<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:"Yu Gothic";
panose-1:2 11 4 0 0 0 0 0 0 0;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
@font-face
{font-family:"\@Yu Gothic";
panose-1:2 11 4 0 0 0 0 0 0 0;}
@font-face
{font-family:Cambria;
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:"Open Sans";
panose-1:0 0 0 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
span.xgmail-gr330
{mso-style-name:x_gmail-gr_330;}
span.EmailStyle23
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#1F497D;}
span.EmailStyle24
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle26
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:350837539;
mso-list-template-ids:415523552;}
@list l1
{mso-list-id:1474523648;
mso-list-template-ids:-1803127474;}
@list l1:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level2
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l2
{mso-list-id:1861313811;
mso-list-type:hybrid;
mso-list-template-ids:-1935797040 67698703 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l2:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l2:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l2:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l2:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l2:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l2:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l2:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l2:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l2:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l3
{mso-list-id:2140611365;
mso-list-template-ids:-465170566;}
@list l3:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level2
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">How about “a legally binding arrangement”? I think that would cover all interesting cases.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Gnso-epdp-team <gnso-epdp-team-bounces@icann.org>
<b>On Behalf Of </b>Trang Nguyen<br>
<b>Sent:</b> Wednesday, February 6, 2019 15:15<br>
<b>To:</b> Rosette, Kristina <rosettek@amazon.com>; Kurt Pritz <kurt@kjpritz.com>; gnso-epdp-team@icann.org<br>
<b>Subject:</b> Re: [Gnso-epdp-team] Recommendation 13 - Responsibilities of the Parties - email list discussion<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">Hi Kristina, All,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">Regarding “arrangement” versus “agreement”, ICANN org previously stated that “arrangement” could “take the form of an agreement, a policy, or a specification.”
All of these would be legally binding. Here’s a link to the message where we previously stated this: <a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmm.icann.org%2Fpipermail%2Fgnso-epdp-team%2F2019-January%2F001367.html&data=02%7C01%7Cmarksv%40microsoft.com%7C12b360caa97642fb952508d68c88f62e%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636850917226378566&sdata=Ea%2BH76pis0UVc6lvwlftUs3U7t93AAS9kTaWTBw44lI%3D&reserved=0"><span style="color:purple">https://mm.icann.org/pipermail/gnso-epdp-team/2019-January/001367.html</span></a>.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">Best,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">Dan and Trang<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">ICANN Org Liaisons<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="color:black">From: </span></b><span style="color:black">Gnso-epdp-team <<a href="mailto:gnso-epdp-team-bounces@icann.org">gnso-epdp-team-bounces@icann.org</a>> on behalf of "Rosette, Kristina via Gnso-epdp-team" <<a href="mailto:gnso-epdp-team@icann.org">gnso-epdp-team@icann.org</a>><br>
<b>Reply-To: </b>"Rosette, Kristina" <<a href="mailto:rosettek@amazon.com">rosettek@amazon.com</a>><br>
<b>Date: </b>Tuesday, February 5, 2019 at 6:39 PM<br>
<b>To: </b>Kurt Pritz <<a href="mailto:kurt@kjpritz.com">kurt@kjpritz.com</a>>, "<a href="mailto:gnso-epdp-team@icann.org">gnso-epdp-team@icann.org</a>" <<a href="mailto:gnso-epdp-team@icann.org">gnso-epdp-team@icann.org</a>><br>
<b>Subject: </b>Re: [Gnso-epdp-team] Recommendation 13 - Responsibilities of the Parties - email list discussion<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><a name="_MailOriginalBody"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">Hi,</span><o:p></o:p></a></p>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black"> </span><o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">RySG is still considering Chris’ proposed change to the indemnification language, and may wish to discuss.</span><o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black"> </span><o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">We had separate comments on Recommendation 13, namely:</span><o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black"> </span><o:p></o:p></span></p>
<ol style="margin-top:0in" start="1" type="1">
<li class="MsoListParagraph" style="margin-left:0in;mso-list:l2 level1 lfo3"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black"> RySG disagrees that “arrangements” is the correct word (instead
of “agreements”). However, RySG is willing to agree to use of “arrangements” if (i) ICANN Org confirms by email to the list that “arrangements” is intended to refer to a legally binding instrument; and (ii) the recommendation contains a footnote that says
this (ICANN Org confirmed that “arrangement” is intended to refer to a legally binding instrument.) along with a citation to the date and author of that email. We note the recent ICANN Org reference to Article 26, which deals with Joint Controllers. Given
the ICANN Org position that ICANN is not a joint controller, on the one hand, it seems inconsistent to cite that Article as the basis for use of “arrangements,” on the other hand.</span></span><span style="mso-bookmark:_MailOriginalBody"><o:p></o:p></span></li><li class="MsoListParagraph" style="margin-left:0in;mso-list:l2 level1 lfo3"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">Separate from the issue Chris has raised below, RySG believes
that the language in the original sentence should be changed from “Indemnification clauses shall” to “Indemnification clauses should.” The RAs for some gTLDs (.arab, .amsterdam, and .helsinki, for example) do not indemnify ICANN because of the governmental
status of the RO. Changing from “shall” to “should” respects that existing arrangement.</span></span><span style="mso-bookmark:_MailOriginalBody"><o:p></o:p></span></li></ol>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black"> </span><o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black"> </span><o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">RySG’s comment #1 above also applies to use of “arrangements” in Recommendation 14.</span><o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black"> </span><o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">K</span><o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black"> </span><o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><o:p></o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b></span><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">
Gnso-epdp-team [</span></span><a href="mailto:gnso-epdp-team-bounces@icann.org"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">mailto:gnso-epdp-team-bounces@icann.org</span></span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">]
<b>On Behalf Of </b>Kurt Pritz<br>
<b>Sent:</b> Tuesday, February 05, 2019 1:37 PM<br>
<b>To:</b> </span></span><a href="mailto:gnso-epdp-team@icann.org"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">gnso-epdp-team@icann.org</span></span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><br>
<b>Subject:</b> Re: [Gnso-epdp-team] Recommendation 13 - Responsibilities of the Parties - email list discussion</span><o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody">Hi everyone:<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"> <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody">You have seen Chris’ suggested language for Recommendation 13 below (and Kavouss’ response). The result is a less prescriptive or precise recommendation but also alerts us to possible reaction
by the ICANN Board. <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"> <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody">Please let me know if you disagree with or wish to discuss Chris’ recommendation. It would be great to receive feedback today so that we can schedule a discussion if need be, but please respond
