<div dir="ltr">Dear Team colleagues,<div>I have received the following answer from Goran on my e-mail related to SSAD cost estimate:</div><div><br></div><div><p class="MsoNormal"><i><span style="color:black">Dear Janis,</span><span style="color:black"><u></u><u></u></span></i></p><p class="MsoNormal"><i><span style="color:black"> </span><span style="color:black"><u></u><u></u></span></i></p><p class="MsoNormal"><i><span style="color:black">Thank you for sending these questions regarding cost estimates for a SSAD. Should the EPDP come to consensus on an SSAD model, we believe it is part of ICANN org’s public responsibility to ensure that it is cost efficient by, for example, issuing RFPs and taking other steps to ensure the system is appropriately resourced to ensure the security and stability of the world’s Internet users. As you know, ICANN takes seriously its mission, which includes a longstanding, historic commitment to Registration Directory Services. As such, the development of a possible Unified Access Model is extremely important and the EPDP has a very important role to play in recommending policy, including identifying a financial model. </span><span style="color:black"><u></u><u></u></span></i></p><p class="MsoNormal"><i><span style="color:black"> </span><span style="color:black"><u></u><u></u></span></i></p><p class="MsoNormal"><i><span style="color:black">Be assured that we have begun work on these estimates. Given the holiday schedule and resource constraints, we will work as expeditiously as possible to provide the team with input on these questions as we do not wish to be a barrier to the EPDP’s continued progress on its work. To deliver these estimates, the team working on the cost estimate is formulating some questions about the EPDP’s assumptions. We would like to discuss these with the EPDP when you are in LA in January. </span><span style="color:black"><u></u><u></u></span></i></p><p class="MsoNormal"><i><span style="color:black"> </span><span style="color:black"><u></u><u></u></span></i></p><p class="MsoNormal"><i><span style="color:black">For your information, we are examining the following costs:</span><span style="color:black"><u></u><u></u></span></i></p><p class="MsoNormal"><i><span style="color:black"> </span><span style="color:black"><u></u><u></u></span></i></p><ul type="disc" style="margin-bottom:0in;margin-top:0in"><li class="MsoNormal" style="margin-left:15px;color:black;vertical-align:baseline"><i><span style="font-family:Arial,sans-serif">Developing technical specifications</span><u></u><u></u></i></li><li class="MsoNormal" style="margin-left:15px;color:black;vertical-align:baseline"><i><span style="font-family:Arial,sans-serif">System development</span><u></u><u></u></i></li><li class="MsoNormal" style="margin-left:15px;color:black;vertical-align:baseline"><i><span style="font-family:Arial,sans-serif">System support/maintenance (including enhancements and bug fixing)</span><u></u><u></u></i></li><li class="MsoNormal" style="margin-left:15px;color:black;vertical-align:baseline"><i><span style="font-family:Arial,sans-serif">System operation (e.g., customer support, other human resource operators, system operation)</span><u></u><u></u></i></li><li class="MsoNormal" style="margin-left:15px;color:black;vertical-align:baseline"><i><span style="font-family:Arial,sans-serif">And periodic auditing</span><u></u><u></u></i></li></ul><p class="MsoNormal"><i><span style="color:black"> </span><span style="color:black"><u></u><u></u></span></i></p><p class="MsoNormal"><i><span style="color:black">Before delving too far into this exercise, we want to confirm that ICANN org understands the three models for which you are seeking estimates. Could you please clarify how these three models align with the three models as described in the EPDP Phase 2’s Draft Initial Report? We understand generally that one of the models is a fully centralized Unified Access Model, while another would be a ticketing system that would receive requests through a central gateway and distribute them to the contract parties for responses. </span><span style="color:black"><u></u><u></u></span></i></p><p class="MsoNormal"><i><span style="color:black"> </span><span style="color:black"><u></u><u></u></span></i></p><p class="MsoNormal"><i><span style="color:black">In addition to these efforts, we’d also like to discuss the possibility of engaging a consultant with expertise in developing cost estimates for such systems, if the EPDP should find this input useful.</span><span style="color:black"><u></u><u></u></span></i></p><p class="MsoNormal"><i><span style="color:black"> </span><span style="color:black"><u></u><u></u></span></i></p><p class="MsoNormal"><i><span style="color:black">Thank you again. We look forward to your reply.</span><span style="color:black"><u></u><u></u></span></i></p><p class="MsoNormal"><i><span style="color:black"> </span><span style="color:black"><u></u><u></u></span></i></p><p class="MsoNormal"><i><span style="color:black">Best,</span><span style="color:black"><u></u><u></u></span></i></p><p class="MsoNormal"><i><span style="color:black"> </span><span style="color:black"><u></u><u></u></span></i></p><p class="MsoNormal"><i><span style="color:black">Göran</span><span style="color:black"><u></u><u></u></span></i></p><span class="gmail-im" style="color:rgb(80,0,80)"><p class="MsoNormal"><br></p><p class="MsoNormal">I suggest that we discuss this reply in one of the next calls prior the next f2f meeting in LA.</p><p class="MsoNormal">Best regards</p><p class="MsoNormal">JK</p></span></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Sat, Nov 23, 2019 at 8:30 AM Janis Karklins <<a href="mailto:karklinsj@gmail.com">karklinsj@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Goran,<div><br></div><div>I am writing you in my capacity of the Chair of the EPDP Phase 2 Team to seek input on financial sustainability issues if the SSAD. </div><div><p class="MsoNormal" style="margin:12pt 0cm;line-height:normal;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-US" style="color:black">The EPDP Phase 2 Team is considering
