<div>Thanks to Staff for collating these notes and action items.<br></div><div><br></div><div>Just one observation I had: under accreditation bodies, I believe we agreed that there should be a means for individuals (and not just legal entities) to have a potential track to request non-public registration data without being accredited in any fashion.<br></div><div><br></div><div>Also, I appreciate that it was not agreed as an action item, but is there any way in which we might be able to keep an open dialogue with the Strawberry Team and - importantly - to see their questions they plan to submit to the European Data Protection Board before they are submitted to any external party? I think we can all appreciate they would be in draft form - that's why we would like to help get the wording (and sentiment) correct, and to avoid reputational damage to ICANN if the wrong questions are asked. I realise this was requested already, and there was pushback from the Strawberry Team, but I think it's important and inconsistent with ICANN's stated commitments to transparency that we are all ignorant as to what is being asked that has a high potential to impact our work.<br></div><div><br></div><div>Finally, I have previously asked to see Staff Notes from meetings with DPAs, and I have been told that no notes were taken and thus there is nothing to share. Can I please request that the Strawberry Team immediately take notes after their upcoming meeting(s) so that we have more of an idea as to what the reaction of the external parties was to the questions asked. I am not sure who the appropriate person is to channel this request through to.<br></div><div><br></div><div>Thank you. And thanks for your efforts coordinating the meeting this week.<br></div><div><br></div><div>Kind regards,<br></div><div><br></div><div class="protonmail_signature_block"><div class="protonmail_signature_block-user"><div>Ayden Férdeline <br></div></div><div class="protonmail_signature_block-proton protonmail_signature_block-empty"><br></div></div><div><br></div><div>‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐<br></div><div> On Friday, 13 September 2019 02:39, Caitlin Tubergen <<a href="mailto:caitlin.tubergen@icann.org">caitlin.tubergen@icann.org</a>> wrote:<br></div><div> <br></div><blockquote class="protonmail_quote" type="cite"><div><p><span style="color:black"><span style="font-size:11pt">Dear EPDP Team:</span></span><br></p><p><span style="color:black"><span style="font-size:11pt"> </span></span><br></p><p><span style="color:black"><span style="font-size:11pt">Below, please find high-level notes and action items from the face-to-face meeting.</span></span><br></p><p><span style="color:black"><span style="font-size:11pt"> </span></span><br></p><p><span style="color:black"><span style="font-size:11pt">As a reminder, the next EPDP Phase 2 meeting will be Thursday, 19 September at 14:00 UTC. The Legal Committee will meet on Tuesday, 17 September at 14:00 UTC.</span></span><br></p><p><span style="color:black"><span style="font-size:11pt"> </span></span><br></p><p><span style="color:black"><span style="font-size:11pt">Wishing everyone safe travels home.</span></span><br></p><p><span style="color:black"><span style="font-size:11pt"> </span></span><br></p><p><span style="color:black"><span style="font-size:11pt">Best regards,</span></span><br></p><p><span style="color:black"><span style="font-size:11pt"> </span></span><br></p><p><span style="color:black"><span style="font-size:11pt">Marika, Berry, and Caitlin</span></span><br></p><p><span style="color:black"><span style="font-size:11pt">--</span></span><br></p><p><b><span style="color:black"><span style="font-size:11pt"> </span></span></b><span style="color:black"><span style="font-size:11pt"></span></span><br></p><p><b><u><span style="color:black"><span style="font-size:11pt">Action Items</span></span></u></b><span style="color:black"><span style="font-size:11pt"></span></span><br></p><p><span style="color:black"><span style="font-size:11pt"> </span></span><br></p><ol style="margin-top:0in" type="1" start="1"><li style="color:black;margin-top:0in;margin-bottom:0in;margin-bottom:.0001pt;mso-list:l4 level1 lfo14;vertical-align:baseline">Alex Deacon, Milton Mueller and other willing volunteers to draft a write up of a potential accreditation model, taking into account the Team’s F2F discussions, in advance of the Thursday, 19 September meeting. <br></li><li style="color:black;margin-top:0in;margin-bottom:0in;margin-bottom:.0001pt;mso-list:l4 level1 lfo14;vertical-align:baseline">IPC, BC, SSAC, and GAC reps to separately draft a vision for their “ideal accreditation model” in order to assist the group with what the baseline accreditation requirements could be as well as the attendant benefits of accreditation within the architecture of an SSAD by Wednesday, September 18. <br></li><li style="color:black;margin-top:0in;margin-bottom:0in;margin-bottom:.0001pt;mso-list:l4 level1 lfo14;vertical-align:baseline">Support Staff to create a table (in the form of a Google Doc) which includes a column for each lawful basis and a column for what a requesting party would be required to provide in its request, what is the expected response time, is automation likely, what are the standardized categories that may fall within that lawful basis, etc.  