<div dir="ltr"><div dir="ltr"><div class="gmail_default" style="font-family:verdana,sans-serif">Thanks Kurt.</div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif">I agree with Amr but I don't think Appendix A, section 2.1 and 3 should be included. Those clauses are not about Geo differentiation of "registrants" only. </div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif">Also I saw the draft final version of the report and there is no consensus to discuss the feasibility conditions and methodology for the development of a rule set, Milton also recorded our objection about this multiple times. Why did it end up in the recommendation again? I suggest deleting the "consider the feasibility ..." bullet point. If we want to dig this topic out again and waste hours of our time discuss whether to do a study on the feasibility of how to provide less data protection for those who are not located in the EU, then we can decide on that in phase 2. </div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div><div dir="ltr" class="m_955209179912682160gmail_signature"><div dir="ltr"><div><font face="verdana, sans-serif">Farzaneh </font></div></div></div></div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail-m_955209179912682160gmail_attr">On Fri, Jan 25, 2019 at 3:32 PM Amr Elsadr <aelsadr@icannpolicy.ninja> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div>Hi Kurt,<div><br></div><div>Thanks for this. It seems fine to me, except that I’m not clear why we would wish for the final report to suggest that the EPDP Team <i>“agrees that contracted parties <b><u>should be</u></b> (and are) permitted to differentiate between registrants on a geographic basis”</i>.</div><div><br></div><div>The emphasis here is on the word “should”. I don’t believe this is accurate, as there have been a number of views expressed on why differentiation between registrants on a geographic basis should NOT be done. A few are mentioned in your email below, but several others are not. These might not have been brought up very recently, such as during the review of public comments. However, they certainly were in the discussions leading up to the publication of the initial report.</div><div><br></div><div>I believe there is still divergence within the EPDP Team on whether Contracted Parties should do anything at all in the context of this recommendation. Furthermore, the Temp Spec doesn’t indicate whether or not Contracted Parties <b><i>SHOULD</i></b> do anything here either. It only says that those Contracted Parties to whom section 2.1 of appendix A is applicable to <b><i>MUST</i></b> apply the requirements in sections 2 and 4 of the same appendix, and that those to whom section 3 of appendix A are applicable <b><i>MAY</i></b> do the same.<div><br></div><div>I would prefer that the recommendation be amended to simply say:</div><div><br></div><div><div><blockquote type="cite"><div><div><div><div><span>The EPDP Team recommends that the existing requirements of §§ 2.1 and 3 of<font color="#000000"> <b>Appendix A of</b></font> the Temporary Specification remain in place, i.e., contracted parties <strike>should (and </strike>are<strike>)</strike> permitted to differentiate between registrants on a geographic basis, but are not obligated to do so.<br><br>Based on the legal guidance that is provided on this topic:<br></span><ul><li><span>The EPDP Team may reconsider this recommendation in phase 2 of its work, an</span></li><li><span>Consider the feasibility conditions and methodology for the development of a rule set for making decisions on geographic distinctions.</span></li></ul></div></div></div></div></blockquote><div>In practically implementable terms, this achieves the same purpose of the recommendation language you proposed, without suggesting the EPDP Team has reached consensus on whether or not geo differentiation of registrants SHOULD be done.</div></div><div><br></div><div>Thanks.</div><div><br></div><div>Amr</div></div><div><br><blockquote type="cite"><div>On Jan 25, 2019, at 6:05 PM, Kurt Pritz <<a href="mailto:kurt@kjpritz.com" target="_blank">kurt@kjpritz.com</a>> wrote:</div><br class="gmail-m_955209179912682160gmail-m_5925097377015595879Apple-interchange-newline"><div><div><div><div><div>
<p class="MsoNormal"><span style="font-size:14px">Hi Everyone:</span></p><p class="MsoNormal"><span style="font-size:14px"><span>With the ongoing goal of progressing issues via email, the leadership and support teams have considered the review of public comment</span> made during the recent plenary conference call and suggests the following
language to capture the agreement in principle that was developed on
making Geographic Distinctions.</span></p><p class="MsoNormal"><span style="font-size:14px">Based on that discussion the recommendation below is proposed for EPDP Team
