<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
        {font-family:Helvetica;
        panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
        {font-family:Wingdings;
        panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
        {font-family:"MS Gothic";
        panose-1:2 11 6 9 7 2 5 8 2 4;}
@font-face
        {font-family:"Cambria Math";
        panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
        {font-family:Tahoma;
        panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
        {font-family:"\@MS Gothic";
        panose-1:2 11 6 9 7 2 5 8 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0in;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:blue;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:purple;
        text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
        {mso-style-priority:34;
        margin-top:0in;
        margin-right:.5in;
        margin-bottom:10.0pt;
        margin-left:0in;
        mso-add-space:auto;
        text-align:right;
        line-height:115%;
        direction:rtl;
        unicode-bidi:embed;
        font-size:11.0pt;
        font-family:"Calibri","sans-serif";}
p.MsoListParagraphCxSpFirst, li.MsoListParagraphCxSpFirst, div.MsoListParagraphCxSpFirst
        {mso-style-priority:34;
        mso-style-type:export-only;
        margin-top:0in;
        margin-right:.5in;
        margin-bottom:0in;
        margin-left:0in;
        margin-bottom:.0001pt;
        mso-add-space:auto;
        text-align:right;
        line-height:115%;
        direction:rtl;
        unicode-bidi:embed;
        font-size:11.0pt;
        font-family:"Calibri","sans-serif";}
p.MsoListParagraphCxSpMiddle, li.MsoListParagraphCxSpMiddle, div.MsoListParagraphCxSpMiddle
        {mso-style-priority:34;
        mso-style-type:export-only;
        margin-top:0in;
        margin-right:.5in;
        margin-bottom:0in;
        margin-left:0in;
        margin-bottom:.0001pt;
        mso-add-space:auto;
        text-align:right;
        line-height:115%;
        direction:rtl;
        unicode-bidi:embed;
        font-size:11.0pt;
        font-family:"Calibri","sans-serif";}
p.MsoListParagraphCxSpLast, li.MsoListParagraphCxSpLast, div.MsoListParagraphCxSpLast
        {mso-style-priority:34;
        mso-style-type:export-only;
        margin-top:0in;
        margin-right:.5in;
        margin-bottom:10.0pt;
        margin-left:0in;
        mso-add-space:auto;
        text-align:right;
        line-height:115%;
        direction:rtl;
        unicode-bidi:embed;
        font-size:11.0pt;
        font-family:"Calibri","sans-serif";}
span.apple-converted-space
        {mso-style-name:apple-converted-space;}
span.EmailStyle18
        {mso-style-type:personal-reply;
        font-family:"Calibri","sans-serif";
        color:#1F497D;}
.MsoChpDefault
        {mso-style-type:export-only;
        font-size:10.0pt;}
@page WordSection1
        {size:8.5in 11.0in;
        margin:1.0in 1.25in 1.0in 1.25in;}
div.WordSection1
        {page:WordSection1;}
/* List Definitions */
@list l0
        {mso-list-id:526602835;
        mso-list-type:hybrid;
        mso-list-template-ids:173316938 67698703 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l0:level1
        {mso-level-tab-stop:none;
        mso-level-number-position:left;
        margin-left:38.25pt;
        text-indent:-.25in;}
@list l0:level2
        {mso-level-number-format:alpha-lower;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        margin-left:74.25pt;
        text-indent:-.25in;}
@list l0:level3
        {mso-level-number-format:roman-lower;
        mso-level-tab-stop:none;
        mso-level-number-position:right;
        margin-left:110.25pt;
        text-indent:-9.0pt;}
@list l0:level4
        {mso-level-tab-stop:none;
        mso-level-number-position:left;
        margin-left:146.25pt;
        text-indent:-.25in;}
@list l0:level5
        {mso-level-number-format:alpha-lower;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        margin-left:182.25pt;
        text-indent:-.25in;}
@list l0:level6
        {mso-level-number-format:roman-lower;
        mso-level-tab-stop:none;
        mso-level-number-position:right;
        margin-left:218.25pt;
        text-indent:-9.0pt;}
@list l0:level7
        {mso-level-tab-stop:none;
        mso-level-number-position:left;
        margin-left:254.25pt;
        text-indent:-.25in;}
@list l0:level8
        {mso-level-number-format:alpha-lower;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        margin-left:290.25pt;
        text-indent:-.25in;}
@list l0:level9
        {mso-level-number-format:roman-lower;
        mso-level-tab-stop:none;
        mso-level-number-position:right;
