<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"MS Gothic";
panose-1:2 11 6 9 7 2 5 8 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"\@MS Gothic";
panose-1:2 11 6 9 7 2 5 8 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:-webkit-standard;
panose-1:2 11 6 4 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.m-241511665951850211apple-converted-space
{mso-style-name:m-241511665951850211apple-converted-space;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black">Dear Kurt, Marika and EPDP Team-<o:p></o:p></span></p>
<p class="MsoNormal" style="caret-color: rgb(0, 0, 0);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="color:black"> <o:p></o:p></span></p>
<p class="MsoNormal" style="caret-color: rgb(0, 0, 0);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="color:black">Further to yesterday’s call, I wanted to add IPC input and legal opinion in relation to Purpose E. We all very much appreciate the incredible job that Marc A. did and his output is spot on. The language used, clarity of intent and
structure of the Purpose is sound. The IPC herein supports the present draft but further wishes to clarify and confirm its Triage support for the BC in addition of 6(1)(b) as a legal basis for Purpose E, particularly in light of Marc and Berry Cobb’s work.
Here is the basis for our position:<o:p></o:p></span></p>
<p class="MsoNormal" style="caret-color: rgb(0, 0, 0);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="color:black"> <o:p></o:p></span></p>
<p class="MsoNormal" style="caret-color: rgb(0, 0, 0);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="color:black">First, in stating the legal analysis it is understood that:<o:p></o:p></span></p>
<p class="MsoNormal" style="caret-color: rgb(0, 0, 0);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="color:black"> <o:p></o:p></span></p>
<p class="MsoNormal" style="caret-color: rgb(0, 0, 0);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<i><span style="font-family:"-webkit-standard",serif;color:black">In order to rely on Art. 6(1)(b) GDPR (contractual necessity), the processing must be necessary for the performance of A CONTRACT (or to take steps at the request of the data subject before entering
into a contract) TO WHICH THE DATA SUBJECT IS PARTY. The GDPR does<span class="m-241511665951850211apple-converted-space"> </span><b>not<span class="m-241511665951850211apple-converted-space"> </span></b>therefore specify that the controller must be a party
to the contract with the data subject, only that the data subject must be party to a contract which necessitates the processing in question by the controller. As result, there is an argument that ICANN's processing of registrants' personal data is necessary
for the performance of the contract between registrants and registrars/registries, notwithstanding that ICANN is not a party to that contract in this context.<o:p></o:p></span></i></p>
<p class="MsoNormal"><i><span style="font-family:"-webkit-standard",serif;color:black"> </span></i><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="caret-color: rgb(0, 0, 0);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="font-family:"-webkit-standard",serif;color:black">We believe that there is a basis to show privity of contract here because there are the following contractual obligations flowing from the registrant through the registrars/registries and ICANN
in order to provide escrow as per the RAA:</span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="caret-color: rgb(0, 0, 0);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="font-family:"-webkit-standard",serif;color:black"> </span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="caret-color: rgb(0, 0, 0);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:#2B2B30;background:#DCF2FA">3.6 Data Escrow. During the Term of this Agreement, on a schedule, under the terms, and in the format specified by ICANN, Registrar shall submit an electronic copy
of the data described in Subsections<span class="m-241511665951850211apple-converted-space"> </span></span><span style="color:black"><a href="http://3.4.1.2" target="_blank"><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:#954F72;background:#DCF2FA">3.4.1.2</span></a></span><span class="m-241511665951850211apple-converted-space"><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:#2B2B30;background:#DCF2FA"> </span></span><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:#2B2B30;background:#DCF2FA">through<span class="m-241511665951850211apple-converted-space"> </span></span><span style="color:black"><a href="http://3.4.1.5" target="_blank"><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:#954F72;background:#DCF2FA">3.4.1.5</span></a></span><span class="m-241511665951850211apple-converted-space"><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:#2B2B30;background:#DCF2FA"> </span></span><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:#2B2B30;background:#DCF2FA">to
ICANN or, at Registrar's election and at its expense, to a reputable escrow agent mutually approved by Registrar and ICANN, such approval also not to be unreasonably withheld by either party. The data shall be held under an agreement among Registrar, ICANN,
and the escrow agent (if any) providing that (1) the data shall be received and held in escrow, with no use other than verification that the deposited data is complete, consistent, and in proper format, until released to ICANN; (2) the data shall be released
from escrow upon expiration without renewal or termination of this Agreement; and (3) ICANN's rights under the escrow agreement shall be assigned with any assignment of this Agreement. The escrow shall provide that in the event the escrow is released under
