<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
I would respectfully disagree Greg. ICANN has never really
responded to these documents, so they are sitting there awaiting
response. You will note in subsequent documents that the Art 29
group referred to the common position of 2003.<br>
Given the long gap when privacy issues were not addressed, it is not
surprising the docs are old.<br>
SP<br>
<br>
<div class="moz-cite-prefix">On 2016-04-11 13:30, Greg Aaron via
gnso-rds-pdp-purpose wrote:<br>
</div>
<blockquote
cite="mid:3B35D67004B738418B4B266BCAFF6C387DA7DA@DAGN11b-e6.exg6.exghost.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.apple-tab-span
{mso-style-name:apple-tab-span;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:472600149;
mso-list-template-ids:-759118360;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1
{mso-list-id:889612011;
mso-list-type:hybrid;
mso-list-template-ids:-942506840 67698705 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l1:level1
{mso-level-text:"%1\)";
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l1:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l1:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l2
{mso-list-id:1748503422;
mso-list-template-ids:540184982;}
@list l2:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l2:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l2:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><a moz-do-not-send="true"
name="_MailEndCompose"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">Dear
Sana and Stephanie:<o:p></o:p></span></a></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">Regarding
the below and the various “International Working Group on
Data Protection in Telecommunications and Media Documents”
listed in the purpose group inputs checklist…especially RE:
"Common Position on data protection aspects in the Draft
Convention on cyber-crime of the Council of Europe" and the
"Ten Commandments" documents:<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">Those
documents are about the interception of Internet traffic,
which is a very different topic than WHOIS or domain
registration. The summaries below do not make that entirely
clear. The documents were also written sixteen years ago,
and have probably been superceded by more relevant
documents. Given all this, I question the relevance of
these documents to our work.<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">There
are five "Common Positions" documents listed on the Purpose
group's checklist. These are more relevant to domain name
registration data, but they were written in 2000. We need
to know if and where those documents have been superceded
(or not). <o:p>
</o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">While
historical reference is nice, I think the WG needs to
develop a clear idea of what the _<i>current</i>_ state of
privacy law is.
<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Calibri",sans-serif">All
best,<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Calibri",sans-serif">--Greg<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1
1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">
<a class="moz-txt-link-abbreviated" href="mailto:gnso-rds-pdp-purpose-bounces@icann.org">gnso-rds-pdp-purpose-bounces@icann.org</a>
[<a class="moz-txt-link-freetext" href="mailto:gnso-rds-pdp-purpose-bounces@icann.org">mailto:gnso-rds-pdp-purpose-bounces@icann.org</a>]
<b>On Behalf Of </b>Sana Ali via gnso-rds-pdp-purpose<br>
<b>Sent:</b> Sunday, April 10, 2016 9:17 PM<br>
<b>To:</b> <a class="moz-txt-link-abbreviated" href="mailto:gnso-rds-pdp-purpose@icann.org">gnso-rds-pdp-purpose@icann.org</a><br>
<b>Subject:</b> [gnso-rds-pdp-purpose] Summaries from
Relevant Sections of International Working Group on Data
Protection in Telecommunications and Media Documents -
Purpose<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal"><b>Users/Purposes: Who should have
access to gTLD registration data and why (for what
purposes)?</b><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><b>Common Position on data protection
aspects in the Draft Convention on cyber-crime of the
Council of Europe </b><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">In this respect the Working Group
supports the findings of the European Data Protection
Commissioners Conference that such retention of traffic
data by Internet service providers would be an improper
invasion of the fundamental rights guaranteed to
individuals by the European Convention on Human
Rights.This goes also for storing data revealing the use
of the Internet by individuals. Existing powers for
tracing crimes should not be extended in a way that
invades privacy until the need for such measures has been
clearly demonstrated. The Working Group has in the past
stated that any Interception of Private Communications
should be subject to appropriate safeguards. Existing
conditions and safeguards provided for under domestic law
and the Convention on Mutual Assistance in Criminal
Matters between the Member States of the European Union
(Art. 23) must be respected. Such conditions and
safeguards should at least include • prior judicial
authorisation, • <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">(subsequent) notification of
individuals, • limits on use, • record-keeping
requirements, • monitoring and auditing as well as •
public reporting. In particular the cooperation of
national authorities with operators of public and private
networks should be based on solid, legal obligations
rather than on voluntary agreement that are very difficult
to control. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><b>Ten Commandments to protect Privacy
