<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hi Dan: <div class=""><br class=""></div><div class="">I am sure you have already read Alan’s request below. </div><div class=""><br class=""></div><div class="">Can ICANN provide relevant portions of the agreements ICANN has with these dispute resolution providers? They might be the entire agreements with financial terms and other confidential (GDPR-protected?) information redacted. I think this might be the most helpful to avoid the time needed for future requests. </div><div class=""><br class=""></div><div class="">You may provide a slimmer set of of contract details if you feel confident, that will address the team’s questions. I assume that there were post-GDPR amendments to these agreements and these should be highlighted as such if that is not already apparent. </div><div class=""><br class=""></div><div class="">Let me know if you have questions or, in the name of time saving, you could also contact Alan directly.</div><div class=""><br class=""></div><div class="">As you know, time is of the essence, the clock is ticking and so on. </div><div class=""><br class=""></div><div class="">Thanks very much and best regards,</div><div class=""><br class=""></div><div class="">Kurt</div><div class=""><br class=""><div><br class=""><blockquote type="cite" class=""><div class="">Begin forwarded message:</div><br class="Apple-interchange-newline"><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(0, 0, 0, 1.0);" class=""><b class="">From: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class="">Alan Woods <<a href="mailto:alan@donuts.email" class="">alan@donuts.email</a>><br class=""></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(0, 0, 0, 1.0);" class=""><b class="">Subject: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class=""><b class="">[Gnso-epdp-team] Pre-emptive request for our consideration of Appendix D&E</b><br class=""></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(0, 0, 0, 1.0);" class=""><b class="">Date: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class="">September 1, 2018 at 4:34:48 AM GMT+10<br class=""></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(0, 0, 0, 1.0);" class=""><b class="">To: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class=""><a href="mailto:gnso-epdp-team@icann.org" class="">gnso-epdp-team@icann.org</a><br class=""></span></div><br class=""><div class=""><div dir="ltr" class=""><div class="">Dear Kurt and team, </div><div class=""><br class=""></div><div class="">In advance of our substantive discussions on the elements of the RPMs within the Temp Spec (Appendix D and E), in the interests of not delaying our deliberations at that time, I believe it prudent for the EPDP team to have the opportunity to review the agreements that ICANN has with the RPM providers, (or at least the Data Processing Agreements), so as to fully consider all safeguards in place, thus tipping the balance in favor of disclosure of the data to the RPM providers.</div><div class=""> </div><div class="">As we already indicated in our triage response, we generally have no issue with the appendix (notwithstanding some process changes on the RPM review side being likely necessary). This does not absolve us however from fully considering the data flow, to confirm the appendices. Our task should be to do a thorough assessment of the required disclosure; documenting the purpose and legal basis for the disclosure; the safeguards applicable to the disclosure; and, in this case, complete our a consideration of the balance of the data subject rights. As the contracted parties do not maintain a direct contractual relationship with any RPM provider, we will therefore need to consider the applicable data processing agreement, to confirm how that data will ultimately be processed by the RPM provider (i.e. drawing inspiration from those elements required under Art 28 of the GDPR - Data Processor Requirements). This will allow for our transparent and well rounded consideration of the data flow, the safeguards in place, leading to a strong outcome for the EPDP consideration of the appendices. </div><div class=""> </div><div class="">As such, I would request that, in the interests of time, the EPDP now requests sight of the relevant documents (whether that be the full agreement or the applicable data processing agreements) from ICANN so that we can duly consider it in the assessment of the appendices when we arrive at that point, in the hopes of moving swiftly along. </div><div class=""><br class=""></div><div class="">Kind regards,</div><div class=""><br class=""></div><div class="">Alan Woods </div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><div dir="ltr" class="gmail_signature"><div dir="ltr" class=""><div class=""><div dir="ltr" class=""><div class=""><div dir="ltr" class=""><div class=""><div dir="ltr" class=""><div class=""><table style="padding:0px;margin:10px 0px;border:none" class=""><tbody class=""><tr class=""><td style="vertical-align:middle;padding:0px 7px 0px 0px" class=""><a href="http://donuts.domains/" rel="nofollow" target="_blank" class=""><img alt="Donuts Inc." height="75" src="https://storage.googleapis.com/signaturesatori/customer-C02zzlf7k/images/-54f9d8ac97e7f575bf497d10ac1f1aafafddf8afceab5f269d49034f01b3217b.png" width="75" class=""></a></td><td style="vertical-align:middle;padding:0px 7px 0px 0px;text-align:left" class="">
<div style="font-family: tahoma, sans-serif; font-size: 14px; line-height: 17px; font-weight: bold;" class=""><span style="font-size:12px" class=""><span style="font-family:arial,helvetica,sans-serif" class=""><span style="color:rgb(51,51,51)" class="">Alan Woods</span></span></span></div>
<div class=""><span style="font-size:12px" class=""><span style="font-family:arial,helvetica,sans-serif" class=""><span style="color:rgb(51,51,51)" class="">Senior Compliance & Policy Manager, Donuts Inc.</span></span></span>
<hr class=""><span style="font-size:11px" class=""><span style="font-family:arial,helvetica,sans-serif" class=""><span style="color:rgb(51,51,51)" class="">The Victorians, </span></span></span></div><div class=""><font color="#333333" face="arial, helvetica, sans-serif" class=""><span style="font-size:11px" class="">15-18 Earlsfort Terrace<br style="background-color:rgb(34,34,34)" class="">
Dublin 2, County Dublin</span></font><br style="color:rgb(214,214,214);font-family:"open sans";font-size:12px;background-color:rgb(34,34,34)" class=""><font color="#333333" face="arial, helvetica, sans-serif" class=""><span style="font-size:11px" class="">
Ireland</span></font><br class="">
<span style="font-size:11px" class=""><span style="font-family:arial,helvetica,sans-serif" class=""></span></span><br class="">
<span style="line-height:36px" class=""><a href="https://www.facebook.com/donutstlds" rel="nofollow" target="_blank" class=""><img src="http://storage.googleapis.com/signaturesatori/icons/facebook.png" class=""></a> <a href="https://twitter.com/DonutsInc" rel="nofollow" target="_blank" class=""><img src="http://storage.googleapis.com/signaturesatori/icons/twitter.png" class=""></a> </span><a href="https://www.linkedin.com/company/donuts-inc" rel="nofollow" target="_blank" class=""><span style="font-size:14px" class=""><img src="http://storage.googleapis.com/signaturesatori/icons/linkedin.png" class=""></span></a></div>
</td></tr></tbody></table><br class="">
</div><div class=""><span style="font-size:12pt;font-family:Cambria,serif" class="">Please NOTE: This electronic message, including any attachments, may include privileged, confidential and/or inside information owned by Donuts Inc. . </span><span style="font-size:12pt;font-family:Cambria,serif" class="">Any distribution or use of this communication by anyone other than the intended recipient(s) is strictly prohibited and may be unlawful. If you are not the intended recipient, please notify the sender by replying to this message and then delete it from your system. Thank you.</span><br class=""></div></div></div></div></div></div></div></div></div></div></div>
_______________________________________________<br class="">Gnso-epdp-team mailing list<br class=""><a href="mailto:Gnso-epdp-team@icann.org" class="">Gnso-epdp-team@icann.org</a><br class="">https://mm.icann.org/mailman/listinfo/gnso-epdp-team</div></blockquote></div><br class=""></div></body></html>