        margin-left:326.25pt;
        text-indent:-9.0pt;}
@list l1
        {mso-list-id:589201205;
        mso-list-type:hybrid;
        mso-list-template-ids:-148733464 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l1:level1
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        margin-left:1.0in;
        text-indent:-.25in;
        font-family:Symbol;}
@list l1:level2
        {mso-level-number-format:bullet;
        mso-level-text:o;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        margin-left:1.5in;
        text-indent:-.25in;
        font-family:"Courier New";}
@list l1:level3
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        margin-left:2.0in;
        text-indent:-.25in;
        font-family:Wingdings;}
@list l1:level4
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        margin-left:2.5in;
        text-indent:-.25in;
        font-family:Symbol;}
@list l1:level5
        {mso-level-number-format:bullet;
        mso-level-text:o;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        margin-left:3.0in;
        text-indent:-.25in;
        font-family:"Courier New";}
@list l1:level6
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        margin-left:3.5in;
        text-indent:-.25in;
        font-family:Wingdings;}
@list l1:level7
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        margin-left:4.0in;
        text-indent:-.25in;
        font-family:Symbol;}
@list l1:level8
        {mso-level-number-format:bullet;
        mso-level-text:o;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        margin-left:4.5in;
        text-indent:-.25in;
        font-family:"Courier New";}
@list l1:level9
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        margin-left:5.0in;
        text-indent:-.25in;
        font-family:Wingdings;}
@list l2
        {mso-list-id:1196574344;
        mso-list-type:hybrid;
        mso-list-template-ids:-1741629456 67698703 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l2:level1
        {mso-level-tab-stop:none;
        mso-level-number-position:left;
        margin-left:38.25pt;
        text-indent:-.25in;}
@list l2:level2
        {mso-level-number-format:alpha-lower;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        margin-left:74.25pt;
        text-indent:-.25in;}
@list l2:level3
        {mso-level-number-format:roman-lower;
        mso-level-tab-stop:none;
        mso-level-number-position:right;
        margin-left:110.25pt;
        text-indent:-9.0pt;}
@list l2:level4
        {mso-level-tab-stop:none;
        mso-level-number-position:left;
        margin-left:146.25pt;
        text-indent:-.25in;}
@list l2:level5
        {mso-level-number-format:alpha-lower;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        margin-left:182.25pt;
        text-indent:-.25in;}
@list l2:level6
        {mso-level-number-format:roman-lower;
        mso-level-tab-stop:none;
        mso-level-number-position:right;
        margin-left:218.25pt;
        text-indent:-9.0pt;}
@list l2:level7
        {mso-level-tab-stop:none;
        mso-level-number-position:left;
        margin-left:254.25pt;
        text-indent:-.25in;}
@list l2:level8
        {mso-level-number-format:alpha-lower;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        margin-left:290.25pt;
        text-indent:-.25in;}
@list l2:level9
        {mso-level-number-format:roman-lower;
        mso-level-tab-stop:none;
        mso-level-number-position:right;
        margin-left:326.25pt;
        text-indent:-9.0pt;}
@list l3
        {mso-list-id:1882984452;
        mso-list-type:hybrid;
        mso-list-template-ids:733137064 67698703 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l3:level1
        {mso-level-tab-stop:none;
        mso-level-number-position:left;
        margin-left:74.25pt;
        text-indent:-.25in;}
@list l3:level2
        {mso-level-number-format:alpha-lower;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        margin-left:110.25pt;
        text-indent:-.25in;}
@list l3:level3
        {mso-level-number-format:roman-lower;
        mso-level-tab-stop:none;
        mso-level-number-position:right;
        margin-left:146.25pt;
        text-indent:-9.0pt;}
@list l3:level4
        {mso-level-tab-stop:none;
        mso-level-number-position:left;
        margin-left:182.25pt;
        text-indent:-.25in;}
@list l3:level5
        {mso-level-number-format:alpha-lower;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        margin-left:218.25pt;
        text-indent:-.25in;}
@list l3:level6
        {mso-level-number-format:roman-lower;
        mso-level-tab-stop:none;
        mso-level-number-position:right;
        margin-left:254.25pt;
