<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
p.auto-cursor-target, li.auto-cursor-target, div.auto-cursor-target
{mso-style-name:auto-cursor-target;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:112212098;
mso-list-template-ids:1071160810;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1
{mso-list-id:196698666;
mso-list-template-ids:1634765648;}
@list l2
{mso-list-id:683171874;
mso-list-template-ids:-1951918972;}
@list l2:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l2:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l2:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l3
{mso-list-id:792748600;
mso-list-template-ids:-1565916932;}
@list l3:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:40.5pt;
mso-level-number-position:left;
margin-left:40.5pt;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:76.5pt;
mso-level-number-position:left;
margin-left:76.5pt;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l3:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:112.5pt;
mso-level-number-position:left;
margin-left:112.5pt;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l3:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:148.5pt;
mso-level-number-position:left;
margin-left:148.5pt;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l3:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:184.5pt;
mso-level-number-position:left;
margin-left:184.5pt;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l3:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:220.5pt;
mso-level-number-position:left;
margin-left:220.5pt;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l3:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:256.5pt;
mso-level-number-position:left;
margin-left:256.5pt;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l3:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:292.5pt;
mso-level-number-position:left;
margin-left:292.5pt;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l3:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:328.5pt;
mso-level-number-position:left;
margin-left:328.5pt;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l4
{mso-list-id:980961473;
mso-list-template-ids:-1632067406;}
@list l5
{mso-list-id:1024475927;
mso-list-template-ids:212482702;}
@list l5:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l5:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l5:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l5:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l5:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l5:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l5:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l5:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l5:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l6
{mso-list-id:1071270631;
mso-list-template-ids:-1938811992;}
@list l7
{mso-list-id:1083264543;
mso-list-template-ids:1697439902;}
@list l7:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l7:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l7:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l7:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l7:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l7:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l7:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l7:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l7:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l8
{mso-list-id:1108551177;
mso-list-template-ids:-537200566;}
@list l8:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l8:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l8:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l8:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l8:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l8:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l8:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l8:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l8:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l9
{mso-list-id:1154905902;
mso-list-template-ids:-114812264;}
@list l9:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l9:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l9:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l9:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l9:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l9:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l9:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l9:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l9:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l10
{mso-list-id:1257908501;
mso-list-template-ids:-1667310014;}
@list l11
{mso-list-id:1402363677;
mso-list-template-ids:1771838476;}
@list l11:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l11:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l11:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l11:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l11:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l11:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l11:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l11:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l11:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l12
{mso-list-id:1444694224;
mso-list-template-ids:1002329406;}
@list l12:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l12:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l12:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l12:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l12:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l12:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l12:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l12:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l12:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l13
