<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta name=Title content=""><meta name=Keywords content=""><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Courier New";
panose-1:2 7 3 9 2 2 5 2 4 4;}
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.msoIns
{mso-style-type:export-only;
mso-style-name:"";
text-decoration:underline;
color:teal;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:24596759;
mso-list-template-ids:645855988;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New",serif;
mso-bidi-font-family:"Times New Roman";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1
{mso-list-id:62221331;
mso-list-template-ids:-1249328778;}
@list l1:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New",serif;
mso-bidi-font-family:"Times New Roman";}
@list l1:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2
{mso-list-id:380323658;
mso-list-template-ids:1791405304;}
@list l3
{mso-list-id:543564024;
mso-list-template-ids:-361048208;}
@list l3:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New",serif;
mso-bidi-font-family:"Times New Roman";}
@list l3:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l3:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l3:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l3:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l3:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l3:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l3:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l4
{mso-list-id:639960217;
mso-list-template-ids:684724516;}
@list l4:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l4:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New",serif;
mso-bidi-font-family:"Times New Roman";}
@list l4:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l4:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l4:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l4:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l4:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l4:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l4:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l5
{mso-list-id:753555647;
mso-list-template-ids:-1068871636;}
@list l5:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l5:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New",serif;
mso-bidi-font-family:"Times New Roman";}
@list l5:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l5:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l5:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l5:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l5:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l5:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l5:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l6
{mso-list-id:833178469;
mso-list-template-ids:1748552840;}
@list l6:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l6:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New",serif;
mso-bidi-font-family:"Times New Roman";}
@list l6:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l6:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l6:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l6:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l6:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l6:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l6:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l7
{mso-list-id:967197458;
mso-list-template-ids:-2073637810;}
@list l7:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l7:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New",serif;
mso-bidi-font-family:"Times New Roman";}
@list l7:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l7:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l7:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l7:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l7:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l7:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l7:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l8
{mso-list-id:1055928133;
mso-list-template-ids:1910425120;}
@list l8:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l8:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New",serif;
mso-bidi-font-family:"Times New Roman";}
@list l8:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l8:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l8:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l8:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l8:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l8:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l8:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l9
{mso-list-id:1793400360;
mso-list-template-ids:379601782;}
@list l9:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l9:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New",serif;
mso-bidi-font-family:"Times New Roman";}
@list l9:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l9:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l9:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l9:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l9:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l9:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l9:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l10
{mso-list-id:1802923773;
mso-list-template-ids:1288086732;}
@list l10:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l10:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New",serif;
mso-bidi-font-family:"Times New Roman";}
@list l10:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l10:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l10:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l10:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l10:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l10:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l10:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l11
{mso-list-id:1838955533;
mso-list-template-ids:-176106600;}
@list l12
{mso-list-id:2136604950;
mso-list-template-ids:-1550673246;}
@list l12:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l12:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New",serif;
