<html><body><div style="font-family: Arial; font-size: 12pt; color: #000000"><div>For the sake of me actually getting to bed.<br></div><div><br data-mce-bogus="1"></div><div>A request was made for how thin data could be abused - I provided a perfectly logical way of doing it. The same could be done for thick data too.<br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div>No one on this list can put hand on heart and say with 100% certainty that no personal email address could be gained in this manner.<br data-mce-bogus="1"></div><div><br></div><div>If the group does not want someone to sit there and think outside the box on how it could be abused - then simply don't ask. I actually applaud the person who did ask (think it was Allison (probably spelt wrong)) as these are the types of questions that need to be asked - so that we can work on a totally informed solution.<br data-mce-bogus="1"></div><div><br></div><div data-marker="__SIG_PRE__">Kind regards,<br><br>Chris</div><div><br></div><hr id="zwchr" data-marker="__DIVIDER__"><div data-marker="__HEADERS__"><b>From: </b>"John Horton" <john.horton@legitscript.com><br><b>To: </b>"Chris Pelling" <chris@netearth.net><br><b>Cc: </b>"Paul Keating" <paul@law.es>, "gnso-rds-pdp-wg" <gnso-rds-pdp-wg@icann.org><br><b>Sent: </b>Tuesday, 30 May, 2017 22:59:03<br><b>Subject: </b>Re: [gnso-rds-pdp-wg] Principle on Proportionality for "Thin Data"access<br></div><div><br></div><div data-marker="__QUOTED_TEXT__"><div dir="ltr" style=""><div class="gmail_default" style="font-family: arial,helvetica,sans-serif; color: rgb(68, 68, 68);">​Thanks, Chris -- interesting example. But while the Whois email in thick data is, by definition, intended to identify the registrant (i.e., it has that direct relationship with the domain name), the SOA email isn't necessarily the website operator or registrant -- it can be a third party entirely and often has no relationship with the website operator / domain name registrant aside from the name server itself. (Otherwise, some guy named Joseph Maxwell sure has a lot of GoDaddy names.) I could also take that logic further and say that by identifying a registrar in the thin data, someone could go to <a href="http://internic.net" target="_blank" style="">internic.net</a> and -- for the smaller registrars especially -- get someone's identity and email that way. </div></div><div class="gmail_extra" style=""><br style="" clear="all"><div style=""><div class="gmail_signature" style=""><div dir="ltr" style=""><div style=""><div dir="ltr" style=""><div style=""><div dir="ltr" style=""><div style=""><div dir="ltr" style=""><div style=""><div dir="ltr" style=""><div style=""><div dir="ltr" style=""><div style=""><div dir="ltr" style=""><div style=""><div dir="ltr" style=""><div style=""><div dir="ltr" style=""><div style=""><div dir="ltr" style=""><div style=""><div dir="ltr" style=""><span data-mce-style="color: #073763; font-family: arial,helvetica,sans-serif;" style="color: #073763; font-family: arial,helvetica,sans-serif;" face="arial, helvetica, sans-serif" color="#073763">John Horton<br style="">President and CEO, LegitScript</span><div style=""><img style="" src="https://docs.google.com/uc?export=download&id=0B13GfLt8zwZJRXE5UTAtclVxdTg&revid=0B13GfLt8zwZJSG9zOUVwN1lFKzFrRVlnaWU0NGZ4RmdkUjg4PQ" saveddisplaymode="" width="96" height="36"><br style=""><div style=""><div style=""><p style="margin: 0px; font: 12px helvetica;"><br style=""></p><p style="margin: 0px; font-style: normal; font-variant: normal; font-size: 12px; line-height: normal; font-family: helvetica;"><b style=""><span data-mce-style="color: #444444;" style="color: #444444;" color="#444444">Follow</span><span data-mce-style="color: #0b5394;" style="color: #0b5394;" color="#0b5394"> </span><span data-mce-style="color: #000000;" style="color: #000000;" color="#000000">Legit</span><span data-mce-style="color: #0b5394;" style="color: #0b5394;" color="#0b5394">Script</span></b>: <a href="http://www.linkedin.com/company/legitscript-com" style="font-weight: normal;" target="_blank"><span data-mce-style="color: #cc0000;" style="color: #cc0000;" color="#cc0000">LinkedIn</span></a> | <a href="https://www.facebook.com/LegitScript" style="font-weight: normal;" target="_blank"><span data-mce-style="color: #6aa84f;" style="color: #6aa84f;" color="#6aa84f">Facebook</span></a> | <a href="https://twitter.com/legitscript" style="font-weight: normal;" target="_blank"><span data-mce-style="color: #674ea7;" style="color: #674ea7;" color="#674ea7">Twitter</span></a> | <span data-mce-style="color: #ff9900;" style="color: #ff9900;" color="#ff9900"><span data-mce-style="text-decoration: underline;" style="text-decoration: underline;"><a href="http://blog.legitscript.com" target="_blank" style="">Blog</a></span></span> |<span data-mce-style="color: #ff9900;" style="color: #ff9900;" color="#ff9900"> <span data-mce-style="font-weight: normal;" style="font-weight: normal;"><a href="https://plus.google.com/112436813474708014933/posts" target="_blank" style="">Google+</a></span></span><br data-mce-bogus="1"></p><p style="margin: 0px; font-style: normal; font-variant: normal; font-size: 12px; line-height: normal; font-family: helvetica;"><span data-mce-style="color: #ff9900;" style="color: #ff9900;" color="#ff9900"><br style=""></span></p><p style="text-align: left; margin: 0px; font-style: normal; font-variant: normal; font-size: 12px; line-height: normal; font-family: helvetica;"><span data-mce-style="color: #ff9900;" style="color: #ff9900;" color="#ff9900"><img style="" src="https://www.legitscript.com/wp-content/uploads/2015/09/LegitScript-Workplace.png" saveddisplaymode="" width="46" height="96"><img style="" src="https://docs.google.com/uc?export=download&id=0B13GfLt8zwZJTmNWbmcwOTVJMXc&revid=0B13GfLt8zwZJQlZWOXVGbG9acC9nRGhzdEkxclFJVytCWVNjPQ" saveddisplaymode="" width="47" height="96"><br style=""></span></p></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div>