{mso-list-id:1514414051;
mso-list-template-ids:278068606;}
@list l13:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l13:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l13:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l13:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l13:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l13:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l13:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l13:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l13:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l14
{mso-list-id:1796099289;
mso-list-template-ids:-651666554;}
@list l14:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l14:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l14:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l14:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l14:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l14:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l14:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l14:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l14:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l15
{mso-list-id:1811513223;
mso-list-template-ids:-2008359084;}
@list l15:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l15:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l15:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l15:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l15:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l15:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l15:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l15:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l15:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style></head><body lang=EN-US link="#0563C1" vlink="#954F72"><div class=WordSection1><table class=MsoNormalTable border=0 cellpadding=0><tr><td style='padding:.75pt .75pt .75pt .75pt'><p>Dear EPDP Team,<o:p></o:p></p><p>Please find the notes and action items from today’s EPDP meeting below.<o:p></o:p></p><p>As a reminder, there will be an optional meeting for those wishing to review the project plan in detail on Tuesday, 13 August at 14:00 UTC.<o:p></o:p></p><p>Best regards,<o:p></o:p></p><p>Marika, Berry, and Caitlin<o:p></o:p></p><p>--<o:p></o:p></p><p><strong><span style='font-family:"Calibri",sans-serif'>EPDP Phase 2 - Meeting #12</span></strong><o:p></o:p></p><p><strong><span style='font-family:"Calibri",sans-serif'>Thursday, 8 August 2019</span></strong> at 14.00 UTC<o:p></o:p></p><p><strong><u><span style='font-family:"Calibri",sans-serif'>Action Items</span></u></strong><o:p></o:p></p><ol start=1 type=1><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l6 level1 lfo1'><span style='font-size:11.0pt'>Action: EPDP Team to review Priority 2 Next Steps table for final review and comment by <strong><span style='font-family:"Calibri",sans-serif'>Thursday, 15 August</span></strong>. <o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l6 level1 lfo1'><span style='font-size:11.0pt'>Action: Greg and SSAC Team to propose edits to the use case based on comments received today as well as outstanding comments received this week and next week on the <a href="https://docs.google.com/document/d/1iK9ygUOo8ntLWC_7dx3bS195W2ivkqHH/edit">Google Doc</a>. Following the fine-tuning of the document, a final reading will occur at a later meeting.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l6 level1 lfo1'><span style='font-size:11.0pt'>Action: Hadia and ALAC Team to propose edits to the use case based on comments received today as well as outstanding comments received this week and next week on the <a href="https://drive.google.com/file/d/1DBPBL_nIwE8tjaahM1uS3hvIA8FSzPiN/view?ts=5d431132">Google Doc</a>. Following the fine-tuning of the document, a final reading will occur at a later meeting.<o:p></o:p></span></li></ol><p><strong><u><span style='font-family:"Calibri",sans-serif'>Notes </span></u></strong><u><o:p></o:p></u></p><p><strong><span style='font-family:"Calibri",sans-serif'>EPDP Phase 2 - Meeting #12</span></strong><o:p></o:p></p><p><strong><span style='font-family:"Calibri",sans-serif'>Thursday, 8 August 2019</span></strong> at 14.00 UTC<o:p></o:p></p><p><em><span style='font-family:"Calibri",sans-serif'>These high-level notes are designed to help the EPDP Team navigate through the content of the call and are not meant as a substitute for the transcript and/or recording. The MP3, transcript, and chat are provided separately and are posted on the wiki at: <a href="https://community.icann.org/x/ZwPVBQ">https://community.icann.org/x/ZwPVBQ</a>.</span></em><o:p></o:p></p><ol start=1 type=1><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1 level1 lfo3'><span style='font-size:11.0pt'>Roll Call & SOI Updates (5 minutes)<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1 level1 lfo3'><span style='font-size:11.0pt'>Confirmation of agenda (Chair)<o:p></o:p></span></li></ol><ul type=disc><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo4'><span style='font-size:11.0pt'>No objections to the agenda.<o:p></o:p></span></li></ul><p>3. Welcome and housekeeping issues (Chair) (10 minutes)<o:p></o:p></p><p> <b> a. Early input review – reminder to review. To be added to the agenda for next week’s meeting. <o:p></o:p></b></p><ul type=disc><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l12 level1 lfo5'><span style='font-size:11.0pt'>Per a previous suggestion, the Team will discuss early input received from other groups at the next meeting. Are groups prepared to discuss this next week?