<div dir="ltr">Dear Lisa,<div>Thanks once more for the update.</div><div><br></div><div>@All, yesterday was one of the most interesting meeting for me. I am really sure that It will make things clear for many of us as far as the poll is concern.</div><div><br></div><div>Have a nice week.</div></div><br><div class="gmail_quote"><div dir="ltr">Le mar. 7 févr. 2017 à 21:11, Ayden Férdeline <<a href="mailto:icann@ferdeline.com">icann@ferdeline.com</a>> a écrit :<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="gmail_msg">My sincere apologies for missing this call; I had overlooked it in my calendar. From the notes below it sounds like it was a very insightful session, so I look forward very much to listening to the recording.<br class="gmail_msg"><br class="gmail_msg">Best wishes,</div><div class="gmail_msg"><br class="gmail_msg"></div><div class="m_3036531514471877911protonmail_signature_block gmail_msg"><div class="m_3036531514471877911protonmail_signature_block-user gmail_msg"><div class="gmail_msg">Ayden Férdeline<br class="gmail_msg"></div><div class="gmail_msg"><a title="http://www.linkedin.com/in/ferdeline" href="http://www.linkedin.com/in/ferdeline" class="gmail_msg" target="_blank">linkedin.com/in/ferdeline</a><br class="gmail_msg"></div></div><div class="m_3036531514471877911protonmail_signature_block-proton m_3036531514471877911protonmail_signature_block-empty gmail_msg"><br class="gmail_msg"></div></div><div class="gmail_msg"><br class="gmail_msg"></div><blockquote type="cite" class="m_3036531514471877911protonmail_quote gmail_msg"><div class="gmail_msg">-------- Original Message --------<br class="gmail_msg"></div><div class="gmail_msg">Subject: [gnso-rds-pdp-wg] Notes from Next-Gen RDS PDP WG call on Tuesday, 7 February 2017<br class="gmail_msg"></div><div class="gmail_msg">Local Time: 7 February 2017 7:18 PM<br class="gmail_msg"></div><div class="gmail_msg">UTC Time: 7 February 2017 19:18<br class="gmail_msg"></div><div class="gmail_msg">From: <a href="mailto:lisa@corecom.com" class="gmail_msg" target="_blank">lisa@corecom.com</a><br class="gmail_msg"></div><div class="gmail_msg">To: <a href="mailto:gnso-rds-pdp-wg@icann.org" class="gmail_msg" target="_blank">gnso-rds-pdp-wg@icann.org</a><br class="gmail_msg"></div><div class="gmail_msg"><br class="gmail_msg"></div><div class="m_3036531514471877911WordSection1 gmail_msg"><p class="MsoNormal gmail_msg">Dear all,<br class="gmail_msg"></p><p class="MsoNormal gmail_msg"> <br class="gmail_msg"></p><p class="MsoNormal gmail_msg">Below please find notes from today’s RDS PDP WG call.<br class="gmail_msg"></p><p class="MsoNormal gmail_msg"> <br class="gmail_msg"></p><p class="MsoNormal gmail_msg">Best regards,<br class="gmail_msg"></p><p class="MsoNormal gmail_msg">Lisa<br class="gmail_msg"></p><p class="MsoNormal gmail_msg"> <br class="gmail_msg"></p><p class="m_3036531514471877911p4 gmail_msg" style="margin-right:0in;margin-left:0in;margin-bottom:0.0001pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"><span class="m_3036531514471877911highlight gmail_msg" style="background-color:white"><b class="gmail_msg"><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(51,51,51)"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Notes from Next-Gen RDS PDP WG call on Tuesday, 7 February 2017</span></span></span></b></span><br class="gmail_msg"></p><p class="m_3036531514471877911p4 gmail_msg" style="margin-right:0in;margin-left:0in;margin-bottom:0.0001pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"><span class="m_3036531514471877911highlight gmail_msg" style="background-color:white"><i class="gmail_msg"><span class="m_3036531514471877911highlight gmail_msg" style="background-color:white"><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(51,51,51)"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">These high-level notes are designed to help PDP WG members navigate through the content of the call and are not meant as a substitute for the transcript and/or recording. The MP3, transcript, and chat are provided separately and are posted on the wiki at</span></span></span></span></i><i class="gmail_msg"><span class="m_3036531514471877911highlight gmail_msg" style="background-color:white"><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(51,51,51)"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt"> <a href="https://community.icann.org/x/HIzRAw" class="gmail_msg" target="_blank"><i class="gmail_msg">https://community.icann.org/x/HIzRAw</i></a></span></span></span></span></i><i class="gmail_msg"><span class="m_3036531514471877911highlight gmail_msg" style="background-color:white"><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(51,51,51)"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt"></span></span></span></span></i></span><br class="gmail_msg"></p><p style="margin-right:0in;margin-left:0in;margin-bottom:0.0001pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial" class="gmail_msg"><span class="m_3036531514471877911highlight gmail_msg" style="background-color:white"><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(51,51,51)"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">1. Roll call / SOI</span></span></span></span><br class="gmail_msg"></p><ul type="disc" class="gmail_msg"><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Roll call will be taken from Adobe Connect</span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Please remind to update your SOIs as needed</span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Please remember to state your name before speaking as well as muting your microphone when not speaking</span></span><br class="gmail_msg"></li></ul><p