mso-bidi-font-family:"Times New Roman";}
@list l12:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l12:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l12:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l12:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l12:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l12:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l12:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style></head><body bgcolor=white lang=EN-US link="#0563C1" vlink="#954F72"><div class=WordSection1><div style='mso-element:para-border-div;border:none;border-bottom:solid windowtext 1.5pt;padding:0in 0in 1.0pt 0in'><p class=MsoNormal style='border:none;padding:0in'><span style='font-size:11.0pt'>Dear All,<o:p></o:p></span></p><p class=MsoNormal style='border:none;padding:0in'><span style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal style='border:none;padding:0in'><span style='font-size:11.0pt'>Please find below the notes and action items from today’s meeting. If you are interested in signing up for tomorrow’s small team meeting regarding the applicability of data processing requirements and if the contracted parties should have the ability to differentiate on a geographic basis, please sign up here: https://docs.google.com/document/d/1ChEYy-cZmT3qTD62-HsoVmddD96m6cbkSOv5dmAjmpY/edit.<o:p></o:p></span></p><p class=MsoNormal style='border:none;padding:0in'><span style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal style='border:none;padding:0in'><span style='font-size:11.0pt'>As a reminder, our next plenary call will be Tuesday, 9 October at 1300 UTC.<o:p></o:p></span></p><p class=MsoNormal style='border:none;padding:0in'><span style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal style='border:none;padding:0in'><span style='font-size:11.0pt'>Best regards,<o:p></o:p></span></p><p class=MsoNormal style='border:none;padding:0in'><span style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal style='border:none;padding:0in'><span style='font-size:11.0pt'>Marika, Berry and Caitlin<o:p></o:p></span></p><p class=MsoNormal style='border:none;padding:0in'><span style='font-size:11.0pt'><o:p> </o:p></span></p></div><p class=MsoNormal><span style='font-size:11.0pt;color:black'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>EPDP Team Meeting #17<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>4 October 2018<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-size:11.0pt;color:black'>High-level Notes/Action Items</span></b><span style='font-size:11.0pt;color:black'><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-size:11.0pt;color:black'>Action Items</span></b><span style='font-size:11.0pt;color:black'><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'><o:p> </o:p></span></p><ol style='margin-top:0in' start=1 type=1><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l11 level1 lfo1'><span style='font-size:11.0pt'>At the ICANN meeting in Barcelona, there is a High-Interest Topic Session for the EPDP on Monday, 22 October from 15:15 - 16:45 in Room 111/112. Leadership’s current thinking is to include on the panel a number of Team Members to present during this session. If any Team Members have suggestions for this session, please provide them to the list. <o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l11 level1 lfo1'><span style='font-size:11.0pt'>ICANN Compliance to provide a general overview regarding how data escrow files are used in the course of an audit. Included within the overview, ICANN Compliance should include more information around the potential decryption of data escrow deposits during the course of an audit.<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l11 level1 lfo1'><span style='font-size:11.0pt'>ICANN Compliance to provide more specificity regarding necessary retention periods, and the rationale for retention after the domain registration is deleted. This information is necessary to justify any retention period to a DPA. Providing use cases where registration data is needed after the registration expiration would be helpful to explain relevant retention periods.<o:p></o:p></span></li></ol><p class=MsoNormal><span style='font-size:11.0pt;color:black'> <o:p></o:p></span></p><p class=MsoNormal><b><span style='font-size:11.0pt;color:black'>Questions for ICANN Org</span></b><span style='font-size:11.0pt;color:black'><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'><o:p> </o:p></span></p><ol style='margin-top:0in' start=1 type=1><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l2 level1 lfo2'><span style='font-size:11.0pt'>ICANN org should have a general retention policy. As part of its GDPR-compliant data processing regime. If so, can this be provided to the EPDP Team?<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l2 level1 lfo2'><span style='font-size:11.0pt'>We have spent most of this meeting exploring the role of compliance at ICANN, in order to support a proposal that ICANN has an implicit contract with the registrant and that therefore 6 1 b applies as a grounds for processing. This would also facilitate ICANN operating a UAM on behalf of those who want the data. It might also explain Goran’s initiative in seeking some kind of recognition by EU authorities that ICANN has a kind of quasi-regulator status, as the authority vested with the responsibility to manage the DNS. Given that all of this is outside the current configuration of ICANN as data controller, which would be more clear had we done a DPIA and had we adequate data maps to work with….can we either get back to our Charter questions that we were mandated to address by the GNSO, or get a full explanation of what is going on and why we continue to be focused on the access question.<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l2 level1 lfo2'><span style='font-size:11.0pt'>Is there a date limit for ICANN accepting a complaint or request to audit regarding a registration that has been deleted? If not, what is the case of the longest period of a deleted registration that was accepted and acted upon?