Following receipt of the table, the EPDP Team members to populate the contents of the table. If there are commonalities, policy recommendations can be drafted accordingly.  <br></li><li style="color:black;margin-top:0in;margin-bottom:0in;margin-bottom:.0001pt;mso-list:l4 level1 lfo14;vertical-align:baseline">Support staff to create a Google Doc in which EPDP Team Members are to review and consider the types of disclosure decision models (in other words, who is making the ultimate determination to disclose non-public registration data - contracted party or ICANN) and what would make these options acceptable to the different groups by Thursday, September 19.<br></li><li style="color:black;margin-top:0in;margin-bottom:0in;margin-bottom:.0001pt;mso-list:l4 level1 lfo14;vertical-align:baseline">EPDP Team to review the legal memos and come back with the most relevant points that need to be factored in as the Staff Support Team produces the 1.0 draft by Thursday, September 19.<br></li><li style="color:black;margin-top:0in;margin-bottom:0in;margin-bottom:.0001pt;mso-list:l4 level1 lfo14;vertical-align:baseline">James and Mark Sv. to work together on a revised proposal for Building Block L (SSAD query policy) by Thursday, September 19. When discussing updates to Building Block L, Team members to consider if it is within the Team’s charter to continue discussing this issue.<br></li><li style="color:black;margin-top:0in;margin-bottom:0in;margin-bottom:.0001pt;mso-list:l4 level1 lfo14;vertical-align:baseline">Matt C. to review the legal advice on how to perform the balancing test and update Alan Woods’ initial balancing test document into a simple guide to conduct the balancing test to be included in the next iteration of the zero draft by Thursday, September 19. <br></li><li style="color:black;margin-top:0in;margin-bottom:0in;margin-bottom:.0001pt;mso-list:l4 level1 lfo14;vertical-align:baseline">Contracted party Team members to draft letter to ICANN Board, outlining scenarios discussed, including where the disclosure decision lies within the SSAD, and inquire whether there are any options the Board would not be amenable to.<br></li></ol><p style="vertical-align:baseline"><span style="color:black"><span style="font-size:11pt"> </span></span><br></p><p style="vertical-align:baseline"><b><u><span style="color:black"><span style="font-size:11pt">High-level Notes</span></span></u></b><span style="color:black"><span style="font-size:11pt"></span></span><br></p><p style="vertical-align:baseline"><b><span style="color:black"><span style="font-size:11pt"> </span></span></b><span style="color:black"><span style="font-size:11pt"></span></span><br></p><p><b><span style="color:black"><span style="font-size:14pt">ACCREDITATION–Building Block F</span></span></b><span style="color:black"><span style="font-size:11pt"></span></span><br></p><p><span style="color:rgb(68, 114, 196)"><span style="font-size:11pt">Straw Proposals Presented prior to Discussion: Milton Mueller and Alex Deacon</span></span><span style="color:black"><span style="font-size:11pt"></span></span><br></p><p><span style="color:black"><span style="font-size:11pt"> </span></span><br></p><p><b><span style="color:black"><span style="font-size:11pt">Outcome / Agreements</span></span></b><span style="color:black"><span style="font-size:11pt"></span></span><br></p><ul style="margin-top:0in" type="disc"><li style="color:black;mso-list:l7 level1 lfo2">EPDP Team did not agree on accreditation process or assignments; however, it agreed that a small group would consider the Team’s discussion during the F2F and develop a proposal for a subsequent discussion.<br></li><li style="color:black;mso-list:l7 level1 lfo2">The EPDP Team agreed to separate authentication from authorization. The team did not agree that the accreditor would perform the authorization function. <br></li></ul><p><b><span style="color:black"><span style="font-size:11pt"> </span></span></b><span style="color:black"><span style="font-size:11pt"></span></span><br></p><p><b><span style="color:black"><span style="font-size:11pt">Discussion Notes</span></span></b><span style="color:black"><span style="font-size:11pt"></span></span><br></p><table style="border-collapse:collapse" cellspacing="0" cellpadding="0" border="0"><tbody><tr><td style="width:98.75pt;border:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt" width="132" valign="top"><p><b><span style="font-size:11pt">Purpose</span></b><span style="font-size:11pt"></span><br></p></td><td style="width:368.75pt;border:solid windowtext 1.0pt;border-left:none;padding:0in 5.4pt 0in 5.4pt" width="492" valign="top"><p style="margin-left:.25in;text-indent:-.25in;mso-list:l6 level1 lfo3"><span style="font-family:Symbol"><span style="font-size:10pt"><span style="mso-list:Ignore">·<span style="font-family:"Times New Roman""><span style="font-size:7pt">         </span></span></span></span></span>Remove burden from entity providing disclosure <br></p><p style="margin-left:.25in;text-indent:-.25in;mso-list:l6 level1 lfo3"><span