style="margin-right:0in;margin-left:0in;margin-bottom:0.0001pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-variant-ligatures:normal;font-variant-caps:normal;text-align:start;word-spacing:0px" class="gmail_msg"><span class="m_3036531514471877911highlight gmail_msg" style="background-color:white"><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(51,51,51)"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">2. Intro to Data Protection principles that may apply to thin data collection</span></span></span></span><br class="gmail_msg"></p><p style="margin-right:0in;margin-left:0in;margin-bottom:0.0001pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-variant-ligatures:normal;font-variant-caps:normal;text-align:start;word-spacing:0px" class="gmail_msg"><span class="m_3036531514471877911highlight gmail_msg" style="background-color:white"><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(51,51,51)"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt"> a. Overview from Stephanie Perrin & Peter Kimpian</span></span></span></span><br class="gmail_msg"></p><p style="margin-right:0in;margin-left:22.5pt;margin-bottom:0.0001pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-variant-ligatures:normal;font-variant-caps:normal;text-align:start;word-spacing:0px" class="gmail_msg"><span class="m_3036531514471877911highlight gmail_msg" style="background-color:white"><u class="gmail_msg"><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(51,51,51)"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Presentation by Peter Kimpian</span></span></span></u><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(51,51,51)"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt"></span></span></span></span><br class="gmail_msg"></p><ul type="disc" class="gmail_msg"><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">See slides at<span class="m_3036531514471877911apple-converted-space gmail_msg"> </span><a href="https://community.icann.org/download/attachments/64064540/Kimpian_pdp_rds_2_2_17.pdf" class="gmail_msg" target="_blank"><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(59,115,175)">https://community.icann.org/download/attachments/64064540/Kimpian_pdp_rds_2_2_17.pdf</span></a></span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Right to privacy is a universal right, even if it is interpreted differently in different countries.</span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Individuals have to be in control of their personal data (the whole trail of data). Overarching principles: necessity, proportionality, purpose specification / purpose limitation.</span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">For data processing there has to be a legitimate aim/purpose. Lawful and fair means of data processing. Lawful = it has to be regulated and/or not forbidden by legislation.</span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Valid legal basis (law, consent, contract, vital interest of the individual). This concept is also present in other legal frameworks, not only the European one.</span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Data processing needs to be adequate, relevant and not excessive.</span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Data minimization principle: no processing of data for the sake of data, only for a purpose. During the processing, the data controller has the obligation to process the minimum amount of data that is fit for purpose.</span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">There are a number of exemptions (see slide 4). Always conditions to these exemptions. Need to establish criteria under which such exemptions are permissible.</span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Disclosure of data (slide 5) - same rules apply as for processing, however there is a third party that enters into the picture using the data for a secondary purpose.</span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Accountability (slide 6) - data controller is accountable for upholding data protection principles.</span></span><br class="gmail_msg"></li></ul><p style="margin-right:0in;margin-left:22.5pt;margin-bottom:0.0001pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-variant-ligatures:normal;font-variant-caps:normal;text-align:start;word-spacing:0px" class="gmail_msg"><span class="m_3036531514471877911highlight gmail_msg" style="background-color:white"><u class="gmail_msg"><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(51,51,51)"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Comments from Stephanie Perrin</span></span></span></u><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(51,51,51)"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt"></span></span></span></span><br class="gmail_msg"></p><ul type="disc" class="gmail_msg"><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">One of the basic principles of data protection law is that processing needs to be fair and lawful. </span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Fair = there need to be limits to the collection of PI. Collection needs to be focused on the purpose. Most common law countries, there has to be a legal mandate for a government department to collect data. This gets fuzzier in the private sector.</span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Private sector companies that are offering a service that is not mandatory, they can define what is relevant and gain consent. Notice and choice appears to have become the rule for Internet services, based on US practice.</span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">The restriction of collection of data to what is needed. Defining the purpose of collection is therefore fundamental.