<br style=""><div class="gmail_quote" style="">On Tue, May 30, 2017 at 2:47 PM, Chris Pelling <span dir="ltr" style=""><<a href="mailto:chris@netearth.net" target="_blank" style="">chris@netearth.net</a>></span> wrote:<br style=""><blockquote class="gmail_quote" style="margin: 0px 0px 0px 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"><div style=""><div style="font-family: arial; font-size: 12pt; color: rgb(0, 0, 0);"><div style="">As I said Paul - some people do the DNS management themselves and therefore it <u><strong style="">could</strong></u> hold registrant/personal email address. You can argue about it as much as you want, but you cannot say with 100% certainty it doesn't.<br style=""></div><div style=""><br style=""></div><div style="">An example was asked for - I gave it. Your comment does make me chuckle :- "The fact that i could use the data to obtain other data is irrelevant. I can use a car to rob a bank but that itself is not a reason to restrict access to automobiles." - no it doesn't but both points are dishonest.<br style=""></div><div style=""><br style=""></div><div style="">The THIN data could be used for all sorts of analytics as well, for example knowing how many domains (if you are scraping THIN data) a set of DNS servers may hold - you will probably never know the exact numbers, but it is still data.<br style=""></div><div style=""><br style=""></div><div style="">And as for "Me thinks you are trying to create a scarcity for some reason." - No, somebody on the group asked for an example - I gave it - end of.<br style=""></div><div style=""><br style=""></div><div style="">Kind regards,<br style=""><br style="">Chris</div><div style=""><br style=""></div><hr id="m_-4808565337528056318zwchr" style=""><div style=""><b style="">From: </b>"Paul Keating" <<a href="mailto:paul@law.es" target="_blank" style="">paul@law.es</a>><br style=""><b style="">To: </b>"Chris Pelling" <<a href="mailto:chris@netearth.net" target="_blank" style="">chris@netearth.net</a>><br style=""><b style="">Cc: </b>"allison nixon" <<a href="mailto:elsakoo@gmail.com" target="_blank" style="">elsakoo@gmail.com</a>>, "gnso-rds-pdp-wg" <<a href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank" style="">gnso-rds-pdp-wg@icann.org</a>><br style=""><b style="">Sent: </b>Tuesday, 30 May, 2017 22:40:16<div style=""><div class="h5" style=""><br style=""><b style="">Subject: </b>Re: [gnso-rds-pdp-wg] Principle on Proportionality for "Thin Data"access<br style=""></div></div></div><div style=""><div class="h5" style=""><div style=""><br style=""></div><div style=""><div style="">Im sorry but i don't see the logic here (or the legal constraint)</div><div id="m_-4808565337528056318AppleMailSignature" style=""><br style=""></div><div id="m_-4808565337528056318AppleMailSignature" style="">Privacy laws protect personal data of INDIVIDUALS. They do t protect non-personal data or data from non-individuals.</div><div id="m_-4808565337528056318AppleMailSignature" style=""><br style=""></div><div id="m_-4808565337528056318AppleMailSignature" style="">Nothing on the list below is personal data. And no e of the principles given by Natalie apply.</div><div id="m_-4808565337528056318AppleMailSignature" style=""><br style=""></div><div id="m_-4808565337528056318AppleMailSignature" style="">The fact that i could use the data to obtain other data is irrelevant. I can use a car to rob a bank but that itself is not a reason to restrict access to automobiles.</div><div id="m_-4808565337528056318AppleMailSignature" style=""><br style=""></div><div id="m_-4808565337528056318AppleMailSignature" style="">Me thinks you are trying to create a scarcity for some reason.<br style=""><br style="">Sent from my iPad</div><div style=""><br style="">On 30 May 2017, at 23:22, Chris Pelling <<a href="mailto:chris@netearth.net" target="_blank" style="">chris@netearth.net</a>> wrote:<br style=""><br style=""></div><blockquote style=""><div style=""><div style="font-family: arial; font-size: 12pt; color: rgb(0, 0, 0);"><div style="">ok - a thought :<br style=""></div><br style=""><div style="">Thin data includes nameservers, being able to <strong style=""><span style="text-decoration: underline;">mass</span></strong> collect thin data gaining NS information then allows you to do a DIG of a SOA record on the DNS service to gain the email address of the hostmaster : <br style=""></div><br style=""><div style="">Some examples (radomly picked from the list) :<br style=""></div><div style=""><a href="http://gmail.com" target="_blank" style="">gmail.com</a> :<br style=""></div><div style="">SOA <a href="http://ns1.google.com" target="_blank" style="">ns1.google.com</a>. <a href="http://dns-admin.google.com" target="_blank" style="">dns-admin.google.com</a>. 