<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Calibri Light";
panose-1:2 15 3 2 2 2 4 3 2 4;}
@font-face
{font-family:"Source Sans Pro";
panose-1:2 11 5 3 3 4 3 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.MsoFootnoteText, li.MsoFootnoteText, div.MsoFootnoteText
{mso-style-name:"Footnote Text\,+ Footnote Text";
mso-style-priority:99;
mso-style-link:"Footnote Text Char\,+ Footnote Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Source Sans Pro",sans-serif;
color:#595959;}
span.MsoFootnoteReference
{mso-style-priority:99;
font-family:"Calibri",sans-serif;
vertical-align:super;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;}
span.FootnoteTextChar
{mso-style-name:"Footnote Text Char\,+ Footnote Text Char";
mso-style-priority:99;
mso-style-link:"Footnote Text\,+ Footnote Text";
font-family:"Source Sans Pro",sans-serif;
color:#595959;}
span.FootnoteTextChar1
{mso-style-name:"Footnote Text Char1";
mso-style-priority:99;
font-family:"Calibri",sans-serif;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
/* Page Definitions */
@page
{mso-endnote-separator:url("cid:header.htm\@01D46453.985CF8C0") es;
mso-endnote-continuation-separator:url("cid:header.htm\@01D46453.985CF8C0") ecs;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">As you further deliberate on this topic, here is the EDPB advice from the 5 July letter in this regard:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="color:black">“The EDPB considers that registrants should in principle not be required to provide personal data directly identifying individual employees (or third parties) fulfilling the administrative or technical functions
on behalf of the registrant. Instead, registrants should be provided with the option of providing contact details for persons other than themselves if they wish to delegate these functions and facilitate direct communication with the persons concerned. It
should therefore be made clear, as part of the registration process, that the registrant is free to (1) designate the same person as the registrant (or its representative) as the administrative or technical contact; or (2) provide contact information which
does not directly identify the administrative or technical contact person concerned (e.g. For the avoidance of doubt, the EDPB recommends explicitly clarifying this within future updates of the Temporary Specification<a style="mso-footnote-id:ftn1" href="#_ftn1" name="_ftnref1" title=""><span class="MsoFootnoteReference"><span class="MsoFootnoteReference"><span style="font-size:11.0pt;color:black;mso-fareast-language:EN-US">[1]</span></span></span></a>”.</span><span style="color:black">
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black">As such, staff had translated this into the following preliminary recommendation in the draft Initial Report pending finalization of the deliberations on this topic:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black">In addition, the EPDP Team recommends that the following data elements may, but are not required, to be provided by the registered name holder. Furthermore, per the EDPB advice, registrars are to advise the registered
name holder at the time of registration that the registered name holder is free to (1) designate the same person as the registrant (or its representative) as the administrative or technical contact; or (2) provide contact information which does not directly
identify the administrative or technical contact person concerned. [In which case registrars must ensure that the necessary consent is obtained from an administrative or technical contact person, in the case this is not the registered name holder with whom
the registrar has a direct contractual relationship]. <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black">Best regards,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black">Caitlin, Berry and Marika<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:12.0pt;color:black">From: </span></b><span style="font-size:12.0pt;color:black">Gnso-epdp-team <gnso-epdp-team-bounces@icann.org> on behalf of Ayden Férdeline <icann@ferdeline.com><br>
<b>Reply-To: </b>Ayden Férdeline <icann@ferdeline.com><br>
<b>Date: </b>Monday, October 15, 2018 at 2:53 AM<br>
<b>To: </b>Alan Greenberg <alan.greenberg@mcgill.ca><br>
<b>Cc: </b>EPDP <gnso-epdp-team@icann.org><br>
<b>Subject: </b>Re: [Gnso-epdp-team] Purpose C<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I have concerns regarding this purpose.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">The provision of admin and tech contact data is not necessary in order to perform the registration of a domain name.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">So, I disagree that these fields “should be mandatory with instructions to the registrants on options for filling them out as implied in the EDPB letter of 05 July 2018.” I did not read the EDPB letter as insinuating that.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal">Under item 9, it now says, “2) If the fields are not filled in, either they need to default to the Registrant Contact information or we need an access process that defaults back to the registrant’s info when there are admin/tech requests.
