<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;" dir="ltr">
<p style="margin-top:0;margin-bottom:0">NCSG has reviewed the 11 Feb final report and attached are our comments. I've also attached them as text below.</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0"><span id="docs-internal-guid-1160ede4-7fff-96cc-0457-68f81f65475d"></p>
<p dir="ltr" style="line-height:1.3800000000000001;margin-top:0pt;margin-bottom:10pt;text-align: right;">
<span style="font-size: 11pt; font-family: "Bookman Old Style"; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre-wrap;">15 February 2019</span></p>
<p dir="ltr" style="line-height:1.3800000000000001;margin-top:0pt;margin-bottom:10pt;">
<span style="font-size: 11pt; font-family: "Bookman Old Style"; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre-wrap;">NCSG Comments for the annex of the final EPDP report</span></p>
<br>
<p dir="ltr" style="line-height:1.3800000000000001;margin-top:0pt;margin-bottom:10pt;">
<span style="font-size: 11pt; font-family: "Bookman Old Style"; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre-wrap;">The comments that follow pertain only to recommendations
where the NCSG strongly disagrees or has important warnings or qualifications. Additional objections to other elements appearing in the report have been withheld due to our desire to reach a consensus policy.
</span></p>
<p dir="ltr" style="line-height:1.3800000000000001;margin-top:0pt;margin-bottom:10pt;">
<span style="font-size: 11pt; font-family: "Bookman Old Style"; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre-wrap;">Recommendation #1:
</span></p>
<p dir="ltr" style="line-height:1.3800000000000001;margin-top:0pt;margin-bottom:10pt;">
<span style="font-size: 11pt; font-family: "Bookman Old Style"; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre-wrap;">Purposes:
</span></p>
<ul style="margin-top:0pt;margin-bottom:0pt;">
<li dir="ltr" style="list-style-type: disc; font-size: 11pt; font-family: "Bookman Old Style"; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre;">
<p dir="ltr" style="line-height:1.3800000000000001;margin-top:0pt;margin-bottom:0pt;">
<span style="font-size: 11pt; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre-wrap;">Purpose 2: Disclosure of data to third parties. NCSG continues to maintain that disclosure
to third parties is not a valid ICANN purpose for processing domain name registrants’ data. Further, defining disclosure as a purpose is not necessary to disclose redacted data to law enforcement and other third parties with legitimate interests. To achieve
consensus on this report, we have accepted this as a “purpose,” but warn that it could be overruled by law.
</span></p>
</li><ul style="margin-top:0pt;margin-bottom:0pt;">
<li dir="ltr" style="list-style-type: disc; font-size: 11pt; font-family: "Bookman Old Style"; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre;">
<p dir="ltr" style="line-height:1.3800000000000001;margin-top:0pt;margin-bottom:0pt;">
<span style="font-size: 11pt; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre-wrap;">Consensus guidance: NCSG would like to record its concern. It does not object to this
purpose. </span></p>
</li></ul>
<li dir="ltr" style="list-style-type: disc; font-size: 11pt; font-family: "Bookman Old Style"; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre;">
<p dir="ltr" style="line-height:1.3800000000000001;margin-top:10pt;margin-bottom:10pt;">
<span style="font-size: 11pt; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre-wrap;">Purpose 7: Purpose 7 is not acceptable to NCSG because it would needlessly increase
the number of data registration elements in the RDDS or Whois. Some of these data elements could be very sensitive and personally identifiable. Registries can validate eligibility independently, without use of ICANN’s RDDS/Whois. We were assured by registry
operators that such data elements would not go into the RDDS, but since this proceeding concerns RDDS/Whois we believe it is inevitable that the data will go into it.
</span></p>
</li><ul style="margin-top:0pt;margin-bottom:0pt;">
<li dir="ltr" style="list-style-type: disc; font-size: 11pt; font-family: "Bookman Old Style"; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre;">
<p dir="ltr" style="line-height:1.3800000000000001;margin-top:0pt;margin-bottom:10pt;">
<span style="font-size: 11pt; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre-wrap;">Consensus guidance: NCSG dissents on this purpose.