</span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">There are differences across countries with regards to data protection laws. and how some of these principles are applied. A good overview can be found here:<span class="m_3036531514471877911apple-converted-space gmail_msg"> </span><a href="https://papers.ssrn.com/sol3/papers.cfm?abstract_id=2603502" class="gmail_msg" target="_blank"><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(59,115,175)">https://papers.ssrn.com/sol3/papers.cfm?abstract_id=2603502</span></a>.</span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">What is the purpose of ICANN in gathering personal information?</span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Not arguing that potential uses are not appropriate or useful, but these potential uses for other purposes can be considered secondary use. This is not sufficient purpose for collection though.</span></span><br class="gmail_msg"></li></ul><p style="margin-right:0in;margin-left:0in;margin-bottom:0.0001pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-variant-ligatures:normal;font-variant-caps:normal;text-align:start;word-spacing:0px" class="gmail_msg"><span class="m_3036531514471877911highlight gmail_msg" style="background-color:white"><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(51,51,51)"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt"> b. Q&A</span></span></span></span><br class="gmail_msg"></p><ul type="disc" class="gmail_msg"><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Q: Is ICANN the "data controller" in our world? Or is it the registries/registrars? </span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">A: One view is that ICANN is the data controller, because it sets the RAA which defines collection, use and disclosure. Registrars and registries could be considered data processors WRT the data that ICANN tells them to collect and display, including all relevant policies. They are data controllers with respect to their own business operations, data they gather to sell other services for which ICANN does not set policy. So they are hybrid. It was pointed out that this issue was hotly debated during the EWG without reaching a conclusion.</span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">See Key Inputs section of wiki for A29 documents on concept of data controller and processor</span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">See also chat dialog regarding application of the terms "data controller" and "data processor" to WHOIS data</span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Q: What aspects of this apply to commercial entities? Would a commercial entity have the same right to privacy of their data as an individual data subject? </span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">A: No. Privacy is a human right, linked to human beings (natural persons). There are discussions about this but for now no, only applies to human beings.</span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Q: For example, see WHOIS for domain name<span class="m_3036531514471877911apple-converted-space gmail_msg"> </span><a href="http://facebook.hu/" class="gmail_msg" target="_blank"><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(59,115,175)">facebook.hu</span></a><span class="m_3036531514471877911apple-converted-space gmail_msg"> </span>- Has the Hungarian registry defined purposes for collecting this data? If so, could help us in our discussion for gTLDs. </span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">A: Don't know if they have done so, or if they are compliant.</span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Q: Do these privacy principles just apply to Personally Identifiable Information (PII) or other types of information? </span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">A: Yes - PII applies only to humans, and so human rights only apply to PII</span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Q: Re: exemptions for protecting the data subject or the rights and freedoms of others - How do these exemptions apply to and inform our work in the RDS PDP? </span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">A: Thousands of pages of case law of how courts have defined ways of striking a balance between contradicting rights. For example cases in Europe and also US - helpful but not absolute because future cases will also judge</span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Re: commercial v personal data, it varies by jurisdiction whether employees of a company are considered to have rights to personal data (e.g., business card carve out). In for instance Germany you have to seek consent from employees before you put their name on the Internet.</span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Q: A lot of the arguments that took place in the PPSAI PDP examined needs of small organizations w/r/t protecting the privacy of data. But are those "other" privacy rights that apply to small organizations or data protection rights? </span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">A: It depends - for example, volunteers may have data protection rights for their personal information.</span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">When it comes to ICANN and notice required of registrars to provide individuals when collecting registration data, do all registrars do this today? disclosure and obtaining consent ("a.k.a. notice and choice"?) is required under RAA 3.7.7.4 and 3.7.7.5. Registrars are required to "3.7.7.5 The Registered Name Holder shall consent to the data processing referred to in Subsection 3.7.7.4."