<o:p></o:p></span></li></ol><p class=MsoNormal><span style='font-size:11.0pt;color:black'> <o:p></o:p></span></p><p class=MsoNormal><b><span style='font-size:11.0pt;color:black'>Notes </span></b><span style='font-size:11.0pt;color:black'><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'><o:p> </o:p></span></p><p class=MsoNormal><i><span style='font-size:11.0pt;color:black'>These high-level notes are designed to help the EPDP Team navigate through the content of the call and are not meant as a substitute for the transcript and/or recording. The MP3, transcript, and chat are provided separately and are posted on the wiki at: https://community.icann.org/x/2IpHBQ.<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:11.0pt;color:black'> <o:p></o:p></span></i></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>1. Roll Call & SOI Updates (5 minutes)<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'><o:p> </o:p></span></p><ul style='margin-top:0in' type=disc><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l5 level1 lfo3'><span style='font-size:11.0pt'>Attendance will be taken from Adobe Connect<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l5 level1 lfo3'><span style='font-size:11.0pt'>Please remember to mute your microphones when not speaking, and state your name before speaking for transcription purposes.<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l5 level1 lfo3'><span style='font-size:11.0pt'>Please remember to review your SOIs on a regular basis and update as needed. Updates are required to be shared with the EPDP Team.<o:p></o:p></span></li></ul><p class=MsoNormal><span style='font-size:11.0pt;color:black'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>2. Welcome and Updates from EPDP Team Chair<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'><o:p> </o:p></span></p><ul style='margin-top:0in' type=disc><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l0 level1 lfo4'><span style='font-size:11.0pt'>We need to change the agenda slightly, as we did not receive the homework for Purpose E (Registry data escrow).<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l0 level1 lfo4'><span style='font-size:11.0pt'>Please review the recent answers received from ICANN org re: data retention. https://community.icann.org/display/EOTSFGRD/Input+from+ICANN+Org<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l0 level1 lfo4'><span style='font-size:11.0pt'>ICANN org will present on Purpose F, and Kristina R. will present on Purpose N.<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l0 level1 lfo4'><span style='font-size:11.0pt'>There is a High Interest Session in Barcelona. If any EPDP Team Members have suggestions for this session, please provide them to this list.<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l0 level1 lfo4'><span style='font-size:11.0pt'>To quickly recap action items, add a second processing activity to Purpose C workbook.<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l0 level1 lfo4'><span style='font-size:11.0pt'>Please read Alan Greenberg’s recent email regarding Purpose C.<o:p></o:p></span></li></ul><p class=MsoNormal><span style='font-size:11.0pt;color:black'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>Question: Re: ICANN Leadership to consider ICANN contracting directly with registrants -- when did this become an action item?<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>Answer: After discussion on this, Leadership is to look into this further.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>3. Review data elements workbook for Purpose E (Ry Escrow, EBERO)<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>Objective of discussion:<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>(1) Review data elements workbook for purpose E as completed by registries<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>(2) Agree on data elements needed for this purpose as well as responses to different questions in data elements workbook<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>a. Review data elements workbook for purpose E<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>b. Discuss any outstanding items / questions<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>c. Finalize data elements workbook for purpose E<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'> <o:p></o:p></span></p><ul style='margin-top:0in' type=disc><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l12 level1 lfo5'><span style='font-size:11.0pt'>Taken off agenda as no homework was received.<o:p></o:p></span></li></ul><p class=MsoNormal><span style='font-size:11.0pt;color:black'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>4. Review data elements workbook for Purpose F (ICANN Compliance)<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>Objective of discussion:<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>(1) Review data elements workbook for purpose F as completed by ICANN org<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>(2) Agree on data elements needed for this purpose as well as responses to different questions in data elements workbook<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>a. Review data elements workbook for purpose F<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'> <o:p></o:p></span></p><ul style='margin-top:0in' type=disc><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l9 level1 lfo6'><span style='font-size:11.0pt'>ICANN Compliance filled out the workbook.<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l9 level1 lfo6'><span style='font-size:11.0pt'>Is this lawful against GDPR? Yes. Article 6(1)(f).<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l9 level1 lfo6'><span style='font-size:11.0pt'>This is not in violation of ICANN bylaws as compliance function is within ICANN bylaws.<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l9 level1 lfo6'><span style='font-size:11.0pt'>Responsible parties: Compliance will collect data associated with the third party complainant - it may include name, email, postal address, org info. Fax # is generally not collected. Depending on the nature of the issue and how much info is provided, ICANN Compliance may request further personal information, such as copies of emails.