<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office">
<head>
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<!--[if gte mso 9]>
<xml>
<o:OfficeDocumentSettings>
<o:AllowPNG/>
<o:PixelsPerInch>96</o:PixelsPerInch>
</o:OfficeDocumentSettings>
</xml>
<![endif]-->
<style type="text/css">* a:hover{cursor:pointer;}</style>
<style>body {-webkit-animation:bugfix infinite 1s;}@-webkit-keyframes bugfix {from {position:relative;}to {position:relative;}}</style>
</head>
<body style="word-wrap:normal; word-break:break-word;">
<style>a {word-wrap:normal;word-break:break-word;}.background-contain {background-size:contain;}@media only screen and (max-width:600px) {.container {-webkit-text-size-adjust:none !important;}.container,.palm-one-whole {width:100% !important;min-width:100% !important;}.palm-one-half {width:50% !important;min-width:50% !important;box-sizing:border-box;}blockquote .container,blockquote .container div,blockquote .container table {width:auto !important;min-width:0 !important;position:relative !important;}img {max-width:100%;}.border-outer,.border-middle,.border-inner,.inner,[title="separator"] {width:100% !important;}.innercell {padding:8px !important;}.palm-block {display:block !important;}td.palm-one-whole {display:inline-block !important;padding:0;}td.palm-one-whole:first-child:not(:only-child) {margin-bottom:16px;}td.hostname {padding-top:3px !important;}}@media only screen and (min-width:601px) {.preview-card {max-width:600px !important;}}@media only screen and (min-device-width :320px) and (max-device-width :568px),only screen and (min-device-width :768px) and (max-device-width :1024px),only screen and (max-device-width:640px),only screen and (max-device-width:667px),only screen and (max-width:480px){.container {width:100% !important;min-width:100% !important;}.p,.small,li,font[size="2"],font[size="3"] {font-size:1em !important;}}@media only screen and (min-device-width :320px) and (max-device-width :568px),only screen and (min-device-width :768px) and (max-device-width :1024px),only screen and (min-device-width :1224px) {.message-wrapper {padding-top:6px;}.apple-only[style] {display:block !important;max-height:none !important;line-height:normal !important;overflow:visible !important;height:auto !important;width:100% !important;position:relative !important;}.no-apple {display:none !important;}form {font-size:inherit;}input[type="text"] {height:43px;padding-left:4px !important;}button:hover {cursor:pointer;}}@media only screen and (min-device-width :1224px) {.apple-mail-form {display:block !important;background-color:white !important;}}* [office365] .outlook-com-hidden {display:none !important;}* [office365] .outlook-com-button {display:block;}* [office365] .outlook-com-only {display:block !important;max-height:none !important;line-height:normal !important;overflow:visible !important;height:auto !important;width:100% !important;position:relative !important;}</style>
<!--[if (gte mso 9)|(IE)]>
<style>a,body {font-family:'Calibri',Arial,sans-serif;}img {border:none !important;-ms-interpolation-mode:bicubic;}td {mso-line-height-rule:exactly !important;}.mso-card-inner table {border-collapse:collapse !important;mso-table-lspace:0pt;mso-table-rspace:0pt;vertical-align:top;}.outlook-com-only {display:none !important;font-size:0 !important;}#mso-one-whole {width:100% !important;}.border-outer,.border-middle,.border-inner {border:none !important;}.border-middle,.border-inner {width:100% !important;}.mso-border-outer,.mso-border-middle,.mso-border-inner {padding:1px;}.mso-border-outer {background-color:rgb(245,255,255);}.mso-border-middle {background-color:rgb(223,246,255);}.mso-border-inner {background-color:rgb(153,176,225);}</style>
<![endif]-->
<table class="container" lang="container" border="0" cellpadding="0" cellspacing="0" valign="top" style="width:100%; margin-top:6px;">
<tr>
<td valign="top" class="message-wrapper" style="line-height: 1.31; color: #222; font-family: arial, sans-serif;">
<!--[if mso]><table border="0" cellpadding="0" cellspacing="0" valign="top" style="border-collapse:separate;"><tr><td valign="top"><![endif]-->
<div><font><em class="scribe-marker" style="display: none;"></em>Hi Susan,</font></div><div><font><br></font></div><div><font>Thanks for sharing these reflections. I understand the desire not to complicate
this task. As someone who is new to the ICANN community and its approach to
policy-making – and, also, someone who is an advocate of privacy – it would
seem to me that all the costs and burdens associated with rallying against an
open-access Registration Directory Service have been put on some stakeholders, while
proponents of the status quo profit from the lack of consensus or inertia on a
different path forward. I say this not to demonise any views, but to clarify that
I do indeed share your perspective that we don’t want to be permanently
gridlocked here.</font></div><div><font><br></font></div><div><font>This is actually
why my preference would be to go down the path that was suggested on our call
yesterday – from what I recall, it would mean three opportunities for public
comment, and a mandate to focus our energies on understanding Users/Purposes,
Privacy, and Data Elements before we consider whether or not gated access is
necessary or whether or not records should be accurate. It seems a little
premature to me to consider the latter points when we have not yet established
if there is a basis for collecting registration data in the first place. I