        text-indent:-9.0pt;}
@list l3:level7
        {mso-level-tab-stop:none;
        mso-level-number-position:left;
        margin-left:290.25pt;
        text-indent:-.25in;}
@list l3:level8
        {mso-level-number-format:alpha-lower;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        margin-left:326.25pt;
        text-indent:-.25in;}
@list l3:level9
        {mso-level-number-format:roman-lower;
        mso-level-tab-stop:none;
        mso-level-number-position:right;
        margin-left:362.25pt;
        text-indent:-9.0pt;}
ol
        {margin-bottom:0in;}
ul
        {margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple" style="word-wrap: break-word;-webkit-nbsp-mode: space;line-break:after-white-space">
<div class="WordSection1">
<p class="MsoNormal">Hi all,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">With regard to the distinction between natural and legal persons I would like to start with some factual points 
<o:p></o:p></p>
<p class="MsoListParagraphCxSpFirst" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:10.0pt;margin-left:74.25pt;mso-add-space:auto;text-align:left;text-indent:-.25in;mso-list:l3 level1 lfo5;direction:ltr;unicode-bidi:embed">
<![if !supportLists]><span style="font-size:12.0pt;line-height:115%;font-family:"Times New Roman","serif""><span style="mso-list:Ignore">1.<span style="font:7.0pt "Times New Roman"">     
</span></span></span><![endif]><span dir="LTR"></span><span style="font-size:12.0pt;line-height:115%;font-family:"Times New Roman","serif"">The GDPR applies to the processing of personal data of natural persons and not to personal data that concerns legal persons; 
 recital 14 says " This regulation does not cover the processing of personal data which concerns legal persons and in particular undertakings established as legal persons"<o:p></o:p></span></p>
<p class="MsoListParagraphCxSpMiddle" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:10.0pt;margin-left:74.25pt;mso-add-space:auto;text-align:left;text-indent:-.25in;mso-list:l3 level1 lfo5;direction:ltr;unicode-bidi:embed">
<![if !supportLists]><span style="font-size:12.0pt;line-height:115%;font-family:"Times New Roman","serif""><span style="mso-list:Ignore">2.<span style="font:7.0pt "Times New Roman"">     
</span></span></span><![endif]><span dir="LTR"></span><span style="font-size:12.0pt;line-height:115%;font-family:"Times New Roman","serif"">We are not the ones who decided on this distinction  the GDPR did and ICANN is not in the business of making laws<o:p></o:p></span></p>
<p class="MsoListParagraphCxSpMiddle" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:74.25pt;margin-bottom:.0001pt;mso-add-space:auto;text-align:left;text-indent:-.25in;mso-list:l3 level1 lfo5;direction:ltr;unicode-bidi:embed">
<![if !supportLists]><span style="font-size:12.0pt;line-height:115%;font-family:"Times New Roman","serif""><span style="mso-list:Ignore">3.<span style="font:7.0pt "Times New Roman"">     
</span></span></span><![endif]><span dir="LTR"></span><span style="font-size:12.0pt;line-height:115%;font-family:"Times New Roman","serif"">The CPs are concerned because
<o:p></o:p></span></p>
<p class="MsoListParagraphCxSpMiddle" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:10.0pt;margin-left:1.0in;mso-add-space:auto;text-align:left;text-indent:-.25in;mso-list:l1 level1 lfo4;direction:ltr;unicode-bidi:embed">
<![if !supportLists]><span style="font-size:12.0pt;line-height:115%;font-family:Symbol"><span style="mso-list:Ignore">·<span style="font:7.0pt "Times New Roman"">        
</span></span></span><![endif]><span dir="LTR"></span><span style="font-size:12.0pt;line-height:115%;font-family:"Times New Roman","serif"">The information of legal persons might  as well be personal information of natural persons. (Which might put the CPs
 at risk)<o:p></o:p></span></p>
<p class="MsoListParagraphCxSpMiddle" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:10.0pt;margin-left:1.0in;mso-add-space:auto;text-align:left;text-indent:-.25in;mso-list:l1 level1 lfo4;direction:ltr;unicode-bidi:embed">
<![if !supportLists]><span style="font-size:12.0pt;line-height:115%;font-family:Symbol"><span style="mso-list:Ignore">·<span style="font:7.0pt "Times New Roman"">        
</span></span></span><![endif]><span dir="LTR"></span><span style="font-size:12.0pt;line-height:115%;font-family:"Times New Roman","serif"">The registrants might identify themselves incorrectly (Which might put the CPs at risk)<o:p></o:p></span></p>
<p class="MsoListParagraphCxSpLast" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:10.0pt;margin-left:1.0in;mso-add-space:auto;text-align:left;text-indent:-.25in;mso-list:l1 level1 lfo4;direction:ltr;unicode-bidi:embed">
