<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle20
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#1F497D;}
span.EmailStyle21
{mso-style-type:personal;
font-family:"Calibri",sans-serif;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;}
span.EmailStyle24
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1064451028;
mso-list-type:hybrid;
mso-list-template-ids:-813151646 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l1
{mso-list-id:1926449558;
mso-list-template-ids:-1624504830;}
@list l1:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level2
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style>
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Hi Volker –<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Yes, I understand they are different. What makes them relevant is that it shows what can be done from an operational point of view, to make the natural/legal person and geographic
distinction, as part of a domain registration process. It is not acceptable to defer this discussion to after the EPDP concludes because it is very much relevant to compliance with GDPR. It is also not acceptable to assume that the level of inaccuracies
we see with WHOIS should continue, without improvements, especially under the enhanced accuracy requirements under GDPR. This is one of the parking lot issues we have remaining from the LA meeting that I want to make sure we don’t lose sight of.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">All the best,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Margie<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="color:black">From: </span></b><span style="color:black">Gnso-epdp-team <gnso-epdp-team-bounces@icann.org> on behalf of Volker Greimann <vgreimann@key-systems.net><br>
<b>Date: </b>Tuesday, October 16, 2018 at 6:18 AM<br>
<b>To: </b>"gnso-epdp-team@icann.org" <gnso-epdp-team@icann.org><br>
<b>Subject: </b>Re: [Gnso-epdp-team] CENTR Survey: Whois status and impacts from GDPR<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
</div>
<p>Hi all,<o:p></o:p></p>
<p>ccTLDs and gTLDs cannot be viewed as the same as they are subject to different regulatory regimes and fall under different models of registration.<o:p></o:p></p>
<p>For example, in many of the listed ccTLDs, the registrant is assumed to have a direct contractual relationship with the registry, so the ability to collect and process data is different for such registries compared to gTLD registries that have no such relationship.
<o:p></o:p></p>
<p>While the topics you raise are important and worth further deliberation, I would propose that these be postponed until after the ePDP concludes and be included in subsequent, proper policy work as they are highly contentious issues and focussing on these
now has the potential to derail or at least significantly delay our output. As we are on a strict timeline, we should focus on the uncontentious issues first to ensure the Temp Spec can be replaced in time.
<o:p></o:p></p>
<p>The distinction between legal and natural personas is a red herring as it does not solve any of the issues. Any data provided by legal persons may still contain personal data of natural persons in many of the fields that would be near impossible to detect
for contracted parties. <o:p></o:p></p>
<p>Further, even if such a distinction were to be found to provide additional benefits, making such a distinction may perhaps be possible for new registrations going forward, but it is definitely near impossible with regard to already existing registrations
as it would require receiving a whois update from all current registrants. Given the high amount of reluctance in parts of the community to accept any form of grandfathering or dual system as I have experienced in the Whois RT2 deliberations, such a dual system
where domain names would be treated different based on their registration gate, I cannot in good conscience support this as a way forward either.
<o:p></o:p></p>
<p>But I also have significant doubts that contracted parties could even rely on such self-declarations of our customers without facing additional liabilities for public disclosure.
