[gnso-rds-pdp-wg] Article 29 WP 76 Opinion 2/2003 on the application of data protection principles to WHOIS directories

[Vayra, Fabricio (Perkins Coie)]

I reviewed the document at Article 29 WP 76 Opinion 2/2003<https://urldefense.proofpoint.com/v2/url?u=http-3A__ec.europa.eu_justice_policies_privacy_docs_wpdocs_2003_wp76-5Fen.pdf&d=CwMFAw&c=XRWvQHnpdBDRh-yzrHjqLpXuHNC_9nanQc6pPG_SpT0&r=6lUxzkhJPN5qts-Nve5TYqxoGjP81z1kCvXgsmw-MiQ&m=TISS1LCIglyj5za4lHfBWPjOhnM6WbyYw_GIauUn4PI&s=TVzorLMPRWPEQKa6mSfyeon6FfXkaLCfR26cP6jlvno&e=>
http://ec.europa.eu/justice/policies/privacy/docs/wpdocs/2003/wp76_en.pdf<https://urldefense.proofpoint.com/v2/url?u=http-3A__ec.europa.eu_justice_policies_privacy_docs_wpdocs_2003_wp76-5Fen.pdf&d=CwMFAw&c=XRWvQHnpdBDRh-yzrHjqLpXuHNC_9nanQc6pPG_SpT0&r=6lUxzkhJPN5qts-Nve5TYqxoGjP81z1kCvXgsmw-MiQ&m=TISS1LCIglyj5za4lHfBWPjOhnM6WbyYw_GIauUn4PI&s=TVzorLMPRWPEQKa6mSfyeon6FfXkaLCfR26cP6jlvno&e=>.

The document addresses the application of data protection principles to WHOIS directories  As such it goes into detail about Purpose, Data Accuracy, and Data Elements (see related quotes below under closest associated charter question for each).

In sum, from this document we could draw out the following possible requirements:


1.       Need a well-defined purpose;

2.       Data collected should be relevant (and not excessive) for defined purpose;

3.       Bulk access to WHOIS data for direct marketing should be limited;

4.      Data should be accurate; and

5.      Data subjects should be provided with unambiguous and informed consent.

Charter questions and relevant/associated quotes from Article 29 WP 76 Opinion 2/2003<https://urldefense.proofpoint.com/v2/url?u=http-3A__ec.europa.eu_justice_policies_privacy_docs_wpdocs_2003_wp76-5Fen.pdf&d=CwMFAw&c=XRWvQHnpdBDRh-yzrHjqLpXuHNC_9nanQc6pPG_SpT0&r=6lUxzkhJPN5qts-Nve5TYqxoGjP81z1kCvXgsmw-MiQ&m=TISS1LCIglyj5za4lHfBWPjOhnM6WbyYw_GIauUn4PI&s=TVzorLMPRWPEQKa6mSfyeon6FfXkaLCfR26cP6jlvno&e=>
http://ec.europa.eu/justice/policies/privacy/docs/wpdocs/2003/wp76_en.pdf<https://urldefense.proofpoint.com/v2/url?u=http-3A__ec.europa.eu_justice_policies_privacy_docs_wpdocs_2003_wp76-5Fen.pdf&d=CwMFAw&c=XRWvQHnpdBDRh-yzrHjqLpXuHNC_9nanQc6pPG_SpT0&r=6lUxzkhJPN5qts-Nve5TYqxoGjP81z1kCvXgsmw-MiQ&m=TISS1LCIglyj5za4lHfBWPjOhnM6WbyYw_GIauUn4PI&s=TVzorLMPRWPEQKa6mSfyeon6FfXkaLCfR26cP6jlvno&e=>.:

·Users/Purposes: Who should have access to gTLD registration data and why?


1.    From the data protection viewpoint it is essential to determine in very clear terms what is the purpose of the Whois and which purpose(s) can be considered as legitimate and compatible to the original purpose.

2.   The Working Party wishes to state its support for ... limitation of bulk access for direct marketing issues.

·Data Accuracy: What steps should be taken to improve data accuracy?


1.    The Working Party wishes to state its support for the proposals concerning accuracy of the data (which is also one of the principles of the European Data Protection Directive) ...

·Data Elements: What data should be collected, stored, and disclosed?

1.   ... data should be relevant and not excessive for the specific purpose.

2.  ... the processing of personal data in reverse directories or multi-criteria searching services without unambiguous and informed consent by the individual is unfair and unlawful.

Please let me know if there are any questions.

Thanks,
Fab

Fabricio Vayra
Partner
700 Thirteenth Street, N.W. Suite 600<x-apple-data-detectors://13/1>
Washington, DC 20005-3960<x-apple-data-detectors://13/1>
D. +1.202.654.6255<tel:+1.202.654.6255>
F. +1.202.654.9678<tel:+1.202.654.9678>
E. FVayra at perkinscoie.com<mailto:FVayra at perkinscoie.com>


________________________________

NOTICE: This communication may contain privileged or other confidential information. If you have received it in error, please advise the sender by reply email and immediately delete the message and any attachments without copying or disclosing the contents. Thank you.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mm.icann.org/pipermail/gnso-rds-pdp-wg/attachments/20160607/0673a85d/attachment.html>