<![if !supportLists]><span style="font-size:12.0pt;line-height:115%;font-family:Symbol"><span style="mso-list:Ignore">·<span style="font:7.0pt "Times New Roman"">        
</span></span></span><![endif]><span dir="LTR"></span><span style="font-size:12.0pt;line-height:115%;font-family:"Times New Roman","serif"">They are not sure about the practicality and  implementation of this distinction.<o:p></o:p></span></p>
<p class="MsoNormal">To address the concerns of the contracted parties<o:p></o:p></p>
<p class="MsoListParagraphCxSpFirst" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:10.0pt;margin-left:38.25pt;mso-add-space:auto;text-align:left;text-indent:-.25in;mso-list:l2 level1 lfo2;direction:ltr;unicode-bidi:embed">
<![if !supportLists]><span style="font-size:12.0pt;line-height:115%;font-family:"Times New Roman","serif""><span style="mso-list:Ignore">1.<span style="font:7.0pt "Times New Roman"">     
</span></span></span><![endif]><span dir="LTR"></span><span style="font-size:12.0pt;line-height:115%;font-family:"Times New Roman","serif"">Some registries are already making this distinction like EURid where the registrar agreement defines personal data as
 follows<o:p></o:p></span></p>
<p class="MsoListParagraphCxSpMiddle" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:10.0pt;margin-left:.5in;mso-add-space:auto;text-align:left;direction:ltr;unicode-bidi:embed">
<span style="font-size:12.0pt;line-height:115%;font-family:"Times New Roman","serif"">"
</span><span style="font-size:12.0pt;line-height:115%;font-family:"Times New Roman","serif"">“Personal Data” means any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly,
 in particular, by reference or identification number or by one or more factors specific to his or her physical, physiological, mental, economic, cultural or social identity"  some other registries have also taken this approach.
<o:p></o:p></span></p>
<p class="MsoListParagraphCxSpMiddle" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:10.0pt;margin-left:.5in;mso-add-space:auto;text-align:left;direction:ltr;unicode-bidi:embed">
<span style="font-size:12.0pt;line-height:115%;font-family:"Times New Roman","serif"">Looking at all the red-lines and clean versions  provided by all groups with regard to the work of small team 1.  We all agree in the recommendations section on having the
 GDD staff commence a research on how currently ccTLDs and CPs make the distinction between the natural and legal persons. I assume that the research will not only tackle the implementation or the technological aspect of this but also the legal aspects and
 the risks associated</span><span style="font-size:12.0pt;line-height:115%;font-family:"Times New Roman","serif""><o:p></o:p></span></p>
<p class="MsoListParagraphCxSpMiddle" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:10.0pt;margin-left:38.25pt;mso-add-space:auto;text-align:left;direction:ltr;unicode-bidi:embed">
<span style="font-size:12.0pt;line-height:115%;font-family:"Times New Roman","serif""><o:p> </o:p></span></p>
<p class="MsoListParagraphCxSpLast" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:10.0pt;margin-left:38.25pt;mso-add-space:auto;text-align:left;text-indent:-.25in;mso-list:l2 level1 lfo2;direction:ltr;unicode-bidi:embed">
<![if !supportLists]><span style="font-size:12.0pt;line-height:115%;font-family:"Times New Roman","serif""><span style="mso-list:Ignore">2.<span style="font:7.0pt "Times New Roman"">     
</span></span></span><![endif]><span dir="LTR"></span><span style="font-size:12.0pt;line-height:115%;font-family:"Times New Roman","serif"">Dianne, Thomas and others have suggested to try to get guidance from the DPAs or EC in this regard.<o:p></o:p></span></p>
<p class="MsoNormal">I believe that after we get the results of the above, we might be able to reach consensus on the matter.  <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Hadia<o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Gnso-epdp-team [mailto:gnso-epdp-team-bounces@icann.org]
<b>On Behalf Of </b>Thomas Rickert<br>
<b>Sent:</b> Monday, November 05, 2018 1:36 PM<br>
<b>To:</b> Diane Plaut<br>
<b>Cc:</b> Alex Deacon; Gnso-epdp-team; gnso-epdp-team@icann.org<br>
<b>Subject:</b> Re: [Gnso-epdp-team] Further Input from the IPC/BC on Small Team #1 and #2 issues<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Hi Diane,<o:p></o:p></p>
<div>
<p class="MsoNormal">I am still waiting for a response from the EC. Will let all of you know once there is news to report.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">All the best,<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Thomas<o:p></o:p></p>
<div>
<p class="MsoNormal"><br>
<br>