by tomorrow at the latest. <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"> <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody">Thanks and regards,<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"> <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody">Kurt<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"> <o:p></o:p></span></p>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="mso-bookmark:_MailOriginalBody"><br>
<br>
<o:p></o:p></span></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody">On Feb 4, 2019, at 1:58 AM, Chris Disspain <</span><a href="mailto:chris.disspain@board.icann.org"><span style="mso-bookmark:_MailOriginalBody">chris.disspain@board.icann.org</span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody">>
wrote:<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"> <o:p></o:p></span></p>
<div>
<div>
<div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif">Hi Kurt,</span><o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif">I think your suggested language below brings together all of the points of view. </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif">I do have one concern regarding the indemnification language “Indemnification clauses shall ensure that the risk for certain data
processing is borne by either one or multiple parties that determine the purpose and means of the processing”. This goes beyond my understanding of ICANN’s plan to explore ways to possibly reduce risk to the contracted parties with respect to providing access
to non-public WHOIS data through a unified access model. As currently drafted, I think the language might prove challenging when it comes time for the Board to consider this recommendation. </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif">Trang also raised a related question about indemnification where she noted that it’s not clear that liability should necessarily
always rest with the party or parties that determine the purposes and means of processing, for example in the case of a data breach.</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif">I think both of these points could be addressed if the sentence were edited to say something to the effect of: “Indemnification
should be addressed as appropriate as part of the arrangements between ICANN, registries, and registrars.” </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif">I hope this makes sense. Happy to discuss as always. </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:#9443FB">Cheers,</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:#9443FB"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:#9443FB">CD</span><o:p></o:p></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif"><br>
<br>
</span><o:p></o:p></span></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif">On 30 Jan 2019, at 19:53, Kurt Pritz <</span></span><a href="mailto:kurt@kjpritz.com"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif">kurt@kjpritz.com</span></span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif">>
wrote:</span><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif"> </span><o:p></o:p></span></p>
<div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif">Hi Everyone: </span><o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif">To me, it seems as if we are in agreement with a set of principles and a variety of wordings will suit our purpose. </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif">I believe we need to point directly to the thorough work done by several of our team that indicates that JCAs are an appropriate
solution in many of the data processing cases. Before we made any recommendation, we started with this analysis of data, purposes, etc. </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif">I also have learned that the responsibilities of the parties (contracted parties and ICANN) will vary for each purpose even for
each data processing step. There is analysis left to go. </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif">Taking into account the Initial Report Recommendation, the work of the small group subsequent to that, and the comments on this
list, I’d like to settle on the following wording: </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif">"The EPDP Team recommends that ICANN Org develop and implement any required data protection arrangements, as appropriate, with
the Contracted Parties. In addition to the legally required components of such agreement, the agreement shall clearly specify the responsibilities of the respective parties for the processing activities as described therein. Indemnification clauses shall ensure
that the risk for certain data processing is borne by either one or multiple parties that determine the purpose and means of the processing. Due consideration should be given to the analysis carried out by the EPDP Team ("Processors, Controllers, Co-Controllers
and Joint Controllers," above in this Final Report).”</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif">In addition, if Thomas or others wish to augment the analysis in the Initial Report with his email that are part of this chain
(about avoiding liability), we should include that as an individual contribution to the team analysis.</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif">It’s my hope we can accept this as a team.</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif">Thanks for letting me weigh in on this and thank for the energy that’s gone into this discussion and the others.</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif">Best regards,</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif">Kurt</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif"> </span><o:p></o:p></span></p>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif"><br>
<br>
</span><o:p></o:p></span></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif">On Jan 30, 2019, at 11:22 AM, Heineman, Ashley <</span></span><a href="mailto:AHeineman@ntia.doc.gov"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif">AHeineman@ntia.doc.gov</span></span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif">>
wrote:</span><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif"> </span><o:p></o:p></span></p>
<div>
<div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">I won't belabor this, but just to correct the record, the USG does not ask that the recommendation be deleted. It does however specifically express
concern about the EPDP proposing a "specific legal vehicle (i.e., Joint Controller Agreement)."</span><o:p></o:p></span></p>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
<div>
<div class="MsoNormal" align="center" style="text-align:center"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">
<hr size="2" width="786" style="width:589.45pt" align="center">
</span></span></div>
<div id="divRplyFwdMsg">
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b></span><span style="mso-bookmark:_MailOriginalBody"><span class="apple-converted-space"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span></span></span><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">farzaneh
badii <</span></span><a href="mailto:farzaneh.badii@gmail.com"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">farzaneh.badii@gmail.com</span></span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">><br>
<b>Sent:</b><span class="apple-converted-space"> </span>Wednesday, January 30, 2019 1:57 PM<br>
<b>To:</b><span class="apple-converted-space"> </span>Heineman, Ashley<br>
<b>Cc:</b><span class="apple-converted-space"> </span>Thomas Rickert; </span></span><a href="mailto:gnso-epdp-team@icann.org"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">gnso-epdp-team@icann.org</span></span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><br>
<b>Subject:</b><span class="apple-converted-space"> </span>Re: [Gnso-epdp-team] Recommendation 13 - Responsibilities of the Parties - email list discussion</span><o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
</div>
<div>
<div>
<div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Verdana",sans-serif"> it seems like USG has suggested deleting the whole recommendation. I do not see any other opposition against JCA.
