<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div class=""><br class=""></div>Chuck,<div class=""><br class=""></div><div class="">The part 2 of the Hamilton paper suggested that exact risk. But regardless of that scenario, for registries specifically it would be very challenging to do something for its EU-based registrars and something different for its non-EU registrars and also be compliant with the non-discriminatory access clause in registry agreements. So I see less registries taking EU origin as an aspect than registrars, since registrars don't have non-discriminatory access rules to follow. </div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">Rubens</div><div class=""><br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On 17 Feb 2018, at 17:03, <<a href="mailto:consult@cgomes.com" class="">consult@cgomes.com</a>> <<a href="mailto:consult@cgomes.com" class="">consult@cgomes.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="WordSection1" style="page: WordSection1; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;"><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Thanks Raoul. So you think that a non-European registrar or registry could be fined if it violated the GDPR for a non-European natural person?<o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Chuck<o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><b class="">From:</b><span class="Apple-converted-space"> </span>Raoul Plommer [<a href="mailto:plommer@gmail.com" style="color: purple; text-decoration: underline;" class="">mailto:plommer@gmail.com</a>]<span class="Apple-converted-space"> </span><br class=""><b class="">Sent:</b><span class="Apple-converted-space"> </span>Saturday, February 17, 2018 10:57 AM<br class=""><b class="">To:</b><span class="Apple-converted-space"> </span><a href="mailto:consult@cgomes.com" style="color: purple; text-decoration: underline;" class="">consult@cgomes.com</a><br class=""><b class="">Cc:</b><span class="Apple-converted-space"> </span>Ayden Férdeline <<a href="mailto:icann@ferdeline.com" style="color: purple; text-decoration: underline;" class="">icann@ferdeline.com</a>>; Paul Keating <<a href="mailto:paul@law.es" style="color: purple; text-decoration: underline;" class="">paul@law.es</a>>; RDS PDP WG <<a href="mailto:gnso-rds-pdp-wg@icann.org" style="color: purple; text-decoration: underline;" class="">gnso-rds-pdp-wg@icann.org</a>><br class=""><b class="">Subject:</b><span class="Apple-converted-space"> </span>Re: [gnso-rds-pdp-wg] Krebs On Security article RE whois and GDRP<o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div><div class=""><blockquote style="border-style: none none none solid; border-left-width: 1pt; border-left-color: rgb(204, 204, 204); padding: 0in 0in 0in 6pt; margin-left: 4.8pt; margin-right: 0in;" class="" type="cite"><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 9.5pt; font-family: Arial, sans-serif; color: rgb(34, 34, 34); background-color: white; background-position: initial initial; background-repeat: initial initial;" class="">I don't understand how the GDPR could</span><span style="font-size: 9.5pt; font-family: Arial, sans-serif; color: rgb(34, 34, 34);" class=""><br class=""><span style="background-color: white; background-position: initial initial; background-repeat: initial initial;" class="">protect non-European natural persons dealing with non-European companies.</span></span><o:p class=""></o:p></div></blockquote><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Unfortunately, not all laws can be that well enforced, but they are nevertheless in place. In this particular example, I think there's the massive threat of getting fined, that will give the companies the right incentive to comply. Banks and financial services in tax-havens didn't expect to get caught either.<o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">If a non-European company complies with the GDPR because of its European customers, then its non-European are extended the same protections through interfaces and access.<o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">-Raoul<o:p class=""></o:p></div></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">On 17 February 2018 at 20:20, <<a href="mailto:consult@cgomes.com" target="_blank" style="color: purple; text-decoration: underline;" class="">consult@cgomes.com</a>> wrote:<o:p class=""></o:p></div><blockquote style="border-style: none none none solid; border-left-width: 1pt; border-left-color: rgb(204, 204, 204); padding: 0in 0in 0in 6pt; margin-left: 4.8pt; margin-right: 0in;" class="" type="cite"><div class=""><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">As one who is trying to understand the GDPR, the key condition for these recitals is ‘processed within the legal boundaries of the European Union’.<o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Chuck<o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><b class="">From:</b><span class="Apple-converted-space"> </span>gnso-rds-pdp-wg [mailto:<a href="mailto:gnso-rds-pdp-wg-bounces@icann.org" target="_blank" style="color: purple; text-decoration: underline;" class="">gnso-rds-pdp-wg-bounces@icann.org</a>]<span class="Apple-converted-space"> </span><b class="">On Behalf Of<span class="Apple-converted-space"> </span></b>Ayden Férdeline<br class=""><b class="">Sent:</b><span class="Apple-converted-space"> </span>Friday, February 16, 2018 12:27 PM<br class=""><b class="">To:</b><span class="Apple-converted-space"> </span>Paul Keating <<a href="mailto:paul@law.es" target="_blank" style="color: purple; text-decoration: underline;" class="">paul@law.es</a>><o:p class=""></o:p></div><div class=""><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><br class=""><b class="">Cc:</b><span class="Apple-converted-space"> </span>RDS PDP WG <<a href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank" style="color: purple; text-decoration: underline;" class="">gnso-rds-pdp-wg@icann.org</a>><br class=""><b class="">Subject:</b><span class="Apple-converted-space"> </span>Re: [gnso-rds-pdp-wg] Krebs On Security article RE whois and GDRP<o:p class=""></o:p></div></div></div><div class=""><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">I interpret the GDPR as applying to anyone, residing anywhere, regardless of his or her citizenship, whose data is processed within the legal boundaries of the European Union. <o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><a href="http://www.privacy-regulation.eu/en/recital-2-GDPR.htm" target="_blank" title="http://www.privacy-regulation.eu/en/recital-2-GDPR.htm" style="color: purple; text-decoration: underline;" class="">Recital 2</a> (emphasis added) states: "The principles of, and rules on the protection of natural persons with regard to the processing of their personal data should,<span class="Apple-converted-space"> </span><b class=""><i class=""><u class="">whatever their nationality or residence</u></i></b>, respect their fundamental rights and freedoms, in particular their right to the protection of personal data."