consideration.</span></p><div><span style="font-size:14px"><br></span></div><p class="MsoNormal"><span style="font-size:14px"><b>Team Discussion</b></span></p><p class="MsoNormal"><span style="font-size:14px">The Initial Report did not contain a Recommendation for the handling of personal data based on geographical considerations. Instead, the Initial Report asked three questions so that the community input could provide a guide for the EPDP Teams deliberations leading to the Final Report. Those questions were:<br><br>h) Applicability of Data Processing Requirements<br><br><span class="gmail-m_955209179912682160gmail-m_5925097377015595879Apple-tab-span" style="white-space:pre-wrap"> </span>h1) Should Registry Operators and Registrars (“Contracted Parties”) be permitted or required to differentiate between registrants on a geographic basis?<br><br><span class="gmail-m_955209179912682160gmail-m_5925097377015595879Apple-tab-span" style="white-space:pre-wrap"> </span>h2) Is there a legal basis for Contracted Parties to differentiate between registrants on a geographic basis?<br><br><br>The EPDP Team considered the public comment and developed the following thoughts in its deliberations in addressing the charter questions:<br></span></p><ul><li><span style="font-size:14px">The EPDP Team discussed this extensively (as documented in the Initial Report) as well as in the context of the review on the public comments received on the Initial Report. In relation to part of charter question h1, the EPDP Team agrees that contracted parties should be (and are) permitted to differentiate between registrants on a geographic basis;</span></li><li><span style="font-size:14px">However, the EPDP Team members have divergent views on whether differentiation on a geographic basis should be required.</span></li><li><span style="font-size:14px">Recognizing that ICANN is a Data Controller in many scenarios and that ICANN may be considered “established” in Europe (within the meaning of the GDPR), the EPDP Team discussed whether those factors would have an effect upon the discussion and determining GDPR-compliant outcomes. It became clear that legal guidance in relation to the applicability of GDPR in the context of ICANN having an ‘establishment’ in Europe could further inform requirements.</span></li><li><span style="font-size:14px">The EPDP Team also discussed the possibility of developing a set of rules for guiding the making of geographical distinctions in an GDPR-compliant manner (akin to the EWG hypothesized “rules engine”). The Team agreed that creating this set of rules was a complex task (just as it would be for individual registrars) and agreed such development could not occur within the remit of this Phase I EPDP. Such a development would also be dependent on the response to the aforementioned legal guidance.</span></li></ul><span style="font-size:14px"><br><b>EPDP Team Recommendation (a new recommendation as there was none in the Initial Report)<br></b><br>The EPDP Team recommends that the existing requirements of §§ 2.1 and 3 of the Temporary Specification remain in place, i.e., contracted parties should (and are) permitted to differentiate between registrants on a geographic basis, but are not obligated to do so.<br><br>Based on the legal guidance that is provided on this topic:<br></span><ul><li><span style="font-size:14px">The EPDP Team may reconsider this recommendation in phase 2 of its work, an</span></li><li><span style="font-size:14px">Consider the feasibility conditions and methodology for the development of a rule set for making decisions on geographic distinctions.</span></li></ul><div><br class="gmail-m_955209179912682160gmail-m_5925097377015595879webkit-block-placeholder"></div><p class="MsoNormal"><span><span style="font-size:14px"><b><br></b></span></span></p><p class="MsoNormal"><span><span style="font-size:14px"><b>Action</b></span></span></p><p class="MsoNormal"><span style="font-size:14px">Please indicate on the mailing list
whether you have any concerns about these modifications and/or what other
aspects of this recommendation should be discussed. If there are additional
questions for ICANN Compliance that would serve to inform the deliberations on
this recommendation, please share these also.</span></p><p class="MsoNormal"><span style="font-size:14px">Deadline: Tuesday, 29 January,
additional email discussion might follow depending on responses.</span></p><p class="MsoNormal"><span style="font-size:14px"><br></span></p><p class="MsoNormal"><span style="font-size:14px">Best regards,</span></p><p class="MsoNormal"><span style="font-size:14px"><span>Kurt</span><span><u></u><u></u></span></span></p><div><span style="font-size:14px"> </span><br class="gmail-m_955209179912682160gmail-m_5925097377015595879webkit-block-placeholder"></div>
</div></div></div></div></div></blockquote></div><br></div></div>_______________________________________________<br>
Gnso-epdp-team mailing list<br>
<a href="mailto:Gnso-epdp-team@icann.org" target="_blank">Gnso-epdp-team@icann.org</a><br>
<a href="https://mm.icann.org/mailman/listinfo/gnso-epdp-team" rel="noreferrer" target="_blank">https://mm.icann.org/mailman/listinfo/gnso-epdp-team</a></blockquote></div>