style="font-family:Symbol"><span style="font-size:10pt"><span style="mso-list:Ignore">·<span style="font-family:"Times New Roman""><span style="font-size:7pt">         </span></span></span></span></span>Provide code of contract or series of contracts<br></p><p style="margin-left:.25in;text-indent:-.25in;mso-list:l6 level1 lfo3"><span style="font-family:Symbol"><span style="font-size:10pt"><span style="mso-list:Ignore">·<span style="font-family:"Times New Roman""><span style="font-size:7pt">         </span></span></span></span></span>Spread liability (without diminishing protections for data subjects)<br></p><p style="margin-left:.25in;text-indent:-.25in;mso-list:l6 level1 lfo3"><span style="font-family:Symbol"><span style="font-size:10pt"><span style="mso-list:Ignore">·<span style="font-family:"Times New Roman""><span style="font-size:7pt">         </span></span></span></span></span>Provide process pathway to track data / monitoring<br></p></td></tr><tr><td style="width:98.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt" width="132" valign="top"><p><b><span style="font-size:11pt">Who serves as accreditor</span></b><span style="font-size:11pt"></span><br></p></td><td style="width:368.75pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt" width="492" valign="top"><p style="margin-left:.25in;text-indent:-.25in;mso-list:l2 level1 lfo4"><span style="font-family:Symbol"><span style="font-size:10pt"><span style="mso-list:Ignore">·<span style="font-family:"Times New Roman""><span style="font-size:7pt">         </span></span></span></span></span>Entity develops request or proposal<br></p><p style="margin-left:.25in;text-indent:-.25in;mso-list:l2 level1 lfo4"><span style="font-family:Symbol"><span style="font-size:10pt"><span style="mso-list:Ignore">·<span style="font-family:"Times New Roman""><span style="font-size:7pt">         </span></span></span></span></span>Competent authority with legal basis; demonstrates consistency with Article 42 and 43<br></p><p style="margin-left:.25in;text-indent:-.25in;mso-list:l2 level1 lfo4"><span style="font-family:Symbol"><span style="font-size:10pt"><span style="mso-list:Ignore">·<span style="font-family:"Times New Roman""><span style="font-size:7pt">         </span></span></span></span></span>EPDP sets outline and principles and assessment activities<br></p></td></tr><tr><td style="width:98.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt" width="132" valign="top"><p><b><span style="font-size:11pt">Accreditor</span></b><span style="font-size:11pt"></span><br></p><p><b><span style="font-size:11pt">Tasks</span></b><span style="font-size:11pt"></span><br></p></td><td style="width:368.75pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt" width="492" valign="top"><p><span style="font-size:11pt">Authentication – confirm identity</span><br></p><p><span style="font-size:11pt">Establish preliminary determination on lawful basis</span><br></p><p><span style="font-size:11pt">Consider how to manage volume requests</span><br></p><p><span style="font-size:11pt"> </span><br></p><p><span style="font-size:11pt">NOTE: Authorization process is not necessarily with the accreditor. Sub-team will consider whether Authorization should rest with another entity or with the accreditor or unique criteria</span><br></p></td></tr><tr><td style="width:98.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt" width="132" valign="top"><p><b><span style="font-size:11pt">Role: Certifying Accreditor</span></b><span style="font-size:11pt"></span><br></p><p><b><span style="font-size:11pt"> </span></b><span style="font-size:11pt"></span><br></p></td><td style="width:368.75pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt" width="492" valign="top"><p><span style="font-size:11pt">No Agreement, options discussed:</span><br></p><p style="margin-left:.25in;text-indent:-.25in;mso-list:l11 level1 lfo5"><span style="font-family:Symbol"><span style="font-size:10pt"><span style="mso-list:Ignore">·<span style="font-family:"Times New Roman""><span style="font-size:7pt">         </span></span></span></span></span>ICANN – difficult because they process of data <br></p><p style="margin-left:.25in;text-indent:-.25in;mso-list:l11 level1 lfo5"><span style="font-family:Symbol"><span style="font-size:10pt"><span style="mso-list:Ignore">·<span style="font-family:"Times New Roman""><span style="font-size:7pt">         </span></span></span></span></span>Independent Data Trust<br></p><p style="margin-left:.25in;text-indent:-.25in;mso-list:l11 level1 lfo5"><span style="font-family:Symbol"><span style="font-size:10pt"><span style="mso-list:Ignore">·<span style="font-family:"Times New Roman""><span style="font-size:7pt">         </span></span></span></span></span>DPA<br></p></td></tr><tr><td style="width:98.