157458041 900 900 1800 60<br style=""><a href="http://netearthone.com" target="_blank" style="">netearthone.com</a><br style=""></div><div style="">SOA <a href="http://ns1.netearth.net" target="_blank" style="">ns1.netearth.net</a>. <a href="http://root.netearthone.com" target="_blank" style="">root.netearthone.com</a>. <a href="tel:(201)%20609-0201" target="_blank" style="">2016090201</a> 14400 3600 1209600 86400<br style=""></div><div style=""><a href="http://law.es" target="_blank" style="">law.es</a><br style=""></div><div style="">SOA <a href="http://ns1.eurodns.com" target="_blank" style="">ns1.eurodns.com</a>. <a href="http://hostmaster.eurodns.com" target="_blank" style="">hostmaster.eurodns.com</a>. <a href="tel:(201)%20606-1402" target="_blank" style="">2016061402</a> 43200 7200 1209600 86400<br style=""></div><div style=""><a href="http://riskiq.net" target="_blank" style="">riskiq.net</a><br style=""></div><div style="">SOA <a href="http://ns-1754.awsdns-27.co.uk" target="_blank" style="">ns-1754.awsdns-27.co.uk</a>. <a href="http://awsdns-hostmaster.amazon.com" target="_blank" style="">awsdns-hostmaster.amazon.com</a>. 1 7200 900 1209600 86400<br style=""></div><br style=""><div style="">Now as you can see - those above examples allow you to get (or build) an email list. Most will normally point to the providers service, but, some that are DIY'ing their hosting, it might not be.<br style=""></div><br style=""><div style="">Kind regards,<br style=""><br style="">Chris</div><br style=""><hr id="m_-4808565337528056318zwchr" style=""><div style=""><b style="">From: </b>"allison nixon" <<a href="mailto:elsakoo@gmail.com" target="_blank" style="">elsakoo@gmail.com</a>><br style=""><b style="">To: </b>"nathalie coupet" <<a href="mailto:nathaliecoupet@yahoo.com" target="_blank" style="">nathaliecoupet@yahoo.com</a>><br style=""><b style="">Cc: </b>"gnso-rds-pdp-wg" <<a href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank" style="">gnso-rds-pdp-wg@icann.org</a>><br style=""><b style="">Sent: </b>Tuesday, 30 May, 2017 21:52:32<br style=""><b style="">Subject: </b>Re: [gnso-rds-pdp-wg] Principle on Proportionality for "Thin Data"access<br style=""></div><br style=""><div style=""><div dir="ltr" style="">so can you name one specific example of how someone could abuse thin data?</div><div class="gmail_extra" style=""><br style=""><div class="gmail_quote" style="">On Tue, May 30, 2017 at 4:50 PM, nathalie coupet via gnso-rds-pdp-wg <span dir="ltr" style=""><<a href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank" style="">gnso-rds-pdp-wg@icann.org</a>></span> wrote:<br style=""><blockquote class="gmail_quote" style="margin: 0px 0px 0px 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"><div style=""><div style="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); font-family: helvetica neue,helvetica,arial,lucida grande,sans-serif; font-size: 13px;"><div id="m_-4808565337528056318m_-1108286820301507687yui_3_16_0_ym19_1_1496151286812_287437" dir="ltr" style=""><b style="color: rgb(34, 34, 34); font-family: sans-serif; font-size: 14px;" id="m_-4808565337528056318m_-1108286820301507687yui_3_16_0_ym19_1_1496151286812_287679">Abuse</b><span style="color: rgb(34, 34, 34); font-family: sans-serif; font-size: 14px;" id="m_-4808565337528056318m_-1108286820301507687yui_3_16_0_ym19_1_1496151286812_287680"> is the improper usage or treatment of an </span><a href="https://en.wikipedia.org/wiki/Entity" title="Entity" style="text-decoration-line: none; color: rgb(11, 0, 128); background-image: none; background-color: rgb(255, 255, 255); font-family: sans-serif; font-size: 14px;" id="m_-4808565337528056318m_-1108286820301507687yui_3_16_0_ym19_1_1496151286812_287681" target="_blank">entity</a><span style="color: rgb(34, 34, 34); font-family: sans-serif; font-size: 14px;" id="m_-4808565337528056318m_-1108286820301507687yui_3_16_0_ym19_1_1496151286812_287682">, often to </span><a href="https://en.wikipedia.org/wiki/Distributive_justice" title="Distributive justice" style="text-decoration-line: none; color: rgb(11, 0, 128); background-image: none; background-color: rgb(255, 255, 255); font-family: sans-serif; font-size: 14px;" id="m_-4808565337528056318m_-1108286820301507687yui_3_16_0_ym19_1_1496151286812_287683" target="_blank">unfairly</a><span style="color: rgb(34, 34, 34); font-family: sans-serif; font-size: 14px;" id="m_-4808565337528056318m_-1108286820301507687yui_3_16_0_ym19_1_1496151286812_287684"> or improperly gain benefit. In our context, abuse is the improper usage of WHOIS/RDS to unfairly or improperly gain access to information or to game the system. </span></div><div id="m_-4808565337528056318m_-1108286820301507687yui_3_16_0_ym19_1_1496151286812_287437" dir="ltr" style=""><span style="color: rgb(34, 34, 34); font-family: sans-serif; font-size: 14px;"><br style=""></span></div><div id="m_-4808565337528056318m_-1108286820301507687yui_3_16_0_ym19_1_1496151286812_287437" dir="ltr" style=""><span style="color: rgb(34, 34, 34); font-family: sans-serif; font-size: 14px;">Here are some of the overarching principles which should guide us when building RDS: </span><br style=""></div><div id="m_-4808565337528056318m_-1108286820301507687yui_3_16_0_ym19_1_1496151286812_287437" dir="ltr" style=""><span style="color: rgb(34, 34, 34); font-family: sans-serif; font-size: 14px;"><br style=""></span></div><div dir="ltr" id="m_-4808565337528056318m_-1108286820301507687yui_3_16_0_ym19_1_1496151286812_287894" style=""><span id="m_-4808565337528056318m_-1108286820301507687yui_3_16_0_ym19_1_1496151286812_287895" style="color: rgb(34, 34, 34); font-family: sans-serif;"><span style="font-size: 14px;" id="m_-4808565337528056318m_-1108286820301507687yui_3_16_0_ym19_1_1496151286812_287896">DATA LIFECYCLE PRIVACY PRINCIPLE PROTECTION MEASURE</span></span></div><div dir="ltr" id="m_-4808565337528056318m_-1108286820301507687yui_3_16_0_ym19_1_1496151286812_287897" style=""><span id="m_-4808565337528056318m_-1108286820301507687yui_3_16_0_ym19_1_1496151286812_287898" style="color: rgb(34, 34, 34); font-family: sans-serif;"><span style="font-size: 14px;" id="m_-4808565337528056318m_-1108286820301507687yui_3_16_0_ym19_1_1496151286812_287899">Collection Proportionality and purpose specification Data minimisation, Data quality</span></span></div><div dir="ltr" id="m_-4808565337528056318m_-1108286820301507687yui_3_16_0_ym19_1_1496151286812_287900" style=""><span id="m_-4808565337528056318m_-1108286820301507687yui_3_16_0_ym19_1_1496151286812_287901" style="color: rgb(34, 34, 34); font-family: sans-serif;"><span style="font-size: 14px;" id="m_-4808565337528056318m_-1108286820301507687yui_3_16_0_ym19_1_1496151286812_287902">Storage Accountability, Security measures, Sensitive data Confidentiality, Encryption, Pseudonomisation</span></span></div><div dir="ltr" id="m_-4808565337528056318m_-1108286820301507687yui_3_16_0_ym19_1_1496151286812_287903" style=""><span id="m_-4808565337528056318m_-1108286820301507687yui_3_16_0_ym19_1_1496151286812_287904" style="color: rgb(34, 34, 34); font-family: sans-serif;"><span style="font-size: 14px;" id="m_-4808565337528056318m_-1108286820301507687yui_3_16_0_ym19_1_1496151286812_287905">Sharing and processing Lawfulness and fairness, Consent, Right of access Data access control, Data leakage prevention</span></span></div><div dir="ltr" id="m_-4808565337528056318m_-1108286820301507687yui_3_16_0_ym19_1_1496151286812_287906" style=""><span id="m_-4808565337528056318m_-1108286820301507687yui_3_16_0_ym19_1_1496151286812_287907" style="color: rgb(34, 34, 34); font-family: sans-serif;"><span style="font-size: 14px;" id="m_-4808565337528056318m_-1108286820301507687yui_3_16_0_ym19_1_1496151286812_287908">Deletion Openness, Right to erasure Retention, Archival, Erasure</span></span></div><div dir="ltr" id="m_-4808565337528056318m_-1108286820301507687yui_3_16_0_ym19_1_1496151286812_287906" style=""><span style="color: rgb(34, 34, 34); font-family: sans-serif;"><span style="font-size: 14px;"><br style=""></span></span></div><div dir="ltr" id="m_-4808565337528056318m_-1108286820301507687yui_3_16_0_ym19_1_1496151286812_287906" style=""><span style="color: rgb(34, 34, 34); font-family: sans-serif;"><span style="font-size: 14px;"><br style=""></span></span></div><div dir="ltr" id="m_-4808565337528056318m_-1108286820301507687yui_3_16_0_ym19_1_1496151286812_287906" style=""><span id="m_-4808565337528056318m_-1108286820301507687yui_3_16_0_ym19_1_1496151286812_291686" style="color: rgb(34, 34, 34); font-family: sans-serif;"><span style="font-size: 14px;" id="m_-4808565337528056318m_-1108286820301507687yui_3_16_0_ym19_1_1496151286812_291685">If such principles are not respected, ICANN will be liable. Consumers don't need to have all the thin data when making a query. This could protect them and enable them to have access to the RDS without raising much opposition. </span></span></div><div dir="ltr" id="m_-4808565337528056318m_-1108286820301507687yui_3_16_0_ym19_1_1496151286812_287906" style=""><span style="color: rgb(34, 34, 34); font-family: sans-serif;"><span style="font-size: 14px;"><br style=""></span></span></div><div dir="ltr" id="m_-4808565337528056318m_-1108286820301507687yui_3_16_0_ym19_1_1496151286812_287906" style=""><span id="m_-4808565337528056318m_-1108286820301507687yui_3_16_0_ym19_1_1496151286812_292975" style="color: rgb(34, 34, 34); font-family: sans-serif;"><span style="font-size: 14px;" id="m_-4808565337528056318m_-1108286820301507687yui_3_16_0_ym19_1_1496151286812_292974">Now, we could discuss the possibility for broader query types. These principles would still apply, but would be contextualized in order to take into account new sets of parameters for each broader query. By increasing granularity as much as possible, while applying these aformentioned principles, we just might find a way to accomodate everyone. </span></span></div><div id="m_-4808565337528056318m_-1108286820301507687yui_3_16_0_ym19_1_1496151286812_287437" style=""><span style=""><br style=""></span></div><div id="m_-4808565337528056318m_-1108286820301507687yui_3_16_0_ym19_1_1496151286812_287437" style=""><span style=""><br style=""></span></div><div id="m_-4808565337528056318m_-1108286820301507687yui_3_16_0_ym19_1_1496151286812_287435" style=""> </div><div class="m_-4808565337528056318m_-1108286820301507687signature" id="m_-4808565337528056318m_-1108286820301507687yui_3_16_0_ym19_1_1496151286812_287433" style="">Nathalie </div> <div class="m_-4808565337528056318m_-1108286820301507687qtdSeparateBR" style=""><br style=""><br style=""></div><div class="m_-4808565337528056318m_-1108286820301507687yahoo_quoted" style="display: block;"> <div