<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p><font size="+1"><font face="Lucida Grande">I agree with Scott,
gated access was an early agreement. It is worth noting that
the data commissioners have asked for this before. (Offhand I
cannot remember which documents, but I think it was a
rhetorical question from Buttarelli....they are aware of the
tiered access that some ccTLDs operate.) <br>
</font></font></p>
<p><font size="+1"><font face="Lucida Grande">Regarding the numbers
cited for COE's convention 108, I would have to check the
transcript, but I recall the mention of over a hundred countries
which have based their data protection laws on the COE
convention. This number is different than countries who have
ratified the convention....Canada, for instance, relied on the
principles in both OECD Guidelines and Convention 108 for our
privacy legislation, but are only observers, and have not
signed on to the treaty. This is doubtless the case for many
other countries. The point here is that the basic principles
have been adopted in most data protection laws.</font></font></p>
<p><font size="+1"><font face="Lucida Grande">Many countries of
course based their legislation on the EU Directive 95/46 because
they wanted to be deemed adequate at the same time, but 95/46
also was based on/congruent with COE 108. </font></font></p>
<p>Stephanie Perrin<br>
</p>
<br>
<div class="moz-cite-prefix">On 2017-03-20 07:11, Hollenbeck, Scott
via gnso-rds-pdp-wg wrote:<br>
</div>
<blockquote
cite="mid:831693C2CDA2E849A7D7A712B24E257F56F58F0D@BRN1WNEXMBX02.vcorp.ad.vrsn.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
        {font-family:Wingdings;
        panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
        {font-family:"Cambria Math";
        panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
        {font-family:TimesNewRomanPSMT;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0in;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:blue;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:purple;
        text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
        {mso-style-priority:34;
        margin-top:0in;
        margin-right:0in;
        margin-bottom:0in;
        margin-left:.5in;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman",serif;}
p.msonormal0, li.msonormal0, div.msonormal0
        {mso-style-name:msonormal;
        mso-margin-top-alt:auto;
        margin-right:0in;
        mso-margin-bottom-alt:auto;
        margin-left:0in;
        font-size:12.0pt;
        font-family:"Times New Roman",serif;}
span.EmailStyle19
        {mso-style-type:personal;
        font-family:"Calibri",sans-serif;
        color:windowtext;}
span.EmailStyle20
        {mso-style-type:personal;
        font-family:"Calibri",sans-serif;
        color:windowtext;}
span.EmailStyle21
        {mso-style-type:personal-reply;
        font-family:"Calibri",sans-serif;
        color:#1F497D;}
.MsoChpDefault
        {mso-style-type:export-only;
        font-size:10.0pt;}
@page WordSection1
        {size:8.5in 11.0in;
        margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
        {page:WordSection1;}
/* List Definitions */
@list l0
        {mso-list-id:1004286180;
        mso-list-type:hybrid;
        mso-list-template-ids:-134857424 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l0:level1
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-.25in;
        font-family:Symbol;}
@list l0:level2
        {mso-level-number-format:bullet;
        mso-level-text:o;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-.25in;
        font-family:"Courier New";}
@list l0:level3
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-.25in;
        font-family:Wingdings;}
@list l0:level4
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-.25in;
        font-family:Symbol;}
@list l0:level5
        {mso-level-number-format:bullet;
        mso-level-text:o;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-.25in;
        font-family:"Courier New";}
@list l0:level6
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-.25in;
        font-family:Wingdings;}
@list l0:level7
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-.25in;
        font-family:Symbol;}
@list l0:level8
        {mso-level-number-format:bullet;
        mso-level-text:o;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-.25in;
        font-family:"Courier New";}
@list l0:level9
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-.25in;
        font-family:Wingdings;}
ol
        {margin-bottom:0in;}
ul
        {margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><b><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">
<a class="moz-txt-link-abbreviated" href="mailto:gnso-rds-pdp-wg-bounces@icann.org">gnso-rds-pdp-wg-bounces@icann.org</a>
[<a class="moz-txt-link-freetext" href="mailto:gnso-rds-pdp-wg-bounces@icann.org">mailto:gnso-rds-pdp-wg-bounces@icann.org</a>]
<b>On Behalf Of </b>Gomes, Chuck via gnso-rds-pdp-wg<br>
<b>Sent:</b> Sunday, March 19, 2017 8:33 AM<br>
<b>To:</b> <a class="moz-txt-link-abbreviated" href="mailto:icann@ferdeline.com">icann@ferdeline.com</a>; <a class="moz-txt-link-abbreviated" href="mailto:gnso-rds-pdp-wg@icann.org">gnso-rds-pdp-wg@icann.org</a><br>