</span></p>
</li></ul>
</ul>
<p dir="ltr" style="line-height:1.3800000000000001;margin-top:0pt;margin-bottom:10pt;">
<span style="font-size: 11pt; font-family: "Bookman Old Style"; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre-wrap;">Recommendation #2: Research and OCTO</span></p>
<ul style="margin-top:0pt;margin-bottom:0pt;">
<li dir="ltr" style="list-style-type: disc; font-size: 11pt; font-family: "Bookman Old Style"; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre;">
<p dir="ltr" style="line-height:1.3800000000000001;margin-top:0pt;margin-bottom:0pt;">
<span style="font-size: 11pt; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre-wrap;">Recommendation 2 states that Phase 2 will consider whether additional purposes should
be defined to facilitate carrying out the mission of ICANN’s Office of the Chief Technology Officer (OCTO). Yet OCTO has clearly stated on multiple occasions that it does not need access to personal information of domain name registrants. While we favor seeking
legal guidance on ICANN’s ability to use Whois data for research, Rec 2 is too ambiguous and broad and could open the door to bulk access for many third parties (and is actually intended to do so)</span></p>
</li><ul style="margin-top:0pt;margin-bottom:0pt;">
<li dir="ltr" style="list-style-type: disc; font-size: 11pt; font-family: "Bookman Old Style"; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre;">
<p dir="ltr" style="line-height:1.3800000000000001;margin-top:0pt;margin-bottom:10pt;">
<span style="font-size: 11pt; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre-wrap;">Consensus guidance: NCSG dissents on this recommendation.
</span></p>
</li></ul>
</ul>
<p dir="ltr" style="line-height:1.3800000000000001;margin-top:0pt;margin-bottom:10pt;">
<span style="font-size: 11pt; font-family: "Bookman Old Style"; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre-wrap;">Recommendation #7: Transfer of registration data
elements </span></p>
<ul style="margin-top:0pt;margin-bottom:0pt;">
<li dir="ltr" style="list-style-type: disc; font-size: 11pt; font-family: "Bookman Old Style"; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre;">
<p dir="ltr" style="line-height:1.3800000000000001;margin-top:0pt;margin-bottom:0pt;">
<span style="font-size: 11pt; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre-wrap;">Recommendation 7 states “</span><span style="font-size: 10.5pt; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre-wrap;">the
specifically-identified data elements under “[t]ransmission of registration data from Registrar to Registry” … must be transferred from registrar to registry provided an appropriate legal basis exists and data processing agreement is in place."</span><span style="font-size: 10.5pt; font-family: Roboto; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre-wrap;">
</span></p>
</li><ul style="margin-top:0pt;margin-bottom:0pt;">
<li dir="ltr" style="list-style-type: disc; font-size: 11pt; font-family: "Bookman Old Style"; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre;">
<p dir="ltr" style="line-height:1.3800000000000001;margin-top:0pt;margin-bottom:10pt;">
<span style="font-size: 11pt; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre-wrap;">Consensus guidance: NCSG can accept this but wishes to emphasize that there may be
no valid legal justification for transferring all of these data elements from registrars to registries and inclusion of this recommendation does not imply that there is one.
</span></p>
</li></ul>
</ul>
<p dir="ltr" style="line-height:1.3800000000000001;margin-top:0pt;margin-bottom:10pt;">
<span style="font-size: 11pt; font-family: "Bookman Old Style"; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre-wrap;">Recommendation #8: Transfer to Escrow
</span></p>
<ul style="margin-top:0pt;margin-bottom:0pt;">
<li dir="ltr" style="list-style-type: disc; font-size: 11pt; font-family: "Bookman Old Style"; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre;">
<p dir="ltr" style="line-height:1.3800000000000001;margin-top:0pt;margin-bottom:0pt;">
<span style="font-size: 11pt; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre-wrap;">As noted in our objection to Purpose 7, additional data elements identified by registries
should not be added to escrow. </span></p>
</li><ul style="margin-top:0pt;margin-bottom:0pt;">
<li dir="ltr" style="list-style-type: disc; font-size: 11pt; font-family: "Bookman Old Style"; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre;">
<p dir="ltr" style="line-height:1.3800000000000001;margin-top:0pt;margin-bottom:10pt;">
<span style="font-size: 11pt; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre-wrap;">Consensus guidance: NCSG dissents from Purpose 7</span></p>
</li></ul>
</ul>
<p dir="ltr" style="line-height:1.3800000000000001;margin-top:0pt;margin-bottom:10pt;">
<span style="font-size: 11pt; font-family: "Bookman Old Style"; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre-wrap;">Recommendation #16: Geographic differentiation</span></p>
<ul style="margin-top:0pt;margin-bottom:0pt;">
<li dir="ltr" style="list-style-type: disc; font-size: 11pt; font-family: "Bookman Old Style"; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre;">
<p dir="ltr" style="line-height:1.3800000000000001;margin-top:0pt;margin-bottom:0pt;">
<span style="font-size: 11pt; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre-wrap;">The Recommendation says that Registrars and Registry Operators are
</span><span style="font-size: 11pt; background-color: transparent; font-style: italic; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre-wrap;">permitted</span><span style="font-size: 11pt; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre-wrap;">
to differentiate between registrants on a geographic basis, but are not </span><span style="font-size: 11pt; background-color: transparent; font-style: italic; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre-wrap;">obligated
</span><span style="font-size: 11pt; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre-wrap;">to do so.