<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l12 level1 lfo5'><span style='font-size:11.0pt'>No objections from the Team; therefore, the Leadership Team will add early input discussion to the agenda next week.<o:p></o:p></span></li></ul><p style='margin-left:22.5pt'><b>b. Experts for lunch time presentations during F2F meeting<o:p></o:p></b></p><ul type=disc><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l11 level1 lfo6'><span style='font-size:11.0pt'>Mark Sv. proposed a presentation by the Microsoft cybercrime unit. A proposal was received to have the presentation during lunch at the F2F, but this was objected to by multiple team members.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l11 level1 lfo6'><span style='font-size:11.0pt'>Would Team members agree to a webinar presentation on this topic?<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l11 level1 lfo6'><i><span style='font-size:11.0pt'>As there were no objections, EPDP Leadership will coordinate with Microsoft to schedule a webinar presentation. <o:p></o:p></span></i></li></ul><p style='margin-left:22.5pt'><b>c. Priority 2 small team meetings update<o:p></o:p></b></p><ol start=1 type=1><ol start=1 type=1><ol start=1 type=1><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l4 level3 lfo7'><span style='font-size:11.0pt'>Accuracy and WHOIS ARS (see <a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__docs.google.com_document_d_1pS9Pibanj-2DHp6LztZpeERtxdoLsnp4y-5F-2Ddo0vU5VJuw_edit&d=DwMGaQ&c=FmY1u3PJp6wrcrwll3mSVzgfkbPSS6sJms7xcl4I5cM&r=8K75qGdDlOta4kh6k2F0jrT195M3tF3J_Fxcz6EvuG2kYKDeA67ZTEnthHXAPVXH&m=Aja-Y4nchmN5X-shIk72no3JltxPHIVhOjEqq1DkobU&s=mZlkWrDkL2_0zKQrxPf-s5-X4sizRkK7elma32IYYsY&e=">https://docs.google.com/document/d/1pS9Pibanj-Hp6LztZpeERtxdoLsnp4y_-do0vU5VJuw/edit [docs.google.com]</a>)<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l4 level3 lfo7'><span style='font-size:11.0pt'>Input received on other priority 2 items from RrSG (see <a href="https://mm.icann.org/pipermail/gnso-epdp-team/2019-June/002174.html">https://mm.icann.org/pipermail/gnso-epdp-team/2019-June/002174.html</a>)<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l4 level3 lfo7'><span style='font-size:11.0pt'>Leadership to recommend next steps via mailing list.<o:p></o:p></span></li></ol></ol></ol><ul type=disc><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l2 level1 lfo8'><span style='font-size:11.0pt'>Action: EPDP Staff Support to send the Priority 2 materials to the Team for review today. EPDP to send comments and proposed edits (if any) by Thursday, 15 August. <o:p></o:p></span></li></ul><p style='margin-left:22.5pt'><b>d. Update from Legal Committee <o:p></o:p></b></p><ul type=disc><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l5 level1 lfo9'><span style='font-size:11.0pt'>Legal Team has been reviewing questions related to SSAD (EPDP Team Priority 1 work).<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l5 level1 lfo9'><span style='font-size:11.0pt'>Legal Team has approved one question for final sign-off by the EPDP Team. Pending no objections, this question will be forwarded to Bird & Bird.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l5 level1 lfo9'><span style='font-size:11.0pt'>The next call will be Tuesday, 20 August, and the Team will continue to discuss outstanding questions.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l5 level1 lfo9'><span style='font-size:11.0pt'>Will the Team be sending questions in batches or as they individually come in?<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l5 level1 lfo9'><span style='font-size:11.0pt'>The LC will discuss this question at its next meeting.<o:p></o:p></span></li></ul><p><strong><span style='font-family:"Calibri",sans-serif'>4. Use case – second / final reading:</span></strong> <a href="https://community.icann.org/download/attachments/111386876/SSAC%20Crime-Abuse%20Investigation%20Use%20Case%20-%2011%20July%202019.docx?version=1&modificationDate=1562865007000&api=v2">Investigation of criminal activity where domain names are used. Typical specific example: phishing attack</a> (45 minutes)<o:p></o:p></p><p style='margin-left:22.5pt'><strong><span style='font-family:"Calibri",sans-serif'>a. Overview of updated version in which EPDP Team input has been considered and addressed (Greg Aaron)</span></strong><o:p></o:p></p><ul type=disc><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l14 level1 lfo10'><span style='font-size:11.0pt'>In this use case, it is mainly 6(1)(f) legal basis, but there may be other legal bases that are relevant in other use cases, which is why other legal bases are included.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l14 level1 lfo10'><span style='font-size:11.0pt'>In terms of the accuracy of contact data, one thing to consider is that registrants have the contractual obligation to provide accurate contact information. However, it is common to see domain names registered to streets that do not exist or vacant lots.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l14 level1 lfo10'><span style='font-size:11.0pt'>When reporting an issue to a registrar, a requester needs to report the specifics of the problem and substantiate it.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l14 level1 lfo10'><span style='font-size:11.0pt'>The SSAC felt obligated to put information into the safeguards section, noting that safeguards will likely come later in the working group discussions.