<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hello Amr (and everyone): <div class=""><br class=""></div><div class="">I am writing in response to your proposal that the team considers Temporary Specification <span style="color: rgb(69, 69, 69); font-family: "Helvetica Neue";" class="">§</span><font color="#454545" face="Helvetica Neue" class=""><span style="caret-color: rgb(69, 69, 69);" class="">§</span></font><span style="color: rgb(69, 69, 69); font-family: "Helvetica Neue";" class="">4.1-4.3 (with reference to the ICANN Bylaws and mission) prior to our discussion of data elements. </span></div><div class=""><span style="color: rgb(69, 69, 69); font-family: "Helvetica Neue";" class=""><br class=""></span></div><div class=""><font color="#454545" face="Helvetica Neue" class="">I think understand the reasoning behind your request but still believe we should finish the <span style="caret-color: rgb(69, 69, 69);" class="">“</span>purposes” and “data elements” discussion before going into the reach of ICANN’s mission and Bylaws. Let me test out my reasons for this: </font></div><div class=""><span style="color: rgb(69, 69, 69); font-family: "Helvetica Neue";" class=""><br class=""></span></div><div class=""><font color="#454545" face="Helvetica Neue" class="">With regard to the </font><span style="caret-color: rgb(69, 69, 69); color: rgb(69, 69, 69); font-family: "Helvetica Neue";" class="">ICANN mission and Bylaws </span><font color="#454545" face="Helvetica Neue" class="">I believe there is a range of opinions among the stakeholder groups on our team as to the extent that the ICANN mission and Bylaws enable the collection, use and disclosure of personal data, </font></div><div class=""><font color="#454545" face="Helvetica Neue" class=""><br class=""></font></div><div class=""><font color="#454545" face="Helvetica Neue" class="">In the best case, which I view as unlikely, we would develop a consensus opinion on this issue. Thus would be a helpful but not dispositive guide for identifying which data elements are collected and how they are used / disclosed. We’d still have to undertake that.</font></div><div class=""><font color="#454545" face="Helvetica Neue" class=""><br class=""></font></div><div class=""><font color="#454545" face="Helvetica Neue" class="">More likely, I believe there would be a discussion without a consensus result. Even in that case, we would next take up the task of identifying data elements to be collected by registrars and their subsequent processing. </font></div><div class=""><font color="#454545" face="Helvetica Neue" class=""><br class=""></font></div><div class=""><font color="#454545" face="Helvetica Neue" class="">Given that we have existing data collection and processing practices that were adequate pre-GDPR, it seems better to weigh those practices against GDPR and see what remains. <span style="caret-color: rgb(69, 69, 69);" class="">Given the discussion at the end of the last meeting, it appears that the currently collected set of data is adequate for the currently identified needs of those seeking personal data disclosure. I can anticipate where there might be differences (we will see) but if an agreement is struck regarding the collection and disclosure od data elements, it seems accommodation on policy statements is more likely. </span></font></div><div class=""><font color="#454545" face="Helvetica Neue" class=""><br class=""></font></div><div class=""><font color="#454545" face="Helvetica Neue" class="">Taking a slightly different approach to the same point: I think we should be discussing the section 4.4 elements, legitimate reasons for disclosure, and Appendix A against the GDPR and not against the ICANN Bylaws and mission. </font></div><div class=""><font color="#454545" face="Helvetica Neue" class=""><br class=""></font></div><div class=""><font color="#454545" face="Helvetica Neue" class="">I understand that <span style="caret-color: rgb(69, 69, 69);" class="">§§</span>4.1 and 4.2 are </font><span style="color: rgb(69, 69, 69); font-family: "Helvetica Neue"; caret-color: rgb(69, 69, 69);" class="">elements</span><font color="#454545" face="Helvetica Neue" class=""> in the Temporary Specification and must be discussed (I am not sticking my head in the ground here - I don’t think), but it is more efficient to discuss these paragraphs later — and especially if we don’t agree on data elements collected and processed. </font></div><div class=""><span style="color: rgb(69, 69, 69); font-family: "Helvetica Neue";" class=""><br class=""></span></div><div class=""><font color="#454545" face="Helvetica Neue" class="">I think Alan G. was on to something in his earlier email where he said we should focus on what’s needed for our policy. Our goal is to identify (as a matter of policy):</font></div><div class=""><ul class="MailOutline"><li class=""><font color="#454545" face="Helvetica Neue" class=""><span style="caret-color: rgb(69, 69, 69);" class="">The</span> legitimate purposes for processing registrant data</font></li><li class=""><font color="#454545" face="Helvetica Neue" class="">the set of data to be collected by registrars and </font></li><li class=""><font color="#454545" face="Helvetica Neue" class="">identifying the legitimate reasons (i.e., reasons with a legal basis) for disclosing that data to third parties.</font></li></ul></div><div class=""><span style="color: rgb(69, 69, 69); font-family: "Helvetica Neue";" class=""><br class=""></span></div><div class=""><font color="#454545" face="Helvetica Neue" class="">This, of course is an oversimplification but it is where we should focus. (I know others have made these comments before. I think Amr’s inquiry is a good time to restate what some others have said.) </font></div><div class=""><font color="#454545" face="Helvetica Neue" class=""><br class=""></font></div><div class=""><font color="#454545" face="Helvetica Neue" class="">I hope this was clear and helpful to the discussion. </font></div><div class=""><font color="#454545" face="Helvetica Neue" class=""><br class=""></font></div><div class=""><font color="#454545" face="Helvetica Neue" class="">Best regards,</font></div><div class=""><font color="#454545" face="Helvetica Neue" class=""><br class=""></font></div><div class=""><font color="#454545" face="Helvetica Neue" class="">Kurt</font></div><div class=""><font color="#454545" face="Helvetica Neue" class=""><br class=""></font></div></body></html>