share your point, though, that we should be distinguishing between individuals
and commercial entities – which is not to presuppose that there ultimately will
be a need for variations in treatment if the RDS is warranted.</font></div><div><font><br></font></div><div><font>We can make our
work easier, however. If we decide upon a standard by which to assess whether
or not the RDS complies with, say, data privacy laws, we might have a more
straightforward exercise ahead. And on that point I would like to note that
just because the Internet originated in the US and its governance framework has
been historically dominated by US-based actors does not mean we should by
default turn to US law for contextual protections or principles. I would like
to respectfully suggest that European instruments such as the European
Convention on Human Rights, standards set by the European Union Data Protection
Directive, and Convention 108 of the Council of Europe might be helpful
starting points. These are not obscure laws or conventions which apply to no one: the EU population is over 500 million people, far greater than
that of the US.</font></div><div><font><br></font></div><div><font>I am not a
lawyer and I do not come at this topic with the same institutional knowledge
that others do have. I do not know all the details or decisions that have led
us to this point where, it would seem, the (political) cost to move away from
the current default is so very high. I say this to be clear, from the onset,
that I might well be misinformed or wrong about how we move forward in this
working group. However, it is my view that just because the Internet is by
nature cross-border does not mean that it should be treated as a self-governing
realm beyond the reach of national laws. WHOIS today, to me, seems to subvert
and/or undermine domestic norms and institutions in many territories worldwide.
I don’t want to get into the question of sovereignty online, but it would be
helpful to at least establish whether or not we believe ICANN should mandate through
its contracts with registrars that they comply with local legal regulations, or
whether we instead believe that market forces should be driving fundamental
decisions about the nature of the Internet.</font></div><div><font><br></font></div><div><font>You can probably
guess my position here, but I’d like to think we can reach some common ground. What
are we more concerned about – the rights of the data subject and controller, or
the rights of those who wish to monetise it? To come up with, like we have, a
list of something like 780 possible requirements for the RDS strikes me as a
recipe for disaster. It seems inevitable that we will accidentally impose huge
costs on some stakeholder groups – the unintended consequence of trying to achieve some
short-term policy goal not to do with any functional
imperative of the Internet itself, but to meet someone’s obscure interest. That’s
why I want to hammer down on what data is being collected, why it is being
used, and what are the implications for privacy before we proceed any further.<br></font></div><div><font><br></font></div><div><font>Just my $0.02.</font></div><div><font><br></font></div><div><font>- Ayden<em class="scribe-marker" style="display: none;"></em></font></div><div>
</div><div>
<p><br></p>
<div class="gmail_extra">
<p><br></p>
<div class="gmail_quote">
On Tue, Jun 14, 2016 10:51 PM, Susan Kawaguchi <span dir="ltr"> <a href="mailto:susank@fb.com" target="_blank">susank@fb.com</a></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<u></u>
<div>Hello All, </div>
<div><br>
</div>
<div>I have been thinking about the RDS discussion from this morning’s meeting and wanted to clarify my personal position (not as a vice chair of the WG) I think we will complicate our task if we initially limit the discussion to three of the charter questions
relating to users/purposes, privacy and data elements. Much thought went into drafting the charter and brainstorming how a WG should approach deliberations. </div>
<div><br>
</div>
<div>Users/Purposes</div>
<div>Privacy</div>
<div>Data elements</div>
<div>Access</div>
<div>Accuracy</div>
<div><br>
</div>
<div>All of the above are very interrelated and I can’t imagine that we can sufficiently discuss one or two without the others. </div>
<div><br>
</div>
<div>One other issue that comes to mind is that we must keep in mind PII data but we also have to be wary of creating requirements that convey data protection rights of individuals to commercial entities. For each of the topics above we need to address how
it would affect an individual or a commercial entity. </div>
<div><br>
</div>
<div>I think we should move forward with the original plan according to the Charter and discuss all 5 issues in the first pass. </div>
<div>
<div>
<div>Susan Kawaguchi</div>
<div>Domain Name Manager </div>
<div>Facebook Legal Dept. </div>
</div>
<div><br>
</div>
</div>
</blockquote>
</div>
</div>
</div><div>
</div><div><br></div><div class="mixmax_signature"><div>Ayden Férdeline</div><div><a href="https://community.icann.org/display/gnsosoi/Ayden+Férdeline+SOI" style="background-color: white;">Statement of Interest</a></div></div><img align="left" width="0" height="0" style="border:0; width:0px; height:0px;" src="https://app.mixmax.com/api/track/v2/1vsyCGVzYh9OioWpK/i02bj5SZulGblRmclZGQu5WYjlmI/icmcv5ibuF2YpB0Z31CckBXLzRmct82cudmI/icmcv5ibuF2YpB0Z31CckBXLzRmct82cudmI?sc=false" alt="">
<!--[if mso]></td></tr></table><![endif]-->
</td>
</tr>
</table>
</body>
</html>