</span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Comment: the requirement wasn't to inform about rights, but to provide information sufficient to obtain "specific and informed consent of the subscriber ... prior to the inclusion of his personal data into all kinds of public directories (traditional telephony, mobile telephony, electronic mail, electronic signatures etc.) used for reverse or multi-criteria searches." Article 29 WP 33 Opinion 5/2000</span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Q: Do we have a duty not to convey individual human rights to a commercial entity? </span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">A: Spectrum of organizations (large, small...) but we need to deal with this. Many ccTLDs make a distinction between individual and commercial registrations (e.g., CIRA) Practices vary across ccTLDs and the jurisdictions in which they operate. </span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">One view: Most ccTLD registries comply perfectly when it comes to personal data and data regulation/law in combination of whois output - at least in Europe</span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Q: In WHOIS today, there is no formal method of distinguishing fields that contain personal data from fields that do not. Do we need to consider flagging the fields that contain personal data? </span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">A: This certainly can be something this WG can consider when deliberating on policy or implementation guidance</span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Shouldn't we be using privacy by design with we enter our deliberations?</span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Q: Are there any of the "thin data" elements as we have discussed over the past few weeks considered PII? </span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">A: One view: a small subset of thin data may not be considered personally identifiable because there's no name, address, or phone number - but if the data is traceable back to the individual, it may be considered "personal data." For example, if a timestamp links to an action that links to an individual, it's personal data - which is not to say that it cannot be disclosed. Becoming more of an issue w IoT - for example, refrigerator reporting activity may be linked to an individual's actions. See also file cabinet example.</span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">"personal data" is a defined term in RAA "data about any identified or identifiable natural person." </span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">See meeting handout for example of a "thin" WHOIS record data elements</span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Sometimes depends on circumstance (e.g. IP address). European registries publish thin data and have gotten that vetted. Can this WG proceed without legal advice, whether reusing advice provided to thick data PDP or EWG, or seeking advice specific to this PDP</span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Possible source of inspiration: "The principles have been drafted against a background of economies with separate policies that draw distinctions between data. Despite differences, framework has been drafted to ... apply to personal information which is information that can be used to identify an individual, including information which would not be personal alone but can be used in that way" (refer to transcript)</span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Perhaps what we need to focus on is perhaps not whether data elements are personal data but rather look at each data element and decide whether it can be collected, whether it can be disclosed?</span></span><br class="gmail_msg"></li><li class="MsoNormal gmail_msg" style="color:#333333;background:white"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Do we also need to balance the value of having this data disclosed for identified purposes?</span></span><br class="gmail_msg"></li></ul><p style="margin-right:0in;margin-left:0in;margin-bottom:0.0001pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-variant-ligatures:normal;font-variant-caps:normal;text-align:start;word-spacing:0px" class="gmail_msg"><span class="m_3036531514471877911highlight gmail_msg" style="background-color:white"><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(51,51,51)"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt"> c. Update on planning for Copenhagen session with Data Commissioners</span></span></span></span><br class="gmail_msg"></p><p class="m_3036531514471877911MsoListParagraph gmail_msg" style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"><span class="m_3036531514471877911highlight gmail_msg" style="background-color:white"><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(51,51,51)"><span class="m_3036531514471877911font gmail_msg" style="font-family:Symbol"><span class="m_3036531514471877911size gmail_msg" style="font-size:10pt"><span class="gmail_msg">·<span class="m_3036531514471877911font gmail_msg" style="font-family:"Times New Roman""><span class="m_3036531514471877911size gmail_msg" style="font-size:7pt"> </span></span></span></span></span></span><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(51,51,51)"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Session is planned on 13 March in Copenhagen during which data protection commissioners will debate these topics. Objective to have a better understanding of how privacy principles are interpreted by authorities and legislators.