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt" width="132" valign="top"><p><b><span style="font-size:11pt">Role: Accreditation Body(ies)</span></b><span style="font-size:11pt"></span><br></p></td><td style="width:368.75pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt" width="492" valign="top"><p style="margin-left:.25in;text-indent:-.25in;mso-list:l13 level1 lfo6"><span style="font-family:Symbol"><span style="font-size:10pt"><span style="mso-list:Ignore">·<span style="font-family:"Times New Roman""><span style="font-size:7pt">         </span></span></span></span></span>WIPO<br></p><p style="margin-left:.25in;text-indent:-.25in;mso-list:l13 level1 lfo6"><span style="font-family:Symbol"><span style="font-size:10pt"><span style="mso-list:Ignore">·<span style="font-family:"Times New Roman""><span style="font-size:7pt">         </span></span></span></span></span>Law enforcement­–each country would have one entry point. i.e. in U.S. it might be FBI or in other countries, it would be the national country.<br></p><p style="margin-left:.25in;text-indent:-.25in;mso-list:l13 level1 lfo6"><span style="font-family:Symbol"><span style="font-size:10pt"><span style="mso-list:Ignore">·<span style="font-family:"Times New Roman""><span style="font-size:7pt">         </span></span></span></span></span>Europol and Interpol–agree this is not possible for law enforcement agencies, at least not for certain countries<br></p><p style="margin-left:.25in;text-indent:-.25in;mso-list:l13 level1 lfo6"><span style="font-family:Symbol"><span style="font-size:10pt"><span style="mso-list:Ignore">·<span style="font-family:"Times New Roman""><span style="font-size:7pt">         </span></span></span></span></span>Limit # of accrediting bodies to be able to manage system<br></p><p style="margin-left:.25in;text-indent:-.25in;mso-list:l13 level1 lfo6"><span style="font-family:Symbol"><span style="font-size:10pt"><span style="mso-list:Ignore">·<span style="font-family:"Times New Roman""><span style="font-size:7pt">         </span></span></span></span></span>Create track for entities that are not accredited<br></p></td></tr><tr><td style="width:98.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt" width="132" valign="top"><p><b><span style="font-size:11pt">Role: Auditor</span></b><span style="font-size:11pt"></span><br></p></td><td style="width:368.75pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt" width="492" valign="top"><p><span style="font-size:11pt">Agree that auditing is needed; unclear who should conduct audits</span><br></p></td></tr><tr><td style="width:98.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt" width="132" valign="top"><p><b><span style="font-size:11pt">Role & Process: De-Accreditation</span></b><span style="font-size:11pt"></span><br></p></td><td style="width:368.75pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt" width="492" valign="top"><p><span style="font-size:11pt">EPDP agrees that de-accreditation should be a component</span><br></p><p><span style="font-size:11pt">Accreditor must be compliant with DPAs</span><br></p><p><span style="font-size:11pt">Need to establish how to do this, such as:</span><br></p><p style="margin-left:.25in;text-indent:-.25in;mso-list:l12 level1 lfo7"><span style="font-family:Symbol"><span style="font-size:10pt"><span style="mso-list:Ignore">·<span style="font-family:"Times New Roman""><span style="font-size:7pt">         </span></span></span></span></span>Safeguards, prevent entity from setting up shop next door<br></p><p style="margin-left:.25in;text-indent:-.25in;mso-list:l12 level1 lfo7"><span style="font-family:Symbol"><span style="font-size:10pt"><span style="mso-list:Ignore">·<span style="font-family:"Times New Roman""><span style="font-size:7pt">         </span></span></span></span></span>Remedial action, i.e. may not shut down immediately, some corrective action is possible<br></p></td></tr></tbody></table><p><span style="color:black"> <span style="font-size:11pt"></span></span><br></p><table style="border-collapse:collapse" cellspacing="0" cellpadding="0" border="0"><tbody><tr><td colspan="2" style="width:240.3pt;border:solid windowtext 2.25pt;padding:0in 5.4pt 0in 5.4pt" width="320"><p style="text-align:center" align="center"><b><span style="font-size:18pt">Decision to Disclose</span></b><span style="font-size:11pt"></span><br></p></td><td colspan="2" style="width:227.2pt;border:solid windowtext 1.0pt;border-left:none;background:#F7CAAC;padding:0in 5.4pt 0in 5.4pt" width="303" valign="top"><p style="text-align:center" align="center"><b><span style="color:black"><span style="font-size:14pt">Joint Controller</span></span></b><span style="font-size:11pt"></span><br></p><p style="text-align:center" align="center"><i><span style="color:rgb(112, 173, 71)"><span style="font-size:11pt">Who Balances?</span></span></i><span style="font-size:11pt"></span><br></p><p style="text-align:center" align="center"><span style="color:black"><span style="font-size:11pt">Entity with Legal Basis</span></span><span style="font-size:11pt"></span><br></p></td></tr><tr><td colspan="2" style="width:240.3pt;border:solid windowtext 1.0pt;border-top:none;background:#B4C6E7;padding:0in 5.4pt 0in 5.4pt" width="320"><p style="text-align:center" align="center"><b><span style="color:black"><span style="font-size:11pt">Options: Who Decides?