<o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><a href="http://www.privacy-regulation.eu/en/recital-4-GDPR.htm" target="_blank" title="http://www.privacy-regulation.eu/en/recital-4-GDPR.htm" style="color: purple; text-decoration: underline;" class="">Recital 4</a><span class="Apple-converted-space"> </span>(emphasis added) states: "The processing of personal data should be<span class="Apple-converted-space"> </span><b class=""><i class=""><u class="">designed to serve mankind</u></i></b>."<o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><a href="http://www.privacy-regulation.eu/en/recital-14-GDPR.htm" target="_blank" title="http://www.privacy-regulation.eu/en/recital-14-GDPR.htm" style="color: purple; text-decoration: underline;" class="">Recital 14</a><span class="Apple-converted-space"> </span>(emphasis added) states: "The protection afforded by this Regulation should apply to natural persons,<span class="Apple-converted-space"> </span><b class=""><i class=""><u class="">whatever their nationality or place of residence</u></i></b>, in relation to the processing of their personal data."<o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div></div><div class=""><div class=""><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Ayden <o:p class=""></o:p></div></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">-------- Original Message --------<o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">On 16 February 2018 9:07 PM, Paul Keating <<a href="mailto:paul@law.es" target="_blank" style="color: purple; text-decoration: underline;" class="">paul@law.es</a>> wrote:<o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div></div><blockquote style="margin-top: 5pt; margin-bottom: 5pt;" class="" type="cite"><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">John,<o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div></div><div class=""><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Given that the GDPR only applies to private data of private individuals residing in the EU, i dount you will ever see such a statement.<o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div></div><div id="m_7981932615346826788AppleMailSignature" class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Sent from my iPad<o:p class=""></o:p></div></div><div class=""><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">On 16 Feb 2018, at 21:02, John Horton via gnso-rds-pdp-wg <<a href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank" style="color: purple; text-decoration: underline;" class="">gnso-rds-pdp-wg@icann.org</a>> wrote:<o:p class=""></o:p></div></div></div><blockquote style="margin-top: 5pt; margin-bottom: 5pt;" class="" type="cite"><div class=""><div class=""><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-family: Arial, sans-serif; color: rgb(68, 68, 68);" class="">Ha, thanks Michele, and sorry for the timing! (Hope your answer was written over a bottle of red wine, preferably an Oregon pinot.)</span><o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-family: Arial, sans-serif; color: rgb(68, 68, 68);" class=""> </span><o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-family: Arial, sans-serif; color: rgb(68, 68, 68);" class="">Let me clarify my question, and feel free to defer the answer if next week is better. I'm asking if registrars have received specific guidance, or can point to anything specific in the GDPR or any written document, indicating that you have to provide GDPR protections to all of your customers, even if they aren't in scope. In other words, I'm looking for a very clear statement along these lines from a DPA:</span><o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-family: Arial, sans-serif; color: rgb(68, 68, 68);" class=""> </span><o:p class=""></o:p></div></div><div class=""><blockquote style="margin: 5pt 0in 5pt 30pt;" class="" type="cite"><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-family: Arial, sans-serif; color: rgb(68, 68, 68);" class="">As an EU company, even if your customer is a natural person in the US, you must provide them the same rights under the GDPR that an EU natural person would receive. Failure to do so is non-compliant with the GDPR. </span><o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="font-family: Arial, sans-serif; color: rgb(68, 68, 68);" class=""> </span><o:p class=""></o:p></div></div></blockquote><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="m7981932615346826788colour"><span style="font-family: Arial, sans-serif; color: rgb(68, 68, 68);" class="">Obviously, the exact wording my differ, but I'm trying to challenge your statement that "</span></span><span class="m7981932615346826788size"><span style="font-size: 9.5pt; font-family: Arial, sans-serif; color: rgb(34, 34, 34); background-color: white; background-position: initial initial; background-repeat: initial initial;" class="">As an Irish company all our clients have to be handled under GDPR." If that's true as a legal requirement, I think it's important for the security/compliance community to be aware of that...if it's not, perhaps that opens up some more granular approaches that can satisfy both sides. </span></span><o:p class=""></o:p></div></div></div></div><div class=""><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div></div><div