<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p><font size="+1"><font face="Lucida Grande">I agree, it could be
useful. Although one of the DP authorities (sadly I cannot
remember which one) did point out that it was not a given that
any ccTLD approach is necessarily legally correct. But the
point is, various among them have consulted their DPAs and
have a different approach than ICANN.</font></font></p>
<p><font size="+1"><font face="Lucida Grande">Stephanie<br>
</font></font></p>
<div class="moz-cite-prefix">On 2017-03-20 18:15, Deacon, Alex
wrote:<br>
</div>
<blockquote cite="mid:CD3CBDF4-CAED-4AEC-95AB-1F3704821616@mpaa.org"
type="cite">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Title" content="">
<meta name="Keywords" content="">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Courier New";
panose-1:2 7 3 9 2 2 5 2 4 4;}
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Lucida Grande";
panose-1:2 11 6 0 4 5 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman";}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman";}
span.EmailStyle20
{mso-style-type:personal;
font-family:Calibri;
color:windowtext;}
span.EmailStyle21
{mso-style-type:personal;
font-family:Calibri;
color:windowtext;}
span.EmailStyle22
{mso-style-type:personal;
font-family:Calibri;
color:#1F497D;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Courier;}
span.EmailStyle25
{mso-style-type:personal-reply;
font-family:Calibri;
color:windowtext;}
span.msoIns
{mso-style-type:export-only;
mso-style-name:"";
text-decoration:underline;
color:teal;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1004286180;
mso-list-type:hybrid;
mso-list-template-ids:-134857424 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style>
<div class="WordSection1">
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:Calibri">Hi,<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:Calibri"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:Calibri">I seem to
remember (through a haze of jetlag) a discussion regarding
getting input and thoughts from the ccTLD community –
especially those based in the EU. Id like to suggest we
pursue this. <o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:Calibri"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:Calibri">After an
informal chat with a European ccTLD operator during one of
the breaks it was clear their input (based on concrete
experience) would be quite useful. <o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:Calibri"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:Calibri">Alex<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:Calibri"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:Calibri"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:Calibri"><o:p> </o:p></span></p>
<div>
<div>
<p class="MsoNormal" style="margin-left:.5in">On 3/20/17,
12:12 PM, <<a moz-do-not-send="true"
href="mailto:gnso-rds-pdp-wg-bounces@icann.org">gnso-rds-pdp-wg-bounces@icann.org</a>
on behalf of
<a moz-do-not-send="true"
href="mailto:stephanie.perrin@mail.utoronto.ca">stephanie.perrin@mail.utoronto.ca</a>>
wrote:<o:p></o:p></p>
</div>
</div>
<div>
<p class="MsoNormal" style="margin-left:.5in"><o:p> </o:p></p>
</div>
<p style="margin-left:.5in"><span
style="font-size:13.5pt;font-family:"Lucida
Grande"">I agree with Scott, gated access was an early
agreement. It is worth noting that the data commissioners
have asked for this before. (Offhand I cannot remember which
documents, but I think it was a rhetorical question from
Buttarelli....they are aware of the tiered access that some
ccTLDs operate.)
</span><o:p></o:p></p>
<p style="margin-left:.5in"><span
style="font-size:13.5pt;font-family:"Lucida
Grande"">Regarding the numbers cited for COE's
convention 108, I would have to check the transcript, but I
recall the mention of over a hundred countries which have
based their data protection laws on the COE convention.
This number is different than countries who have ratified
the convention....Canada, for instance, relied on the
principles in both OECD Guidelines and Convention 108 for
our privacy legislation, but are only observers, and have
not signed on to the treaty. This is doubtless the case for
many other countries. The point here is that the basic
principles have been adopted in most data protection laws.</span><o:p></o:p></p>
<p style="margin-left:.5in"><span
style="font-size:13.5pt;font-family:"Lucida
Grande"">Many countries of course based their
legislation on the EU Directive 95/46 because they wanted to
be deemed adequate at the same time, but 95/46 also was
based on/congruent with COE 108. </span><o:p></o:p></p>
<p style="margin-left:.5in">Stephanie Perrin<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in"><o:p> </o:p></p>
<div>
<p class="MsoNormal" style="margin-left:.5in">On 2017-03-20
07:11, Hollenbeck, Scott via gnso-rds-pdp-wg wrote:<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal" style="margin-left:.5in"><b><span
style="font-size:11.0pt;font-family:Calibri">From:</span></b><span
style="font-size:11.0pt;font-family:Calibri">
<a moz-do-not-send="true"
href="mailto:gnso-rds-pdp-wg-bounces@icann.org">gnso-rds-pdp-wg-bounces@icann.org</a>
[<a moz-do-not-send="true"
href="mailto:gnso-rds-pdp-wg-bounces@icann.org">mailto:gnso-rds-pdp-wg-bounces@icann.org</a>]
<b>On Behalf Of </b>Gomes, Chuck via gnso-rds-pdp-wg<br>
<b>Sent:</b> Sunday, March 19, 2017 8:33 AM<br>
<b>To:</b> <a moz-do-not-send="true"
href="mailto:icann@ferdeline.com">icann@ferdeline.com</a>;
<a moz-do-not-send="true"
href="mailto:gnso-rds-pdp-wg@icann.org">
gnso-rds-pdp-wg@icann.org</a><br>
<b>Subject:</b> [EXTERNAL] Re: [gnso-rds-pdp-wg] My notes
from the discussion with the Data Protection Commissioners
on 13 March 2017</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in"> <o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in"><span
style="font-size:11.0pt;font-family:Calibri">Thank you
very much for doing this Ayden. I found it very helpful
and share a few personal comments here.</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in"><span
style="font-size:11.0pt;font-family:Calibri"> </span><o:p></o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none"><span
style="font-size:11.0pt;font-family:Calibri">“</span>Data
controllers should not fragment their policies depending on
the territory. (GB, JC)<span
style="font-size:11.0pt;font-family:Calibri">”</span><o:p></o:p></p>
<p class="MsoListParagraph"
style="margin-left:1.0in;text-indent:-.25in;mso-list:l0
level1 lfo2;text-autospace:none">
<!--[if !supportLists]--><span style="font-family:Symbol"><span
style="mso-list:Ignore">·<span style="font:7.0pt
"Times New Roman"">
</span></span></span><!--[endif]--><span
style="font-size:11.0pt;font-family:Calibri">While I do
not question that this point was made, I suspect that when
we get into the policy and implementation phases we will
likely encounter some issues where different jurisdictions
have conflicting requirements and we may have to localize
some requirements by jurisdiction. If I remember
correctly, I think the EWG addressed this and that RDAP
makes this possible to do from a technical point of view.</span><o:p></o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none"><span
style="font-size:11.0pt;font-family:Calibri"> </span><o:p></o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none"><span
style="font-size:11.0pt;font-family:Calibri">“</span>“The
major treaty on data protection is Convention 108. And
Convention 108 is open<o:p></o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none">for signature
to countries across the world. Uruguay has signed it.