</span></span></b><span style="font-size:11pt"></span><br></p><p style="text-align:center" align="center"><span style="color:rgb(89, 89, 89)"><span style="font-size:11pt">{Note: EPDP did not decide on preferred option in LA. Group will consider options and potentially write a letter to Board to frame questions}</span></span><span style="font-size:11pt"></span><br></p></td><td colspan="2" style="width:227.2pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;background:#F7CAAC;padding:0in 5.4pt 0in 5.4pt" width="303" valign="top"><p><b><span style="color:black"><span style="font-size:11pt">JC Agreement </span></span></b><span style="font-size:11pt"></span><br></p><p style="margin-left:.25in;text-indent:-.25in;mso-list:l10 level1 lfo8"><span style="font-family:Wingdings"><span style="font-size:10pt"><span style="mso-list:Ignore">§<span style="font-family:"Times New Roman""><span style="font-size:7pt">  </span></span></span></span></span><span style="color:black"><span style="font-size:10pt">Responsibilities identified in agreement; CPs cannot increase their risk</span></span><br></p><p style="margin-left:.25in;text-indent:-.25in;mso-list:l10 level1 lfo8"><span style="font-family:Wingdings"><span style="font-size:10pt"><span style="mso-list:Ignore">§<span style="font-family:"Times New Roman""><span style="font-size:7pt">  </span></span></span></span></span><span style="color:black"><span style="font-size:10pt">Must be <u>correct<b> </b></u>to manage liability / risk</span></span><br></p><p style="margin-left:.25in;text-indent:-.25in;mso-list:l10 level1 lfo8"><span style="font-family:Wingdings"><span style="font-size:10pt"><span style="mso-list:Ignore">§<span style="font-family:"Times New Roman""><span style="font-size:7pt">  </span></span></span></span></span><span style="color:black"><span style="font-size:10pt">Liability is clearly defined (ICANN or CPs)</span></span><br></p><p style="margin-left:.25in;text-indent:-.25in;mso-list:l10 level1 lfo8"><span style="font-family:Wingdings"><span style="font-size:10pt"><span style="mso-list:Ignore">§<span style="font-family:"Times New Roman""><span style="font-size:7pt">  </span></span></span></span></span><span style="color:black"><span style="font-size:10pt">Establish Joint and Severable Liability</span></span><br></p></td></tr><tr><td style="width:129.3pt;border:solid windowtext 1.0pt;border-top:none;background:#B4C6E7;padding:0in 5.4pt 0in 5.4pt" width="172" valign="top"><p><b><span style="color:black"><span style="font-size:11pt">Contracted Parties</span></span></b><span style="font-size:11pt"></span><br></p></td><td style="width:111.0pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;background:#B4C6E7;padding:0in 5.4pt 0in 5.4pt" width="148" valign="top"><p><b><span style="color:black"><span style="font-size:11pt">ICANN</span></span></b><span style="font-size:11pt"></span><br></p></td><td style="width:75.35pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;background:#B4C6E7;padding:0in 5.4pt 0in 5.4pt" width="100" valign="top"><p><b><span style="color:black"><span style="font-size:11pt">Independent Data Trust</span></span></b><span style="font-size:11pt"></span><br></p></td><td style="width:151.85pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;background:#B4C6E7;padding:0in 5.4pt 0in 5.4pt" width="202" valign="top"><p><span style="color:black"><span style="font-size:11pt"> </span></span><span style="font-size:11pt"></span><br></p></td></tr><tr><td style="width:129.3pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt" width="172" valign="top"><p><span style="font-size:10pt">PROS/CONS</span><span style="font-size:11pt"></span><br></p><p><span style="font-size:10pt">+ Most accountable to data subject</span><span style="font-size:11pt"></span><br></p><p><span style="font-size:10pt">+ Has physical access to data</span><span style="font-size:11pt"></span><br></p><p><span style="font-size:10pt">- <span style="color:rgb(237, 125, 49)">Lack of consistency with hundreds of CPs applying policy to make decision to disclose</span></span><span style="font-size:11pt"></span><br></p><p><span style="font-size:10pt">- ICANN unable to indemnify CPs (maybe, shared risk possible)</span><span style="font-size:11pt"></span><br></p><p><span style="font-size:10pt">+ Bird & Bird Memo states that CPs are controllers and retain liabilities</span><span style="font-size:11pt"></span><br></p></td><td style="width:111.0pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt" width="148" valign="top"><p><span style="font-size:10pt">PROS/CONS</span><span style="font-size:11pt"></span><br></p><p><span style="font-size:10pt">+ Reduce risk of liability to CPs</span><span style="font-size:11pt"></span><br></p><p><span style="font-size:10pt">+ Provides consistency</span><span style="font-size:11pt"></span><br></p><p><span style="font-size:10pt">+ One party that performs decision and auditing role might be preferable</span><span style="font-size:11pt"></span><br></p><p><span style="font-size:10pt">+ <span style="color:rgb(237, 125, 49)">Build body of work / decisions consistently</span></span><span style="font-size:11pt"></span><br></p></td><td style="width:75.35pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt" width="100" valign="top"><p><span style="font-size:10pt"> </span><span style="font-size:11pt"></span><br></p></td><td style="width:151.85pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt" width="202" valign="top"><p><b><span