In either case, the registrant should be clearly informed.” <o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">If I am understanding this correctly, I do not agree that the admin and tech contact fields should be pre-filled with registrant contact data. This is inconsistent with the principles of data minimisation enshrined within the GDPR, as the <i>ICANN
v EPAG Domainservices</i> case has shown, and which is cited in the 5 July 2018 EDPB letter referenced below.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I note that within the current scope of their contracts, registrars must be able to contact their customers, so if the goal of this purpose is to “enable communication or notification to the Registered Name Holder … of technical and/or
administrative issues with a Registered Name,” this should be possible without a third party having direct access to their personal data. This could be fulfilled by way of a contact form or message relay system, for instance.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I am increasingly skeptical that there is a need to release personal information directly to third parties (though in certain circumstances this might be necessary). I ordered an Uber last week, and when I called the driver, the Uber app
masked my number and theirs, and now connected the call through some kind of relay system (like eBay uses for emails between buyer and seller) to prevent the disclosure of our phone numbers and to protect both of our privacy rights.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">If this technology is being deployed by others, perhaps we can avail of it too.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Kind regards,<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Ayden Férdeline <o:p></o:p></p>
</div>
<div>
<div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><br>
<br>
<o:p></o:p></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal">On 15 Oct 2018, at 04:50, Alan Greenberg <<a href="mailto:alan.greenberg@mcgill.ca">alan.greenberg@mcgill.ca</a>> wrote:<o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">I have updated Purpose C and a copy is attached.<br>
<br>
1. I deleted the various "stream of consciousness dialogue" and tried <br>
to just leave in the final conclusions.<br>
<br>
2. Under item 9, I further discussed the issue of whether the <br>
administrative and technical contact fields are in fact optional (and <br>
must either default to the registrant contact information, or have <br>
that registrant contact information delivered in lieu of the blank <br>
fields when data is made available as later agreed during access <br>
discussions) or whether it should be mandatory with instructions to <br>
the registrants on options for filling them out as implied in the <br>
EDPB letter of 05 July 2018.<br>
<br>
Alan_______________________________________________<br>
Gnso-epdp-team mailing list<br>
<a href="mailto:Gnso-epdp-team@icann.org">Gnso-epdp-team@icann.org</a><br>
https://mm.icann.org/mailman/listinfo/gnso-epdp-team<Purpose C - Data_Elements_Processing_Workbook_v0.4.5-ag.docx><o:p></o:p></p>
</div>
</div>
</blockquote>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</div>
</div>
<div style="mso-element:footnote-list"><br clear="all">
<hr align="left" size="1" width="33%">
<div style="mso-element:footnote" id="ftn1">
<p class="MsoFootnoteText"><a style="mso-footnote-id:ftn1" href="#_ftnref1" name="_ftn1" title=""><span class="MsoFootnoteReference"><span style="font-size:9.0pt;font-family:"Calibri Light",sans-serif;color:black"><span class="MsoFootnoteReference"><span style="font-size:9.0pt;font-family:"Calibri Light",sans-serif;color:black;mso-fareast-language:EN-US">[1]</span></span></span></span></a><span style="font-size:9.0pt;font-family:"Calibri Light",sans-serif;color:black">
See </span><span class="MsoHyperlink"><span style="font-size:9.0pt;font-family:"Calibri Light",sans-serif"><a href="https://www.icann.org/en/system/files/correspondence/jelinek-to-marby-05jul18-en.pdf">https://www.icann.org/en/system/files/correspondence/jelinek-to-marby-05jul18-en.pdf</a></span></span><span style="font-size:9.0pt;font-family:"Calibri Light",sans-serif">
<o:p></o:p></span></p>
</div>
</div>
</body>
</html>