style="font-family: helvetica neue,helvetica,arial,lucida grande,sans-serif; font-size: 13px;"> <div style="font-family: helveticaneue,helvetica neue,helvetica,arial,lucida grande,sans-serif; font-size: 16px;"><span style=""> <div dir="ltr" style=""><span style="font-family: arial; font-size: small;"> On Tuesday, May 30, 2017 4:00 PM, John Horton <<a href="mailto:john.horton@legitscript.com" target="_blank" style="">john.horton@legitscript.com</a>> wrote:<br style=""></span></div> <br style=""><br style=""> </span><div class="m_-4808565337528056318m_-1108286820301507687y_msg_container" style=""><div id="m_-4808565337528056318m_-1108286820301507687yiv8771876093" style=""><div style=""><span style=""><div dir="ltr" style=""><div class="m_-4808565337528056318m_-1108286820301507687yiv8771876093gmail_default" style="font-family: arial,helvetica,sans-serif; color: rgb(68, 68, 68);">I was going to reply to Natalie's email as well, but Paul's comments capture my thoughts, so: <b style="">+1. </b></div></div></span><div class="m_-4808565337528056318m_-1108286820301507687yiv8771876093gmail_extra" style=""><span style=""><br style="" clear="all"><div style=""><div class="m_-4808565337528056318m_-1108286820301507687yiv8771876093gmail_signature" style=""><div dir="ltr" style=""><div style=""><div dir="ltr" style=""><div style=""><div dir="ltr" style=""><div style=""><div dir="ltr" style=""><div style=""><div dir="ltr" style=""><div style=""><div dir="ltr" style=""><div style=""><div dir="ltr" style=""><div style=""><div dir="ltr" style=""><div style=""><div dir="ltr" style=""><div style=""><div dir="ltr" style=""><div style=""><div dir="ltr" style=""><span style="color: rgb(7, 55, 99); font-family: arial,helvetica,sans-serif;">John Horton<br style="" clear="none">President and CEO, LegitScript</span><div style=""><img style="" width="96" height="36"><br style="" clear="none"><div style=""><div style=""><div style="margin: 0px; font: 12px helvetica;"><br style="" clear="none"></div><div style="margin: 0px; font-style: normal; font-variant: normal; font-size: 12px; line-height: normal; font-family: helvetica;"><b style=""><span style="color: rgb(68, 68, 68);">Follow</span><span style="color: rgb(11, 83, 148);"> </span><span style="color: rgb(0, 0, 0);">Legit</span><span style="color: rgb(11, 83, 148);">Script</span></b>: <a rel="nofollow" shape="rect" href="http://www.linkedin.com/company/legitscript-com" style="font-weight: normal;" target="_blank"><span style="color: rgb(204, 0, 0);">LinkedIn</span></a> | <a rel="nofollow" shape="rect" href="https://www.facebook.com/LegitScript" style="font-weight: normal;" target="_blank"><span style="color: rgb(106, 168, 79);">Facebook</span></a> | <a rel="nofollow" shape="rect" href="https://twitter.com/legitscript" style="font-weight: normal;" target="_blank"><span style="color: rgb(103, 78, 167);">Twitter</span></a> | <span style="color: rgb(255, 153, 0);"><span data-mce-style="text-decoration: underline;" style="text-decoration: underline;"><a rel="nofollow" shape="rect" href="http://blog.legitscript.com/" target="_blank" style="">Blog</a></span></span> |<span style="color: rgb(255, 153, 0);"> <span style="font-weight: normal;"><a rel="nofollow" shape="rect" href="https://plus.google.com/112436813474708014933/posts" target="_blank" style="">Google+</a></span></span><br style=""></div><div style="margin: 0px; font-style: normal; font-variant: normal; font-size: 12px; line-height: normal; font-family: helvetica;"><span style="color: rgb(255, 153, 0);"><br style="" clear="none"></span></div><div style="text-align: left; margin: 0px; font-style: normal; font-variant: normal; font-size: 12px; line-height: normal; font-family: helvetica;"><span style="color: rgb(255, 153, 0);"><img style="" width="46" height="96"><img style="" width="47" height="96"><br style="" clear="none"></span></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div>
<br style="" clear="none"></span><div class="m_-4808565337528056318m_-1108286820301507687yiv8771876093gmail_quote" style=""><span style="">On Tue, May 30, 2017 at 12:57 PM, Paul Keating <span dir="ltr" style=""><<a rel="nofollow" shape="rect" href="mailto:paul@law.es" target="_blank" style="">paul@law.es</a>></span> wrote:<br style="" clear="none"></span><blockquote class="m_-4808565337528056318m_-1108286820301507687yiv8771876093gmail_quote" style="margin: 0px 0px 0px 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"><div class="m_-4808565337528056318m_-1108286820301507687yiv8771876093yqt3775885078" id="m_-4808565337528056318m_-1108286820301507687yiv8771876093yqt77589" style=""><div style=""><span style=""><div style="">Natalie,</div><div id="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945AppleMailSignature" style=""><br style="" clear="none"></div><div id="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945AppleMailSignature" style="">Thank you for the email. Im copying the list because i see others have replied to your comment.</div><div id="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945AppleMailSignature" style=""><br style="" clear="none"></div><div id="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945AppleMailSignature" style="">I strenuously object to the concept. We are discussing THIN DATA ONLY HERE. Unless someone can explain to me why any of this data set has privacy concerns this is a non-issue. I would certainly appreciate someone explaining what, if any, privacy issues are perceived to be at issue here.