</span></span><a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcommunity.icann.org%2Fdisplay%2FEOTSFGRD%2FPublic%2BComment%2BReview%2BTool%3Fpreview%3D%2F102139731%2F102139865%2Fgnso-EPDP-pcrt-Initial-Report-REC13_20181228.docx&data=02%7C01%7Cmarksv%40microsoft.com%7C12b360caa97642fb952508d68c88f62e%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636850917226388575&sdata=ISgcpay1cVSi6EX5xHFCZcMWW6e64fNlP6%2FoNljrW8U%3D&reserved=0"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Verdana",sans-serif">https://community.icann.org/display/EOTSFGRD/Public+Comment+Review+Tool?preview=/102139731/102139865/gnso-EPDP-pcrt-Initial-Report-REC13_20181228.docx</span></span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Verdana",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Verdana",sans-serif">Unless you <span class="xgmail-gr330">agreed</span><span class="apple-converted-space"> </span>on something during the F2F, I don't think we should
remove JCA because of a single entity opposition - maybe staff can tell us if there have been other public comments specifically against JCA. </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Verdana",sans-serif"> </span><o:p></o:p></span></p>
</div>
</div>
<div>
<div>
<div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Verdana",sans-serif">Farzaneh<span class="apple-converted-space"> </span></span><o:p></o:p></span></p>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
<div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">On Wed, Jan 30, 2019 at 1:48 PM Heineman, Ashley <</span></span><a href="mailto:AHeineman@ntia.doc.gov"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">AHeineman@ntia.doc.gov</span></span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">>
wrote:</span><o:p></o:p></span></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt">
<div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">Attaching the narrative version of the USG comments should it be of interest.</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div id="x_gmail-m_7180990775729884537composer_signature">
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#575757">Sent from my Verizon, Samsung Galaxy smartphone</span><o:p></o:p></span></p>
</div>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">-------- Original message --------</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">From: "Heineman, Ashley" <</span></span><a href="mailto:AHeineman@ntia.doc.gov" target="_blank"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">AHeineman@ntia.doc.gov</span></span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">></span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">Date: 1/30/19 13:44 (GMT-05:00)</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">To: farzaneh badii <</span></span><a href="mailto:farzaneh.badii@gmail.com" target="_blank"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">farzaneh.badii@gmail.com</span></span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">>,
Thomas Rickert <</span></span><a href="mailto:epdp@gdpr.ninja"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">epdp@gdpr.ninja</span></span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">></span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">Cc:<span class="apple-converted-space"> </span></span></span><a href="mailto:gnso-epdp-team@icann.org" target="_blank"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">gnso-epdp-team@icann.org</span></span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">Subject: Re: [Gnso-epdp-team] Recommendation 13 - Responsibilities of the Parties - email list discussion</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">For what it is worth, the USG comments caution against getting into legal specifics as they pertain to agreements. </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div id="x_gmail-m_7180990775729884537composer_signature">
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#575757">Sent from my Verizon, Samsung Galaxy smartphone</span><o:p></o:p></span></p>
</div>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">-------- Original message --------</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">From: farzaneh badii <</span></span><a href="mailto:farzaneh.badii@gmail.com" target="_blank"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">farzaneh.badii@gmail.com</span></span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">></span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">Date: 1/30/19 13:36 (GMT-05:00)</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">To: Thomas Rickert <</span></span><a href="mailto:epdp@gdpr.ninja"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">epdp@gdpr.ninja</span></span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">></span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">Cc:<span class="apple-converted-space"> </span></span></span><a href="mailto:gnso-epdp-team@icann.org" target="_blank"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">gnso-epdp-team@icann.org</span></span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">Subject: Re: [Gnso-epdp-team] Recommendation 13 - Responsibilities of the Parties - email list discussion</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Verdana",sans-serif">I agree with Thomas.</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Verdana",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Verdana",sans-serif"> I do not agree that we should be after giving "flexibility" to ICANN org and CPs. But since some public comments asked for such flexibility, then
I think we should provide them a framework, the framework should consider ( as I gather from Alan and Thomas emails) legal, binding instruments that minimize the risk of fine and provides the appropriate and legal level of data protection for domain name registrants[
- sorry I am being sinful today].</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Verdana",sans-serif">I can live with what Kristina has proposed [Personal opinion] But I also want to point out that no one in the public comments is against having
JCA. So why we are changing that I do not know. I don't think JCA will take away flexibility (as .Chris suggests). If we want to give flexibility to org and CPs that is fine but we have to provide them with a set of criteria to work with. Otherwise, what is
the point of this recommendation? They would have done agreements and contracts even without it. The law asks them to! </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Verdana",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Verdana",sans-serif">As to Trang's point about indemnification, I am a little confused. I didn't see any ICANN legal concern raised in the public comment, is this a
new issue being raised now? Are we bringing new issues to the table? </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Verdana",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Verdana",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Verdana",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Verdana",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Verdana",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Verdana",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Verdana",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Verdana",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Verdana",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Verdana",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Verdana",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<div>
<div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Verdana",sans-serif">Farzaneh<span class="apple-converted-space"> </span></span><o:p></o:p></span></p>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