style="font-size:11pt">Considerations for all Options</span></b><span style="font-size:11pt"></span><br></p><p style="margin-left:15.65pt;text-indent:-15.65pt"><span style="font-size:10pt">Standardized clearing house</span><span style="font-size:11pt"></span><br></p><p style="margin-left:15.65pt;text-indent:-15.65pt"><span style="font-size:10pt">Timely Response</span><span style="font-size:11pt"></span><br></p><p style="margin-left:15.65pt;text-indent:-15.65pt"><span style="font-size:10pt">Insurance to alleviate risk or establishing risk fund may be possible</span><span style="font-size:11pt"></span><br></p></td></tr><tr><td style="width:129.3pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt" width="172" valign="top"><p><span style="font-size:11pt"> </span><br></p></td><td style="width:111.0pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt" width="148" valign="top"><p><span style="font-size:11pt">ICANN sets rules so it has to be a joint controller</span><br></p></td><td style="width:75.35pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt" width="100" valign="top"><p><span style="font-size:11pt"> </span><br></p></td><td style="width:151.85pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt" width="202" valign="top"><p><span style="color:rgb(68, 84, 106)"><span style="font-size:11pt">SSAD </span></span><span style="font-size:11pt"></span><br></p><p><i><span style="color:rgb(68, 84, 106)"><span style="font-size:11pt">Not required by law</span></span></i><span style="font-size:11pt"></span><br></p><p><b><i><span style="color:rgb(68, 84, 106)"><span style="font-size:11pt">Goal = predictable</span></span></i></b><span style="font-size:11pt"></span><br></p><p><b><i><span style="color:rgb(68, 84, 106)"><span style="font-size:11pt">Easier</span></span></i></b><span style="font-size:11pt"></span><br></p></td></tr></tbody></table><p><img style="width:2.2916in;height:1.2708in" alt="Processing Tasks
§      Decision to disclose
§      Decision on data set to be disclosed
§      Transfer of data" class="proton-embedded" src="cid:image001.png@01D56990.FFEEE0F0" width="220" height="122" align="left"><b><span style="color:black"><span style="font-size:11pt"> </span></span></b><span style="color:black"><span style="font-size:11pt"></span></span><br></p><p><b><span style="color:black"><span style="font-size:11pt"> </span></span></b><span style="color:black"><span style="font-size:11pt"></span></span><br></p><p><b><span style="color:black"><span style="font-size:14pt"> </span></span></b><span style="color:black"><span style="font-size:11pt"></span></span><br></p><p><b><span style="color:black"><span style="font-size:14pt"> </span></span></b><span style="color:black"><span style="font-size:11pt"></span></span><br></p><p><b><span style="color:black"><span style="font-size:14pt"> </span></span></b><span style="color:black"><span style="font-size:11pt"></span></span><br></p><p><b><span style="color:black"><span style="font-size:14pt">Building Block N, Financial Sustainability</span></span></b><span style="color:black"><span style="font-size:11pt"></span></span><br></p><p><b><span style="color:black"><span style="font-size:14pt"> </span></span></b><span style="color:black"><span style="font-size:11pt"></span></span><br></p><p><b><span style="color:black"><span style="font-size:11pt">Outcome</span></span></b><span style="color:black"><span style="font-size:11pt">: Staff to develop Draft 1.0 with implementation guidelines consistent with the F2F discussion. </span></span><br></p><p><b><span style="color:black">Note:</span></b><span style="color:black"> The EPDP noted the need to make SSAD Determination and consider cost-benefit analysis before finalizing approach to financial sustainability.<span style="font-size:11pt"></span></span><br></p><p><span style="color:black"><span style="font-size:16pt"> </span><span style="font-size:11pt"></span></span><br></p><table style="border-collapse:collapse" cellspacing="0" cellpadding="0" border="0"><tbody><tr style="height:57.55pt"><td style="width:92.4pt;border:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:57.55pt" width="123"><p style="text-align:center" align="center"><b><span style="font-size:16pt">Set Up</span></b><span style="font-size:11pt"></span><br></p></td><td rowspan="3" style="width:15.35pt;border:solid windowtext 1.0pt;border-left:none;background:#D5DCE4;padding:0in 5.4pt 0in 5.4pt;height:57.55pt" width="20" valign="top"><p><span style="color:black"><span style="font-size:16pt"> </span></span><span style="font-size:11pt"></span><br></p></td><td rowspan="3" style="width:171.0pt;border:solid windowtext 1.0pt;border-left:none;padding:0in 5.4pt 0in 5.4pt;height:57.55pt" width="228"><p style="text-align:center" align="center"><b><span style="font-size:16pt">Cost of Providing and Making Available an Investigative Tool</span></b><span style="font-size:11pt"></span><br></p></td><td rowspan="3" style="width:.25in;border:solid windowtext 1.0pt;border-left:none;background:#D5DCE4;padding:0in 5.4pt 0in 5.4pt;height:57.55pt" width="24" valign="top"><p><span style="color:black"><span style="font-size:16pt"> </span></span><span style="font-size:11pt"></span><br></p></td><td