</div><div id="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945AppleMailSignature" style=""><br style="" clear="none"></div><div id="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945AppleMailSignature" style="">Moreover, while you suggest that the idea escapes the need to declare a purpose, it does nothing but reinforce a subjective criteria based system in which the declared purpose is used to somehow limit the data being retrieved.</div><div id="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945AppleMailSignature" style=""><br style="" clear="none"></div><div id="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945AppleMailSignature" style="">If i am missing something please let me know. </div><div id="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945AppleMailSignature" style=""><br style="" clear="none">Paul</div><div id="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945AppleMailSignature" style=""><br style="" clear="none">Sent from my iPad</div></span><div style=""><div class="m_-4808565337528056318m_-1108286820301507687yiv8771876093h5" style=""><span style=""><div style=""><br style="" clear="none">On 30 May 2017, at 21:08, nathalie coupet via gnso-rds-pdp-wg <<a rel="nofollow" shape="rect" href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank" style="">gnso-rds-pdp-wg@icann.org</a>> wrote:<br style="" clear="none"><br style="" clear="none"></div></span><blockquote style=""><div style=""><div style="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); font-family: helvetica neue,helvetica,arial,lucida grande,sans-serif; font-size: 13px;"><span style=""><div dir="ltr" id="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945yui_3_16_0_ym19_1_1496151286812_239556" style="">Hi Paul,</div><div dir="ltr" id="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945yui_3_16_0_ym19_1_1496151286812_239556" style=""><br style="" clear="none"></div><div dir="ltr" id="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945yui_3_16_0_ym19_1_1496151286812_239556" style="">In the context of thin data, in view of the opposition of some to allow unauthenticated access to all the thin data, the principle of proportionality serves as an over-arching principle at this particular phase in our work in order to protect data from abuse while not restricting access. </div><div dir="ltr" id="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945yui_3_16_0_ym19_1_1496151286812_239556" style="">Thin data must be proportionate to the query, be useful for that particular query. All and any other thin data foreign to this query should not be shared. This principle potentially avoids having to resort to 'legitimate purposes' which cannot be verified for unauthenticated access. </div><div dir="ltr" id="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945yui_3_16_0_ym19_1_1496151286812_239556" style=""> </div><div id="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945yui_3_16_0_ym19_1_1496151286812_239558" style=""> </div><div class="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945signature" id="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945yui_3_16_0_ym19_1_1496151286812_239560" style="">Nathalie </div> <div class="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945qtdSeparateBR" style=""><br style="" clear="none"><br style="" clear="none"></div></span><div class="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945yahoo_quoted" style="display: block;"> <div style="font-family: helvetica neue,helvetica,arial,lucida grande,sans-serif; font-size: 13px;"> <div style="font-family: helveticaneue,helvetica neue,helvetica,arial,lucida grande,sans-serif; font-size: 16px;"><span style=""> <div dir="ltr" style=""><span style="font-family: arial; font-size: small;"> On Tuesday, May 30, 2017 2:44 PM, "Gomes, Chuck via gnso-rds-pdp-wg" <<a rel="nofollow" shape="rect" href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank" style="">gnso-rds-pdp-wg@icann.org</a>> wrote:<br style="" clear="none"></span></div> <br style="" clear="none"><br style="" clear="none"> </span><div class="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945y_msg_container" style=""><div id="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945yiv0605036320" style=""><div style="">
<div class="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945yiv0605036320WordSection1" style=""><span style="">
<div class="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945yiv0605036320MsoNormal" style=""><span style="font-size: 11pt;">Because Nathalie was the originator and was unable to speak on the call, I encourage her to describe the nature of the issue on this thread.</span></div>
<div class="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945yiv0605036320MsoNormal" style=""><span style="font-size: 11pt;"> </span></div>
<div class="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945yiv0605036320MsoNormal" style=""><span style="font-size: 11pt;">Chuck</span></div>
<div class="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945yiv0605036320MsoNormal" style=""><a rel="nofollow" shape="rect" name="m_-4808565337528056318_m_-1108286820301507687_m_-2551964071040587945__MailEndCompose" style=""><span style="font-size: 11pt;"> </span></a><br style=""></div>
