<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:201602113;
mso-list-type:hybrid;
mso-list-template-ids:-1286320078 67698703 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l0:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l1
{mso-list-id:429593865;
mso-list-type:hybrid;
mso-list-template-ids:1686564924 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l1:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l1:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l1:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l1:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l1:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l1:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l1:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l1:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l1:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style>
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Dear All,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Regarding data retention, ICANN org has previously identified a question and some areas that we wanted to flag for the EPDP Team, which we sent to the mailing list on 22 December 2018 (<a href="https://mm.icann.org/pipermail/gnso-epdp-team/2018-December/001125.html">https://mm.icann.org/pipermail/gnso-epdp-team/2018-December/001125.html</a>).
We are flagging them here again for the EPDP Team’s consideration/discussion as you work to finalize the recommendation.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The question/flags are: <o:p></o:p></p>
<ol start="1" type="1">
<li class="MsoListParagraph" style="mso-list:l0 level1 lfo2">There are several data elements that are currently required to be retained, but are not addressed in the Initial Report. Should the retention obligation for these data elements remain or be discontinued?<o:p></o:p></li><li class="MsoListParagraph" style="mso-list:l0 level1 lfo2">If billing and payment-related data is no longer required to be collected, retained, and (with respect to billing contact data) escrowed, this could impact continuity of service to registrants and
availability of this data in the event of a payment dispute or related investigation. ICANN org also notes that the ICANN Registrar Accreditation Policy <https://www.icann.org/resources/pages/policy-statement-2012-02-25-en> requires a registrar to receive
a reasonable assurance of payment prior to activating a domain registration.<o:p></o:p></li></ol>
<p class="MsoNormal">Data elements currently required to be collected, but are not addressed in the Initial Report include:<o:p></o:p></p>
<ul type="disc">
<li class="MsoListParagraph" style="mso-list:l1 level1 lfo1">Billing/Other Contact ID (where available)<o:p></o:p></li><li class="MsoListParagraph" style="mso-list:l1 level1 lfo1">Billing/Other Contact Name (where available)<o:p></o:p></li><li class="MsoListParagraph" style="mso-list:l1 level1 lfo1">Billing/Other Contact Street (where available)<o:p></o:p></li><li class="MsoListParagraph" style="mso-list:l1 level1 lfo1">Billing/Other Contact City (where available)<o:p></o:p></li><li class="MsoListParagraph" style="mso-list:l1 level1 lfo1">Billing/Other Contact State/Province (where available)<o:p></o:p></li><li class="MsoListParagraph" style="mso-list:l1 level1 lfo1">Billing/Other Contact Postal Code (where available)<o:p></o:p></li><li class="MsoListParagraph" style="mso-list:l1 level1 lfo1">Billing/Other Contact Country (where available)<o:p></o:p></li><li class="MsoListParagraph" style="mso-list:l1 level1 lfo1">Billing/Other Contact Email (where available)<o:p></o:p></li><li class="MsoListParagraph" style="mso-list:l1 level1 lfo1">Billing/Other Contact Phone (where available)<o:p></o:p></li><li class="MsoListParagraph" style="mso-list:l1 level1 lfo1">Billing/Other Contact Fax (where available)<o:p></o:p></li><li class="MsoListParagraph" style="mso-list:l1 level1 lfo1">(RAA 3.4.1.5) the name, postal address, e-mail address, and voice telephone number provided by the customer of any privacy service or licensee of any proxy registration service, in each case, offered
or made available by Registrar or its Affiliates in connection with each registration.<o:p></o:p></li><li class="MsoListParagraph" style="mso-list:l1 level1 lfo1">Full Contact Information for Privacy Proxy Registrations<o:p></o:p></li><li class="MsoListParagraph" style="mso-list:l1 level1 lfo1">Full Contact Information for Registrants who have Consented to Full Display<o:p></o:p></li><li class="MsoListParagraph" style="mso-list:l1 level1 lfo1">(Data Retention Specification 1.1.7.) Types of domain name services purchased for use in connection with the Registration<o:p></o:p></li><li class="MsoListParagraph" style="mso-list:l1 level1 lfo1">(Data Retention Specification 1.1.8.) To the extent collected by Registrar, "card on file," current period third party transaction number, or other recurring payment data.<o:p></o:p></li><li class="MsoListParagraph" style="mso-list:l1 level1 lfo1">(Data Retention Specification 1.2.1) Information regarding the means and source of payment reasonably necessary for the Registrar to process the Registration transaction, or a transaction number provided
by a third party payment processor;<o:p></o:p></li><li class="MsoListParagraph" style="mso-list:l1 level1 lfo1">(Data Retention Specification 1.2.2) Log files, billing records and, to the extent collection and maintenance of such records is commercially practicable or consistent with industry-wide generally
accepted standard practices within the industries in which Registrar operates, other records containing communications source and destination information, including, depending on the method of transmission and without limitation: (1) Source IP address, HTTP
headers, (2) the telephone, text, or fax number; and (3) email address, Skype handle, or instant messaging identifier, associated with communications between Registrar and the registrant about the Registration; and<o:p></o:p></li><li class="MsoListParagraph" style="mso-list:l1 level1 lfo1">(Data Retention Specification 1.2.3 ) Log files and, to the extent collection and maintenance of such records is commercially practicable or consistent with industry-wide generally accepted standard
