<div dir="ltr"><div>Hi Brian,</div><div><br></div><div>the easiest way to comply with data protection law is to simply treat all registration data as if it were personal data. No chance of ever running afoul data protection law if you do that correctly and it is pretty easy to demonstrate as well. <br></div><div><br></div><div><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><span lang="EN-US">-- <br>Volker A. Greimann<br>General Counsel and Policy Manager<br><b>KEY-SYSTEMS GMBH</b><br><br>T: +49 6894 9396901<br>M: +49 6894 9396851<br>F: +49 6894 9396851<br>W: </span><a href="http://www.key-systems.net/" style="color:rgb(17,85,204)" target="_blank"><span lang="EN-US">www.key-systems.net</span></a><span lang="EN-US"><br><br>Key-Systems GmbH is a company registered at the local court of Saarbruecken, Germany with the registration no. HR B 18835<br>CEO: Oliver Fries and Robert Birkner<br><br>Part of the CentralNic Group PLC (LON: CNIC) a company registered in England and Wales with company number 8576358.<br><br></span><span style="font-family:Roboto,sans-serif;font-size:14px;white-space:pre-wrap;background-color:rgb(248,249,250)">This email and any files transmitted are confidential and intended only for the person(s) directly addressed. If you are not the intended recipient, any use, copying, transmission, distribution, or other forms of dissemination is strictly prohibited. If you have received this email in error, please notify the sender immediately and permanently delete this email with any files that may be attached.</span></div></div></div></div></div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Mar 24, 2021 at 5:47 PM King, Brian via Gnso-epdp-team <<a href="mailto:gnso-epdp-team@icann.org">gnso-epdp-team@icann.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div lang="EN-US">
<div class="gmail-m_-4513501439100151681WordSection1">
<p class="MsoNormal">Hi Milton, <u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Thank you for the constructive intervention. Your point is well taken, and I can certainly see that from the RNH perspective.
<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">One feature of data protection law related to your point is that it requires data controllers and processors to be able to demonstrate compliance with the law. A controller or processor could doubtfully demonstrate compliance with data
protection law if they had not determined whether they were actually processing personal data. In fact, data protection professionals will tell you that you absolutely must determine what personal data you’re processing as the first step toward compliance
with data protection law. It seems the policy question is: what, if anything, should contracted parties be required to do based on the status of the data? Is that right?
<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">As always, we’re happy to work with you and look forward to finding consensus.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal" style="vertical-align:baseline"><b><span style="font-size:10pt;color:black">Brian J. King</span></b><span style="font-size:10pt"><br>
<i><span style="color:black">He/Him/His</span></i><span style="color:black"><u></u><u></u></span></span></p>
<p class="MsoNormal" style="vertical-align:baseline"><span style="font-size:10pt;color:black">Head of Policy and Advocacy, Intellectual Property Group</span><span style="font-size:10pt"><u></u><u></u></span></p>
<p class="MsoNormal" style="vertical-align:baseline"><span style="font-size:10pt"><br>
<span style="color:black">T +1 443 761 3726</span><u></u><u></u></span></p>
<p class="MsoNormal" style="vertical-align:baseline"><span style="font-size:10pt">Time zone: US Eastern Time<u></u><u></u></span></p>
<p class="MsoNormal" style="vertical-align:baseline"><span style="font-size:10pt;font-family:"Segoe UI",sans-serif"><u></u> <u></u></span></p>
<p class="MsoNormal" style="vertical-align:baseline"><span style="font-size:10pt"><a href="http://www.clarivate.com" target="_blank">clarivate.com</a> | Accelerating innovation<u></u><u></u></span></p>
<p class="MsoNormal" style="vertical-align:baseline"><span style="font-size:10pt">Follow us on