<div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">On Wed, Jan 30, 2019 at 12:41 PM Thomas Rickert <</span></span><a href="mailto:epdp@gdpr.ninja"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">epdp@gdpr.ninja</span></span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">>
wrote:</span><o:p></o:p></span></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt">
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">All,</span><o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">I still think it is a mistake to dilute the language from where we were before we published the initial report. We are in in the process of analyzing
public comment and establishing whether the comments received require us to amend our report / recommendations. What we heard and read were primarily implementation issues, which - as I hope we can agree by now - must not guide our decision, but the actually
circumstances. Additionally, we heard and read about concerns, but no alternative has been suggested that would be a better solution to what we agreed on earlier. To me, that does not require a change of our recommendation. We are replacing a concrete recommendation
with something vague without good reason.</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">Also, the language in our initial report allows for a change of model as we had the language in there that our recommendation is subject to further
legal analysis (or something to that effect).</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">Thus, the JCA approach should be the starting point and only be deviated from if there is a sufficiently robust alternative.</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">I trust what unites us is the interest in ensuring that no-one in the ICANN ecosystem will be fined. Let’s just imagine two scenarios:</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">1. We say joint controllers and in fact the parties are independent controllers</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">In this scenario, there should not be any risk for the parties at all. </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">The reason for this assumption is that the data flows between joint controllers need to be legally sound as between third parties (or independent
controller for that matter). Also, JCAs provide probably the highest protection level for data subjects. </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">2. We go for independent controllers and in fact a joint controller scenario is present</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">In this case, legal requirements would not be fulfilled. There would be a breach that could be sanctioned. In a proceeding with a supervisory authority,
the authority will surely review the documents publicly available, which are eg.:</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">- a letter from the Art 29 WP suggesting a joint controller scenario might be present</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">- a memo from Wilson Sonsini pointing in the direction of joint controllers</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">- a memo from Hamilton suggesting a joint controller scenario</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">- a memo from ICANN quoting from the above and concluding that it should be independent controllers nonetheless.</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">I am afraid that the authorities will then say that we could have known that joint controllers should be the way to go and that we increase the
liability risk for everyone by not doing so. </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">In other words, we would need to have very good reasons not to go for a joint controller scenario. The language in the initial report ensures that.
The revised language not much so.</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">Thanks for reading all this.</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">Best,</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">Thomas</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">PS - In practical terms, I think joint controller agreements can be operationalized without insurmountable difficulties. In the long run, we should
apply for a code of conduct anyway and we could present a different approach than joint controllers. If there is blessing for an alternative form the authorities via that route or by means of a guidance or other confirmation, we can certainly take a different
and potentially more light-weight approach.</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"><br>
<br>
</span><o:p></o:p></span></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">Am 30.01.2019 um 14:40 schrieb Alan Woods <</span></span><a href="mailto:alan@donuts.email" target="_blank"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">alan@donuts.email</span></span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">>:</span><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">Dear all, </span><o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">I am perplexed, if not a little bit frustrated by continuous tendency to wordsmith matters out of existence here. </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">So this end, and regardless of the ultimate settling of Roles and Responsibilities can we just go back to basic principles and remind ourselves
of the GDPR's requirements: </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><b><span style="font-family:"Calibri",sans-serif">Art 28:</span></b></span><span style="mso-bookmark:_MailOriginalBody"><span class="apple-converted-space"><span style="font-family:"Calibri",sans-serif"> </span></span></span><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">(processor)
"Processing by a processor shall be governed<span class="apple-converted-space"> </span><b><u>by a contract or other legal act</u></b>"<i>[emphasis added] </i></span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><b><span style="font-family:"Calibri",sans-serif">Art 26:</span></b></span><span style="mso-bookmark:_MailOriginalBody"><span class="apple-converted-space"><span style="font-family:"Calibri",sans-serif"> </span></span></span><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">(Joint
Controllers) "They shall in a transparent manner determine their respective responsibilities for compliance with the obligations under this Regulation, in particular as regards the exercising of the rights of the data subject and their respective duties to
provide the information referred to in Articles 13 and 14,<span class="apple-converted-space"> </span><b><u>by means of an arrangement between them</u></b>" <i>[emphasis added] </i></span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">I appreciate this is likely where Trang's suggestion is deriving from and I have no real issue with the concept of 'Arrangement' - but can we please
be very clear, that as a contracted party, who's lead DPA is clearly going to be Ireland (as will also be the case for a number of other CPs), my interpretation MUST be led by the laws which will be applicable to me, which is the<span class="apple-converted-space"> </span></span></span><a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Furldefense.proofpoint.com%2Fv2%2Furl%3Fu%3Dhttp-3A__www.irishstatutebook.ie_eli_2018_act_7_section_79_enacted_en_html-23sec79%26d%3DDwMGaQ%26c%3DFmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM%26r%3DNghSLFqweTwAOFMJpbYA3LcVJ0Vvvw6-wxrKoS5l6VY%26m%3D60m_aOsdEkY6GWkjCHR57L9EfaJYZUyZobpMTpXUfjU%26s%3DPyMXBr9-MlHnrZWj208jzbAJlPrj-2fx-uw5y7nK5to%26e%3D&data=02%7C01%7Cmarksv%40microsoft.com%7C12b360caa97642fb952508d68c88f62e%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636850917226398583&sdata=xYmMK7X3ldCCx8MYOznWiaWhydjHCObojCRT9Qh8Njc%3D&reserved=0" target="_blank"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">Data