<o:p></o:p></p>
<p>As far as accuracy "verification" goes (which in many cases is closer to the validation requirements currently included in the RAA), this is an issue relegated entirely to the contracts of the contracted parties. Work on this issue is currently ongoing between
ICANN and registrars. Opening this issue up here would create a double track and be in violation of the process currently included in the contracts. Many of the ccTLDs also do not face the same issue that most gTLDs face in that they do not aspire to a global
registrant base and can perform their validation/verification on a national level, which naturally reduces costs and provides better results. As soon as international registrations enter into the picture, the accuracy of these verification sources drops to
unacceptable percentages. As one example, when Nominet introduced their verification scheme, the numbers of "failed verifications" for registrations of registrants outside the UK were horrendous, and Nominet was quick to treat such registrations with much
more leeway than those inside the UK. <o:p></o:p></p>
<p>Additionally, in our experience higher requirements on data accuracy usually lead to more incidents of identity theft since abusers of the system will always find ways around. Just because a data set is accurate that does not mean it actually belongs to
the registrant. <o:p></o:p></p>
<p>Geographic distinction assumes that it is feasible for contracted parties to differentiate accurately for each data set they receive which data protection standards apply to that set. That determination cannot simply be made based on the country code provided
by the registrant however. Further, for many registrars that process their data in other jurisdictions, that distinction is pointless. It also places a significant burden on contracted parties that would have to implement and operate multiple systems of whois.<o:p></o:p></p>
<p>Data access: Just so we do not resort to cherry picking, we should also look at how these registries handle requests for data access. These registries provide access based on law enforcement, parties identified in a court order and someone with legitimate
interest. In case of the latter, the legal department makes the judgement on that. This is exactly what is already in the Temp Spec, where the registrar makes the judgement regarding the purported legitimate interest and informs the requester accordingly.
<o:p></o:p></p>
<p>Best,<o:p></o:p></p>
<p>Volker<o:p></o:p></p>
<p>RrSG Alternate<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">Am 16.10.2018 um 00:29 schrieb Margie Milam:<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Hi-</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Thanks Georgios for sharing this document. This is really great information, and can help with several issues for the EPDP, including:</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span><o:p></o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraph" style="margin-left:0in;mso-list:l0 level1 lfo3"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Legal/Natural person distinction</span>
<o:p></o:p></li><li class="MsoListParagraph" style="margin-left:0in;mso-list:l0 level1 lfo3"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Geographic distinction</span>
<o:p></o:p></li><li class="MsoListParagraph" style="margin-left:0in;mso-list:l0 level1 lfo3"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Accuracy
</span><o:p></o:p></li><li class="MsoListParagraph" style="margin-left:0in;mso-list:l0 level1 lfo3"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span>
<o:p></o:p></li></ul>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">We would like to propose that Staff invite someone from Centr who can talk to us at Barcelona about these issues, to help inform our policy recommendations. We would also
like to ensure that all of the issues that were “parked” at our F2F meeting are considered as part of our deliberations in Barcelona.</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Thanks,</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Margie</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span><o:p></o:p></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="color:black">From: </span></b><span style="color:black">Gnso-epdp-team
<a href="mailto:gnso-epdp-team-bounces@icann.org"><gnso-epdp-team-bounces@icann.org></a> on behalf of
