<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.m-1803048877325954330m-8815779865400979498m2374658708549823618apple-converted-space
{mso-style-name:m_-1803048877325954330m_-8815779865400979498m_2374658708549823618apple-converted-space;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Alex<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">If you group the redactions with 5 or 6 other things you will see some opposition, but if you actually read the comments there was little opposition to the redactions.
As I said in the comment I made on 8/14:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal">Registrars support redaction “but questions whether this data should continue to be collected as they are not necessary, and do not comply with data minimization principle.” So the registrars are conflating the collection issue with the
public display issue here. They do support redaction of the data elements listed in the temp spec.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">So do the Registries. Ry SG comments call attention to the litigation around collection of the redacted data and has some other comments unrelated to the question whether the temp spec’s redaction requirements are acceptable. So again we
have a debate about collection rather than display.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Even the GAC comments do not dispute that the data should be redacted. They call for changing “redacted for privacy” to “redacted for data protection” in the display, and call for additional text with instructions about how to get access
to redacted data.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Both SSAC and IPC also do not question that redaction is required for GDPR compliance but question the scope of the redaction, saying that it may not be necessary in cases where GDPR does not apply (however they overlook or ignore the existence
of similar data protection laws in other jurisdictions). <o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">[end quote]
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">IPC’s initial comments did call for publishing the email address, but it was a lone voice, clearly in the rough, and its position is subject to serious legal
challenge. An email address is perhaps the most sensitive data from a security and privacy standpoint. If you don’t redact that, what would you redact, since an email address could be easily used as a search term to gather all the other missing information?
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">You say, “the Temp Spec has over-redacted a number of data elements” but your comments only specify the email address. Please tell us what information you DO
support redacting. I am curious to know where we can find agreement. <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">--MM<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<div style="border:none;border-left:solid blue 1.5pt;padding:0in 0in 0in 4.0pt">
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Alex Deacon [mailto:alex@colevalleyconsulting.com]
<br>
<b>Sent:</b> Sunday, August 19, 2018 12:42 PM<br>
<b>To:</b> gnso-epdp-team@icann.org; Kurt Pritz <kurt@kjpritz.com>; Mueller, Milton L <milton@gatech.edu><br>
<b>Subject:</b> Re: [Gnso-epdp-team] Pro-forma Triage Report<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">Hi Kurt, All, <o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Just catching up on this topic. Its not clear to me how one can come to the conclusion that there was no opposition to redacting the data elements the Temp Spec designates. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<div>
<p class="MsoNormal">In Part 2 of the triage, support for Section 5.1, which specifies compliance to Appendix A (where redaction is discussed) resulted in a 66.67% "no" response. , In part 1 of the triage, support for Appendix A 2.1-2.3 resulted in 89.98%
"no" response,. Finally, Appendix A 2.4-2.5 received a "no" response rate of 77.78%. Even if you put aside the response count and look at the responses themselves you will see there is significant disagreement--at least with respect to the IPC (and even
BC and GAC although I won't speak for them.)<o:p></o:p></p>
</div>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-family:"Arial",sans-serif;color:black">As has been our position since the beginning of the these temp spec discussions we believe the Temp Spec has over-redacted a number of data elements. You can
read the details for our rational in our response to Question 22 of Part 1 of the triage. However, to summarize:
</span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><o:p> </o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-family:"Arial",sans-serif;color:black">First, we believe that it is a misapplication of the GDPR for the Temp Spec to make no distinction between registrants that are legal persons versus natural
persons for purposes of data element/field redactions. Second, even for natural person registrants we believe that certain data elements that are designated for redaction should not be redacted. We think at minimum that the registrant's e-mail address, as
supplied to and verified by the registrar, should not be redacted. These views have been expressed repeatedly by the IPC, (BC, the GAC and others) over the past months both before and after the Temp Spec was issued.</span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><o:p> </o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-family:"Arial",sans-serif;color:black">Bottom line I respectfully do not agree with this particular takeaway or Milton's suggested modification. We have significant objection to and disagreement
with the data elements/fields that the Temp Spec has designated for redaction. </span>
<o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><o:p> </o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-family:"Arial",sans-serif;color:black">For the avoidance of doubt while we do not oppose (and even accept) that some data will be placed "behind a gate" to ensure GDPR compliance we feel continued
discussion about which data should be redacted (and when/why) is necessary. </span>
<o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><o:p> </o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-family:"Arial",sans-serif;color:black">Thanks.