in the Internet World Common Position on Incorporation
of telecommunications-specific principles in
multilateral privacy agreements</b><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Informational Separation of Powers:
Network and Service Providers must not intercept or
interfere with any contents except where explicit law
requires it. Insofar as Network or Service Providers
provide contents themselves, responsibilities for the
respective functions have to be separated. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span class="apple-tab-span">
</span>•<span class="apple-tab-span">
</span>Virtual Right to be Alone: Nobody must be forced to
let his or her personal data be published in directories
or other indices. Every user has to be given the right to
object to his or her data being collected by a search
engine or other agents. Every user has to be given the
right and the technical means to prevent the intrusion of
external software into his own devices. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span class="apple-tab-span">
</span>•<span class="apple-tab-span">
</span>Restriction on Secondary Use: Traffic data must not
be used for other purposes than those which are necessary
to run the networks or services without explicit consent
of the user. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><b>Common Position on Privacy and Data
Protection aspects of the Registration of Domain Names
on the Internet</b><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<ul style="margin-top:0in" type="disc">
<li class="MsoNormal" style="mso-list:l2 level1
lfo3;-webkit-text-stroke-color: rgb(0, 0,
0);-webkit-text-stroke-width: initial">
<span class="apple-tab-span"> </span>these
databases were originally intended to facilitate the
technical maintenance of the network (e.g. to contact the
person running a domain which produced errors hindering
the functioning of the net)<o:p></o:p></li>
</ul>
<div>
<p class="MsoNormal"><span class="apple-tab-span">
</span>• Any technical mechanism to be introduced to
access the data collected from the registrants must
furthermore have safeguards to meet the principle of
purpose limitation and avoidance of the possibility to
unauthorised secondary use of the registrant's data. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><b>Common Position relating to Reverse
Directories</b><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><span class="apple-tab-span">
</span>•<span class="apple-tab-span">
</span>It is in any case necessary to endow the persons
with the right to be informed by their provider of
telephone or e-mail service, at the time of the collection
of data concerning them, or if they have already
subscribed, by a specific means of information, of the
existence of services of reverse search and - if express
consent is not required - of their right to object, free
of charge, to such a search.<o:p></o:p></p>
</div>
<p class="MsoNormal" style="-webkit-text-stroke-color: rgb(0,
0, 0);-webkit-text-stroke-width: initial;min-height: 15px">
<span class="apple-tab-span"> </span><o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><b> Comments on the data protection
impact of the revision of the ICANN RAA concerning
accuracy and data retention of WHOIS data</b><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><span class="apple-tab-span">
</span>•<span class="apple-tab-span">
</span>In assessing these proposals, ICANN should be aware
that the purpose of collecting and publishing contact
details in the WHOIS database is to facilitate contact
about technical issues. The original purpose definition
reads: “The purpose of the gTLD Whois service is to
provide information sufficient to contact a responsible
party for a particular gTLD domain name who can resolve,
or reliably pass on data to a party who can resolve,
issues related to the configuration of the records
associated with the domain name within a DNS name server."<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span class="apple-tab-span">
</span>•<span class="apple-tab-span">
</span>The Working Party finds the proposed new
requirement to annually re-verify both the telephone
number and the e-mail address and publish these contact
details in the publicly accessible WHOIS database
excessive and therefore unlawful. Because ICANN is not
addressing the root of the problem, the proposed solution
is a disproportionate infringement of the right to
protection of personal data. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal" style="-webkit-text-stroke-color: rgb(0,
0, 0);-webkit-text-stroke-width: initial;min-height: 15px">
<span class="apple-tab-span"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<div>
<p class="MsoNormal"><span style="color:black">Sana Ali<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><a moz-do-not-send="true"
href="mailto:sana.ali2030@gmail.com">sana.ali2030@gmail.com</a><span
style="color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><a moz-do-not-send="true"
href="https://ca.linkedin.com/in/sanaali2030">https://ca.linkedin.com/in/sanaali2030</a><span
style="color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
</div>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><o:p> </o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
gnso-rds-pdp-purpose mailing list
<a class="moz-txt-link-abbreviated" href="mailto:gnso-rds-pdp-purpose@icann.org">gnso-rds-pdp-purpose@icann.org</a>
<a class="moz-txt-link-freetext" href="https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-purpose">https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-purpose</a></pre>
</blockquote>
<br>
</body>
</html>