<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p><font size="+1"><font face="Lucida Grande">Sorry John, I don't
think I understand the question. What do you mean by a *free*
option, do you mean if proxy services were free, would that
satisfy them? My answer to that question would be no, because
WHOIS is only one disclosure instrument. There are still
other issues that violate DP law, such as over-collection,
over-disclosure upon request, failure to describe the purpose
of processing, failure to explain subject access rights,
illegal data retention, problematic transfer of personal data
to jurisdictions which are not *adequate* according to
Directive 95/46, etc. Not to put words in their mouths or
anything....</font></font></p>
<p><font size="+1"><font face="Lucida Grande">We only got through 1
of our questions.</font></font></p>
<p><font size="+1"><font face="Lucida Grande">Stephanie</font></font><br>
</p>
<br>
<div class="moz-cite-prefix">On 2017-03-20 19:24, John Bambenek
wrote:<br>
</div>
<blockquote
cite="mid:5343FD39-074F-4A83-862B-02CA445B87CB@bambenekconsulting.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<div>Was a question asked of the data protection authorities if
whois privacy where a *free* option, would that satisfy them?<br>
<br>
Sent from my iPhone</div>
<div><br>
On Mar 20, 2017, at 18:20, Stephanie Perrin <<a
moz-do-not-send="true"
href="mailto:stephanie.perrin@mail.utoronto.ca">stephanie.perrin@mail.utoronto.ca</a>>
wrote:<br>
<br>
</div>
<blockquote type="cite">
<div>
<p><font size="+1"><font face="Lucida Grande">I agree, it
could be useful. Although one of the DP authorities
(sadly I cannot remember which one) did point out that
it was not a given that any ccTLD approach is
necessarily legally correct. But the point is, various
among them have consulted their DPAs and have a
different approach than ICANN.</font></font></p>
<p><font size="+1"><font face="Lucida Grande">Stephanie<br>
</font></font></p>
<div class="moz-cite-prefix">On 2017-03-20 18:15, Deacon, Alex
wrote:<br>
</div>
<blockquote
cite="mid:CD3CBDF4-CAED-4AEC-95AB-1F3704821616@mpaa.org"
type="cite">
<meta name="Title" content="">
<meta name="Keywords" content="">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Courier New";
panose-1:2 7 3 9 2 2 5 2 4 4;}
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Lucida Grande";
panose-1:2 11 6 0 4 5 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman";}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman";}
span.EmailStyle20
{mso-style-type:personal;
font-family:Calibri;
color:windowtext;}
span.EmailStyle21
{mso-style-type:personal;
font-family:Calibri;
color:windowtext;}
span.EmailStyle22
{mso-style-type:personal;
font-family:Calibri;
color:#1F497D;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Courier;}
span.EmailStyle25
{mso-style-type:personal-reply;
font-family:Calibri;
color:windowtext;}
span.msoIns
{mso-style-type:export-only;
mso-style-name:"";
text-decoration:underline;
color:teal;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1004286180;
mso-list-type:hybrid;
mso-list-template-ids:-134857424 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style>
<div class="WordSection1">
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:Calibri">Hi,<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:Calibri"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:Calibri">I seem to
remember (through a haze of jetlag) a discussion
regarding getting input and thoughts from the ccTLD
community – especially those based in the EU. Id
like to suggest we pursue this. <o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:Calibri"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:Calibri">After an
informal chat with a European ccTLD operator during
one of the breaks it was clear their input (based on
concrete experience) would be quite useful. <o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:Calibri"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:Calibri">Alex<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:Calibri"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:Calibri"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:Calibri"><o:p> </o:p></span></p>
<div>
<div>
<p class="MsoNormal" style="margin-left:.5in">On
3/20/17, 12:12 PM, <<a moz-do-not-send="true"
href="mailto:gnso-rds-pdp-wg-bounces@icann.org">gnso-rds-pdp-wg-bounces@icann.org</a>
on behalf of <a moz-do-not-send="true"
href="mailto:stephanie.perrin@mail.utoronto.ca">stephanie.perrin@mail.utoronto.ca</a>>
wrote:<o:p></o:p></p>
</div>
</div>
<div>
<p class="MsoNormal" style="margin-left:.5in"><o:p> </o:p></p>
</div>
<p style="margin-left:.5in"><span
style="font-size:13.5pt;font-family:"Lucida
Grande"">I agree with Scott, gated access was an
