204);border-style:none none none solid;border-width:medium medium medium 1pt;padding:0in 0in 0in 6pt;margin-left:4.8pt;margin-right:0in">
<div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:10pt">Hi All,<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10pt"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10pt">Based on Beck's suggestion yesterday to rephrase the first question please find herewith my first attempt<u></u><u></u></span></p>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:10pt"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10pt">Recommendation number 6 of EPDP phase one report requires registrars to provide the opportunity for the registered name holder to provide consent to publish redacted contact information as well as the email
addresses in the RDS of the sponsoring registrar. If the CPs require registered name holders to self-identify themselves as natural or legal persons, along with implementing all the safe guards indicated in the Bird & Bird legal memo, like providing a well-crafted
note in clear and plain language explaining the consequences of self-identification and that the registration data of legal persons would be made public, requiring registrants to acknowledge the note and the publication of their registration data in consequence
of self-identifying oneself as a legal person. How is the risk associated with the publication of the registration data in this case different from the risk posed through the publication of the registration data based on the registrant’s consent? <u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10pt"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10pt"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10pt">Best<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10pt">Hadia<u></u><u></u></span></p>
</div>
<p class="MsoNormal"><span style="font-size:10pt"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10pt"><u></u> <u></u></span></p>
</div>
</div>
<div id="gmail-m_-4428117110781403560gmail-m_-9040259074777855746ydpb0c71e1cyahoo_quoted_2583942449">
<div>
<div>
<p class="MsoNormal"><span style="font-size:10pt;font-family:"Helvetica",sans-serif;color:rgb(38,40,42)">On Tuesday, February 2, 2021, 05:31:12 PM GMT+2, Terri Agnew <<a href="mailto:terri.agnew@icann.org" target="_blank">terri.agnew@icann.org</a>> wrote:
<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10pt;font-family:"Helvetica",sans-serif;color:rgb(38,40,42)"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10pt;font-family:"Helvetica",sans-serif;color:rgb(38,40,42)"><u></u> <u></u></span></p>
</div>
<div>
<div id="gmail-m_-4428117110781403560gmail-m_-9040259074777855746ydpb0c71e1cyiv3400946517">
<div>
<div>
<p><b><span style="font-size:10pt;font-family:"Helvetica",sans-serif;color:rgb(38,40,42)">D</span></b><span style="font-size:10pt;font-family:"Arial",sans-serif;color:black">ear all,</span><span style="font-size:10pt;font-family:"Helvetica",sans-serif;color:rgb(38,40,42)"><u></u><u></u></span></p>
<p style="margin:0in 0in 0.0001pt;word-spacing:0px"><span style="font-size:10pt;font-family:"Arial",sans-serif;color:black"> </span><span style="font-size:10pt;font-family:"Helvetica",sans-serif;color:rgb(38,40,42)"><u></u><u></u></span></p>
<p style="word-spacing:0px"><span style="font-size:10pt;font-family:"Arial",sans-serif;color:black">All recordings for the </span><span style="font-size:10pt;font-family:"Arial",sans-serif;color:rgb(38,40,42)">EPDP-Phase 2A - Legal Sub-team call</span><span style="font-size:10pt;font-family:"Arial",sans-serif;color:black;background:white none repeat scroll 0% 0%"> held
on <b>Tuesday, 02 February 2021 at 14:00 UTC </b></span><span style="font-size:10pt;font-family:"Arial",sans-serif;color:black">can be found on the </span><span style="font-size:10pt;font-family:"Helvetica",sans-serif;color:rgb(38,40,42)"><a href="https://community.icann.org/x/zwhACQ" target="_blank"><span style="font-family:"Arial",sans-serif">agenda
wiki page </span></a></span><span style="font-size:10pt;font-family:"Arial",sans-serif;color:black">(attendance included) and the </span><span style="font-size:10pt;font-family:"Helvetica",sans-serif;color:rgb(38,40,42)"><a href="https://gnso.icann.org/en/group-activities/calendar" target="_blank">GNSO
Master Calendar</a>. <u></u><u></u></span></p>
<p style="word-spacing:0px"><span style="font-size:10pt;font-family:"Arial",sans-serif;color:black"> </span><span style="font-size:10pt;font-family:"Helvetica",sans-serif;color:rgb(38,40,42)"><u></u><u></u></span></p>
<p style="word-spacing:0px"><span style="font-size:10pt;font-family:"Arial",sans-serif;color:black">These include:</span><span style="font-size:10pt;font-family:"Helvetica",sans-serif;color:rgb(38,40,42)"><u></u><u></u></span></p>
<ul type="disc">
<li class="MsoNormal" style="color:black">
<span style="font-size:10pt;font-family:"Arial",sans-serif">Attendance (please let me know if your name has been left off the attendance list)</span><span style="font-size:10pt;font-family:"Helvetica",sans-serif"><u></u><u></u></span></li><li class="MsoNormal" style="color:black">
<span style="font-size:10pt;font-family:"Arial",sans-serif">Audio recording</span><span style="font-size:10pt;font-family:"Helvetica",sans-serif"><u></u><u></u></span></li><li class="MsoNormal" style="color:black">
<span style="font-size:10pt;font-family:"Arial",sans-serif">Zoom chat archive</span><span style="font-size:10pt;font-family:"Helvetica",sans-serif"><u></u><u></u></span></li><li class="MsoNormal" style="color:black">
<span style="font-size:10pt;font-family:"Arial",sans-serif">Zoom recording (including audio, visual, rough transcript)</span><span style="font-size:10pt;font-family:"Helvetica",sans-serif"><u></u><u></u></span></li><li class="MsoNormal" style="color:black">
<span style="font-size:10pt;font-family:"Arial",sans-serif">Transcript</span><span style="font-size:10pt;font-family:"Helvetica",sans-serif"><u></u><u></u></span></li></ul>
<p style="margin:0in 0in 0.0001pt;word-spacing:0px"><span style="font-size:10pt;font-family:"Arial",sans-serif;color:black"> </span><span style="font-size:10pt;font-family:"Helvetica",sans-serif;color:rgb(38,40,42)"><u></u><u></u></span></p>
<p style="word-spacing:0px"><span style="font-size:10pt;font-family:"Arial",sans-serif;color:black">As a reminder only members or alternates replacing members as primary can join the call.