rowspan="3" style="width:170.75pt;border:solid windowtext 1.0pt;border-left:none;padding:0in 5.4pt 0in 5.4pt;height:57.55pt" width="228" valign="top"><p><b><span style="font-size:16pt"> </span></b><span style="font-size:11pt"></span><br></p><p><b><span style="font-size:16pt"> </span></b><span style="font-size:11pt"></span><br></p><p><b><span style="font-size:16pt">Cost Sharing</span></b><span style="font-size:11pt"></span><br></p><p><span style="font-size:11pt">Share cost across the system</span><br></p><p><span style="font-size:11pt">Direct and indirect beneficiaries</span><br></p><p><span style="font-size:11pt">Share costs across the system</span><br></p><p><span style="font-size:11pt">CPs contribute intangible resources via in-house staff, etc. </span><br></p><p><span style="font-size:16pt"> </span><span style="font-size:11pt"></span><br></p></td></tr><tr style="height:26.95pt"><td style="width:92.4pt;border:solid windowtext 1.0pt;border-top:none;background:#1F3864;padding:0in 5.4pt 0in 5.4pt;height:26.95pt" width="123" valign="top"><p><span style="color:white"><span style="font-size:16pt"> </span></span><span style="font-size:11pt"></span><br></p></td></tr><tr style="height:62.5pt"><td style="width:92.4pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:62.5pt" width="123"><p style="text-align:center" align="center"><b><span style="font-size:16pt">Use</span></b><span style="font-size:11pt"></span><br></p><p style="text-align:center" align="center"><i><span style="font-size:9pt">Look at other Models</span></i><span style="font-size:11pt"></span><br></p></td></tr><tr><td colspan="5" style="width:467.5pt;border:solid windowtext 1.0pt;border-top:none;background:#C5E0B3;padding:0in 5.4pt 0in 5.4pt" width="623" valign="top"><p style="text-align:center" align="center"><span style="color:black"><span style="font-size:16pt">ANTICIPATED BENEFITS: Certainty to Process </span><span style="font-family:"Wingdings 2""><span style="font-size:16pt">­</span></span><span style="font-size:16pt"> Cost Savings</span></span><span style="font-size:11pt"></span><br></p></td></tr><tr><td colspan="5" style="width:467.5pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt" width="623" valign="top"><p style="text-align:center" align="center"><span style="font-size:16pt"> </span><span style="font-size:11pt"></span><br></p></td></tr></tbody></table><p><span style="color:black"> <span style="font-size:11pt"></span></span><br></p><p style="margin-top:12.0pt"><span style="color:rgb(47, 84, 150)"><span style="font-family:"Calibri Light", sans-serif"><span style="font-size:16pt">FLIP CHARTS</span></span></span><br></p><p><span style="color:black"><span style="font-size:11pt">Each stakeholder group contributed principles / ideas to ignite the conversation.</span></span><br></p><table style="border-collapse:collapse" cellspacing="0" cellpadding="0" border="0"><tbody><tr><td style="width:233.75pt;border:dotted windowtext 1.0pt;padding:0in 5.75pt 0in 5.75pt" width="312" valign="top"><p style="margin-top:2.0pt"><b><span style="color:rgb(47, 84, 150)"><span style="font-family:"Calibri Light", sans-serif"><span style="font-size:13pt">SSAC</span></span></span></b><br></p><p><span style="font-size:11pt">All participants have costs:</span><br></p><ul style="margin-top:0in" type="disc"><li style="mso-list:l0 level1 lfo9">Central system = ICANN<br></li><li style="mso-list:l0 level1 lfo9">CPs: receive, review, reply<br></li><li style="mso-list:l0 level1 lfo9">Requestors: accreditation, query-making<br></li></ul><p><span style="font-size:11pt"> </span><br></p><p style="margin-bottom:6.0pt"><span style="font-size:11pt">Issue subsidies? Letting market work</span><br></p><p style="margin-bottom:6.0pt"><span style="font-size:11pt">RDS as basic service / core service</span><br></p><p style="margin-bottom:6.0pt"><span style="font-size:11pt">Passing costs to requestors: May burden victims.</span><br></p></td><td style="width:233.75pt;border:dotted windowtext 1.0pt;border-left:none;padding:0in 5.75pt 0in 5.75pt" width="312" valign="top"><p style="margin-top:2.0pt"><b><span style="color:rgb(47, 84, 150)"><span style="font-family:"Calibri Light", sans-serif"><span style="font-size:13pt">GAC</span></span></span></b><br></p><ol style="margin-top:0in" type="1" start="1"><li style="mso-list:l8 level1 lfo10">Any financing model should <u>not</u> be profit/revenue generating<br></li><li style="mso-list:l8 level1 lfo10">System should <u>not</u> provide financial disincentives to requestors acting on behalf of public authorities<br></li></ol></td></tr><tr><td style="width:233.75pt;border:dotted windowtext 1.0pt;border-top:none;padding:0in 5.75pt 0in 5.75pt" width="312" valign="top"><p style="margin-top:2.0pt"><b><span style="color:rgb(47, 84, 150)"><span style="font-family:"Calibri Light", sans-serif"><span style="font-size:13pt">CPH</span></span></span></b><br></p><ol style="margin-top:0in" type="1" start="1"><li style="mso-list:l5 level1 lfo11">Any financial model should <u>not</u> be profit/revenue generating<br></li><li style="mso-list:l5 level1 lfo11">Cost Neutral and borne by beneficiaries<br></li><li style="mso-list:l5 level1 lfo11">Not a hidden tax / pass through charge to