<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">Dear Kurt,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="color:#333333;background:white">Thank you for your note. We do continue to have some concerns with recommendation 6 regarding data escrow providers, particularly as it relates to the roles and responsibilities of ICANN, the
contracted parties, and escrow providers in the processing of gTLD registration data. We would appreciate further discussions with the EPDP Team on this topic.</span><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="color:#333333;background:white">Regarding paragraph 5 of your email, we’re unclear about the statement that “the EPDP Team has identified ICANN as the controller and the contracted parties and data escrow providers as processors.”
We were under the impression that the discussion on this topic is still open as (1) we were asked to provide a table/graph that details the data escrow arrangements, and (2) we haven’t seen any analyses on this or documentation of consensus calls from the
EPDP Team on this topic. If this is not correct, then please clarify for us. We’ve attached here a draft summary of the key points of these data escrow arrangements and look forward to continuing discussions with the EPDP Team.</span><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="color:#333333;background:white">Related, we’d like to make the EPDP Team aware that as part of the implementation of the Temp Spec (Appendix B), there is a set of parallel conversations going on regarding the necessary arrangements
between ICANN, the data escrow providers, and contracted parties, </span><span style="color:black;background:white">which might help to inform the EPDP Team’s discussion on this topic as well.</span><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="color:#333333;background:white">Thanks again for your email and we look forward to continuing discussions with the EPDP Team on this topic.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#333333;background:white"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#333333;background:white">Best,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#333333;background:white"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#333333;background:white">Dan and Trang<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#333333;background:white">ICANN Org Liaisons</span><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:12.0pt;color:black">From: </span></b><span style="font-size:12.0pt;color:black">Kurt Pritz <kurt@kjpritz.com><br>
<b>Date: </b>Friday, December 14, 2018 at 3:06 PM<br>
<b>To: </b>Daniel Halloran <daniel.halloran@icann.org>, Trang Nguyen <trang.nguyen@icann.org><br>
<b>Cc: </b>GNSO EPDP <gnso-epdp-team@icann.org><br>
<b>Subject: </b>[Ext] Question to ICANN re: Data Escrow Data Processing Agreements<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><a name="_MailOriginalBody">Dear Dan and Trang:<o:p></o:p></a></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="mso-bookmark:_MailOriginalBody">I am writing to you in your capacity as the ICANN organisation liaisons to the EPDP Team.<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="mso-bookmark:_MailOriginalBody">As you may recall, the EPDP Team discussed Recommendation #6 from its
</span><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__gnso.icann.org_sites_default_files_file_field-2Dfile-2Dattach_epdp-2Dgtld-2Dregistration-2Ddata-2Dspecs-2Dinitial-2D21nov18-2Den.pdf&d=DwMFaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=NghSLFqweTwAOFMJpbYA3LcVJ0Vvvw6-wxrKoS5l6VY&m=8Dkw3ieaHfTMBeK25DVPM0JVnby2VrB2L0az80VquPo&s=agHmBnbqnmEc0ydd2yVArav9LN7S4fw9U_e3TfPPZJ8&e="><span style="mso-bookmark:_MailOriginalBody">Initial
Report [gnso.icann.org]</span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"> during its
</span><a href="https://community.icann.org/display/EOTSFGRD/2018-12-04+EPDP+Team+call+%2331"><span style="mso-bookmark:_MailOriginalBody">meeting</span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"> on
4 December 2018. <o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="mso-bookmark:_MailOriginalBody">The EPDP Team agreed to update the language of Recommendation #6 to the following: “[t]he EPDP Team recommends that ICANN Org develop
legally-compliant data processing agreements with the data escrow providers.”<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="mso-bookmark:_MailOriginalBody">While you are likely aware of this recommendation, the EPDP Team thought it important to request in writing that ICANN commence development
of legally-compliant data processing agreements with its approved data escrow providers. The EPDP Team discussed and
</span><a href="https://community.icann.org/display/EOTSFGRD/e.+Data+Elements+Workbooks"><span style="mso-bookmark:_MailOriginalBody">documented</span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"> the
associated processing activities and responsible parties for registrar data escrow and registry data escrow. Please refer to Purpose E
</span><a href="https://community.icann.org/display/EOTSFGRD/e.+Data+Elements+Workbooks"><span style="mso-bookmark:_MailOriginalBody">data processing workbooks</span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody">
for additional information. <o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="mso-bookmark:_MailOriginalBody">In its analysis, the EPDP Team has identified ICANN as the controller and the contracted parties and data escrow providers as processors.
Accordingly, the EPDP Team encourages you to proceed with developing legally-compliant data processing agreements with those roles as described here and in the Initial Report.<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="mso-bookmark:_MailOriginalBody">If ICANN org disagrees with or wishes to discuss the EPDP Team’s request, analyis or assessment, please engage with the EPDP Team at
your earliest convenience and in time to inform its deliberations as it prepares its Final Report. This, we think, will require a response prior to the end of year ICANN shutdown. <o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="mso-bookmark:_MailOriginalBody">Thanks very much for taking time to consider this. <o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="mso-bookmark:_MailOriginalBody">Sincerely,<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="mso-bookmark:_MailOriginalBody">Kurt<o:p></o:p></span></p>
</div>
</div>
</body>
</html>