<span style=""></span>
</span><div class="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945yiv0605036320yqt1472831610" id="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945yiv0605036320yqt95202" style=""><div style="">
<div style="border-width: 1pt medium medium; border-style: solid none none; border-color: rgb(225, 225, 225) currentcolor currentcolor; -moz-border-top-colors: none; -moz-border-right-colors: none; -moz-border-bottom-colors: none; -moz-border-left-colors: none; border-image: none; padding: 3pt 0in 0in;">
<div class="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945yiv0605036320MsoNormal" style=""><b style=""><span style="font-size: 11pt;">From:</span></b><span style="font-size: 11pt;"> <a rel="nofollow" shape="rect" href="mailto:gnso-rds-pdp-wg-bounces@icann.org" target="_blank" style="">gnso-rds-pdp-wg-bounces@icann. org</a> [<a rel="nofollow" shape="rect" href="mailto:gnso-rds-pdp-wg-bounces@icann.org" target="_blank" style="">mailto:gnso-rds-pdp-wg- bounces@icann.org</a>]
<b style="">On Behalf Of </b>Paul Keating<span style=""><br style="" clear="none">
<b style="">Sent:</b> Tuesday, May 30, 2017 2:17 PM<br style="" clear="none">
<b style="">To:</b> Lisa Phifer <<a rel="nofollow" shape="rect" href="mailto:lisa@corecom.com" target="_blank" style="">lisa@corecom.com</a>>; RDS PDP WG <<a rel="nofollow" shape="rect" href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank" style="">gnso-rds-pdp-wg@icann.org</a>><br style="" clear="none">
<b style="">Subject:</b> [EXTERNAL] Re: [gnso-rds-pdp-wg] Principle on Proportionality for "Thin Data"access</span></span></div>
</div>
</div><span style="">
<div class="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945yiv0605036320MsoNormal" style=""> </div>
<div style="">
<div class="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945yiv0605036320MsoNormal" style=""><span style="font-size: 10.5pt;">Im sorry to have missed the call but had a client engagement.</span></div>
</div>
<div style="">
<div class="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945yiv0605036320MsoNormal" style=""><span style="font-size: 10.5pt;"> </span></div>
</div>
<div style="">
<div class="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945yiv0605036320MsoNormal" style=""><span style="font-size: 10.5pt;">Can someone briefly describe the nature of the issue?</span></div>
</div>
<div style="">
<div class="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945yiv0605036320MsoNormal" style=""><span style="font-size: 10.5pt;"> </span></div>
</div>
<div style="">
<div class="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945yiv0605036320MsoNormal" style=""><span style="font-size: 10.5pt;">Thanks</span></div>
</div>
<div style="">
<div class="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945yiv0605036320MsoNormal" style=""><span style="font-size: 10.5pt;">Paul</span></div>
</div>
<div style="">
<div class="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945yiv0605036320MsoNormal" style=""><span style="font-size: 10.5pt;"> </span></div>
</div>
</span><div style="border-width: 1pt medium medium; border-style: solid none none; border-color: rgb(181, 196, 223) currentcolor currentcolor; -moz-border-top-colors: none; -moz-border-right-colors: none; -moz-border-bottom-colors: none; -moz-border-left-colors: none; border-image: none; padding: 3pt 0in 0in;">
<div class="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945yiv0605036320MsoNormal" style=""><b style=""><span style="font-size: 11pt;">From:
</span></b><span style="font-size: 11pt;"><<a rel="nofollow" shape="rect" href="mailto:gnso-rds-pdp-wg-bounces@icann.org" target="_blank" style="">gnso-rds-pdp-wg-bounces@ icann.org</a>> on behalf of Lisa Phifer <<a rel="nofollow" shape="rect" href="mailto:lisa@corecom.com" target="_blank" style="">lisa@corecom.com</a>><span style=""><br style="" clear="none">
<b style="">Date: </b>Tuesday, May 30, 2017 at 7:52 PM<br style="" clear="none">
<b style="">To: </b>RDS PDP WG <<a rel="nofollow" shape="rect" href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank" style="">gnso-rds-pdp-wg@icann.org</a>><br style="" clear="none">
<b style="">Subject: </b>[gnso-rds-pdp-wg] Principle on Proportionality for "Thin Data"access</span></span></div>
</div>
<div style="">
<div class="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945yiv0605036320MsoNormal" style=""><span style="font-size: 10.5pt;"> </span></div>
</div>
<blockquote id="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945yiv0605036320MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE" style="border-width: medium medium medium 4.5pt; border-style: none none none solid; border-color: currentcolor currentcolor currentcolor rgb(181, 196, 223); -moz-border-top-colors: none; -moz-border-right-colors: none; -moz-border-bottom-colors: none; -moz-border-left-colors: none; border-image: none; padding: 0in 0in 0in 4pt; margin-left: 3.75pt; margin-right: 0in;"><span style="">
<div style="">
<div style="">
<div class="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945yiv0605036320MsoNormal" style=""><span style="font-size: 10.5pt;">All, per today's call action item:<br style="" clear="none">
<br style="" clear="none">