</span><a href="https://www.linkedin.com/company/clarivate" target="_blank"><span style="font-size:10pt">LinkedIn</span></a><span style="font-size:10pt">,
</span><a href="https://twitter.com/clarivate?ref_src=twsrc%5Egoogle%7Ctwcamp%5Eserp%7Ctwgr%5Eauthor" target="_blank"><span style="font-size:10pt">Twitter</span></a><span style="font-size:10pt">,
</span><a href="https://www.facebook.com/clarivate/" target="_blank"><span style="font-size:10pt">Facebook</span></a><span style="font-size:10pt"> and
</span><a href="https://www.instagram.com/clarivateofficial/?hl=en" target="_blank"><span style="font-size:10pt">Instagram</span></a><u></u><u></u></p>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div style="border-color:rgb(225,225,225) currentcolor currentcolor;border-style:solid none none;border-width:1pt medium medium;padding:3pt 0in 0in">
<p class="MsoNormal"><b>From:</b> Gnso-epdp-team <<a href="mailto:gnso-epdp-team-bounces@icann.org" target="_blank">gnso-epdp-team-bounces@icann.org</a>>
<b>On Behalf Of </b>Mueller, Milton L via Gnso-epdp-team<br>
<b>Sent:</b> Wednesday, March 24, 2021 11:13 AM<br>
<b>To:</b> <a href="mailto:gnso-epdp-team@icann.org" target="_blank">gnso-epdp-team@icann.org</a><br>
<b>Subject:</b> [Gnso-epdp-team] On the proposed guidance<u></u><u></u></p>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">I was reading through two documents setting out in detail the proposed guidance on legal/natural.
<u></u><u></u></p>
<p class="MsoNormal">There seems to be more than one Google doc on this and I am not sure which one is the latest or most official, though I suspect it is the one with various people’s comments crawling all over it.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">I was pretty supportive of the Guidance overall. I had one problem with it, though.
<u></u><u></u></p>
<p class="MsoNormal">I liked the description of HOW the differentiation needed to take place. But in describing WHEN differentiation takes place and WHO would do it, it sets out 3 “high level scenarios”.
<u></u><u></u></p>
<p class="MsoNormal">The first two are ok. The third scenario (listed as #5 in the document) is that the Registrar does it for the RNH, based on “inferences.”
<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">That option just doesn’t fly for those of us representing RNH’s in this process. We cannot have a registrant’s disclosure status or person type determined FOR them by someone else. If we can strike that part of the guidance, I think we
can be on our way to a much broader consensus. <u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Dr. Milton L Mueller<u></u><u></u></p>
<p class="MsoNormal">Georgia Institute of Technology<u></u><u></u></p>
<p class="MsoNormal">School of Public Policy<u></u><u></u></p>
<p class="MsoNormal"><img style="width: 2.1145in; height: 0.8437in;" id="gmail-m_-4513501439100151681Picture_x0020_1" src="cid:17865ccf71a5b16b21" alt="IGP_logo_gold block" width="203" height="81" border="0"><u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p style="font-size:8pt;line-height:8pt;font-family:"Calibri",serif;color:rgb(105,105,105)">
Confidentiality note: This e-mail may contain confidential information from Clarivate. If you are not the intended recipient, be aware that any disclosure, copying, distribution or use of the contents of this e-mail is strictly prohibited. If you have received
this e-mail in error, please delete this e-mail and notify the sender immediately.
</p>
</div>
</div>
_______________________________________________<br>
Gnso-epdp-team mailing list<br>
<a href="mailto:Gnso-epdp-team@icann.org" target="_blank">Gnso-epdp-team@icann.org</a><br>
<a href="https://mm.icann.org/mailman/listinfo/gnso-epdp-team" rel="noreferrer" target="_blank">https://mm.icann.org/mailman/listinfo/gnso-epdp-team</a><br>
_______________________________________________<br>
By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (<a href="https://www.icann.org/privacy/policy" rel="noreferrer" target="_blank">https://www.icann.org/privacy/policy</a>) and the website Terms of Service (<a href="https://www.icann.org/privacy/tos" rel="noreferrer" target="_blank">https://www.icann.org/privacy/tos</a>). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.</blockquote></div>