early agreement. It is worth noting that the data
commissioners have asked for this before. (Offhand I
cannot remember which documents, but I think it was a
rhetorical question from Buttarelli....they are aware
of the tiered access that some ccTLDs operate.) </span><o:p></o:p></p>
<p style="margin-left:.5in"><span
style="font-size:13.5pt;font-family:"Lucida
Grande"">Regarding the numbers cited for COE's
convention 108, I would have to check the transcript,
but I recall the mention of over a hundred countries
which have based their data protection laws on the COE
convention. This number is different than countries
who have ratified the convention....Canada, for
instance, relied on the principles in both OECD
Guidelines and Convention 108 for our privacy
legislation, but are only observers, and have not
signed on to the treaty. This is doubtless the case
for many other countries. The point here is that the
basic principles have been adopted in most data
protection laws.</span><o:p></o:p></p>
<p style="margin-left:.5in"><span
style="font-size:13.5pt;font-family:"Lucida
Grande"">Many countries of course based their
legislation on the EU Directive 95/46 because they
wanted to be deemed adequate at the same time, but
95/46 also was based on/congruent with COE 108. </span><o:p></o:p></p>
<p style="margin-left:.5in">Stephanie Perrin<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in"><o:p> </o:p></p>
<div>
<p class="MsoNormal" style="margin-left:.5in">On
2017-03-20 07:11, Hollenbeck, Scott via
gnso-rds-pdp-wg wrote:<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal" style="margin-left:.5in"><b><span
style="font-size:11.0pt;font-family:Calibri">From:</span></b><span
style="font-size:11.0pt;font-family:Calibri"> <a
moz-do-not-send="true"
href="mailto:gnso-rds-pdp-wg-bounces@icann.org">gnso-rds-pdp-wg-bounces@icann.org</a>
[<a moz-do-not-send="true"
href="mailto:gnso-rds-pdp-wg-bounces@icann.org">mailto:gnso-rds-pdp-wg-bounces@icann.org</a>]
<b>On Behalf Of </b>Gomes, Chuck via
gnso-rds-pdp-wg<br>
<b>Sent:</b> Sunday, March 19, 2017 8:33 AM<br>
<b>To:</b> <a moz-do-not-send="true"
href="mailto:icann@ferdeline.com">icann@ferdeline.com</a>;
<a moz-do-not-send="true"
href="mailto:gnso-rds-pdp-wg@icann.org">
gnso-rds-pdp-wg@icann.org</a><br>
<b>Subject:</b> [EXTERNAL] Re: [gnso-rds-pdp-wg] My
notes from the discussion with the Data Protection
Commissioners on 13 March 2017</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in"> <o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in"><span
style="font-size:11.0pt;font-family:Calibri">Thank
you very much for doing this Ayden. I found it very
helpful and share a few personal comments here.</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in"><span
style="font-size:11.0pt;font-family:Calibri"> </span><o:p></o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none"><span
style="font-size:11.0pt;font-family:Calibri">“</span>Data
controllers should not fragment their policies
depending on the territory. (GB, JC)<span
style="font-size:11.0pt;font-family:Calibri">”</span><o:p></o:p></p>
<p class="MsoListParagraph"
style="margin-left:1.0in;text-indent:-.25in;mso-list:l0
level1 lfo2;text-autospace:none">
<!--[if !supportLists]--><span
style="font-family:Symbol"><span
style="mso-list:Ignore">·<span style="font:7.0pt
"Times New Roman""> </span></span></span><!--[endif]--><span
style="font-size:11.0pt;font-family:Calibri">While I
do not question that this point was made, I suspect
that when we get into the policy and implementation
phases we will likely encounter some issues where
different jurisdictions have conflicting
requirements and we may have to localize some
requirements by jurisdiction. If I remember
correctly, I think the EWG addressed this and that
RDAP makes this possible to do from a technical
point of view.</span><o:p></o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none"><span
style="font-size:11.0pt;font-family:Calibri"> </span><o:p></o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none"><span
style="font-size:11.0pt;font-family:Calibri">“</span>“The
major treaty on data protection is Convention 108. And
Convention 108 is open<o:p></o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none">for
signature to countries across the world. Uruguay has
signed it. Tunisia has signed<o:p></o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none">it. And
another ten countries are now observers. And it is
that convention [not the<o:p></o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none">European
Union’s GDPR] which has actually provided the standard
with which more<o:p></o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none">than
another 100 countries around the world have followed.”
