<html>
<head>
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>I think it makes sense to use the definition of the GDPR for this
work and use access only to refer to rights of the data subject.
Everything else is disclosure.</p>
<p>Best,</p>
<p>Volker<br>
</p>
<div class="moz-cite-prefix">Am 25.05.2019 um 15:03 schrieb Mueller,
Milton L:<br>
</div>
<blockquote type="cite"
cite="mid:SN6PR07MB4575BFD591B52AD75E05F49BA1030@SN6PR07MB4575.namprd07.prod.outlook.com">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]-->
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:328598334;
mso-list-type:hybrid;
mso-list-template-ids:-1695125456 67698703 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l0:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal">Here is the definition of “access” in the
GDPR. <o:p></o:p></p>
<p class="MsoNormal">Article 15, EU GDPR, "Right of access by
the data subject"<o:p></o:p></p>
<p class="MsoListParagraph"
style="text-indent:-.25in;mso-list:l0 level1 lfo1"><!--[if !supportLists]--><span
style="mso-list:Ignore">1.<span style="font:7.0pt
"Times New Roman"">
</span></span><!--[endif]-->The data subject shall have the
right to obtain from the controller confirmation as to whether
or not personal data concerning him or her are being
processed, and, where that is the case, access to the personal
data and the following information:<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">(a) the purposes
of the processing;<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">(b) the categories
of personal data concerned;<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">(c) the recipients
or categories of recipient to whom the personal data have been
or will be disclosed, in particular recipients in third
countries or international organisations;
<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">(d) where
possible, the envisaged period for which the personal data
will be stored, or, if not possible, the criteria used to
determine that period;
<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">(e) the existence
of the right to request from the controller rectification or
erasure of personal data or restriction of processing of
personal data concerning the data subject or to object to such
processing;
<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">(f) the right to
lodge a complaint with a supervisory authority;
<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">(g) where the
personal data are not collected from the data subject, any
available information as to their source;<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in">(h) the existence
of automated decision-making, including profiling, referred to
in Article 22(1) and (4) and, at least in those cases,
meaningful information about the logic involved, as well as
the significance and the envisaged consequences of such
processing for the data subject.<o:p></o:p></p>
<p class="MsoNormal"><a
href="http://www.privacy-regulation.eu/en/article-15-right-of-access-by-the-data-subject-GDPR.htm"
moz-do-not-send="true">http://www.privacy-regulation.eu/en/article-15-right-of-access-by-the-data-subject-GDPR.htm</a><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">It is abundantly clear that legally,
“access” refers to a general and unconditional right of the
data subject to see data about themselves and to understand
the provenance of the data a processor or controller has about
themselves.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">For the sake of legal accuracy, clarity,
and avoidance of confusion let us cease confusing third party
disclosure rights with data subjects’ access rights. The
working definitions proposed are invalid and need to be
modified in conformity with proper legal usage. <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I am sure we will have a robust policy
debate about how extensive or limited third party disclosure
rights are. Let us not waste time playing word games (i.e.,
conflating data subject access rights with third party
disclosure rights) instead.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Dr. Milton L Mueller<o:p></o:p></p>
<p class="MsoNormal">Georgia Institute of Technology<o:p></o:p></p>
<p class="MsoNormal">School of Public Policy<o:p></o:p></p>
<p class="MsoNormal"><img style="width:5.0in;height:2.0in"
id="Picture_x0020_1"
src="cid:part2.ABC937C9.118ACA27@key-systems.net"
alt="IGP_logo_gold block" class="" width="480" height="192"
border="0"><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
Gnso-epdp-team mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Gnso-epdp-team@icann.org">Gnso-epdp-team@icann.org</a>
<a class="moz-txt-link-freetext" href="https://mm.icann.org/mailman/listinfo/gnso-epdp-team">https://mm.icann.org/mailman/listinfo/gnso-epdp-team</a>
_______________________________________________
By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (<a class="moz-txt-link-freetext" href="https://www.icann.org/privacy/policy">https://www.icann.org/privacy/policy</a>) and the website Terms of Service (<a class="moz-txt-link-freetext" href="https://www.icann.org/privacy/tos">https://www.icann.org/privacy/tos</a>). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.</pre>
</blockquote>
<div class="moz-signature">-- <br>
Volker A. Greimann<br>
General Counsel and Policy Manager<br>
<strong style="border-bottom: 3px solid #5C46B5">KEY-SYSTEMS GMBH</strong><br>
<br>
T: +49 6894 9396901<br>
M: +49 6894 9396851<br>
F: +49 6894 9396851<br>
W: <a class="moz-txt-link-abbreviated" href="http://www.key-systems.net">www.key-systems.net</a><br>
<br>
Key-Systems GmbH is a company registered at the local court of
Saarbruecken, Germany with the registration no. HR B 18835<br>
CEO: Alexander Siffrin<br>
<br>
Part of the CentralNic Group PLC (LON: CNIC) a company registered
in England and Wales with company number 8576358.</div>
</body>
</html>