Protection Act, 2018 [irishstatutebook.ie]</span></span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">. Section 79. which states: </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">" Where 2 or more controllers jointly determine the purposes and means of the processing of personal data (in this Part referred to as “joint controllers”),
they shall determine their respective responsibilities for compliance with this Part in a transparent manner<span class="apple-converted-space"><b><u> </u></b></span><b><u>by means of an agreement in writing between them</u></b>, save in so far as the said
responsibilities are determined by the law of the European Union or the law of the State. <i>[emphasis added] </i></span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">So regardless of whether or not we are considered Processors, Controllers or Joint controllers at some point in time, CPs will require a Contract
(or more correctly an addendum to our existing contracts) with ICANN, in writing, that governs the processing of data. </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">So long as it is clear, on the record, that whatever word is used, be it agreement, arrangement, or Ketubah, it means a legally binding instrument,
then I'm fine with it. </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">Kind regards,</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">Alan</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"><br clear="all">
</span><o:p></o:p></span></p>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<table class="MsoNormalTable" border="0" cellpadding="0">
<tbody>
<tr>
<td style="padding:0in 5.25pt 0in 0in">
<p class="MsoNormal" style="mso-margin-top-alt:7.5pt;margin-right:0in;margin-bottom:7.5pt;margin-left:0in">
<span style="mso-bookmark:_MailOriginalBody"></span><a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Furldefense.proofpoint.com%2Fv2%2Furl%3Fu%3Dhttp-3A__donuts.domains_%26d%3DDwMGaQ%26c%3DFmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM%26r%3DNghSLFqweTwAOFMJpbYA3LcVJ0Vvvw6-wxrKoS5l6VY%26m%3D60m_aOsdEkY6GWkjCHR57L9EfaJYZUyZobpMTpXUfjU%26s%3DJrlpwOlEJnzzh3G1NR5FDj0jhe6HVKZXvUYOGg2Cun0%26e%3D&data=02%7C01%7Cmarksv%40microsoft.com%7C12b360caa97642fb952508d68c88f62e%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636850917226408596&sdata=jv42fuJRG8CNHFJ8RSfI3SeXZk9u4FOL1nIzECScmvI%3D&reserved=0" target="_blank"><span style="mso-bookmark:_MailOriginalBody"><span style="border:solid windowtext 1.0pt;padding:0in;text-decoration:none"><img border="0" width="75" height="75" style="width:.7812in;height:.7812in" id="_x0000_i1026" src="cid:~WRD000.jpg" alt="Image removed by sender. Donuts Inc."></span>[donuts.domains]</span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><o:p></o:p></span></p>
</td>
<span style="mso-bookmark:_MailOriginalBody"></span>
<td style="padding:0in 5.25pt 0in 0in">
<div>
<p class="MsoNormal" style="mso-margin-top-alt:7.5pt;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;line-height:12.75pt">
<span style="mso-bookmark:_MailOriginalBody"><b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#333333">Alan Woods</span></b><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:7.5pt;margin-right:0in;margin-bottom:7.5pt;margin-left:0in">
<span style="mso-bookmark:_MailOriginalBody"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#333333">Senior Compliance & Policy Manager, Donuts Inc.</span><o:p></o:p></span></p>
<span style="mso-bookmark:_MailOriginalBody"></span>
<div style="margin-top:7.5pt;margin-bottom:7.5pt">
<div class="MsoNormal" align="center" style="text-align:center"><span style="mso-bookmark:_MailOriginalBody">
<hr size="1" width="100%" align="center">
</span></div>
<span style="mso-bookmark:_MailOriginalBody"></span></div>
<p class="MsoNormal" style="mso-margin-top-alt:7.5pt;margin-right:0in;margin-bottom:7.5pt;margin-left:0in">
<span style="mso-bookmark:_MailOriginalBody"><span style="font-size:8.5pt;font-family:"Arial",sans-serif;color:#333333">The Victorians, </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:7.5pt;margin-right:0in;margin-bottom:7.5pt;margin-left:0in">
<span style="mso-bookmark:_MailOriginalBody"><span style="font-size:8.5pt;font-family:"Arial",sans-serif;color:#333333">15-18 Earlsfort Terrace<br>
Dublin 2, County Dublin</span></span><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:9.0pt;font-family:"Open Sans",serif;color:#D6D6D6"><br>
</span></span><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:8.5pt;font-family:"Arial",sans-serif;color:#333333">Ireland</span><br>
<br>
</span><a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Furldefense.proofpoint.com%2Fv2%2Furl%3Fu%3Dhttps-3A__www.facebook.com_donutstlds%26d%3DDwMGaQ%26c%3DFmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM%26r%3DNghSLFqweTwAOFMJpbYA3LcVJ0Vvvw6-wxrKoS5l6VY%26m%3D60m_aOsdEkY6GWkjCHR57L9EfaJYZUyZobpMTpXUfjU%26s%3DaOoTjhYir-RhnHQaEwTV61pyXtEnkdGaK1j4uBuaJZo%26e%3D&data=02%7C01%7Cmarksv%40microsoft.com%7C12b360caa97642fb952508d68c88f62e%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636850917226408596&sdata=HyCp8eJGNbzcB4hn%2Bl4kWJ4JXh4DBP4ArqGbu%2BQLURM%3D&reserved=0" target="_blank"><span style="mso-bookmark:_MailOriginalBody"><span style="border:solid windowtext 1.0pt;padding:0in;text-decoration:none"><img border="0" width="32" height="32" style="width:.3333in;height:.3333in" id="_x0000_i1028" src="cid:~WRD000.jpg" alt="Image removed by sender."></span>[facebook.com]</span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"> </span><a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Furldefense.proofpoint.com%2Fv2%2Furl%3Fu%3Dhttps-3A__twitter.com_DonutsInc%26d%3DDwMGaQ%26c%3DFmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM%26r%3DNghSLFqweTwAOFMJpbYA3LcVJ0Vvvw6-wxrKoS5l6VY%26m%3D60m_aOsdEkY6GWkjCHR57L9EfaJYZUyZobpMTpXUfjU%26s%3DIt9hqgV4Yer_p90acKYWPnWmq5aMxr_hlkz07lHfwko%26e%3D&data=02%7C01%7Cmarksv%40microsoft.com%7C12b360caa97642fb952508d68c88f62e%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636850917226418604&sdata=yfhXskKQWIbjGZ0%2FSERNcrGA2j3UXyI0h8la3BbckhU%3D&reserved=0" target="_blank"><span style="mso-bookmark:_MailOriginalBody"><span style="border:solid windowtext 1.0pt;padding:0in;text-decoration:none"><img border="0" width="32" height="32" style="width:.3333in;height:.3333in" id="_x0000_i1029" src="cid:~WRD000.jpg" alt="Image removed by sender."></span>
[twitter.com]</span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"> </span><a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Furldefense.proofpoint.com%2Fv2%2Furl%3Fu%3Dhttps-3A__www.linkedin.com_company_donuts-2Dinc%26d%3DDwMGaQ%26c%3DFmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM%26r%3DNghSLFqweTwAOFMJpbYA3LcVJ0Vvvw6-wxrKoS5l6VY%26m%3D60m_aOsdEkY6GWkjCHR57L9EfaJYZUyZobpMTpXUfjU%26s%3DOQ027vc-UfMSJz5v8VrwUceoLRadiMoz5DDefCE1lbY%26e%3D&data=02%7C01%7Cmarksv%40microsoft.com%7C12b360caa97642fb952508d68c88f62e%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636850917226428612&sdata=enCn4nqCLUEY06fgetnuPMAQFkF1rIik3lfgvOAfTCM%3D&reserved=0" target="_blank"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.5pt;border:solid windowtext 1.0pt;padding:0in;text-decoration:none"><img border="0" width="32" height="32" style="width:.3333in;height:.3333in" id="_x0000_i1030" src="cid:~WRD000.jpg" alt="Image removed by sender."></span>
[linkedin.com]</span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><o:p></o:p></span></p>
</div>
</td>
<span style="mso-bookmark:_MailOriginalBody"></span>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Cambria",serif">Please NOTE: This electronic message, including any attachments, may include privileged, confidential and/or inside information owned by Donuts Inc.