<b style="">Action Item: Nathalie Coupet and any other WG members who wish to do so to propose to the WG list a new principle on proportionality for "thin data." All WG members to comment on that proposed principle in advance of next call.<br style="" clear="none">
<br style="" clear="none">
</b>we are starting a new thread here which anyone may reply to if they wish to propose (or respond to) a new principle on proportionality for "thin data" access.<br style="" clear="none">
<br style="" clear="none">
Best, Lisa</span></div>
</div>
</div>
</span><div class="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945yiv0605036320MsoNormal" style=""><span style="font-size: 10.5pt;">______________________________ _________________ gnso-rds-pdp-wg mailing list
<a rel="nofollow" shape="rect" href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank" style="">gnso-rds-pdp-wg@icann.org</a> <a rel="nofollow" shape="rect" href="https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg" target="_blank" style="">
https://mm.icann.org/mailman/ listinfo/gnso-rds-pdp-wg</a></span><br style=""></div>
</blockquote></div>
</div>
</div></div><span style=""><div class="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945yqt1472831610" id="m_-4808565337528056318m_-1108286820301507687yiv8771876093m_-2551964071040587945yqt24053" style="">______________________________ _________________<br style="" clear="none">gnso-rds-pdp-wg mailing list<br style="" clear="none"><a rel="nofollow" shape="rect" href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank" style="">gnso-rds-pdp-wg@icann.org</a><br style="" clear="none"><a rel="nofollow" shape="rect" href="https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg" target="_blank" style="">https://mm.icann.org/mailman/ listinfo/gnso-rds-pdp-wg</a><br style=""></div><br style="" clear="none"><br style="" clear="none"></span></div> </div> </div> </div></div></div></blockquote><span style=""><blockquote style=""><div style=""><span style="">______________________________ _________________</span><br style="" clear="none"><span style="">gnso-rds-pdp-wg mailing list</span><br style="" clear="none"><span style=""><a rel="nofollow" shape="rect" href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank" style="">gnso-rds-pdp-wg@icann.org</a></span><br style="" clear="none"><span style=""><a rel="nofollow" shape="rect" href="https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg" target="_blank" style="">https://mm.icann.org/mailman/ listinfo/gnso-rds-pdp-wg</a></span><br style=""></div></blockquote></span></div></div></div></div><span style=""><br style="" clear="none">______________________________ _________________<br style="" clear="none">
gnso-rds-pdp-wg mailing list<br style="" clear="none">
<a rel="nofollow" shape="rect" href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank" style="">gnso-rds-pdp-wg@icann.org</a><br style="" clear="none">
<a rel="nofollow" shape="rect" href="https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg" target="_blank" style="">https://mm.icann.org/mailman/ listinfo/gnso-rds-pdp-wg</a><br style="" clear="none"></span></blockquote></div><br style="" clear="none"></div></div></div><br style=""><br style=""></div> </div> </div> </div></div></div><br style="">_______________________________________________<br style="">
gnso-rds-pdp-wg mailing list<br style="">
<a href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank" style="">gnso-rds-pdp-wg@icann.org</a><br style="">
<a href="https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg" rel="noreferrer" target="_blank" style="">https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg</a><br style=""></blockquote></div><br style=""><br style="" clear="all"><br style="">-- <br style=""><div class="m_-4808565337528056318gmail_signature" style="">_________________________________<br style="">Note to self: Pillage BEFORE burning.</div>
</div>
<br style="">_______________________________________________<br style="">gnso-rds-pdp-wg mailing list<br style=""><a href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank" style="">gnso-rds-pdp-wg@icann.org</a><br style=""><a href="https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg" target="_blank" style="">https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg</a><br style=""></div></div></div></blockquote><blockquote style=""><div style=""><span style="">_______________________________________________</span><br style=""><span style="">gnso-rds-pdp-wg mailing list</span><br style=""><span style=""><a href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank" style="">gnso-rds-pdp-wg@icann.org</a></span><br style=""><span style=""><a href="https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg" target="_blank" style="">https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg</a></span><br style=""></div></blockquote><br style=""></div></div></div></div></div><br style="">_______________________________________________<br style="">
gnso-rds-pdp-wg mailing list<br style="">
<a href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank" style="">gnso-rds-pdp-wg@icann.org</a><br style="">
<a href="https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg" rel="noreferrer" target="_blank" style="">https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg</a><br style=""></blockquote></div><br style=""></div><br></div></div></body></html>