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l14 level1 lfo10'><span style='font-size:11.0pt'>SSAC would like to go through a real-life use case to illustrate these principles:<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l14 level1 lfo10'><span style='font-size:11.0pt'>This is an example of a phishing URL that came to an SSAC rep during ICANN65.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l14 level1 lfo10'><span style='font-size:11.0pt'>There are other phishing URLs on that domain name - one targeting GA Tech and one targeting Microsoft users<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l14 level1 lfo10'><span style='font-size:11.0pt'>Based on the WHOIS information for this domain name and what we can tell from it - it’s registered at OVH, the creation date on the name is about one week before the phishing took place. This is not determinative. There is no contact information for the name, but there is a country code associated with it - DZ - for Algeria. Again, this is not determinative, but not many gTLD names are registered in Algeria. By looking at DNS records, you can see what other names are hosted at this IP address. In this example, there are other similar-looking names to the name the phish came from. It’s helpful to know what other domain names the phishers have registered - without the contact information, this is hard to tell. In this example, there was phishing on the set of domain names before and after this Georgia Tech phish. <o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l14 level1 lfo10'><span style='font-size:11.0pt'>In this particular case, contact information/attribution would have been very useful for reporting and preventing additional harm.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l14 level1 lfo10'><span style='font-size:11.0pt'>GDPR Recital 49 provides looking at information for this purpose is legitimate.<o:p></o:p></span></li></ul><p style='margin-left:22.5pt'><strong><span style='font-family:"Calibri",sans-serif'>b. Feedback from EPDP Team</span></strong><o:p></o:p></p><ul type=disc><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l7 level1 lfo11'><span style='font-size:11.0pt'>This example demonstrates that just b/c a requester asks for contact data does not mean it hasn’t tried other avenues before.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l7 level1 lfo11'><span style='font-size:11.0pt'>NCSG provided comments on the document yesterday - what would be the preferred way of handling the concerns noted in the document?<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l7 level1 lfo11'><span style='font-size:11.0pt'>It may be helpful for SSAC to respond in the Google Doc.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l7 level1 lfo11'><span style='font-size:11.0pt'>Law enforcement’s job is to provide attribution and this work is regulated by criminal procedure. Law enforcement has a framework of accountability for dealing with this, while private companies do not.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l7 level1 lfo11'><span style='font-size:11.0pt'>Attribution by researchers and security professionals is important in many instances. Attribution is not only for law enforcement - it is often done by private parties. <o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l7 level1 lfo11'><span style='font-size:11.0pt'>No one is challenging the concept that more data points allow for a more comprehensive investigation of harm. Can pseudonymized data be used for this? Unlike law enforcement, there are no credentials to check that the security organization is who they say they are. Registrars need to mitigate potential harms of over-blocking names or releasing too much information.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l7 level1 lfo11'><span style='font-size:11.0pt'>Pseudonymized data is an interesting topic, but it does pose challenges that could be discussed at a later time.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l7 level1 lfo11'><span style='font-size:11.0pt'>With respect to this example, major providers of access have phishing issues at large scale/high volume. This is not something that can be solved by LEA only. Attribution is important because when so many domain names are involved, attribution will show you where to focus your resources and who to go after. As this team creates the WHOIS policy, the team should not prohibit accredited cyber security professionals from getting high volume, quick access to data to prevent harm.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l7 level1 lfo11'><span style='font-size:11.0pt'>This example looks like a civil case, not a criminal case. Many of these cases do start with private investigators since LEA may not have the resources. The questions posed highlight why a webinar from Microsoft may be helpful. Pseudonymization may be helpful in some cases, but not all cases. In terms of attribution to individuals vs. states, the attribution was to a criminal gang, not a state actor.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l7 level1 lfo11'><span style='font-size:11.0pt'>Microsoft got a court order to investigate as they found the domain names - the judge gave them the approval on an ongoing basis. This could be a civil or criminal issue. Phishing is a criminal activity, but could also be pursued by a private party.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l7 level1 lfo11'><span style='font-size:11.0pt'>What a law enforcement agency would like to see is some scale of impact to a number of victims, LEA would have more to go on. Pseudonymization could apply in this case, but you could perhaps look at if the data is fake/compromised host. <o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l7 level1 lfo11'><span style='font-size:11.0pt'>This Team needs to make sure the policy is within the law. <o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l7 level1 lfo11'><span style='font-size:11.0pt'>The initial search may be a 6(1)(f), but the court may provide the ability to data under a different legal basis.