. Any distribution or use of this communication by anyone other than the intended recipient(s) is strictly prohibited and may be unlawful. If you are not the intended recipient, please notify the sender by replying to this message and then delete it from
your system. Thank you.</span><o:p></o:p></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
<div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">On Tue, Jan 29, 2019 at 1:18 AM Trang Nguyen <</span></span><a href="mailto:trang.nguyen@icann.org" target="_blank"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">trang.nguyen@icann.org</span></span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">>
wrote:</span><o:p></o:p></span></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt">
<div>
<div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:20.0pt;font-family:"Calibri",sans-serif">Thank you, Sarah and Kristina for circulating revised text for recommendation 13. We would like to make one additional suggestion:
replace “…negotiates and enters into required data protection agreements…” with “…develop and implement any required data protection arrangements…” Referring to an “arrangement” instead of an “agreement” would provide greater flexibility during implementation,
which might take the form of an agreement, a policy, or a specification. Accordingly, the following sentence should also refer to “arrangement” instead of “agreement.”</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:20.0pt;font-family:"Calibri",sans-serif">Also, we would like to ask for clarity on the sentence regarding indemnification. Implementation discussions will work out the
details of allocation of responsibility and liability and it’s not clear that liability should necessarily always rest with the party or parties that determine(s) the purposes and means of processing, for example in the case of a data breach. We look forward
to additional discussions with the EPDP Team on this. <span class="apple-converted-space"> </span></span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:20.0pt;font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:20.0pt;font-family:"Calibri",sans-serif">Dan and Trang</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:20.0pt;font-family:"Calibri",sans-serif">ICANN Org Liaisons</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:20.0pt;font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><b><span style="font-size:20.0pt;font-family:"Calibri",sans-serif">From:<span class="apple-converted-space"> </span></span></b></span><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:20.0pt;font-family:"Calibri",sans-serif">Gnso-epdp-team
<</span></span><a href="mailto:gnso-epdp-team-bounces@icann.org" target="_blank"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:20.0pt;font-family:"Calibri",sans-serif">gnso-epdp-team-bounces@icann.org</span></span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:20.0pt;font-family:"Calibri",sans-serif">>
on behalf of "Rosette, Kristina via Gnso-epdp-team" <</span></span><a href="mailto:gnso-epdp-team@icann.org" target="_blank"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:20.0pt;font-family:"Calibri",sans-serif">gnso-epdp-team@icann.org</span></span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:20.0pt;font-family:"Calibri",sans-serif">><br>
<b>Reply-To:<span class="apple-converted-space"> </span></b>"Rosette, Kristina" <</span></span><a href="mailto:rosettek@amazon.com" target="_blank"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:20.0pt;font-family:"Calibri",sans-serif">rosettek@amazon.com</span></span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:20.0pt;font-family:"Calibri",sans-serif">><br>
<b>Date:<span class="apple-converted-space"> </span></b>Monday, January 28, 2019 at 5:14 PM<br>
<b>To:<span class="apple-converted-space"> </span></b>"</span></span><a href="mailto:gnso-epdp-team@icann.org" target="_blank"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:20.0pt;font-family:"Calibri",sans-serif">gnso-epdp-team@icann.org</span></span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:20.0pt;font-family:"Calibri",sans-serif">"
<</span></span><a href="mailto:gnso-epdp-team@icann.org" target="_blank"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:20.0pt;font-family:"Calibri",sans-serif">gnso-epdp-team@icann.org</span></span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:20.0pt;font-family:"Calibri",sans-serif">><br>
<b>Subject:<span class="apple-converted-space"> </span></b>Re: [Gnso-epdp-team] Recommendation 13 - Responsibilities of the Parties - email list discussion</span><o:p></o:p></span></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:20.0pt;font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><a name="x_m_7180990775729884537_m_81826871141851"><span style="font-size:20.0pt;font-family:"Calibri",sans-serif;color:#1F497D">All,</span></a><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:20.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:20.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Subject to a friendly amendment, RySG supports the RrSG proposed text for Recommendation 13. Our friendly amendment
is to change “shall” to “should” in the 3<sup>rd</sup>sentence. <span class="apple-converted-space"> </span></span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:20.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:20.0pt;font-family:"Calibri",sans-serif;color:#1F497D">As revised, Recommendation 13 reads:</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:20.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:20.0pt;font-family:"Verdana",sans-serif">The EPDP Team recommends that ICANN Org negotiates and enters into required data protection agreements, as appropriate, with the
Contracted Parties. In addition to the legally required components of such agreement, the agreement shall specify the responsibilities of the respective parties for the processing activities as described therein. Indemnification clauses should ensure that
the risk for certain data processing is borne by either one or multiple parties that determine the purpose and means of the processing. Due consideration should be given to the analysis carried out by the EPDP Team in its Final Report.</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:20.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Kristina</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><o:p></o:p></span></p>
</div>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b></span><span style="mso-bookmark:_MailOriginalBody"><span class="apple-converted-space"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span></span></span><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Gnso-epdp-team