</span></span></span></span><br class="gmail_msg"></p><p style="margin-right:0in;margin-left:0in;margin-bottom:0.0001pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-variant-ligatures:normal;font-variant-caps:normal;text-align:start;word-spacing:0px" class="gmail_msg"><span class="m_3036531514471877911highlight gmail_msg" style="background-color:white"><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(51,51,51)"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">3. Begin deliberation on the Privacy charter question, starting with the following: (see <a href="https://community.icann.org/download/attachments/64064540/7FebMeeting-PrivacyForThinData-Handout.pdf?version=1&modificationDate=1486398912000&api=v2" class="gmail_msg" target="_blank"><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(59,115,175)">meeting handout</span></a>)</span></span></span></span><br class="gmail_msg"></p><p class="m_3036531514471877911MsoListParagraph gmail_msg" style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"><span class="m_3036531514471877911highlight gmail_msg" style="background-color:white"><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(51,51,51)"><span class="m_3036531514471877911font gmail_msg" style="font-family:Symbol"><span class="m_3036531514471877911size gmail_msg" style="font-size:10pt"><span class="gmail_msg">·<span class="m_3036531514471877911font gmail_msg" style="font-family:"Times New Roman""><span class="m_3036531514471877911size gmail_msg" style="font-size:7pt"> </span></span></span></span></span></span><i class="gmail_msg"><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(51,51,51)"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Question 4.1 (revised): For thin data only -- Do existing gTLD registration directory services policies sufficiently address compliance with applicable data protection, privacy, and free speech laws about purpose? If not, what requirements might those laws place on RDS policies regarding purposes associated with thin data ?</span></span></span></i><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(51,51,51)"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt"></span></span></span></span><br class="gmail_msg"></p><p class="m_3036531514471877911MsoListParagraph gmail_msg" style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"><span class="m_3036531514471877911highlight gmail_msg" style="background-color:white"><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(51,51,51)"><span class="m_3036531514471877911font gmail_msg" style="font-family:Symbol"><span class="m_3036531514471877911size gmail_msg" style="font-size:10pt"><span class="gmail_msg">·<span class="m_3036531514471877911font gmail_msg" style="font-family:"Times New Roman""><span class="m_3036531514471877911size gmail_msg" style="font-size:7pt"> </span></span></span></span></span></span><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(51,51,51)"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">See comments made under agenda item 2: Q&A</span></span></span></span><br class="gmail_msg"></p><p style="margin-right:0in;margin-left:0in;margin-bottom:0.0001pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-variant-ligatures:normal;font-variant-caps:normal;text-align:start;word-spacing:0px" class="gmail_msg"><span class="m_3036531514471877911highlight gmail_msg" style="background-color:white"><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(51,51,51)"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">4. Information on planned dates for the RDS PDP WG meetings in Copenhagen:</span></span></span></span><br class="gmail_msg"></p><p class="m_3036531514471877911MsoListParagraph gmail_msg" style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"><span class="m_3036531514471877911highlight gmail_msg" style="background-color:white"><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(51,51,51)"><span class="m_3036531514471877911font gmail_msg" style="font-family:Symbol"><span class="m_3036531514471877911size gmail_msg" style="font-size:10pt"><span class="gmail_msg">·<span class="m_3036531514471877911font gmail_msg" style="font-family:"Times New Roman""><span class="m_3036531514471877911size gmail_msg" style="font-size:7pt"> </span></span></span></span></span></span><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(51,51,51)"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Saturday from 14.00 - 16.45 local time (main F2F) and</span></span></span></span><br class="gmail_msg"></p><p class="m_3036531514471877911MsoListParagraph gmail_msg" style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"><span class="m_3036531514471877911highlight gmail_msg" style="background-color:white"><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(51,51,51)"><span class="m_3036531514471877911font gmail_msg" style="font-family:Symbol"><span class="m_3036531514471877911size gmail_msg" style="font-size:10pt"><span class="gmail_msg">·<span class="m_3036531514471877911font gmail_msg" style="font-family:"Times New Roman""><span class="m_3036531514471877911size gmail_msg" style="font-size:7pt"> </span></span></span></span></span></span><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(51,51,51)"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Wednesday from 13.45 - 15.00 (secondary slot available)</span></span></span></span><br class="gmail_msg"></p><p class="m_3036531514471877911MsoListParagraph gmail_msg" style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"><span class="m_3036531514471877911highlight gmail_msg" style="background-color:white"><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(51,51,51)"><span class="m_3036531514471877911font gmail_msg" style="font-family:Symbol"><span class="m_3036531514471877911size gmail_msg" style="font-size:10pt"><span class="gmail_msg">·<span class="m_3036531514471877911font gmail_msg" style="font-family:"Times New Roman""><span class="m_3036531514471877911size gmail_msg" style="font-size:7pt"> </span></span></span></span></span></span><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(51,51,51)"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Remote participation will be available for those not being able to participate in person.