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l7 level1 lfo11'><span style='font-size:11.0pt'>If looking to Section B to all tasks performed, is there any violent opposition to these tasks? No objection.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l7 level1 lfo11'><span style='font-size:11.0pt'>Section C - data elements - not all data elements would be required on a systematic basis. Any objections? No comments.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l7 level1 lfo11'><span style='font-size:11.0pt'>Section D: no comments.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l7 level1 lfo11'><span style='font-size:11.0pt'>Section E: <o:p></o:p></span></li><ul type=circle><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l7 level2 lfo11'><span style='font-size:11.0pt'>have a problem with 6(1)(d). Before you get to a threat to life situation, you are likely acting on another legal basis before. <o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l7 level2 lfo11'><span style='font-size:11.0pt'>For this final reading, NCSG’s comments were not addressed and cannot do the final review without the comments being addressed. <o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l7 level2 lfo11'><span style='font-size:11.0pt'>Final reading will occur later.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l7 level2 lfo11'><span style='font-size:11.0pt'>Legal basis may need further revision once advice has been provided by Bird & Bird.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l7 level2 lfo11'><span style='font-size:11.0pt'>This use case about private actors doing investigations is slipping over into law enforcement. It would be helpful to keep these distinct.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l7 level2 lfo11'><span style='font-size:11.0pt'>Do not agree with 6(1)(c) being applicable in this use case. 6(1)(f) is likely the only applicable lawful basis in this use case.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l7 level2 lfo11'><span style='font-size:11.0pt'>Response: SSAC will take these comments into consideration. There are various legal obligations in place. <o:p></o:p></span></li></ul><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l7 level1 lfo11'><span style='font-size:11.0pt'>Section F:<o:p></o:p></span></li><ul type=circle><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l7 level2 lfo11'><span style='font-size:11.0pt'>How do we interpret safeguards for disclosing entities? The safeguards should protect the data subject. In this use case specifically, the safeguards facilitate disclosure.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l7 level2 lfo11'><span style='font-size:11.0pt'>These safeguards represent the input to build the Team’s understanding of the action of the requester and the actions of the requestee.<o:p></o:p></span></li></ul><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l7 level1 lfo11'><span style='font-size:11.0pt'>Section N:<o:p></o:p></span></li><ul type=circle><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l7 level2 lfo11'><span style='font-size:11.0pt'>This is a core legal question that needs to be answered, and it will be helpful to defer to Bird & Bird on this.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l7 level2 lfo11'><span style='font-size:11.0pt'>Legal analysis should provide this answer, so this text should not be asserted - it should be qualified<o:p></o:p></span></li></ul></ul><p style='margin-left:22.5pt'><strong><span style='font-family:"Calibri",sans-serif'>c. Confirm next steps</span></strong><o:p></o:p></p><ul type=disc><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l9 level1 lfo12'><span style='font-size:11.0pt'>Action: Greg and SSAC Team to work in response to comments on the Google Doc. Following the fine-tuning of the document, a final reading can occur at a later meeting.<o:p></o:p></span></li></ul><p><o:p> </o:p></p><p><strong><span style='font-family:"Calibri",sans-serif'>5. Use case – first reading continued</span></strong>: <a href="https://community.icann.org/display/EOTSFGRD/d.+Use+Cases?preview=/111386876/111389243/Consumer_Protection_Use_Case_ALAC%20-%20Online%20buyers.docx">Online buyers identifying and validating the source or services/ Internet users validating the legitimacy of an email or a website to protect themselves</a> (45 minutes)<o:p></o:p></p><p style='margin-left:22.5pt'><strong><span style='font-family:"Calibri",sans-serif'>a. Continue introduction of use case (ALAC)</span></strong><o:p></o:p></p><ul type=disc><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l13 level1 lfo13'><span style='font-size:11.0pt'>The issue of legal vs. natural persons is an issue this team needs to come back to.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l13 level1 lfo13'><span style='font-size:11.0pt'>The use case presumes that there is no change to the legal vs. natural policy recommendation.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l13 level1 lfo13'><span style='font-size:11.0pt'>There is no question that a data requester that is not identifiable <o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l13 level1 lfo13'><span style='font-size:11.0pt'>Section E: lawful basis 6(1)(f) - it’s important to note that this is to prevent fraud, so it happens before the fraud occurs. <o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l13 level1 lfo13'><span style='font-size:11.0pt'>Actual case - credit card has not been deducted for an airline ticket purchased online. The purchaser receives an email asking for a copy of the ID. A purchaser may provide the information or not - if not, the purchaser may seek information access to information to see who is behind the website.