<div>Hi,<br></div><div><br></div><div>I would suggest we consider the Court's verdict, given it has sought in this instance to unify disparate European laws on this subject. In this case the Court of Justice of the European Union <span style="line-height: 1.65em;">has found that the jurisdiction clauses which are routinely inserted into consumer contracts might well be irrelevant when deciding which Member State’s data protection laws apply. As you know, I am not a lawyer, but this is something that I imagine could impact our European registrars. Especially if, in the future, we talk about a gated access system that stores personally-identifiable data? Maybe this isn't for Phase 1 of our work plan, but I would respectfully submit that this is a ruling we do need to give consideration to.</span><br></div><div><br></div><div><span style="line-height: 1.65em;">Thanks,</span><br></div><div><br></div><div><span style="line-height: 1.65em;">Ayden </span><br></div><div class="protonmail_signature_block"><div><br></div></div><blockquote type="cite" class="protonmail_quote"><div>-------- Original Message --------<br></div><div>Subject: RE: [gnso-rds-pdp-wg] Additional Key Input for Phase 1 - VKI v Amazon EU Sárl judgement of CJEU<br></div><div>Local Time: August 16, 2016 3:13 PM<br></div><div>UTC Time: August 16, 2016 2:13 PM<br></div><div>From: vsheckler@riaa.com<br></div><div>To: icann@ferdeline.com,gnso-rds-pdp-wg@icann.org<br></div><div><br></div><div><br></div><div class="WordSection1"><p class="MsoNormal"><span style="color:rgb(31, 73, 125)" class="colour"><span style="font-family:Calibri, sans-serif" class="font"><span style="font-size:11pt" class="size">Please note that cases determining choice of law for internet related transactions across traditional territorial boundaries exist in several jurisdictions.
I believe it is out of scope for us to consider these, as to my knowledge, these cases are very fact specific.</span></span></span><br></p><p class="MsoNormal"><span style="color:rgb(31, 73, 125)" class="colour"><span style="font-family:Calibri, sans-serif" class="font"><span style="font-size:11pt" class="size"> </span></span></span><br></p><div><div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in"><p class="MsoNormal"><b><span style="font-family:Calibri, sans-serif" class="font"><span style="font-size:11pt" class="size">From:</span></span></b><span style="font-family:Calibri, sans-serif" class="font"><span style="font-size:11pt" class="size"> gnso-rds-pdp-wg-bounces@icann.org [mailto:gnso-rds-pdp-wg-bounces@icann.org]
<b>On Behalf Of </b>Ayden Férdeline<br>
<b>Sent:</b> Saturday, August 13, 2016 1:05 PM<br>
<b>To:</b> RDS PDP WG <gnso-rds-pdp-wg@icann.org><br>
<b>Subject:</b> [gnso-rds-pdp-wg] Additional Key Input for Phase 1 - VKI v Amazon EU Sárl judgement of CJEU</span></span></p></div></div><p class="MsoNormal"> <br></p><table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%"><tbody><tr><td valign="top" style="padding:0in 0in 0in 0in"><table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0"><tbody><tr><td valign="top" style="padding:0in 0in 0in 0in"><div><p class="MsoNormal"><span style="font-family:Calibri, sans-serif" class="font">Greetings all,</span><span style="font-family:Calibri, sans-serif" class="font"></span><br></p></div><div><p class="MsoNormal"><span style="font-family:Calibri, sans-serif" class="font"> </span><br></p></div><div><p class="MsoNormal"><span style="font-family:Calibri, sans-serif" class="font">I would like to introduce a new key input for your consideration and for Phase 1 of our work. </span><br></p></div><div><p class="MsoNormal"><span style="font-family:Calibri, sans-serif" class="font"> </span><br></p></div><div><p class="MsoNormal"><span style="font-family:Calibri, sans-serif" class="font">The Court of Justice of the European Union (CJEU) has recently
<a rel="noreferrer" href="http://curia.europa.eu/juris/document/document.jsf?text=&docid=182286&pageIndex=0&doclang=EN&mode=req&dir=&occ=first&part=1&cid=909782">