the financial sustainability of the System for Standardized Access/Disclosure
(SSAD) currently being deliberated. This will likely involve ICANN managing or operating
a centralized system to facilitate requests for disclosure of non-public gTLD
registration data.</span><span lang="EN-US" style="font-size:12pt;font-family:"Times New Roman",serif"></span></p>
<p class="MsoNormal" style="margin:12pt 0cm;line-height:normal;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-US" style="color:black"> The Team is contemplating how considerable
cost implications would be to develop, operationalize and run such a System. The
EPDP currently considers principles on which such a system may be based. Work
is still in progress, but the Team is discussing principles such as:</span><span lang="EN-US" style="font-size:12pt;font-family:"Times New Roman",serif"></span></p>
<p class="MsoNormal" style="margin:12pt 0cm;line-height:normal;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-US" style="color:black">1. The
SSAD should operate on a cost-neutral basis. No party should operate or seek to
operate this service as a for-profit service, as this would invite abuse and
manipulation of the SSAD functions. </span><span lang="EN-US" style="font-size:12pt;font-family:"Times New Roman",serif"></span></p>
<p class="MsoNormal" style="margin:12pt 0cm;line-height:normal;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-US" style="color:black">2. Costs
to operate the SSAD should be borne by the <i><u>direct</u></i> beneficiaries
of the service. The costs of SSAD should not be transferred to Data Subjects
(Registrants), either directly via fees from ICANN or indirectly via fees to
Contracted Parties who provide the SSAD with data and bear the legal risks of
disclosures.</span><span lang="EN-US" style="font-size:12pt;font-family:"Times New Roman",serif"></span></p>
<p class="MsoNormal" style="margin:12pt 0cm;line-height:normal;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-US" style="color:black">In the absence of responses from both
the EPDP letter to the Board, and to the Strawberry Team’s query as presented
to the European Data Protection Board, the EPDP team is not in a position to
consider a single model for the potential SSAD. Accepting that financial
sustainability is a vital consideration for the initial report, and as we have
not yet determined the model for the SSAD, we must therefore present the
financial sustainability of each of the general model types so far
postulated: </span><span lang="EN-US" style="font-size:12pt;font-family:"Times New Roman",serif"></span></p>
<ul style="margin-top:0cm;margin-bottom:0cm" type="disc">
<li class="MsoNormal" style="color:black;margin:12pt 0cm 0.0001pt;line-height:normal;vertical-align:baseline;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-US">Fully
Centralized (e.g. with ICANN at the core) </span></li>
<li class="MsoNormal" style="color:black;margin:0cm 0cm 0.0001pt;line-height:normal;vertical-align:baseline;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-US">Centralized Accreditation and
request portal, distributed decision-making, with final response via
Centralized portal (e.g. CZDS). </span></li>
<li class="MsoNormal" style="color:black;margin:0cm 0cm 0.0001pt;line-height:normal;vertical-align:baseline;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-US">Central Gateway, with distributed
review and disclosure</span></li>
</ul>
<p class="MsoNormal" style="margin:12pt 0cm;line-height:normal;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-US" style="color:black">The Team understands that a cost
analysis is difficult to conduct while the exact details of the SSAD are still
being determined. We hope that looking at existing systems such as TMCH or CZDS
might provide useful baselines and identify dependent assumptions that impact
cost models. CZDS, for example, is itself a centralized system for access to
data (in this case zone file data), sharing many similarities with the SSAD
being contemplated.</span></p>
<p class="MsoNormal" style="margin:12pt 0cm;line-height:normal;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-US" style="color:black">Equally, financial sustainability analysis
of the UAM could provide same useful indications for Team’s deliberations. </span></p><p class="MsoNormal" style="margin:12pt 0cm;line-height:normal;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-US" style="color:black">In order
to understand if it is possible for the SSAD to adhere to these crucial
principles, we are requesting ICANN Org’s help in understanding all the likely
costs associated with both the development and the ongoing operation of the
SSAD. Once we understand the anticipated costs, we would expect to propose a
credentialing and transaction fee structure which would pay for the System and
allow us to better understand the cost/benefit balance of the SSAD as a whole.</span><span lang="EN-US"></span></p><p class="MsoNormal" style="margin:12pt 0cm;line-height:normal;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-US" style="color:black">Your input on financial sustainability issues will be highly appreciated.</span></p><p class="MsoNormal" style="margin:12pt 0cm;line-height:normal;font-size:11pt;font-family:Calibri,sans-serif"><font color="#000000">Best regards</font></p><p class="MsoNormal" style="margin:12pt 0cm;line-height:normal;font-size:11pt;font-family:Calibri,sans-serif"><font color="#000000">JK</font></p></div></div>
</blockquote></div>