[mailto:</span></span><a href="mailto:gnso-epdp-team-bounces@icann.org" target="_blank"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">gnso-epdp-team-bounces@icann.org</span></span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">]<span class="apple-converted-space"> </span><b>On
Behalf Of<span class="apple-converted-space"> </span></b>Sarah Wyld<br>
<b>Sent:</b><span class="apple-converted-space"> </span>Monday, January 28, 2019 3:29 PM<br>
<b>To:</b><span class="apple-converted-space"> </span></span></span><a href="mailto:gnso-epdp-team@icann.org" target="_blank"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">gnso-epdp-team@icann.org</span></span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><br>
<b>Subject:</b><span class="apple-converted-space"> </span>Re: [Gnso-epdp-team] Recommendation 13 - Responsibilities of the Parties - email list discussion</span><o:p></o:p></span></p>
</div>
</div>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif">Hello All,</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif">Here is the RrSG's proposed text for Rec 13:</span><o:p></o:p></span></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif">The EPDP Team recommends that ICANN Org negotiates and enters into required data protection agreements, as appropriate, with the
Contracted Parties. In addition to the legally required components of such agreement, the agreement shall specify the responsibilities of the respective parties for the processing activities as described therein. Indemnification clauses shall ensure that the
risk for certain data processing is borne by either one or multiple parties that determine the purpose and means of the processing. Due consideration should be given to the analysis carried out by the EPDP Team in its Final Report.</span><o:p></o:p></span></p>
</div>
</blockquote>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">The RrSG is aware that ICANN's status as controller, joint or independent, is not yet fully determined. As such, this proposed wording allows the
flexibility to determine the appropriate type of data protection agreement following further input.</span><o:p></o:p></span></p>
</div>
<pre><span style="mso-bookmark:_MailOriginalBody">-- <o:p></o:p></span></pre>
<pre><span style="mso-bookmark:_MailOriginalBody">Sarah Wyld<o:p></o:p></span></pre>
<pre><span style="mso-bookmark:_MailOriginalBody">Domains Product Team<o:p></o:p></span></pre>
<pre><span style="mso-bookmark:_MailOriginalBody">Tucows<o:p></o:p></span></pre>
<pre><span style="mso-bookmark:_MailOriginalBody">+1.416 535 0123 Ext. 1392<o:p></o:p></span></pre>
<pre><span style="mso-bookmark:_MailOriginalBody"> <o:p></o:p></span></pre>
<pre><span style="mso-bookmark:_MailOriginalBody"> <o:p></o:p></span></pre>
<div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">On 1/23/2019 6:22 PM, Kurt Pritz wrote:</span><o:p></o:p></span></p>
</div>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">Hi Everyone:</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">With the goal of progressing on issues via email, the leadership team has considered the discussion provided during the Toronto meeting and suggests
the following compromise language to address the different positions expressed. (This is a resend of an earlier email with only the subject line of the email updated.)</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><b><span style="font-family:"Calibri",sans-serif">Discussion</span></b></span><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">The language below is the same language proposed by the small team that reviewed the comments, but modified: </span><o:p></o:p></span></p>
</div>
<ul type="disc">
<li class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1 level1 lfo6">
<span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">as suggested by Diane during the meeting to reflect that GDPR Art 28 is unlikely to apply in this situation, and</span></span><span style="mso-bookmark:_MailOriginalBody"><o:p></o:p></span></li><li class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1 level1 lfo6">
<span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">by an addition (bracketed & bolded below) to reference the analysis in the Final Report that this team recommends the creation of Joint Controller Agreements, to appropriately
influence the negotiation of GDPR-compliant agreements.</span></span><span style="mso-bookmark:_MailOriginalBody"><o:p></o:p></span></li></ul>
<div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">This language is intended to strike a balance between those preferring to leave some flexibility for ICANN Org and Contracted Parties to consider
the appropriate agreements and those preferring to be specific about the type of agreement to be pursued.</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">I understand this is a complex topic that might require additional discussion but it is also possible that we cannot be dispositive on this issue
prior to a lengthy contract formation discussion that extends well beyond our time frames. For that reason, we are taking the liberty of making this recommendation and hope you accept it in the spirit it is offered.</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><b><span style="font-family:"Calibri",sans-serif">Proposed Recommendation #13 Language</span></b><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">The EPDP Team recommends that ICANN Org negotiates and enters into required data protection agreements such as a<span class="apple-converted-space"> </span><s>Data
Processing Agreement (GDPR Art. 28) or</s><span class="apple-converted-space"> </span>Joint Controller Agreement (Art. 26), as appropriate, with the Contracted Parties. In addition to the legally required components of such agreement, the agreement shall specify
the responsibilities of the respective parties for the processing activities as described therein. Indemnification clauses shall ensure that the risk for certain data processing is borne by either one or multiple parties that determine the purpose and means
of the processing. [<b>Due consideration should be given to the analysis carried out by the EPDP Team in its Final Report.</b>]</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><b><span style="font-family:"Calibri",sans-serif">Action:</span></b></span><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">Please indicate on the mailing list whether you have any concerns about these modifications and/or what other aspects of this recommendation should