<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l9 level1 lfo6'><span style='font-size:11.0pt'>Following receipt of this information, the complaint will be forwarded to the contracted party (provided it is within ICANN's scope and remit). In doing so, ICANN may ask the contracted party to provide information that may contain personal data. In the processing of these complaints, ICANN may look at registration data, provided it is publicly available. This data is not shared with anyone else, including the complainant unless consent is given.<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l9 level1 lfo6'><span style='font-size:11.0pt'>Pro-active monitoring such as audits - there are typically two audits per year for Rrs/Rys. During this process, several questions are asked, and Rrs/Rys may be asked to provide personal data as part of the audit.<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l9 level1 lfo6'><span style='font-size:11.0pt'>Data escrow files are also collected during audits - this is done to cross-reference information that is recorded elsewhere.<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l9 level1 lfo6'><span style='font-size:11.0pt'>Question 4: is processing necessary to meet the purpose? Yes.<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l9 level1 lfo6'><span style='font-size:11.0pt'>Is transfer necessary? Yes.<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l9 level1 lfo6'><span style='font-size:11.0pt'>Publication by Rr/Ry required? No. However, Compliance would need access to non-public data upon request.<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l9 level1 lfo6'><span style='font-size:11.0pt'>Are there any picket fence questions? No.<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l9 level1 lfo6'><span style='font-size:11.0pt'>Data retention requirements to meet the purpose? How long is the data needed after expiration of a domain name?<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l9 level1 lfo6'><span style='font-size:11.0pt'>Additional information to adequately document the purpose? No.<o:p></o:p></span></li></ul><p class=MsoNormal><span style='font-size:11.0pt;color:black'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>EPDP Team Questions/Feedback<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'> <o:p></o:p></span></p><ul style='margin-top:0in' type=disc><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l7 level1 lfo7'><span style='font-size:11.0pt'>Re: two audits per year, does that mean two per contracted party, or two in total?<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l7 level1 lfo7'><span style='font-size:11.0pt'>Answer: contracts allow two audits per CP per year. Generally speaking, compliance does not audit the same contracted party twice per year, unless there is a remediation issue and then the contracted party may be retested on a limited scope.<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l7 level1 lfo7'><span style='font-size:11.0pt'>Does Compliance perform validation/verification during an audit? How does Compliance clarify inaccuracies?<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l7 level1 lfo7'><span style='font-size:11.0pt'>The 2013 RAA has a Whois Accuracy Program Specification, which requires Rrs to perform validation and verification of WHOIS contact information. Verification comes from the registrant to ensure that email/phone is responded to affirmatively; validation is something the Rr conducts to ensure the format of the WHOIS info matches certain specified standards, i.e., does the postal address conform to the postal address standards for that location? As part of complaint processing, Compliance asks Rrs to confirm they properly validated and verified. Verification could include asking the Rr to provide evidence of how this verification occured. For validation, Compliance will ask for information of how it was validated - how does this conform to certain standards.<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l7 level1 lfo7'><span style='font-size:11.0pt'>Does ICANN Compliance as part of an audit pull a segment of data escrow data and decrypt or otherwise make that information in plain text to compare against public records? This may be an area where Rrs would not be comfortable with that type of use.<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l7 level1 lfo7'><span style='font-size:11.0pt'>This is limited to the Ry audit space, so the request is only for Ry DEAs to provide a sample of domain names. Primarily, the use is to confirm the same domain name numbers are contained in the zonefile and BRDA. Regarding the answer to question 1, who does the balancing test? What if a registrar denies ICANN Compliance access to data?<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l7 level1 lfo7'><b><span style='font-size:11.0pt'>Action Item: ICANN Compliance to gather more information regarding how data escrow files are used in the course of an audit. For example, are escrow files decrypted?<o:p></o:p></span></b></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l7 level1 lfo7'><span style='font-size:11.0pt'>If a CP was challenging ICANN based on a lawful basis, this would be reviewed on a case-by-case basis and collaborate with the CP to better understand the issue. There may be other information that could be asked or provided to ICANN.<b><o:p></o:p></b></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l7 level1 lfo7'><span style='font-size:11.0pt'>Is there any work being done on other departments within ICANN re: other departments' use of data? <o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l7 level1 lfo7'><span style='font-size:11.0pt'>Please see: https://community.icann.org/display/EOTSFGRD/Input+from+ICANN+Org<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l7 level1 lfo7'><span style='font-size:11.0pt'>Re: data collected from reporter/complainant, that data is out of scope of this EPDP. There are two areas where this team may be interested: (1) in following up on a complaint, how does ICANN Compliance use registration data? (2) in the response to an audit, how does Compliance use registration data?