<o:p></o:p></p>
<div>
<p class="MsoNormal">Am 05.11.2018 um 02:02 schrieb Plaut, Diane <<a href="mailto:Diane.Plaut@corsearch.com">Diane.Plaut@corsearch.com</a>>:<o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">Dear Thomas- <o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Thank you for thoughtful analysis, as usual. I agree that we have to get further input from other DPAs, and I have told you that I very much want to support and be part of that effort (the meeting you offered to set up). This was a starting
 point to push this effort forward, and I believe a good starting point because the ICO is recognized as a source of moderate guidance.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Getting DPA guidance is an important and essential effort that we both know needs to happen to allow the EPDP to come up with practical solutions to the legal application of data protection laws, and specifically the GDPR, to answer the
 charter questions and advance a working DNS system.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Please let me know if you were able to make progress on setting up the meeting in November, as discussed.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Sincerely,<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt">Diane <o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><br>
On Nov 4, 2018, at 2:59 PM, Thomas Rickert <<a href="mailto:epdp@gdpr.ninja">epdp@gdpr.ninja</a>> wrote:<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal">Hi Diane, all, <o:p></o:p></p>
<div>
<p class="MsoNormal">Thanks for doing research on this and sharing information from the ICO with the group.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">This has sparked off quiet some discussion, which is good. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Reading all the e-mails I cannot help feeling that you are talking past each other, at least to a certain extent. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">We are trying to answer the question whether a distinction between natural and legal persons should be made. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Some say that the distinction should not be made as there are risks when you make the distinction. If a legal person’s name is PII and if a contracted party then publishes that data, it will be in breach of the GDPR and potentially be at
 the risk of being fined.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">The ICO on the other hand, says that information from the data subject can be trusted. What that means is that the registrar does not have to do validation. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Let’s say I mistype my name - that is nothing the registrar needs to investigate. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">But that is different from a sole trader who gives his name and tags it legal person. I do not think the ICO would go as far as saying that the data subject’s potentially inaccurate submission of information would include the legal consequences
 of being put into the bucket of legal entities. In fact, that could mean that the individual would get its data disclosed and not be able to exercise rights under GDPR. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">This is why I think we should try to get guidance from the DPAs or the EC. If they say the parties involved will not be sanctioned if they rely on the self-identification of a customer, that is fine. Absent such clarification, we need to
 continue the conversation….<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I hope this helps.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Best,<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Thomas<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><br>
<br>
<o:p></o:p></p>
<div>
<p class="MsoNormal">Am 03.11.2018 um 02:28 schrieb Plaut, Diane <<a href="mailto:Diane.Plaut@corsearch.com">Diane.Plaut@corsearch.com</a>>:<o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal"><a name="m_-8613371621784521239__MailOriginalBody"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">Dear EPDP Team-</span></a><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> </span><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">In our efforts to overcome a significant hurdle through our EPDP work – that CPs have expressed they cannot rely on the accuracy of Registrant input and, therefore, are hesitant
 to distinguish between legal and natural persons or count on country information input by Registrant’s because if it is not accurate, they are concerned they will be liable for identifying the person incorrectly or determining the applicable law incorrectly. 