registrants / data subject<br></li><li style="mso-list:l5 level1 lfo11">Integration costs represent CPH contributions<br></li></ol></td><td style="width:233.75pt;border-top:none;border-left:none;border-bottom:dotted windowtext 1.0pt;border-right:dotted windowtext 1.0pt;padding:0in 5.75pt 0in 5.75pt" width="312" valign="top"><p style="margin-top:2.0pt"><b><span style="color:rgb(47, 84, 150)"><span style="font-family:"Calibri Light", sans-serif"><span style="font-size:13pt">ALAC</span></span></span></b><br></p><p><span style="font-size:11pt">Consider:</span><br></p><p style="margin-left:.25in;text-indent:-.25in;mso-list:l3 level1 lfo12"><span style="font-family:Symbol"><span style="font-size:10pt"><span style="mso-list:Ignore">·<span style="font-family:"Times New Roman""><span style="font-size:7pt">         </span></span></span></span></span>Costs<br></p><p style="margin-left:.25in;text-indent:-.25in;mso-list:l3 level1 lfo12"><span style="font-family:Symbol"><span style="font-size:10pt"><span style="mso-list:Ignore">·<span style="font-family:"Times New Roman""><span style="font-size:7pt">         </span></span></span></span></span>Cost Savings<br></p><p style="margin-left:.25in;text-indent:-.25in;mso-list:l3 level1 lfo12"><span style="font-family:Symbol"><span style="font-size:10pt"><span style="mso-list:Ignore">·<span style="font-family:"Times New Roman""><span style="font-size:7pt">         </span></span></span></span></span>Accreditation costs borne by users<br></p><p style="margin-left:.25in;text-indent:-.25in;mso-list:l3 level1 lfo12"><span style="font-family:Symbol"><span style="font-size:10pt"><span style="mso-list:Ignore">·<span style="font-family:"Times New Roman""><span style="font-size:7pt">         </span></span></span></span></span>Charge / Requestor: consideration of public interest exception<br></p><p style="margin-left:.25in;text-indent:-.25in;mso-list:l3 level1 lfo12"><span style="font-family:Symbol"><span style="font-size:10pt"><span style="mso-list:Ignore">·<span style="font-family:"Times New Roman""><span style="font-size:7pt">         </span></span></span></span></span>Chares passed through to registrants seems inevitable (it’s part of the infrastructure)<br></p></td></tr><tr><td style="width:233.75pt;border:dotted windowtext 1.0pt;border-top:none;padding:0in 5.75pt 0in 5.75pt" width="312" valign="top"><p style="margin-top:2.0pt"><b><span style="color:rgb(47, 84, 150)"><span style="font-family:"Calibri Light", sans-serif"><span style="font-size:13pt">NCSG</span></span></span></b><br></p><p><span style="font-size:11pt">Costs [<span style="color:rgb(56, 86, 35)">potential funder</span>]</span><br></p><ol style="margin-top:0in" type="1" start="1"><li style="mso-list:l9 level1 lfo13">Capital / set up costs [<span style="color:rgb(56, 86, 35)">Large Users</span>]<br></li><li style="mso-list:l9 level1 lfo13">Accreditation costs [<span style="color:rgb(56, 86, 35)">Flat fee per time period</span>]<br></li><li style="mso-list:l9 level1 lfo13">Usage costs (per request) [<span style="color:rgb(56, 86, 35)">per request fee, cost-based. Higher for non-accredited</span>]<br></li><li style="mso-list:l9 level1 lfo13">Insurance costs [<span style="color:rgb(56, 86, 35)">unsure</span>]<br></li><li style="mso-list:l9 level1 lfo13">Audit / enforcements [<span style="color:rgb(56, 86, 35)">unsure, ICANN / DPAs?</span>]<br></li></ol><p><span style="font-size:11pt"> </span><br></p></td><td style="width:233.75pt;border-top:none;border-left:none;border-bottom:dotted windowtext 1.0pt;border-right:dotted windowtext 1.0pt;padding:0in 5.75pt 0in 5.75pt" width="312" valign="top"><p style="margin-top:2.0pt"><b><span style="color:rgb(47, 84, 150)"><span style="font-family:"Calibri Light", sans-serif"><span style="font-size:13pt">CSG</span></span></span></b><br></p><p><span style="font-size:11pt">OK for cost-sharing to vary by volume, requestor type, legal obligation, etc.</span><br></p><p><span style="font-size:11pt"> </span><br></p><p><span style="font-size:11pt">Fees on per-request basis are problematic</span><br></p><p><span style="font-size:11pt"> </span><br></p><p><span style="font-size:11pt">Must not create disincentives to costs reductions</span><br></p></td></tr></tbody></table><p><b><span style="color:black"><span style="font-size:11pt"> </span></span></b><span style="color:black"><span style="font-size:11pt"></span></span><br></p><p><b><span style="color:black"><span style="font-size:11pt"> </span></span></b><span style="color:black"><span style="font-size:11pt"></span></span><br></p><p><b><span style="color:black"><span style="font-size:11pt"> </span></span></b><span style="color:black"><span style="font-size:11pt"></span></span><br></p><p><span style="color:black"><span style="font-family:"Times New Roman", serif"> </span><span style="font-size:11pt"></span></span><br></p><p><span style="color:black"><span style="font-size:11pt"> </span></span><br></p><p><span style="color:black"><span style="font-size:10.5pt"> </span></span><br></p><p><span style="color:black"><span style="font-family:"Times New Roman", serif"><span style="font-size:11pt"> </span></span></span><br></p><p> <br></p></div></blockquote><div><br></div>