Tunisia has signed<o:p></o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none">it. And another
ten countries are now observers. And it is that convention
[not the<o:p></o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none">European
Union’s GDPR] which has actually provided the standard with
which more<o:p></o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none">than another
100 countries around the world have followed.” (JC)<span
style="font-size:11.0pt;font-family:Calibri">”</span><o:p></o:p></p>
<p class="MsoListParagraph"
style="margin-left:1.0in;text-indent:-.25in;mso-list:l0
level1 lfo2;text-autospace:none">
<!--[if !supportLists]--><span style="font-family:Symbol"><span
style="mso-list:Ignore">·<span style="font:7.0pt
"Times New Roman"">
</span></span></span><!--[endif]--><span
style="font-size:11.0pt;font-family:Calibri">I could be
mistaken but I thought that there were over 50 countries
that signed on to Convention 108. Am I mistaken on that?</span><o:p></o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none"><span
style="font-size:11.0pt;font-family:Calibri;color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none"><span
style="font-size:11.0pt;font-family:Calibri;color:#1F497D">[SAH]
I found the list of signatories here, Chuck:
<a moz-do-not-send="true"
href="https://www.coe.int/en/web/conventions/full-list/-/conventions/treaty/108/signatures?p_auth=fz15vACH">https://www.coe.int/en/web/conventions/full-list/-/conventions/treaty/108/signatures?p_auth=fz15vACH</a></span><o:p></o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none"><span
style="font-size:11.0pt;font-family:Calibri;color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none"><span
style="font-size:11.0pt;font-family:Calibri;color:#1F497D">If
I’m counting correctly there are 47 countries identified
as states that have signed and ratified the convention.
Three others are identified as “Non-Members of Council of
Europe” who have ratified.</span><o:p></o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none"><span
style="font-size:11.0pt;font-family:Calibri"> </span><o:p></o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none"><span
style="font-size:11.0pt;font-family:Calibri">“</span>“Is
there any other less intrusive method compared to mandatory
publication that<o:p></o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none">would serve the
purpose of the WHOIS directories without all data being
directly<o:p></o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none">available
online to everybody?” (GB)<span
style="font-size:11.0pt;font-family:Calibri">”</span><o:p></o:p></p>
<p class="MsoListParagraph"
style="margin-left:1.0in;text-indent:-.25in;mso-list:l0
level1 lfo2;text-autospace:none">
<!--[if !supportLists]--><span style="font-family:Symbol"><span
style="mso-list:Ignore">·<span style="font:7.0pt
"Times New Roman"">
</span></span></span><!--[endif]--><span
style="font-size:11.0pt;font-family:Calibri">Isn’t this
essentially a conclusion that the EWG arrived at? I would
appreciate it if EWG members would comment on this.</span><o:p></o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none"><span
style="font-size:11.0pt;font-family:Calibri;color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none"><span
style="font-size:11.0pt;font-family:Calibri;color:#1F497D">[SAH]
This EWG member’s recollection is that we recommended
implementation of gated access to serve the purpose
“without all data being directly available online to
everybody”.</span><o:p></o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none"><span
style="font-size:11.0pt;font-family:Calibri;color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal"
style="margin-left:.5in;text-autospace:none"><span
style="font-size:11.0pt;font-family:Calibri;color:#1F497D">Scott</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in"><br>
<br>
<br>
<o:p></o:p></p>
<pre style="margin-left:.5in">_______________________________________________<o:p></o:p></pre>
<pre style="margin-left:.5in">gnso-rds-pdp-wg mailing list<o:p></o:p></pre>
<pre style="margin-left:.5in"><a moz-do-not-send="true" href="mailto:gnso-rds-pdp-wg@icann.org">gnso-rds-pdp-wg@icann.org</a><o:p></o:p></pre>
<pre style="margin-left:.5in"><a moz-do-not-send="true" href="https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg">https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg</a><o:p></o:p></pre>
</blockquote>
<p class="MsoNormal" style="margin-left:.5in"><br>
<br>
<o:p></o:p></p>
</div>
</blockquote>
<br>
</body>
</html>