 We have discussed in the EPDP the prospect of trying to get input from DPAs to confirm that it is reasonable to count on Registrant input. Thomas Rickert has most recently proposed in Barcelona, setting up a meeting with the EDPB and I have expressed my support
 and desire to partake in this and the legal effort. In the meanwhile, I think it is beneficial for us to try to do our own research and show DPA insight on this topic. To this end, I provide below, guidance from the ICO on this topic. The IPC/BC wishes to
 add this to the Small Team #1and #2 comments in support of our positions on the issues of supporting the distinction of legal and natural persons and applying relevant country laws.</span><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div style="margin-left:.5in">
<p class="MsoNormal"><b><u><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">The Accuracy of information provided by data subjects</span></u></b><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div style="margin-left:.5in">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Article 5(1)(d)/(2) GDPR provides that controllers have an obligation to demonstrate compliance with the requirement that: </span><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div style="margin-left:.5in">
<p class="MsoNormal"><i><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Personal data shall be…accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate,
 having regard to the purposes for which they are processed, are erased or rectified without delay (‘accuracy’).</span></i><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div style="margin-left:.5in">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">According to the ICO, this means that controllers must take all reasonable steps to ensure that the personal data they hold is not incorrect or misleading as
 to any matter of fact. However, the GDPR does not explicitly distinguish between personal data provided by the data subject, provided by a third party or created by the controller – the same obligation applies in each such case. </span><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div style="margin-left:.5in">
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">As to whether it is possible to rely on the data subject for the accuracy of the information, the ICO has confirmed in its guidance that this is possible.
 In particular, the ICO states</span></b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> that: “In some cases it is reasonable to rely on the individual to tell you when their personal data has changed, such as when they change
 address or other contact details. It may be sensible to periodically ask individuals to update their own details, <b>but you do not need to take extreme measures to ensure your records are up to date, unless there is a corresponding privacy risk which justifies
 this</b>.” However, if the controller learns that information is no longer accurate/up to date (either from the data subject or from other information which comes to light), the controller should update its records accordingly.</span><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div style="margin-left:.5in">
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">The ICO also recognizes that it may be impractical to check the accuracy of personal data someone else provides. In such cases, the ICO suggests that controllers
 must: </span></b><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div style="margin-left:1.0in">
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">·</span></b><b><span style="font-size:7.0pt;color:#1F497D">         </span></b><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">accurately
 record the information provided;</span></b><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div style="margin-left:1.0in">
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">·</span></b><b><span style="font-size:7.0pt;color:#1F497D">         </span></b><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">accurately
 record the source of the information;</span></b><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div style="margin-left:1.0in">
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">·</span></b><b><span style="font-size:7.0pt;color:#1F497D">         </span></b><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">take
 “reasonable steps” in the circumstances to ensure the accuracy of the information; and</span></b><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div style="margin-left:1.0in">
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">·</span></b><b><span style="font-size:7.0pt;color:#1F497D">         </span></b><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">carefully
 consider any challenges to the accuracy of the information.</span></b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div style="margin-left:.5in">
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Given that the data subject itself inputs and supplies the data registration information (elements) in issue, there is a strong argument that under the above
 guidance by the ICO, it is reasonable to reply on the accuracy of this information for purposes of distinguishing between legal and natural persons and for purposes of correct geographical information in relation to applicable law purposes.</span></b><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span></b><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div style="margin-left:.5in">
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Moreover,<span class="apple-converted-space"> </span></span></b><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#203864">in addition
 to and to support the above, the IPC and BC further strongly support the following legal recommendation be added to both Small Team #1 and Small Team #2 input that contractual provisions be added to agreements so that overall accuracy standards are achieved, stating:<span class="apple-converted-space"> </span><i>The