<a href="mailto:Georgios.TSELENTIS@ec.europa.eu">"Georgios.TSELENTIS@ec.europa.eu"</a>
<a href="mailto:Georgios.TSELENTIS@ec.europa.eu"><Georgios.TSELENTIS@ec.europa.eu></a><br>
<b>Date: </b>Friday, October 12, 2018 at 1:33 AM<br>
<b>To: </b><a href="mailto:kurt@kjpritz.com">"kurt@kjpritz.com"</a> <a href="mailto:kurt@kjpritz.com">
<kurt@kjpritz.com></a>, <a href="mailto:gnso-epdp-team@icann.org">"gnso-epdp-team@icann.org"</a>
<a href="mailto:gnso-epdp-team@icann.org"><gnso-epdp-team@icann.org></a><br>
<b>Subject: </b>[Gnso-epdp-team] CENTR Survey: Whois status and impacts from GDPR</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
</div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Dear Kurt, EPDP colleagues,</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Please find a recent survey among European ccTLDs on impacts from GDPR:</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">The survey report can be found here:
<a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__centr.org_library_library_survey-2Dreport_centr-2Dreport-2Dwhois-2Dstatus-2Dand-2Dimpacts-2Dfrom-2Dgdpr.html&d=DwMGaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=_4XWSt8rUHZPiRG6CoP4Fnk_CCk4p550lffeMi3E1z8&m=Ejr1s_swhOOMZ6A6MK3kgcxX6M2N-iDRXSbdeBz88Uw&s=T4R_SFZkRFdOpZ15H9XgTW4ZlbBvQTBqJgwmkYtvT3E&e=">
https://centr.org/library/library/survey-report/centr-report-whois-status-and-impacts-from-gdpr.html</a>
</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">The presentation has been uploaded at:
<a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__centr.org_library_library_external-2Devent_whois-2Dstatus-2Dand-2Dthe-2Dimpact-2Dof-2Dgdpr.html&d=DwMGaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=_4XWSt8rUHZPiRG6CoP4Fnk_CCk4p550lffeMi3E1z8&m=Ejr1s_swhOOMZ6A6MK3kgcxX6M2N-iDRXSbdeBz88Uw&s=Ul6EQT0lYlA4EMiD0i0hCdqJvk2hj0enVaKnc05XP2w&e=">
https://centr.org/library/library/external-event/whois-status-and-the-impact-of-gdpr.html</a>
</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">The overview of data collected and published via the WHOIS is available at:
<a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__stats.centr.org_pub-5Fwhois&d=DwMGaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=_4XWSt8rUHZPiRG6CoP4Fnk_CCk4p550lffeMi3E1z8&m=Ejr1s_swhOOMZ6A6MK3kgcxX6M2N-iDRXSbdeBz88Uw&s=GgicT8PChIKhcba_NAzGpxR4ZU1EINwS6_vooi-iNBk&e=">
https://stats.centr.org/pub_whois</a></span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Best regards,</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Georgios</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><br>
<br>
<br>
<o:p></o:p></span></p>
<pre>_______________________________________________<o:p></o:p></pre>
<pre>Gnso-epdp-team mailing list<o:p></o:p></pre>
<pre><a href="mailto:Gnso-epdp-team@icann.org">Gnso-epdp-team@icann.org</a><o:p></o:p></pre>
<pre><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__mm.icann.org_mailman_listinfo_gnso-2Depdp-2Dteam&d=DwMDaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=_4XWSt8rUHZPiRG6CoP4Fnk_CCk4p550lffeMi3E1z8&m=f9eVrzyohsHfZjq_cGldOaBjwBtokJTlNp6LtFoDF8c&s=LlDdOBtddksAd15edK0jUcOZUkjmCx-HZMwWcg9lPV4&e=">https://mm.icann.org/mailman/listinfo/gnso-epdp-team</a><o:p></o:p></pre>
</blockquote>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><br>
<br>
<o:p></o:p></span></p>
<pre>-- <o:p></o:p></pre>
<pre>Volker A. Greimann<o:p></o:p></pre>
<pre>General Counsel and Policy Manager<o:p></o:p></pre>
<pre>KEY-SYSTEMS GMBH<o:p></o:p></pre>
<pre><o:p> </o:p></pre>
<pre>T: +49 6894 9396901<o:p></o:p></pre>
<pre>F: +49 6894 9396851<o:p></o:p></pre>
<pre>W: <a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__www.key-2Dsystems.net&d=DwMDaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=_4XWSt8rUHZPiRG6CoP4Fnk_CCk4p550lffeMi3E1z8&m=f9eVrzyohsHfZjq_cGldOaBjwBtokJTlNp6LtFoDF8c&s=jVsZctoefFGoHZu3KolnWVoZ2KRgwANd6eHyjRzVpFs&e=">www.key-systems.net</a><o:p></o:p></pre>
<pre><o:p> </o:p></pre>
<pre>Key-systems is a company registered in Germany with Registration No.: HR B 18835 - Saarbruecken: CEO: Alexander Siffrin<o:p></o:p></pre>
<pre>Registered Offices: Im Oberen Werk 1, DE-66386 St. Ingbert, Germany<o:p></o:p></pre>
<pre><o:p> </o:p></pre>
<pre>Part of the CentralNic Group PLC (LON: CNIC) a company registered in England and Wales with company number 8576358.<o:p></o:p></pre>
<pre>Registered Offices: 35-39 Moorgate, London, EC2R 6AR. <o:p></o:p></pre>
</div>
</body>
</html>