<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.apple-tab-span
{mso-style-name:apple-tab-span;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">Kurt, in relation to “<span style="color:black">Ashley suggested the latter set be captured in an Appendix”, I believe she specifically suggested Appendix A, section 4 (access to non-public registration data), but Ashley can correct me
if I am wrong.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black">Best regards,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black">Marika</span><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:12.0pt;color:black">From: </span></b><span style="font-size:12.0pt;color:black">Gnso-epdp-team <gnso-epdp-team-bounces@icann.org> on behalf of Kurt Pritz <kurt@kjpritz.com><br>
<b>Date: </b>Monday, September 3, 2018 at 18:42<br>
<b>To: </b>GNSO EPDP <gnso-epdp-team@icann.org><br>
<b>Subject: </b>[Gnso-epdp-team] Project Plan Adjustments and Policy Organization<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<div>
<div>
<div>
<p class="MsoNormal">Hi Everyone: <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I am writing to discuss two items. Comments are very welcome. (I apologize for the length of the email.)<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I. DISCUSSION OF DATA ELEMENTS / ORGANIZATION OF OUR DISCUSSION<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I took on board the comments made during the last meeting regarding the need to discuss data elements and the apparent skipping from section to section of the Temporary Specification. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">The project plan essentially follows the path described in the Charter: I.e.:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Data Process Purposes —> Data Processing —> Legitimate reasons for disclosure —> Data redaction —> some ancillary but important topics<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I can see that the examination of the data collected (and therefore available for subsequent types of processing, including disclosure) was not explicitly included. To a certain extent, I think this data set was presumed set (at least by
me) to be part of the data redaction discussions. Nonetheless, we cannot describe which data is redacted without specifically describing which data is collected in the first place. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">With that in mind and the help of Thomas’ work, we will have that topic more explicitly in the agenda today. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">For organization and jumping from topic to topic, I think we must, at the end of the day, cover each of the sections in the Temporary Specification and decide if and how each topic should be included in the policy. With that in mind we
created a project plan that marched through the Temporary Specification in an order that (more-or-less) followed the charter or our common-sense dictates. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><a href="cid:52AEA82B-1C1F-4237-B11B-EF1A793B4630@gateway">PastedGraphic-2.tiff</a><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I included two topics per meeting with the idea that intercessional work would be required on each topic and, after 45 minutes on one topic, we would reach a point of diminishing returns. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I think that is still a good approach but we always retain the ability to extend a discussion if we are close to resolution on an issue. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">II. CONSENSUS POLICY ORGANIZATION REGARDING: PURPOSES FOR PROCESSING gTLD REGISTRATION DATA<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">In our last meeting, I believe we reached a joint understanding of the requirements to be considered a “Lawful Purpose for Processing gTLD Registration Data.” <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">We concluded that these would continue to be categorized under Lawfulness and Purposes of Processing gTLD Registration Data:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">4.4.1. – Ability for Registered Name Holder to exercise its rights<br>
4.4.3. – Enabling mechanism for identifying and contacting registered name holder<br>
4.4.4. – Payment and invoicing<br>
4.4.5. – Notification of technical issues<br>
4.4.6. - Notification of commercial or technical changes<br>
4.4.7. – Technical & administrative points of contact<br>
4.4.11. – Safeguarding in case of failure<br>
4.4.12. – Dispute resolution services<br>
4.4.13. – ICANN Contractual Compliance<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">…and these would be memorialized under a different heading: <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">4.4.2. – Providing access based on legitimate interests not outweighed by the fundamental rights<br>
4.4.8. – Supporting a framework to address consumer protection, investigation of cybercrime, DNS abuse, IP protection<br>
4.4.9. – Framework to address LE needs<br>
4.4.10. – Provision of zone files to Internet users<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I think this was a great joint understanding of our team (that same understanding only occurred to me in the last several days) and will get us onto determining substance, i.e., the mechanisms for disclosure in the near term. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Ashley suggested the latter set be captured in an Appendix. I think that is a good recommendation. As GDPR interpretation evolves or different privacy regimes are adopted, the legitimate reasons (or reasons with a legal basis) for disclosing
data to third parties and be changed with adoption of amendments to the Appendix. However, I think the third-party disclosure should be anchored in the Temporary Specification body and incorporate the Appendix by reference. This is similar to other sections
of the Temporary Specification. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">This could be done in one of the two ways in red below and add a new Appendix: <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">1. Scope<br>
2. Definitions and Interpretation<br>
3. Policy Effective Date<br>
4. Lawfulness and Purposes of Processing gTLD Registration Data<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="color:#FF2600">* Requirements for Data Disclosure to Third Parties (alternative A)</span><br>
5. Requirements Applicable to Registry Operators and Registrars<br>
6. Requirements Applicable to Registry Operators Only<br>
7. Requirements Applicable to Registrars Only<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="color:#FF2600">7.5 Requirements for Data Disclosure to Third Parties (alternative B)</span><br>
8. Miscellaneous<br>
Appendix A: Registration Data Directory Services<br>
Appendix B: Supplemental Data Escrow Requirements<br>
Appendix C: Data Processing Requirements<br>
Appendix D: Uniform Rapid Suspension<br>
Appendix E: Uniform Domain Name Dispute Resolution Policy<br>
Appendix F: Bulk Registration Data Access to ICANN<br>
Appendix G: Supplemental Procedures to the Transfer Policy<br>
<span style="color:#FF2600">Appendix H: Third Party Disclosure</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt">Annex: Important Issues for Further Community Action<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Thanks for taking the time to read and consider this. It came out longer than I planned.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Best regards,<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Kurt<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>