</span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><o:p> </o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span style="font-family:"Arial",sans-serif;color:black">Alex</span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><o:p> </o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><o:p> </o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">On Thu, Aug 16, 2018 at 5:58 AM Kurt Pritz <<a href="mailto:kurt@kjpritz.com" target="_blank">kurt@kjpritz.com</a>> wrote:<o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt">
<div>
<p class="MsoNormal">Good amendment, Thanks Milton.<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Kurt<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><br>
<br>
<o:p></o:p></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal">On Aug 16, 2018, at 5:56 AM, Mueller, Milton L <<a href="mailto:milton@gatech.edu" target="_blank">milton@gatech.edu</a>> wrote:<o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Thanks for the draft of the Triage Report, Kurt. Having read only the Exec Summary, I think staff did a very good job of summarizing the "takeaways." I would
like for one small amendment to be made, however. In the second paragraph you write:</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">"There were several areas of agreement with the underlying principles in several sections of the Temporary Specification (e.g., data redaction)."</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">NCSG would like this to be amended to clarify:</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">"There were several areas of agreement with the underlying principles in several sections of the Temporary Specification; in particular, there was no opposition
to redacting the data elements the temp spec designates."</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Dr. Milton L Mueller</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Professor School of Public Policy</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Georgia Institute of Technology</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><a href="http://internetgovernance.org/" target="_blank"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:purple;text-decoration:none"><image001.jpg></span></a><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><a name="m_-1803048877325954330_m_-88157798654009"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span></a><o:p></o:p></p>
</div>
<div style="border:none;border-left:solid blue 1.5pt;padding:0in 0in 0in 4.0pt">
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<div>
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span class="m-1803048877325954330m-8815779865400979498m2374658708549823618apple-converted-space"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span></span><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Gnso-epdp-team
[</span><a href="mailto:gnso-epdp-team-bounces@icann.org" target="_blank"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:purple">mailto:gnso-epdp-team-bounces@icann.org</span></a><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">]<span class="m-1803048877325954330m-8815779865400979498m2374658708549823618apple-converted-space"> </span><b>On
Behalf Of<span class="m-1803048877325954330m-8815779865400979498m2374658708549823618apple-converted-space"> </span></b>Kurt Pritz<br>
<b>Sent:</b><span class="m-1803048877325954330m-8815779865400979498m2374658708549823618apple-converted-space"> </span>Wednesday, August 15, 2018 8:48 PM<br>
<b>To:</b><span class="m-1803048877325954330m-8815779865400979498m2374658708549823618apple-converted-space"> </span>GNSO EPDP <</span><a href="mailto:gnso-epdp-team@icann.org" target="_blank"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:purple">gnso-epdp-team@icann.org</span></a><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">><br>
<b>Subject:</b><span class="m-1803048877325954330m-8815779865400979498m2374658708549823618apple-converted-space"> </span>[Gnso-epdp-team] Pro-forma Triage Report</span><o:p></o:p></p>
</div>
</div>
</div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-size:11.0pt">Hi Everyone:<span class="m-1803048877325954330m-8815779865400979498m2374658708549823618apple-converted-space"> </span><br>
<br>
It was requested that we prepare a “pro forma” Triage Report for review and discussion - a version of the Triage report that might be submitted to the Council when the surveys are completed.<br>
<br>
This represents the work from the first survey, about 30% of the Temporary Specification. So you can see, it will be a fairly long report.<span class="m-1803048877325954330m-8815779865400979498m2374658708549823618apple-converted-space"> </span><br>
<br>
The report includes an executive summary, our operating methodology, the summary table of inputs, the issue summaries that were created for each section and an appendix with all written comments.<span class="m-1803048877325954330m-8815779865400979498m2374658708549823618apple-converted-space"> </span><br>
<br>
This report hasn’t had sufficient vetting on the leadership-support side yet but I wanted you to see the formatting and level of content as soon as possible.<br>
<br>
I apologize for the font size in the appendix. We will reorganize the table of all comments in some way that is readable in time for the actual publication.<span class="m-1803048877325954330m-8815779865400979498m2374658708549823618apple-converted-space"> </span><br>
<br>
We will continue building this report and amending it in accordance with comments and discussion as we go along. Remember that this report is designed to help but not limit, prejudice or restrict our future work. So let’s spend time to make this good, but not
perfect.<span class="m-1803048877325954330m-8815779865400979498m2374658708549823618apple-converted-space"> </span><br>
<br>
I hope you find this helpful.<br>
<br>
Best regards,<br>
<br>
Kurt</span><o:p></o:p></p>
</div>
</div>
<div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt">_______________________________________________<br>
Gnso-epdp-team mailing list<br>
</span><a href="mailto:Gnso-epdp-team@icann.org" target="_blank"><span style="font-size:11.0pt;color:purple">Gnso-epdp-team@icann.org</span></a><span style="font-size:11.0pt"><br>
</span><a href="https://mm.icann.org/mailman/listinfo/gnso-epdp-team" target="_blank"><span style="font-size:11.0pt;color:purple">https://mm.icann.org/mailman/listinfo/gnso-epdp-team</span></a><o:p></o:p></p>
</div>
</div>
</div>
</div>
</div>
</div>
</blockquote>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
<p class="MsoNormal">_______________________________________________<br>
Gnso-epdp-team mailing list<br>
<a href="mailto:Gnso-epdp-team@icann.org" target="_blank">Gnso-epdp-team@icann.org</a><br>
<a href="https://mm.icann.org/mailman/listinfo/gnso-epdp-team" target="_blank">https://mm.icann.org/mailman/listinfo/gnso-epdp-team</a><o:p></o:p></p>
</blockquote>
</div>
<p class="MsoNormal"><br clear="all">
<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal">-- <o:p></o:p></p>
<div>
<div>
<p class="MsoNormal">___________<o:p></o:p></p>
<div>
<p class="MsoNormal"><b>Alex Deacon</b><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Cole Valley Consulting<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><a href="mailto:alex@colevalleyconsulting.com" target="_blank">alex@colevalleyconsulting.com</a><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">+1.415.488.6009<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</div>
</div>
</div>
</body>
</html>