</span></span></span></span><br class="gmail_msg"></p><p style="margin-right:0in;margin-left:0in;margin-bottom:0.0001pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-variant-ligatures:normal;font-variant-caps:normal;text-align:start;word-spacing:0px" class="gmail_msg"><span class="m_3036531514471877911highlight gmail_msg" style="background-color:white"><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(51,51,51)"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">5. Confirm action items and proposed decision points</span></span></span></span><br class="gmail_msg"></p><p style="margin-right:0in;margin-left:0in;margin-bottom:0.0001pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-variant-ligatures:normal;font-variant-caps:normal;text-align:start;word-spacing:0px" class="gmail_msg"><span class="m_3036531514471877911highlight gmail_msg" style="background-color:white"><b class="gmail_msg"><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(51,51,51)"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Action:</span></span></span></b><span class="m_3036531514471877911apple-converted-space gmail_msg"><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(51,51,51)"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt"> </span></span></span></span><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(51,51,51)"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Leadership team to review today's discussion and identify points (if any) for confirmation in a poll or else continued deliberation in next week's call.</span></span></span></span><br class="gmail_msg"></p><p style="margin-right:0in;margin-left:0in;margin-bottom:0.0001pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-variant-ligatures:normal;font-variant-caps:normal;text-align:start;word-spacing:0px" class="gmail_msg"><span class="m_3036531514471877911highlight gmail_msg" style="background-color:white"><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(51,51,51)"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">6. Confirm next meeting date: Tuesday 14 February 2017 at 17.00 UTC</span></span></span></span><br class="gmail_msg"></p><p class="m_3036531514471877911p4 gmail_msg" style="margin-right:0in;margin-left:0in;margin-bottom:0.0001pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-variant-ligatures:normal;font-variant-caps:normal;text-align:start;word-spacing:0px"><span class="m_3036531514471877911highlight gmail_msg" style="background-color:white"><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(51,51,51)"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt"> </span></span></span></span><br class="gmail_msg"></p><p style="margin:0in 0in 0.0001pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial" class="gmail_msg"><span class="m_3036531514471877911highlight gmail_msg" style="background-color:white"><b class="gmail_msg"><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(51,51,51)"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt">Meeting materials: <a href="https://community.icann.org/x/HIzRAw" class="gmail_msg" target="_blank"><span style="font-weight:normal" class="gmail_msg">https://community.icann.org/x/HIzRAw</span></a></span></span></span></b><b class="gmail_msg"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt"></span></span></b></span><br class="gmail_msg"></p><p style="margin:0in 0in 0.0001pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial" class="gmail_msg"><span class="m_3036531514471877911highlight gmail_msg" style="background-color:white"><b class="gmail_msg"><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(51,51,51)"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt"> </span></span></span></b></span><br class="gmail_msg"></p><p style="margin:0in 0in 0.0001pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial" class="gmail_msg"><span class="m_3036531514471877911highlight gmail_msg" style="background-color:white"><span class="m_3036531514471877911colour gmail_msg" style="color:rgb(51,51,51)"><span class="m_3036531514471877911font gmail_msg" style="font-family:Arial,sans-serif"><span class="m_3036531514471877911size gmail_msg" style="font-size:10.5pt"> </span></span></span></span><br class="gmail_msg"></p><p class="MsoNormal gmail_msg"> <br class="gmail_msg"></p></div></blockquote><div class="gmail_msg"><br class="gmail_msg"></div>_______________________________________________<br class="gmail_msg">
gnso-rds-pdp-wg mailing list<br class="gmail_msg">
<a href="mailto:gnso-rds-pdp-wg@icann.org" class="gmail_msg" target="_blank">gnso-rds-pdp-wg@icann.org</a><br class="gmail_msg">
<a href="https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg" rel="noreferrer" class="gmail_msg" target="_blank">https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg</a></blockquote></div><div dir="ltr">-- <br></div><div data-smartmail="gmail_signature"><div dir="ltr">Regards<div><div>@__f_f__</div><div><br></div><div>PhD Candidate, Universität der Bundeswehr München</div><div>Computer Security | Internet of Things</div><div><a href="http://about.me/farell">about.me/farell</a></div></div></div></div>