(JC)<span style="font-size:11.0pt;font-family:Calibri">”</span><o:p></o:p></p>
<p class="MsoListParagraph"
style="margin-left:1.0in;text-indent:-.25in;mso-list:l0
level1 lfo2;text-autospace:none">
<!--[if !supportLists]--><span
style="font-family:Symbol"><span
style="mso-list:Ignore">·<span style="font:7.0pt
"Times New Roman""> </span></span></span><!--[endif]--><span
style="font-size:11.0pt;font-family:Calibri">I could
be mistaken but I thought that there were over 50
countries that signed on to Convention 108. Am I
mistaken on that?</span><o:p></o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none"><span
style="font-size:11.0pt;font-family:Calibri;color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none"><span
style="font-size:11.0pt;font-family:Calibri;color:#1F497D">[SAH]
I found the list of signatories here, Chuck: <a
moz-do-not-send="true"
href="https://www.coe.int/en/web/conventions/full-list/-/conventions/treaty/108/signatures?p_auth=fz15vACH">https://www.coe.int/en/web/conventions/full-list/-/conventions/treaty/108/signatures?p_auth=fz15vACH</a></span><o:p></o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none"><span
style="font-size:11.0pt;font-family:Calibri;color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none"><span
style="font-size:11.0pt;font-family:Calibri;color:#1F497D">If
I’m counting correctly there are 47 countries
identified as states that have signed and ratified
the convention. Three others are identified as
“Non-Members of Council of Europe” who have
ratified.</span><o:p></o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none"><span
style="font-size:11.0pt;font-family:Calibri"> </span><o:p></o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none"><span
style="font-size:11.0pt;font-family:Calibri">“</span>“Is
there any other less intrusive method compared to
mandatory publication that<o:p></o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none">would
serve the purpose of the WHOIS directories without all
data being directly<o:p></o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none">available
online to everybody?” (GB)<span
style="font-size:11.0pt;font-family:Calibri">”</span><o:p></o:p></p>
<p class="MsoListParagraph"
style="margin-left:1.0in;text-indent:-.25in;mso-list:l0
level1 lfo2;text-autospace:none">
<!--[if !supportLists]--><span
style="font-family:Symbol"><span
style="mso-list:Ignore">·<span style="font:7.0pt
"Times New Roman""> </span></span></span><!--[endif]--><span
style="font-size:11.0pt;font-family:Calibri">Isn’t
this essentially a conclusion that the EWG arrived
at? I would appreciate it if EWG members would
comment on this.</span><o:p></o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none"><span
style="font-size:11.0pt;font-family:Calibri;color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none"><span
style="font-size:11.0pt;font-family:Calibri;color:#1F497D">[SAH]
This EWG member’s recollection is that we
recommended implementation of gated access to serve
the purpose “without all data being directly
available online to everybody”.</span><o:p></o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none"><span
style="font-size:11.0pt;font-family:Calibri;color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none"><span
style="font-size:11.0pt;font-family:Calibri;color:#1F497D">Scott</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in"><br>
<br>
<br>
<o:p></o:p></p>
<pre style="margin-left:.5in">_______________________________________________<o:p></o:p></pre>
<pre style="margin-left:.5in">gnso-rds-pdp-wg mailing list<o:p></o:p></pre>
<pre style="margin-left:.5in"><a moz-do-not-send="true" href="mailto:gnso-rds-pdp-wg@icann.org">gnso-rds-pdp-wg@icann.org</a><o:p></o:p></pre>
<pre style="margin-left:.5in"><a moz-do-not-send="true" href="https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg">https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg</a><o:p></o:p></pre>
</blockquote>
<p class="MsoNormal" style="margin-left:.5in"><br>
<br>
<o:p></o:p></p>
</div>
</blockquote>
<br>
</div>
</blockquote>
<blockquote type="cite">
<div><span>_______________________________________________</span><br>
<span>gnso-rds-pdp-wg mailing list</span><br>
<span><a moz-do-not-send="true"
href="mailto:gnso-rds-pdp-wg@icann.org">gnso-rds-pdp-wg@icann.org</a></span><br>
<span><a moz-do-not-send="true"
href="https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg">https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg</a></span></div>
</blockquote>
</blockquote>
<br>
</body>
</html>