<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:"Yu Gothic";
panose-1:2 11 4 0 0 0 0 0 0 0;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"open sans";
panose-1:0 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Cambria;
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:"\@Yu Gothic";
panose-1:2 11 4 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;
mso-fareast-language:ZH-CN;}
span.EmailStyle22
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:JA;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="mso-fareast-language:JA">This seemed to me to as much about profiling in general as data privacy. If such profiling just performed by humans (blocklisting entire neighborhood from social benefits) that would probably have
would have been judged unlawful as well under EHRL.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:JA"><o:p> </o:p></span></p>
<p class="MsoNormal"><b>From:</b> Gnso-epdp-team <gnso-epdp-team-bounces@icann.org>
<b>On Behalf Of </b>Alan Woods<br>
<b>Sent:</b> Wednesday, February 19, 2020 3:03 AM<br>
<b>To:</b> Volker Greimann <vgreimann@key-systems.net><br>
<b>Cc:</b> GNSO EPDP <gnso-epdp-team@icann.org><br>
<b>Subject:</b> [EXTERNAL] Re: [Gnso-epdp-team] On the legality of algorithmic decision making<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">What Volker said. To add another layer - I'm not sure that "confusing" is where I land on this however - if anything it's rather convincing as to the seriousness of ensuring balance. An EU or member state law may impart a specific permission
or authorization for such processing - or alternatively make it a legal obligation for controllers in that jurisdiction to process data in such instances, but the key point is that even where you make it the 'law' to automate - if that automation is not in
line with the principles of proportionality, i.e. balance of the goal vs the impact to the rights of those impacted and transparency (with many shades of Art 25), then even that "legal basis" will fall. All comes down to the fact that data privacy is part
of a basic human right, emanating specifically from Art 8 of the ECHR, and can't be legislated away; it's good (not to mention of some relief) to see the Courts are absolutely willing to censure governments who overstep their powers vis a vis data privacy. <o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I think we continue to be prudent in our own considerations to remember that our policy will be built on considerably less stable foundations than actual 'legislative' prerogative. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Alan<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><br clear="all">
<o:p></o:p></p>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<table class="MsoNormalTable" border="0" cellpadding="0">
<tbody>
<tr>
<td style="padding:0in 5.25pt 0in 0in">
<p class="MsoNormal" style="mso-margin-top-alt:7.5pt;margin-right:0in;margin-bottom:7.5pt;margin-left:0in">
<a href="https://nam06.safelinks.protection.outlook.com/?url=http%3A%2F%2Fdonuts.domains%2F&data=02%7C01%7Cmarksv%40microsoft.com%7C11e53d3d02974760ec8808d7b52b755c%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637177070570161176&sdata=kGH1Wfh9dtLOgBAIhWymEjx5L2VZZp%2Bpwmr8%2BwWuHVw%3D&reserved=0" target="_blank"><span style="text-decoration:none"><img border="0" width="75" height="75" style="width:.7812in;height:.7812in" id="_x0000_i1025" src="https://storage.googleapis.com/signaturesatori/customer-C02zzlf7k/images/-54f9d8ac97e7f575bf497d10ac1f1aafafddf8afceab5f269d49034f01b3217b.png" alt="Donuts Inc."></span></a><o:p></o:p></p>
</td>
<td style="padding:0in 5.25pt 0in 0in">
<div>
<p class="MsoNormal" style="mso-margin-top-alt:7.5pt;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;line-height:12.75pt">
<b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#333333">Alan Woods</span></b><b><span style="font-size:10.5pt;font-family:"Tahoma",sans-serif;color:black"><o:p></o:p></span></b></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:7.5pt;margin-right:0in;margin-bottom:7.5pt;margin-left:0in">
<span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#333333">Senior Compliance & Policy Manager, Donuts Inc.</span>
<o:p></o:p></p>
<div class="MsoNormal" align="center" style="mso-margin-top-alt:7.5pt;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;text-align:center">
<hr size="2" width="100%" align="center">