</span><span style="font-size:10pt;font-family:"Helvetica",sans-serif;color:rgb(38,40,42)"><u></u><u></u></span></p>
<p style="margin:0in 0in 0.0001pt;word-spacing:0px"><span style="font-size:10pt;font-family:"Arial",sans-serif;color:black"> </span><span style="font-size:10pt;font-family:"Helvetica",sans-serif;color:rgb(38,40,42)"><u></u><u></u></span></p>
<p style="margin:0in 0in 0.0001pt;word-spacing:0px"><span style="font-size:10pt;font-family:"Arial",sans-serif;color:black">For additional information, you may consult the </span><span style="font-size:10pt;font-family:"Helvetica",sans-serif;color:rgb(38,40,42)"><a href="https://mm.icann.org/pipermail/gnso-epdp-legal/" target="_blank"><span style="font-family:"Arial",sans-serif">mailing
list archives </span></a></span><span style="font-size:10pt;font-family:"Arial",sans-serif;color:black">and the </span><span style="font-size:10pt;font-family:"Helvetica",sans-serif;color:rgb(38,40,42)"><a href="https://community.icann.org/x/IYEpBQ" title="https://community.icann.org/x/IYEpBQ" target="_blank"><span style="font-family:"Arial",sans-serif;color:rgb(149,79,114)">main
wiki page</span></a></span><span style="font-size:10pt;font-family:"Arial",sans-serif;color:black">.</span><span style="font-size:10pt;font-family:"Helvetica",sans-serif;color:rgb(38,40,42)"><u></u><u></u></span></p>
<p style="margin:0in 0in 0.0001pt;word-spacing:0px"><span style="font-size:10pt;font-family:"Arial",sans-serif;color:black"> </span><span style="font-size:10pt;font-family:"Helvetica",sans-serif;color:rgb(38,40,42)"><u></u><u></u></span></p>
<p style="margin:0in 0in 0.0001pt;word-spacing:0px"><span style="font-size:10pt;font-family:"Arial",sans-serif;color:black">Thank you.</span><span style="font-size:10pt;font-family:"Helvetica",sans-serif;color:rgb(38,40,42)"><u></u><u></u></span></p>
<p style="word-spacing:0px"><span style="font-size:10pt;font-family:"Arial",sans-serif;color:rgb(38,38,38)">With kind regards,</span><span style="font-size:10pt;font-family:"Helvetica",sans-serif;color:rgb(38,40,42)"><u></u><u></u></span></p>
<p style="word-spacing:0px"><span style="font-size:10pt;font-family:"Arial",sans-serif;color:black"> </span><span style="font-size:10pt;font-family:"Helvetica",sans-serif;color:rgb(38,40,42)"><u></u><u></u></span></p>
<p style="word-spacing:0px"><span style="font-size:10pt;font-family:"Arial",sans-serif;color:rgb(38,40,42)">Terri</span><span style="font-size:10pt;font-family:"Helvetica",sans-serif;color:rgb(38,40,42)"><u></u><u></u></span></p>
<p style="word-spacing:0px"><span style="font-size:10pt;font-family:"Arial",sans-serif;color:black"> </span><span style="font-size:10pt;font-family:"Helvetica",sans-serif;color:rgb(38,40,42)"><u></u><u></u></span></p>
<p><span style="font-size:10pt;font-family:"Arial",sans-serif;color:black"> </span><span style="font-size:10pt;font-family:"Helvetica",sans-serif;color:rgb(38,40,42)"><u></u><u></u></span></p>
<p><span style="font-size:10pt;font-family:"Arial",sans-serif;color:rgb(38,40,42)"> </span><span style="font-size:10pt;font-family:"Helvetica",sans-serif;color:rgb(38,40,42)"><u></u><u></u></span></p>
</div>
</div>
</div>
<p class="MsoNormal"><span style="font-size:10pt;font-family:"Helvetica",sans-serif;color:rgb(38,40,42)">_______________________________________________<br>
Gnso-epdp-legal mailing list<br>
<a href="mailto:Gnso-epdp-legal@icann.org" target="_blank">Gnso-epdp-legal@icann.org</a><br>
<a href="https://mm.icann.org/mailman/listinfo/gnso-epdp-legal" target="_blank">https://mm.icann.org/mailman/listinfo/gnso-epdp-legal</a><br>
_______________________________________________<br>
By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (<a href="https://www.icann.org/privacy/policy" target="_blank">https://www.icann.org/privacy/policy</a>)
and the website Terms of Service (<a href="https://www.icann.org/privacy/tos" target="_blank">https://www.icann.org/privacy/tos</a>). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style
delivery or disabling delivery altogether (e.g., for a vacation), and so on.<u></u><u></u></span></p>
</div>
</div>
</div>
</div>
</blockquote>
</div>
</div>
</div>
</blockquote></div>