this Subsection, ICANN (or its assignee) shall have a non-exclusive, irrevocable, royalty-free license to exercise (only for transitional purposes) or have exercised all rights necessary to provide Registrar Services.</span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="caret-color: rgb(0, 0, 0);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="font-family:"-webkit-standard",serif;color:black"> </span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="caret-color: rgb(0, 0, 0);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="font-family:"-webkit-standard",serif;color:black">Based on the above, together with the recommendations that are proposed in Purpose E to update the escrow agreements to provide for the “appropriate contractual provisions” to make clear the contractual
obligations and relationships of the parties and bring the agreements into line with current data protection laws, as well as the need for Data Processing Agreements (which require that each party’s data processing activities and responsibilities are set forth),
the contractual nexus between ICANN and the data subject will be made clearer and the support for the [additional] legal basis of 6(1)(b) clarified.</span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="caret-color: rgb(0, 0, 0);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="font-family:"-webkit-standard",serif;color:black"> </span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="caret-color: rgb(0, 0, 0);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="font-family:"-webkit-standard",serif;color:black">As a result, BC/IPC ask that the Initial Report include 6(1)(b) as a basis, simply to provide for the clear obligation of the escrow data to be provided without concern of inconsistent application
under 6(1)(f) by individual registrars and registries. It is clear from the great work of Marc and Berry that this is a clear goal of Purpose E, to provide clarity and uniform practice around the obligations in relation to escrow.</span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="caret-color: rgb(0, 0, 0);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="font-family:"-webkit-standard",serif;color:black"> </span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="caret-color: rgb(0, 0, 0);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="font-family:"-webkit-standard",serif;color:black">Diane</span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="caret-color: rgb(0, 0, 0);font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="color:black"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><b><span style="font-size:9.0pt;color:#373737">Diane Plaut</span></b><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;color:#373737">General Counsel and Privacy Officer</span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-family:"Times New Roman",serif"><img border="0" width="165" height="57" style="width:1.7187in;height:.5937in" id="Picture_x0020_1" src="cid:image001.png@01D472D2.A5878E10" alt="cid:image001.png@01D3CA70.18FC1D40"></span><o:p></o:p></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="1699" style="width:1274.25pt;margin-left:-5.4pt;border-collapse:collapse">
<tbody>
<tr>
<td width="1699" style="width:1274.0pt;padding:0in 5.4pt 0in 5.4pt">
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;color:#373737">Direct +1 646-899-2806
</span><span style="font-size:9.0pt;font-family:"MS Gothic";color:#373737">
</span><span style="font-size:9.0pt;color:#373737"><a href="mailto:diane.plaut@corsearch.com"><span style="color:#1CA868">diane.plaut@corsearch.com</span></a></span><span style="font-size:9.0pt;color:#1CA868"> </span><o:p></o:p></p>
</td>
</tr>
<tr>
<td width="1699" style="width:1274.0pt;padding:0in 5.4pt 0in 5.4pt">
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;color:#989A9B">220 West 42</span><sup><span style="font-size:7.0pt;color:#989A9B">nd</span></sup><span style="font-size:9.0pt;color:#989A9B"> Street, 11</span><sup><span style="font-size:7.0pt;color:#989A9B">th</span></sup><span style="font-size:9.0pt;color:#989A9B">
Floor, New York, NY 10036, United States</span><span style="font-size:9.0pt;font-family:"MS Gothic";color:#373737">
</span><span style="font-size:9.0pt;color:#373737"><a href="http://www.corsearch.com/"><span style="color:#1CA868">www.corsearch.com</span></a></span><span style="font-size:9.0pt;color:#1CA868"> </span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;color:#989A9B">Join Corsearch on <a href="https://twitter.com/corsearch"><span style="color:#989A9B">Twitter</span></a> <a href="https://www.linkedin.com/company/2593860/"><span style="color:#989A9B">Linkedin</span></a> <a href="http://trademarksandbrands.corsearch.com/"><span style="color:#989A9B">Trademarks
+ Brands</span></a></span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;color:#989A9B">Customer Service/Platform Support: 1 800 SEARCH1™ (1 800 732 7241)</span><span style="font-size:9.0pt;font-family:"MS Gothic";color:#989A9B">
</span><span style="font-size:9.0pt;color:#989A9B"><a href="mailto:Corsearch.USCustomerService@corsearch.com"><span style="color:#1CA868">Corsearch.USCustomerService@corsearch.com</span></a>
</span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;color:#989A9B"> </span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><b><span style="font-size:10.0pt;color:#989A9B">Confidentiality Notice:</span></b><span style="font-size:10.0pt"> <span style="color:#989A9B">This email and its attachments (if any) contain confidential information
of the sender. The information is intended only for the use by the direct addressees of the original sender of this email. If you are not an intended recipient of the original sender (or responsible for delivering the message to such person), you are hereby
notified that any review, disclosure, copying, distribution or the taking of any action in reliance of the contents of and attachments to this email is strictly prohibited. If you have received this email in error, please immediately notify the sender at the
address shown herein and permanently delete any copies of this email (digital or paper) in your possession.<o:p></o:p></span></span></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>