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:7.5pt;margin-right:0in;margin-bottom:7.5pt;margin-left:0in">
<span style="font-size:8.5pt;font-family:"Arial",sans-serif;color:#333333">Suite 1-31, </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:7.5pt;margin-right:0in;margin-bottom:7.5pt;margin-left:0in">
<span style="font-size:8.5pt;font-family:"Arial",sans-serif;color:#333333">Block D, Iveagh Court</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:7.5pt;margin-right:0in;margin-bottom:7.5pt;margin-left:0in">
<span style="font-size:8.5pt;font-family:"Arial",sans-serif;color:#333333">Harcourt Road</span><o:p></o:p></p>
</div>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:7.5pt;margin-right:0in;margin-bottom:7.5pt;margin-left:0in">
<span style="font-size:8.5pt;font-family:"Arial",sans-serif;color:#333333">Dublin 2, County Dublin</span><span style="font-size:9.0pt;font-family:"open sans",serif;color:#D6D6D6"><br>
</span><span style="font-size:8.5pt;font-family:"Arial",sans-serif;color:#333333">Ireland</span><br>
<br>
<a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.facebook.com%2Fdonutstlds&data=02%7C01%7Cmarksv%40microsoft.com%7C11e53d3d02974760ec8808d7b52b755c%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637177070570161176&sdata=khX33uVlXk0WGEEjjHGpxXIC6bvG3jGSziYTo60mtOY%3D&reserved=0" target="_blank"><span style="text-decoration:none"><img border="0" id="_x0000_i1027" src="http://storage.googleapis.com/signaturesatori/icons/facebook.png"></span></a> <a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftwitter.com%2FDonutsInc&data=02%7C01%7Cmarksv%40microsoft.com%7C11e53d3d02974760ec8808d7b52b755c%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637177070570171122&sdata=huDjt7WGbWpogwA90m%2FhNzq%2BEo9WypgvRIj1ELT26i4%3D&reserved=0" target="_blank"><span style="text-decoration:none"><img border="0" id="_x0000_i1028" src="http://storage.googleapis.com/signaturesatori/icons/twitter.png"></span></a> <span style="font-size:10.5pt"><a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fdonuts-inc&data=02%7C01%7Cmarksv%40microsoft.com%7C11e53d3d02974760ec8808d7b52b755c%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637177070570171122&sdata=u%2Fn0UuTwV8%2FYGzog6bI24A8vJFr67u0afoETgKdX8e0%3D&reserved=0" target="_blank"><span style="text-decoration:none"><img border="0" id="_x0000_i1029" src="http://storage.googleapis.com/signaturesatori/icons/linkedin.png"></span></a></span><o:p></o:p></p>
</div>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Cambria",serif">Please NOTE: This electronic message, including any attachments, may include privileged, confidential and/or inside information owned by Donuts Inc. . Any distribution or use of
this communication by anyone other than the intended recipient(s) is strictly prohibited and may be unlawful. If you are not the intended recipient, please notify the sender by replying to this message and then delete it from your system. Thank you.</span><o:p></o:p></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">On Wed, Feb 19, 2020 at 9:26 AM Volker Greimann <<a href="mailto:vgreimann@key-systems.net">vgreimann@key-systems.net</a>> wrote:<o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<p>Yeah, but this is governments who have a significantly larger ability to take actions that may impact private citizens rights. We are private sector acting without any legal basis other than what GDPR permits. We should not compare what appleas can do to
what oranges can.<o:p></o:p></p>
<p>Volker<o:p></o:p></p>
<p><o:p> </o:p></p>
<div>
<p class="MsoNormal">Am 18.02.2020 um 19:36 schrieb Mark Svancarek (CELA) via Gnso-epdp-team:<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">I think it’s an interesting case.<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">From the article:<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:13.5pt;font-family:"Helvetica",sans-serif;color:#1A1A1A;background:white">On Wednesday, the Hague district court agreed with that [by collating swaths of
data on entire neighborhoods, SyRI contravened the right to a private life guaranteed under European Human Rights Law], saying that it was legitimate for the government to use technology to address fraud, but that SyRI was too invasive.
</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">There is legal or similarly significant impact, so it’s clearly covered by Article 22, but the court still seems to have comfort with some level of automation. It’s confusing.