 above-identified Registrant represents and warrants that the data provided herein is true, complete and accurate</i>.  It could even go one step further and expressly say that<span class="apple-converted-space"> </span><i>Registrar is entitled to rely on this
 data in making legal determinations including, without limitation, those related to GDPR and relevant data protection laws</i>. Nothing in the above, limits the application of the ICO guidance from supporting greater accuracy required by all parties.</span></b><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#203864"> </span><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#203864">Sincerely,</span><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#203864"> </span><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#203864">Diane</span><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> </span><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#373737">Diane Plaut</span></b><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#373737">General Counsel and Privacy Officer</span><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><image001.png><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="1440" style="width:15.0in;margin-left:-5.4pt;border-collapse:collapse">
<tbody>
<tr>
<td width="1440" style="width:15.0in;padding:0in 5.4pt 0in 5.4pt">
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#373737">Direct<span class="apple-converted-space"> </span><a href="tel:+1%20646-899-2806"><span style="color:#954F72">+1 646-899-2806</span></a><span class="apple-converted-space"> </span></span><span style="font-size:9.0pt;font-family:"MS Gothic";color:#373737">
</span><span style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#373737"><a href="mailto:diane.plaut@corsearch.com"><span style="color:#1CA868">diane.plaut@corsearch.com</span></a></span><span style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1CA868"> </span><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
</td>
</tr>
<tr>
<td width="1440" style="width:15.0in;padding:0in 5.4pt 0in 5.4pt">
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#989A9B">220 West 42</span><sup><span style="font-size:7.0pt;font-family:"Calibri","sans-serif";color:#989A9B">nd</span></sup><span class="apple-converted-space"><span style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#989A9B"> </span></span><span style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#989A9B">Street,
 11</span><sup><span style="font-size:7.0pt;font-family:"Calibri","sans-serif";color:#989A9B">th</span></sup><span class="apple-converted-space"><span style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#989A9B"> </span></span><span style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#989A9B">Floor,
 New York, NY 10036, United States</span><span style="font-size:9.0pt;font-family:"MS Gothic";color:#373737">
</span><span style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#373737"><a href="http://www.corsearch.com/"><span style="color:#1CA868">www.corsearch.com</span></a></span><span style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1CA868"> </span><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#989A9B">Join Corsearch on   <a href="https://twitter.com/corsearch"><span style="color:#989A9B">Twitter</span></a>  <a href="https://www.linkedin.com/company/2593860/"><span style="color:#989A9B">Linkedin</span></a>  <a href="http://trademarksandbrands.corsearch.com/"><span style="color:#989A9B">Trademarks
 + Brands</span></a></span><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#989A9B">Customer Service/Platform Support: 1 800 SEARCH1™ (<a href="tel:1%20800%20732%207241"><span style="color:#954F72">1 800 732 7241</span></a>)</span><span style="font-size:9.0pt;font-family:"MS Gothic";color:#989A9B">
</span><span style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#989A9B"><a href="mailto:Corsearch.USCustomerService@corsearch.com"><span style="color:#1CA868">Corsearch.USCustomerService@corsearch.com</span></a><span class="apple-converted-space"> </span> </span><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#989A9B"> </span><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#989A9B">Confidentiality Notice:</span></b><span style="font-size:10.0pt;font-family:"Calibri","sans-serif""> <span style="color:#989A9B">This email and its attachments
 (if any) contain confidential information of the sender. The information is intended only for the use by the direct addressees of the original sender of this email. If you are not an intended recipient of the original sender (or responsible for delivering
 the message to such person), you are hereby notified that any review, disclosure, copying, distribution or the taking of any action in reliance of the contents of and attachments to this email is strictly prohibited. If you have received this email in error,
 please immediately notify the sender at the address shown herein and permanently delete any copies of this email (digital or paper) in your possession.</span></span><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
</td>
</tr>
</tbody>
</table>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> </span><span style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Calibri","sans-serif""> <o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif"">_______________________________________________<br>
Gnso-epdp-team mailing list<br>
</span><a href="mailto:Gnso-epdp-team@icann.org"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif";color:#954F72">Gnso-epdp-team@icann.org</span></a><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif""><br>
</span><a href="https://mm.icann.org/mailman/listinfo/gnso-epdp-team"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif";color:#954F72">https://mm.icann.org/mailman/listinfo/gnso-epdp-team</span></a><o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</div>
</blockquote>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</body>
</html>