</span></p>
</li><li dir="ltr" style="list-style-type: disc; font-size: 11pt; font-family: "Bookman Old Style"; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre;">
<p dir="ltr" style="line-height:1.3800000000000001;margin-top:0pt;margin-bottom:10pt;">
<span style="font-size: 11pt; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre-wrap;">NCSG does not recall the group settling on this position. NCSG believes that ICANN’s
rules should be uniformly applicable, therefore registries and registrars should be obliged NOT to differentiate.</span></p>
</li></ul>
<p dir="ltr" style="line-height:1.3800000000000001;margin-top:0pt;margin-bottom:10pt;">
<span style="font-size: 11pt; font-family: "Bookman Old Style"; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre-wrap;">Recommendation #18: Reasonable access, Timeline,
and Criteria</span></p>
<p dir="ltr" style="line-height:1.3800000000000001;margin-top:0pt;margin-bottom:10pt;">
<span style="font-size: 11pt; font-family: "Bookman Old Style"; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre-wrap;">NCSG accepts the recommendation and particularly
emphasizes the importance of re-naming this to “Reasonable Requests for Lawful Disclosure of Non-Public Registration Data.”</span><span style="font-size: 11pt; font-family: Calibri; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre-wrap;">
</span><span style="font-size: 11pt; font-family: "Bookman Old Style"; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre-wrap;">We have the following observations:</span></p>
<ul style="margin-top:0pt;margin-bottom:0pt;">
<li dir="ltr" style="list-style-type: disc; font-size: 11pt; font-family: "Bookman Old Style"; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre;">
<p dir="ltr" style="line-height:1.3800000000000001;margin-top:0pt;margin-bottom:0pt;">
<span style="font-size: 11pt; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre-wrap;">Logs of requests: Logs of requests should be provided only to ICANN upon request, on
a case by case basis, as stated in purpose 13. The audit function, which has been added to the recommendation 18, is not acceptable.
</span></p>
</li><li dir="ltr" style="list-style-type: disc; font-size: 11pt; font-family: "Bookman Old Style"; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre;">
<p dir="ltr" style="line-height:1.3800000000000001;margin-top:0pt;margin-bottom:0pt;">
<span style="font-size: 11pt; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre-wrap;">Logs of the request should only contain information about “confirmation that a relay
of the communication between the requestor and the Registered Name Holder has occurred, not including the origin, recipient, or content of the message.”</span></p>
</li><li dir="ltr" style="list-style-type: disc; font-size: 11pt; font-family: "Bookman Old Style"; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre;">
<p dir="ltr" style="line-height:1.3800000000000001;margin-top:0pt;margin-bottom:0pt;">
<span style="font-size: 11pt; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre-wrap;">The distinction between urgent and non-urgent requests and obliging contracted parties
to treat requests differently is not acceptable. </span></p>
</li><li dir="ltr" style="list-style-type: disc; font-size: 11pt; font-family: "Bookman Old Style"; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre;">
<p dir="ltr" style="line-height:1.3800000000000001;margin-top:0pt;margin-bottom:10pt;">
<span style="font-size: 11pt; background-color: transparent; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre-wrap;">We recommend deleting recommendation 18 provisions about logs and responding to urgent
requests</span></p>
</li></ul>
</span>
<p></p>
</div>
</body>
</html>