<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l7 level1 lfo7'><span style='font-size:11.0pt'>How does ICANN access registration data to follow up on the ARS system before 25 May and after 25 May?<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l7 level1 lfo7'><span style='font-size:11.0pt'>Pre-May 25, the information was publicly available, so Compliance would query a registrar's WHOIS server and compare with the ARS testing. Post-25 May, if the data is still publicly available, the same process would work. If the data is redacted, Compliance now uses an inquiry vs. a notice. An inquiry is used when information is still being gathered and is used to ask the registrar if the data has changed since the ARS reporting issue.<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l7 level1 lfo7'><span style='font-size:11.0pt'>In thinking about lawful basis, this purpose protects the registrant to ensure the contract is properly performed, so the processing is necessary for performance of the contract, so 6(1)(b) is more appropriate than a 6(1)(f).<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l7 level1 lfo7'><span style='font-size:11.0pt'>Is this the right purpose, and is there an implication that a 6(1)(f) is used here?<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l7 level1 lfo7'><span style='font-size:11.0pt'>Re: lawful basis of this purpose, ICANN is taking responsibility for the processing of the data for the compliance purpose. 6(1)(f) is the correct purpose here.<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l7 level1 lfo7'><span style='font-size:11.0pt'>Question 8 talks about data retention requirements. 6(1)(f) makes more sense for the compliance purpose.<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l7 level1 lfo7'><span style='font-size:11.0pt'>Whatever retention period after expiration is decided is what Compliance will enforce based on, so this is a better question for contracted parties. How long does Compliance keep the data after a matter is closed? <o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l7 level1 lfo7'><span style='font-size:11.0pt'>Data is purged after audit is closed. In terms of complaint processing, that timing could vary. It is not possible to make a clear-cut determination, so whatever is decided is how Compliance will enforce against.<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l7 level1 lfo7'><span style='font-size:11.0pt'>Re: lawful basis, are there any additional thoughts to share? Should this be a 6(1)(f)?<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l7 level1 lfo7'><span style='font-size:11.0pt'>6(1)(b) is a high bar, so it will be interpreted quick strictly. Putting something in a contract does not make it lawful. 6(1)(f) seems to be the appropriate legal basis for the compliance purpose.<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l7 level1 lfo7'><span style='font-size:11.0pt'>The group needs to take into account how a DPA would look at this. A DPA will likely say this is not necessary for performance of a contract.<o:p></o:p></span></li></ul><ul style='margin-top:0in' type=disc><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l3 level1 lfo8'><span style='font-size:11.0pt'>Is 6(1)(f) a legitimate lawful basis? It may be a 6(1)(b) basis for some. How can the concern be addressed that ICANN cannot get access to the data – is there anyone who could suggest a path forward?<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l3 level1 lfo8'><span style='font-size:11.0pt'>There should be a clear legitimate interest here – if there isn’t, there is something wrong with the process.<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l3 level1 lfo8'><span style='font-size:11.0pt'> What would compliance do if a contracted party decides to withhold information under 6(1)(f)? <o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l3 level1 lfo8'><span style='font-size:11.0pt'>Compliance would work with the contracted party and try to understand the issue. For example, is the contracted party concerned with publication? Compliance may ask for other data that could fulfill the complaint/issue.<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l3 level1 lfo8'><span style='font-size:11.0pt'>Is this a stumbling block for every purpose that has a 6(1)(f) legal basis? Are there any circumstances where everyone will be comfortable with 6(1)(f) with a legal basis for the processing activity?<o:p></o:p></span></li></ul><p class=MsoNormal><span style='font-size:11.0pt;color:black'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>Conclusions:<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>6(1)(f) is an appropriate legal basis for the compliance purpose.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>Some believe it may be a 6(1)(b).<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>There are concerns that 6(1)(f) may cause issues where the complainant says the privacy rights outweigh the legitimate interest and therefore data cannot be provided.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'> <o:p></o:p></span></p><ul style='margin-top:0in' type=disc><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l8 level1 lfo9'><span style='font-size:11.0pt'>This is a way to move forward with this issue, but everyone should do their homework.<o:p></o:p></span></li></ul><p class=MsoNormal><span style='font-size:11.0pt;color:black'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>How should the group move forward with the data retention question?<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'> <o:p></o:p></span></p><ul style='margin-top:0in' type=disc><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l6 level1 lfo10'><span style='font-size:11.0pt'>Compliance will enforce whatever the retention requirement is.