<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b>From:</b> Gnso-epdp-team
<a href="mailto:gnso-epdp-team-bounces@icann.org" target="_blank"><gnso-epdp-team-bounces@icann.org></a>
<b>On Behalf Of </b>Mueller, Milton L<br>
<b>Sent:</b> Saturday, February 15, 2020 3:01 PM<br>
<b>To:</b> EPDP <a href="mailto:gnso-epdp-team@icann.org" target="_blank"><gnso-epdp-team@icann.org></a><br>
<b>Subject:</b> [EXTERNAL] [Gnso-epdp-team] On the legality of algorithmic decision making<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Here is an interesting article for anyone here who still thinks that lawful balancing tests can be done by algorithms.<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.wired.com%2Fstory%2Feurope-limits-government-algorithm-us-not-much%2F&data=02%7C01%7Cmarksv%40microsoft.com%7C11e53d3d02974760ec8808d7b52b755c%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637177070570181078&sdata=hE89j6B%2F4xJSXxxVEB978MEAafSjsnd6esTTMrO1TFc%3D&reserved=0" target="_blank">https://www.wired.com/story/europe-limits-government-algorithm-us-not-much/</a>
<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Dr. Milton L Mueller<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Georgia Institute of Technology<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">School of Public Policy<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><img border="0" width="235" height="94" style="width:2.4479in;height:.9791in" id="gmail-m_-9085817841643169613Picture_x0020_1" src="cid:image001.png@01D5E6FD.5F5618D0" alt="IGP_logo_gold block"><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<pre>_______________________________________________<o:p></o:p></pre>
<pre>Gnso-epdp-team mailing list<o:p></o:p></pre>
<pre><a href="mailto:Gnso-epdp-team@icann.org" target="_blank">Gnso-epdp-team@icann.org</a><o:p></o:p></pre>
<pre><a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmm.icann.org%2Fmailman%2Flistinfo%2Fgnso-epdp-team&data=02%7C01%7Cmarksv%40microsoft.com%7C11e53d3d02974760ec8808d7b52b755c%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637177070570181078&sdata=PlyMrV%2Bf6%2BFxjn9hW3yEol5noSOy9th1EKbRiaxzIPY%3D&reserved=0" target="_blank">https://mm.icann.org/mailman/listinfo/gnso-epdp-team</a><o:p></o:p></pre>
<pre>_______________________________________________<o:p></o:p></pre>
<pre>By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (<a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.icann.org%2Fprivacy%2Fpolicy&data=02%7C01%7Cmarksv%40microsoft.com%7C11e53d3d02974760ec8808d7b52b755c%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637177070570181078&sdata=UDVGIN0nTDRltoc7E5QrWFi2PfhJ874AgW29R0N77XM%3D&reserved=0" target="_blank">https://www.icann.org/privacy/policy</a>) and the website Terms of Service (<a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.icann.org%2Fprivacy%2Ftos&data=02%7C01%7Cmarksv%40microsoft.com%7C11e53d3d02974760ec8808d7b52b755c%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637177070570191036&sdata=bHcarWOhxAlPhIxtqkk%2Bn5T9Rk7srk1eiBstGjY2XkQ%3D&reserved=0" target="_blank">https://www.icann.org/privacy/tos</a>). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.<o:p></o:p></pre>
</blockquote>
<div>
<p class="MsoNormal">-- <br>
Volker A. Greimann<br>
General Counsel and Policy Manager<br>
<strong><span style="font-family:"Calibri",sans-serif">KEY-SYSTEMS GMBH</span></strong><br>
<br>
T: +49 6894 9396901<br>
M: +49 6894 9396851<br>
F: +49 6894 9396851<br>
W: <a href="https://nam06.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.key-systems.net%2F&data=02%7C01%7Cmarksv%40microsoft.com%7C11e53d3d02974760ec8808d7b52b755c%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637177070570191036&sdata=TUgRcRLlyeSpd1AnEIZ5rKZqiHjiZQyb6U52%2BJzfT6A%3D&reserved=0" target="_blank">
www.key-systems.net</a><br>
<br>
Key-Systems GmbH is a company registered at the local court of Saarbruecken, Germany with the registration no. HR B 18835<br>
CEO: Alexander Siffrin<br>
<br>
Part of the CentralNic Group PLC (LON: CNIC) a company registered in England and Wales with company number 8576358.<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal">_______________________________________________<br>
Gnso-epdp-team mailing list<br>
<a href="mailto:Gnso-epdp-team@icann.org" target="_blank">Gnso-epdp-team@icann.org</a><br>
<a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmm.icann.org%2Fmailman%2Flistinfo%2Fgnso-epdp-team&data=02%7C01%7Cmarksv%40microsoft.com%7C11e53d3d02974760ec8808d7b52b755c%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637177070570200996&sdata=wCwWpFij959%2FZPX%2BVNpWvAC6HX6%2F33SmbHnbAx3kPHk%3D&reserved=0" target="_blank">https://mm.icann.org/mailman/listinfo/gnso-epdp-team</a><br>
_______________________________________________<br>
By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (<a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.icann.org%2Fprivacy%2Fpolicy&data=02%7C01%7Cmarksv%40microsoft.com%7C11e53d3d02974760ec8808d7b52b755c%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637177070570200996&sdata=ZXWfPn5X%2F3CDKriToREuPkGeAdUPmGvOhXjCajBv7V0%3D&reserved=0" target="_blank">https://www.icann.org/privacy/policy</a>)
and the website Terms of Service (<a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.icann.org%2Fprivacy%2Ftos&data=02%7C01%7Cmarksv%40microsoft.com%7C11e53d3d02974760ec8808d7b52b755c%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637177070570200996&sdata=b9Z%2BRERYltaFtoDAanYbgQ3phbWZrobWyMppsvGRANs%3D&reserved=0" target="_blank">https://www.icann.org/privacy/tos</a>).
You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.<o:p></o:p></p>
</blockquote>
</div>
</div>
</body>
</html>