<b>Subject:</b> [EXTERNAL] Re: [gnso-rds-pdp-wg] My notes
from the discussion with the Data Protection Commissioners
on 13 March 2017<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">Thank
you very much for doing this Ayden. I found it very helpful
and share a few personal comments here.<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">“</span><span
style="font-family:TimesNewRomanPSMT">Data controllers
should not fragment their policies depending on the
territory. (GB, JC)</span><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">”<o:p></o:p></span></p>
<p class="MsoListParagraph"
style="text-indent:-.25in;mso-list:l0 level1
lfo2;text-autospace:none">
<!--[if !supportLists]--><span
style="font-size:11.0pt;font-family:Symbol"><span
style="mso-list:Ignore">·<span style="font:7.0pt
"Times New Roman"">
</span></span></span><!--[endif]--><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">While
I do not question that this point was made, I suspect that
when we get into the policy and implementation phases we
will likely encounter some issues where different
jurisdictions have conflicting requirements and we may have
to localize some requirements by jurisdiction. If I
remember correctly, I think the EWG addressed this and that
RDAP makes this possible to do from a technical point of
view.<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">“</span><span
style="font-family:TimesNewRomanPSMT">“The major treaty on
data protection is Convention 108. And Convention 108 is
open<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span
style="font-family:TimesNewRomanPSMT">for signature to
countries across the world. Uruguay has signed it. Tunisia
has signed<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span
style="font-family:TimesNewRomanPSMT">it. And another ten
countries are now observers. And it is that convention [not
the<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span
style="font-family:TimesNewRomanPSMT">European Union’s GDPR]
which has actually provided the standard with which more<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span
style="font-family:TimesNewRomanPSMT">than another 100
countries around the world have followed.” (JC)</span><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">”<o:p></o:p></span></p>
<p class="MsoListParagraph"
style="text-indent:-.25in;mso-list:l0 level1
lfo2;text-autospace:none">
<!--[if !supportLists]--><span
style="font-size:11.0pt;font-family:Symbol"><span
style="mso-list:Ignore">·<span style="font:7.0pt
"Times New Roman"">
</span></span></span><!--[endif]--><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">I
could be mistaken but I thought that there were over 50
countries that signed on to Convention 108. Am I mistaken
on that?<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">[SAH]
I found the list of signatories here, Chuck:
<a moz-do-not-send="true"
href="https://www.coe.int/en/web/conventions/full-list/-/conventions/treaty/108/signatures?p_auth=fz15vACH">https://www.coe.int/en/web/conventions/full-list/-/conventions/treaty/108/signatures?p_auth=fz15vACH</a><o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">If
I’m counting correctly there are 47 countries identified as
states that have signed and ratified the convention. Three
others are identified as “Non-Members of Council of Europe”
who have ratified.<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">“</span><span
style="font-family:TimesNewRomanPSMT">“Is there any other
less intrusive method compared to mandatory publication that<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span
style="font-family:TimesNewRomanPSMT">would serve the
purpose of the WHOIS directories without all data being
directly<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span
style="font-family:TimesNewRomanPSMT">available online to
everybody?” (GB)</span><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">”<o:p></o:p></span></p>
<p class="MsoListParagraph"
style="text-indent:-.25in;mso-list:l0 level1
lfo2;text-autospace:none">
<!--[if !supportLists]--><span
style="font-size:11.0pt;font-family:Symbol"><span
style="mso-list:Ignore">·<span style="font:7.0pt
"Times New Roman"">
</span></span></span><!--[endif]--><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">Isn’t
this essentially a conclusion that the EWG arrived at? I
would appreciate it if EWG members would comment on this.<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">[SAH]
This EWG member’s recollection is that we recommended
implementation of gated access to serve the purpose “without
all data being directly available online to everybody”.<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Scott<o:p></o:p></span></p>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
gnso-rds-pdp-wg mailing list
<a class="moz-txt-link-abbreviated" href="mailto:gnso-rds-pdp-wg@icann.org">gnso-rds-pdp-wg@icann.org</a>
<a class="moz-txt-link-freetext" href="https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg">https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg</a></pre>
</blockquote>
<br>
</body>
</html>