<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l6 level1 lfo10'><span style='font-size:11.0pt'>The compliance activity is not giving a specific reason to retain data beyond the life of the registration, except in cases where this is ongoing compliance activity, so perhaps the group can make note of retaining data in case of an ongoing compliance activity.<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l6 level1 lfo10'><span style='font-size:11.0pt'>There is retention beyond the registration and retention beyond compliance complaints about that registration. There may be an interplay b/w these two things – there may be an expired registration, but there is a complaint open about that registration – the data may need to be retained after the expiration. Compliance will work with whatever the retention period is.<o:p></o:p></span></li></ul><p class=MsoNormal><span style='font-size:11.0pt;color:black'> <o:p></o:p></span></p><ul style='margin-top:0in' type=disc><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l1 level1 lfo11'><span style='font-size:11.0pt'>It would be better for Compliance to propose relevant retention periods – the EPDP Team cannot set arbitrary limits for the team.<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l1 level1 lfo11'><span style='font-size:11.0pt'>There are several things that could happen post-expiry, such as required notices, redemption, etc., where the data would need to be held.<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l1 level1 lfo11'><span style='font-size:11.0pt'>This group needs a full explanation from ICANN or go back to the Charter questions that exist at the moment.<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l1 level1 lfo11'><span style='font-size:11.0pt'>Is there any data on how many complaints use expired data – if so, how often does Compliance have to go back and the average length of time they go back?<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l1 level1 lfo11'><span style='font-size:11.0pt'>This type of data does not exist and this would likely be a very large undertaking, but Compliance has not run into issues of not having data be available under the current policies (two years), and any time period b/w six months and two years should be OK.<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l1 level1 lfo11'><span style='font-size:11.0pt'> Is there anything else that needs to change on this sheet?<o:p></o:p></span></li></ul><p class=MsoNormal><span style='font-size:11.0pt;color:black'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>b. Discuss any outstanding items / questions<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>c. Finalize data elements workbook for purpose F<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>5. Review data elements workbook for Purpose N (registry eligibility requirements)<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>Objective of discussion:<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>(1) Review data elements workbook for purpose N as completed by registries<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>(2) Agree on data elements needed for this purpose as well as responses to different questions in data elements workbook<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>a. Review data elements workbook for purpose N<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>b. Discuss any outstanding items / questions<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>c. Finalize data elements workbook for purpose N<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'> <o:p></o:p></span></p><ul style='margin-top:0in' type=disc><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l4 level1 lfo12'><span style='font-size:11.0pt'>The view within RySG is that this is a Ry purpose, and registrars do not think this is a Rr purpose.<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l4 level1 lfo12'><span style='font-size:11.0pt'> Because the group is still going through the lawful basis discussion, 6(1)(b) and 6(1)(f) are both mentioned, though registries think this is most likely a 6(1)(f).<o:p></o:p></span></li><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l4 level1 lfo12'><span style='font-size:11.0pt'> Is the purpose in violation of ICANN’s bylaws? No.<o:p></o:p></span></li></ul><p class=MsoNormal><span style='font-size:11.0pt;color:black'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>Questions/Concerns re: this overview:<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'> <o:p></o:p></span></p><ul style='margin-top:0in' type=disc><li class=MsoNormal style='color:black;margin-left:0in;mso-list:l10 level1 lfo13'><span style='font-size:11.0pt'>This is a legitimate registry purpose, but a conversation with Kristina may be necessary to better understand why it might be desirable to add new data elements to the RDDS to fulfill these requirements.<o:p></o:p></span></li></ul><p class=MsoNormal><span style='font-size:11.0pt;color:black'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>6. Review data elements workbook for new purpose (research)<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>Objective of discussion:<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>(1) Review data elements workbook for research purpose as completed by Benedict/Farzaneh<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>(2) Agree on data elements needed for this purpose as well as responses to different questions in data elements workbook<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>a. Review data elements workbook for research purpose<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>b. Discuss any outstanding items / questions<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>c. Finalize data elements workbook for research purpose<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>7. Wrap and confirm next meeting to be scheduled for Tuesday, 9 October at 13.00 UTC.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>Confirm action items<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'>Confirm questions for ICANN Org, if any<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'><o:p> </o:p></span></p></div></body></html>