be discussed.</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">Deadline: Monday, 28 January, additional email discussion might follow depending on responses. </span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">Sincerely,</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">Kurt</span><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
</div>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"><br>
<br>
</span><o:p></o:p></span></p>
</div>
<pre><span style="mso-bookmark:_MailOriginalBody">_______________________________________________<o:p></o:p></span></pre>
<pre><span style="mso-bookmark:_MailOriginalBody">Gnso-epdp-team mailing list<o:p></o:p></span></pre>
<pre><span style="mso-bookmark:_MailOriginalBody"></span><a href="mailto:Gnso-epdp-team@icann.org" target="_blank"><span style="mso-bookmark:_MailOriginalBody">Gnso-epdp-team@icann.org</span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><o:p></o:p></span></pre>
<pre><span style="mso-bookmark:_MailOriginalBody"></span><a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmm.icann.org%2Fmailman%2Flistinfo%2Fgnso-epdp-team&data=02%7C01%7Cmarksv%40microsoft.com%7C12b360caa97642fb952508d68c88f62e%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636850917226428612&sdata=6Ff%2F8qPYAxuKaIY%2Fe6dlCMaOdivTHiyOZW6K1IeptJk%3D&reserved=0" target="_blank"><span style="mso-bookmark:_MailOriginalBody">https://mm.icann.org/mailman/listinfo/gnso-epdp-team</span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><o:p></o:p></span></pre>
</blockquote>
</div>
</div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">_______________________________________________<br>
Gnso-epdp-team mailing list<br>
</span></span><a href="mailto:Gnso-epdp-team@icann.org" target="_blank"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">Gnso-epdp-team@icann.org</span></span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"><br>
</span></span><a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmm.icann.org%2Fmailman%2Flistinfo%2Fgnso-epdp-team&data=02%7C01%7Cmarksv%40microsoft.com%7C12b360caa97642fb952508d68c88f62e%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636850917226438616&sdata=R7UcFvtYXyqgXZayD%2FIU0X2sjKxvbhYLxkUA1JSjkO0%3D&reserved=0" target="_blank"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">https://mm.icann.org/mailman/listinfo/gnso-epdp-team</span></span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><o:p></o:p></span></p>
</blockquote>
</div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">_______________________________________________<br>
Gnso-epdp-team mailing list<br>
</span></span><a href="mailto:Gnso-epdp-team@icann.org" target="_blank"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">Gnso-epdp-team@icann.org</span></span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"><br>
</span></span><a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmm.icann.org%2Fmailman%2Flistinfo%2Fgnso-epdp-team&data=02%7C01%7Cmarksv%40microsoft.com%7C12b360caa97642fb952508d68c88f62e%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636850917226438616&sdata=R7UcFvtYXyqgXZayD%2FIU0X2sjKxvbhYLxkUA1JSjkO0%3D&reserved=0" target="_blank"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">https://mm.icann.org/mailman/listinfo/gnso-epdp-team</span></span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><o:p></o:p></span></p>
</div>
</blockquote>
</div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"> </span><o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">_______________________________________________<br>
Gnso-epdp-team mailing list<br>
</span></span><a href="mailto:Gnso-epdp-team@icann.org" target="_blank"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">Gnso-epdp-team@icann.org</span></span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif"><br>
</span></span><a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmm.icann.org%2Fmailman%2Flistinfo%2Fgnso-epdp-team&data=02%7C01%7Cmarksv%40microsoft.com%7C12b360caa97642fb952508d68c88f62e%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636850917226448625&sdata=W%2Febq63DlFWNgC5vbZwMtr2eW5hkzSoxBpd%2B%2FfMhr3s%3D&reserved=0" target="_blank"><span style="mso-bookmark:_MailOriginalBody"><span style="font-family:"Calibri",sans-serif">https://mm.icann.org/mailman/listinfo/gnso-epdp-team</span></span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><o:p></o:p></span></p>
</blockquote>
</div>
</div>
</div>
</div>
</blockquote>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif">_______________________________________________<br>
Gnso-epdp-team mailing list<br>
</span></span><a href="mailto:Gnso-epdp-team@icann.org"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif">Gnso-epdp-team@icann.org</span></span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif"><br>
</span></span><a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmm.icann.org%2Fmailman%2Flistinfo%2Fgnso-epdp-team&data=02%7C01%7Cmarksv%40microsoft.com%7C12b360caa97642fb952508d68c88f62e%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636850917226458633&sdata=jmfT6iS84y6tYG15PUfSP2tsLBHLT1GhAvZzvz1vq7k%3D&reserved=0"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif">https://mm.icann.org/mailman/listinfo/gnso-epdp-team</span></span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><o:p></o:p></span></p>
</div>
</blockquote>
</div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif"> </span><o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif">_______________________________________________<br>
Gnso-epdp-team mailing list<br>
</span></span><a href="mailto:Gnso-epdp-team@icann.org"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif">Gnso-epdp-team@icann.org</span></span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif"><br>
</span></span><a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmm.icann.org%2Fmailman%2Flistinfo%2Fgnso-epdp-team&data=02%7C01%7Cmarksv%40microsoft.com%7C12b360caa97642fb952508d68c88f62e%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636850917226458633&sdata=jmfT6iS84y6tYG15PUfSP2tsLBHLT1GhAvZzvz1vq7k%3D&reserved=0"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif">https://mm.icann.org/mailman/listinfo/gnso-epdp-team</span></span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><o:p></o:p></span></p>
</div>
</blockquote>
</div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif"> </span><o:p></o:p></span></p>
</div>
</div>
</div>
</div>
</div>
</blockquote>
</div>
<p class="MsoNormal"><span style="mso-bookmark:_MailOriginalBody"> </span><o:p></o:p></p>
</div>
</div>
</body>
</html>