delivered a judgment</a> on the applicability of data protection laws in reference to VKI v Amazon EU Sárl (Case C-191/15). I have summarised the Court’s judgement below, as it may have a bearing on our work when we come to consider what data should be collected,
stored, and disclosed.</span><br></p></div><div><p class="MsoNormal"><span style="font-family:Calibri, sans-serif" class="font"> </span><br></p></div><div><p class="MsoNormal"><span style="font-family:Calibri, sans-serif" class="font">In this case, the defendant (Amazon) was established in Luxembourg. It maintained a website which was accessible to Austrian consumers and allowed persons in this territory to enter into electronic
sales contracts. However, Amazon has no registered office or employees in Austria. It also did not allow consumers to negotiate their sales contract – they could either accept it, or were asked to exit the website. Inside this contract, the terms permitted
Amazon to make use of data supplied by consumers and stated that Luxembourg law applied, despite the fact that the consumers themselves were not established in Luxembourg. The claimant (VKI) applied to the Austrian court for an injunction to prohibit the use
of these terms. The Austrian Supreme Court referred the case to the CJEU.</span><br></p></div><div><p class="MsoNormal"><span style="font-family:Calibri, sans-serif" class="font"> </span><br></p></div><div><p class="MsoNormal"><span style="font-family:Calibri, sans-serif" class="font">The CJEU held, among other things, that the fact that Amazon does not have an office or subsidiary in Austria does not preclude it from having an establishment there. Therefore the CJEU held
that it is for the national court to ascertain whether or not Amazon carries out the data processing in question in the context of the activities of an establishment situated in Austria or in Luxembourg or elsewhere. The CJEU also held that the choice of law
clause in Amazon’s contract was unfair, because under the Rome I Regulation, European consumers enjoy the protection of the mandatory provisions of the law which apply in the location where
<i>they</i> are established. Amazon was wrong to give consumers the impression that only the laws where Amazon is established apply.</span><br></p></div><div><p class="MsoNormal"><span style="font-family:Calibri, sans-serif" class="font"> </span><br></p></div><div><p class="MsoNormal"><span style="font-family:Calibri, sans-serif" class="font">You can read the entire judgement here (it is available in multiple languages, if more convenient):</span><br></p></div><div><p class="MsoNormal"><span style="font-family:Calibri, sans-serif" class="font"><a rel="noreferrer" href="http://curia.europa.eu/juris/document/document.jsf?text=&docid=182286&pageIndex=0&doclang=EN&mode=req&dir=&occ=first&part=1&cid=909782">http://curia.europa.eu/juris/document/document.jsf?text=&docid=182286&pageIndex=0&doclang=EN&mode=req&dir=&occ=first&part=1&cid=909782</a></span><span style="font-family:Calibri, sans-serif" class="font"></span><br></p></div><div><p class="MsoNormal"><span style="font-family:Calibri, sans-serif" class="font"> </span><br></p></div><div><p class="MsoNormal"><span style="font-family:Calibri, sans-serif" class="font">I am not a lawyer, but from my reading of this case it would appear to have some implications for domain name registrars and other parties doing business with European consumers. This would
be especially true for such entities registered themselves in the European Union.</span><br></p></div><div><p class="MsoNormal"><span style="font-family:Calibri, sans-serif" class="font"> </span><br></p></div><div><p class="MsoNormal"><span style="font-family:Calibri, sans-serif" class="font">Best wishes,</span><br></p></div><div><p class="MsoNormal"><span style="font-family:Calibri, sans-serif" class="font"> </span><br></p></div><div><p class="MsoNormal"><span style="font-family:Calibri, sans-serif" class="font">Ayden Férdeline</span><br></p></div></td></tr></tbody></table></td></tr></tbody></table><p class="MsoNormal"> <br></p></div></blockquote><div><br></div>