<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto">Its the aggressive extraterritoriality that is the most suspect and likely not to prevail once challenged but I doubt anyone here will do so. <br><br><div id="AppleMailSignature">--<div>John Bambenek</div></div><div><br>On Dec 18, 2017, at 18:01, Rubens Kuhl <<a href="mailto:rubensk@nic.br">rubensk@nic.br</a>> wrote:<br><br></div><blockquote type="cite"><div><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"><br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On 18 Dec 2017, at 20:03, Michael Palage <<a href="mailto:michael@palage.com" class="">michael@palage.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="WordSection1" style="page: WordSection1; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;"><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Hello All,<o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">More interesting reading,<span class="Apple-converted-space"> </span><font color="#800080" class=""><u class=""><a href="https://www.icann.org/en/system/files/files/gdpr-memorandum-part2-18dec17-en.pdf" class="">https://www.icann.org/en/system/files/files/gdpr-memorandum-part2-18dec17-en.pdf</a></u></font></div></div></div></blockquote><br class=""></div><div><br class=""></div><div>Spoilers: like most movie trilogies, the more interesting stuff is coming in episode 3. But I found very interesting from this part is that GDPR applies to personal data regardless of the data subject being from EU or at EU. So an American citizen that feels damaged by an American registrar or registry could possibly have a GDPR cause of action because that contracted party also serves the EU. </div><div><br class=""></div><div><br class=""></div><div><br class=""></div><div><br class=""></div><div>Rubens</div><div><br class=""></div></div></blockquote><blockquote type="cite"><div><span>_______________________________________________</span><br><span>gnso-rds-pdp-wg mailing list</span><br><span><a href="mailto:gnso-rds-pdp-wg@icann.org">gnso-rds-pdp-wg@icann.org</a></span><br><span><a href="https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg">https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg</a></span></div></blockquote></body></html>