practices within the industries in which Registrar operates, other records associated with the Registration containing dates, times, and time zones of communications and sessions, including initial registration.<o:p></o:p></li><li class="MsoListParagraph" style="mso-list:l1 level1 lfo1">(RAA 3.4.2.1) the submission date and time, and the content, of all registration data (including updates) submitted in electronic form to the Registry Operator(s);<o:p></o:p></li><li class="MsoListParagraph" style="mso-list:l1 level1 lfo1">(RAA 3.4.2.2) all written communications constituting registration applications, confirmations, modifications, or terminations and related correspondence with Registered Name Holders, including registration
contracts;<o:p></o:p></li><li class="MsoListParagraph" style="mso-list:l1 level1 lfo1">(RAA 3.4.2.3) records of the accounts of all Registered Name Holders with Registrar.<o:p></o:p></li></ul>
<p class="MsoNormal">Best,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Dan and Trang<o:p></o:p></p>
<p class="MsoNormal">ICANN Org Liaisons<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:12.0pt;color:black">From: </span></b><span style="font-size:12.0pt;color:black">Gnso-epdp-team <gnso-epdp-team-bounces@icann.org> on behalf of Kurt Pritz <kurt@kjpritz.com><br>
<b>Date: </b>Tuesday, January 22, 2019 at 1:20 PM<br>
<b>To: </b>EPDP <gnso-epdp-team@icann.org><br>
<b>Subject: </b>[Gnso-epdp-team] EPDP Recommendation 11 - email list discussion<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><a name="_MailOriginalBody">Hi Everyone:<o:p></o:p></a></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="mso-bookmark:_MailOriginalBody">There were several items (Recommendations) that we agreed to discuss via email with the idea that we could close on them without taking
time for discussion in a meeting. This email concerns Recommendation 11, addressing the data retention period.<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="mso-bookmark:_MailOriginalBody"><o:p> </o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="mso-bookmark:_MailOriginalBody"><b>The current recommendation states:</b><o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="mso-bookmark:_MailOriginalBody">The EPDP Team recommends that Registrars are required to retain the herein-specified data elements for a period of one year following
the life of the registration. This retention period conforms to the specific statute of limitations within the Transfer Dispute Resolution Policy (“TDRP”).<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="mso-bookmark:_MailOriginalBody"><o:p> </o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="mso-bookmark:_MailOriginalBody"><b>Small Team Discussion</b><o:p></o:p></span></p>
<p class="MsoListParagraphCxSpFirst" style="margin-left:.25in;mso-add-space:auto;text-indent:-.25in">
<span style="mso-bookmark:_MailOriginalBody">(1)</span><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:7.0pt;font-family:"Times New Roman"">
</span>The small team noted that “statute of limitation” as used in the Recommendation was probably an inappropriate use of a legal term of art and should be replaced with more appropriate language. This point is addressed in the proposed updated Recommendation
below. <o:p></o:p></span></p>
<p class="MsoListParagraphCxSpLast" style="margin-left:.25in;mso-add-space:auto;text-indent:-.25in">
<span style="mso-bookmark:_MailOriginalBody">(2)</span><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:7.0pt;font-family:"Times New Roman"">
</span>Some on the small team advocated for a longer retention period, suggesting that a longer retention period could be anchored in existing ICANN policy requirements or other outside requirements. (The current retention period is anchored is the Transfer
DRP as the “tall pole” among all the other purposes for processing registration data.) The updated language below, proposed by small team B, clarifies that the proposed data retention period is for ICANN related requirements and different retention periods
may apply as a result of local requirements or circumstances.<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="mso-bookmark:_MailOriginalBody"><o:p> </o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="mso-bookmark:_MailOriginalBody"><b>Proposed updated language recommendation 11 – data retention</b> <o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="mso-bookmark:_MailOriginalBody">The EPDP Team recommends that: Registrars are required to retain the herein-specified data elements for ICANN-related requirements for
a period of one year following the life of registration. This minimum retention period is consistent the requirements of the Transfer Dispute Resolution Procedure, which has the longest retention requirement of any of the enumerated Purposes for Processing
Registration Data.<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="mso-bookmark:_MailOriginalBody">Note, Contracted Parties may have needs or requirements for longer retention periods in line with local law or other requirements. This
is not prohibited by this language. Similarly, should local law prevent retention for the period of one year, there are waiver procedures in place that can address such situations.<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="mso-bookmark:_MailOriginalBody"><o:p> </o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="mso-bookmark:_MailOriginalBody"><b>Actions</b><o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="mso-bookmark:_MailOriginalBody">Those supporting a retention greater than one year generally should submit rationale for such a retention period including related ICANN
policy requirements to which this could be anchored. These submissions will be discussed via email.<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="mso-bookmark:_MailOriginalBody">Submit comments for support for the amended Recommendation or requesting edits to the recommendation with rationale. <o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody">Deadline: Friday, 24 January, additional email discussion might follow depending on responses.
<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody">Thank you and best regards,<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody">Kurt<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><o:p> </o:p></span></p>
</div>
</div>
</div>
</div>
</body>
</html>