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l13 level1 lfo13'><span style='font-size:11.0pt'>For this use case, no accreditation or automation is sought, but ALAC does believe a means for a consumer to verify its activity is necessary.<o:p></o:p></span></li></ul><p style='margin-left:22.5pt'><strong><span style='font-family:"Calibri",sans-serif'>b. Input from EPDP Team – questions, concerns, proposed modifications</span></strong><o:p></o:p></p><ul type=disc><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l8 level1 lfo14'><span style='font-size:11.0pt'>Generally, the use case described is consumer trust, consumer confidence and/or verifying the integrity of a website. This is out of scope for this team - this use case represents websites, but RDS does not link contact information to websites; it links to domain names. There is not a one-to-one relationship between websites and domain names. This is not a case where RDS is a useful tool; SSL, BBB, or Yelp could be better tools in this case. There are two types of individuals that would be engaged in this - curious users would not have access to personal information, or groups that have legal authority to pursue this. Curious users does not rise to the level of a legitimate use case, and therefore this use case is redundant and unnecessary.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l8 level1 lfo14'><span style='font-size:11.0pt'>It is profoundly irresponsible for ICANN to attempt to step in here for what goes on with a domain name after it is allocated. To encourage consumers to look to the WHOIS directory or WHOIS data to determine the reliability of a website when the ecosystem is so multilayered is irresponsible.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l8 level1 lfo14'><span style='font-size:11.0pt'>In this use case, there are a variety of ways to determine the integrity of a website. Under GDPR, necessity is the key, and this case does not demonstrate necessity. It should therefore be deleted. <o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l8 level1 lfo14'><span style='font-size:11.0pt'>The ICANN bylaws are not as restrictive as some Team members have noted. Perhaps this could be limited to legal persons. When a registrar is receiving a request, the registrar can look at the info to determine if it is a natural or legal person. There is an ability to do the balancing test when it is a commercial website, so the use case should be kept.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l8 level1 lfo14'><span style='font-size:11.0pt'>Skeptical of this use case where it applies to curious users - it’s really only applicable when there is a reputation service going on. <o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l8 level1 lfo14'><span style='font-size:11.0pt'>The ICANN bylaws note that during a policy making process, we do have to consider the global public interest - what is useful for the public. There is a division of thought as to what that involves, but it is different than public policy. Looking at this use case is a legitimate thing to do. GDPR does not protect legal persons. <o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l8 level1 lfo14'><span style='font-size:11.0pt'>If the team resolves the legal/natural distinction differently, this use case would not be applicable. The contracted party may look at the use case and decide whether to grant access. A registrar claims it would never grant access based on this, but that may be incorrect. There may be cases where the controller determines this is a reasonable request. <o:p></o:p></span></li></ul><p style='margin-left:22.5pt'><strong><span style='font-family:"Calibri",sans-serif'>c. Confirm next steps</span></strong><o:p></o:p></p><ul type=disc><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l15 level1 lfo15'><span style='font-size:11.0pt'>Action: Hadia and ALAC Team to respond to comments received today as well as outstanding comments received this and next week on the Google Doc. Following the finetuning of the document, a final reading will occur at a later meeting<o:p></o:p></span></li></ul><p><strong><span style='font-family:"Calibri",sans-serif'>6. Any other business (5 minutes)</span></strong><o:p></o:p></p><p><strong><span style='font-family:"Calibri",sans-serif'>7. Wrap and confirm next EPDP Team meeting:</span></strong><o:p></o:p></p><p style='margin-left:22.5pt'>a. For those interested, an additional meeting will be held on Tuesday 13 August at 14.00 UTC – presentation of leadership-proposed EPDP work plan for submissions to GNSO Council <o:p></o:p></p><ul type=disc><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:4.5pt;mso-list:l3 level1 lfo16'><span style='font-size:11.0pt'>Tomorrow morning, EPDP Support Staff will distribute the project management package. <o:p></o:p></span></li></ul><p style='margin-left:22.5pt'>b. Next plenary meeting will be held Thursday 15 August 2019 at 14.00 UTC <o:p></o:p></p><p style='margin-left:22.5pt'>c. Confirm action items<o:p></o:p></p><p style='margin-left:22.5pt'>d. Confirm questions for ICANN Org, if any<o:p></o:p></p><p><o:p> </o:p></p><p><o:p> </o:p></p><p><o:p> </o:p></p></td></tr></table><p class=auto-cursor-target><o:p> </o:p></p><p class=MsoNormal><span style='font-size:11.0pt;color:black'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'><o:p> </o:p></span></p></div></body></html>