class=""><div class=""><div class=""><div class=""><div class=""><div class=""><div class=""><div class=""><div class=""><div class=""><div class=""><div class=""><div class=""><div class=""><div class=""><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="m7981932615346826788colour"><span style="font-family: Arial, sans-serif; color: rgb(7, 55, 99);" class="">John Horton</span></span><span style="font-family: Arial, sans-serif; color: rgb(7, 55, 99);" class=""><br class=""><span class="m7981932615346826788colour">President and CEO, LegitScript</span></span><o:p class=""></o:p></div></div><div class=""><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span style="border: 1pt solid windowtext; padding: 0in;" class=""><span id="cid:image001.jpg@01D3A7DE.FA2A2280"><image001.jpg></span></span><o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-stretch: normal;" class=""> <o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt;" class=""><span class="m7981932615346826788colour"><b class=""><span style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(68, 68, 68);" class="">Follow</span></b></span><span class="m7981932615346826788colour"><b class=""><span style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(11, 83, 148);" class=""> </span></b></span><span class="m7981932615346826788colour"><b class=""><span style="font-size: 9pt; font-family: Helvetica, sans-serif;" class="">Legit</span></b></span><span class="m7981932615346826788colour"><b class=""><span style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(11, 83, 148);" class="">Script</span></b></span><span class="m7981932615346826788size"><span style="font-size: 9pt; font-family: Helvetica, sans-serif;" class="">: <a href="http://www.linkedin.com/company/legitscript-com" target="_blank" style="color: purple; text-decoration: underline;" class=""><span class="m7981932615346826788colour"><span style="color: rgb(204, 0, 0);" class="">LinkedIn</span></span></a> | <a href="https://www.facebook.com/LegitScript" target="_blank" style="color: purple; text-decoration: underline;" class=""><span class="m7981932615346826788colour"><span style="color: rgb(106, 168, 79);" class="">Facebook</span></span></a> | <a href="https://twitter.com/legitscript" target="_blank" style="color: purple; text-decoration: underline;" class=""><span class="m7981932615346826788colour"><span style="color: rgb(103, 78, 167);" class="">Twitter</span></span></a> | </span></span><span class="m7981932615346826788colour"><u class=""><span style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(255, 153, 0);" class=""><a href="http://blog.legitscript.com/" target="_blank" style="color: purple; text-decoration: underline;" class=""><span style="color: rgb(17, 85, 204);" class="">Blog</span></a></span></u></span><span class="m7981932615346826788size"><span style="font-size: 9pt; font-family: Helvetica, sans-serif;" class=""> |</span></span><span class="m7981932615346826788colour"><span style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(255, 153, 0);" class=""> <a href="http://go.legitscript.com/Subscription-Management.html" target="_blank" style="color: purple; text-decoration: underline;" class=""><span style="color: rgb(255, 153, 0);" class="">Newsletter</span></a></span></span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt;" class=""> <o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt;" class=""><span style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(255, 153, 0); border: 1pt solid windowtext; padding: 0in;" class=""><span id="cid:image002.jpg@01D3A7DE.FA2A2280"><image002.jpg></span><span id="cid:image003.jpg@01D3A7DE.FA2A2280"><image003.jpg></span></span><o:p class=""></o:p></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div></div><div class=""><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">On Fri, Feb 16, 2018 at 11:53 AM, Michele Neylon - Blacknight <<a href="mailto:michele@blacknight.com" target="_blank" style="color: purple; text-decoration: underline;" class="">michele@blacknight.com</a>> wrote:<o:p class=""></o:p></div></div><blockquote style="border-style: none none none solid; border-left-width: 1pt; border-left-color: rgb(204, 204, 204); padding: 0in 0in 0in 6pt; margin: 5pt 0in 5pt 4.8pt;" class="" type="cite"><div class=""><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class="">John</span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class=""> </span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class="">Of course you would wait until a Friday evening to ask me this ..<span class="Apple-converted-space"> </span></span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class=""> </span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class="">Anyway ..<span class="Apple-converted-space"> </span></span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class=""> </span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class="">As a company in the EU we have to do everything through the lens of GDPR.</span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class=""><br class="">That does not mean that a company will get the same treatment as a private individual.</span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class=""> </span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class="">What it does mean is that we (and other EU based registrars and registries) have to consider whether or not there is personal information in the currently public whois information. I’m not 100% sure yet what the best way of dealing with that is.<span class="Apple-converted-space"> </span><br class="">While we can ask new clients things during signup, it’s going to be significantly harder to get a response from the existing ones.</span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class=""> </span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class="">Regards</span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class=""> </span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class="">Michele</span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class=""> </span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class=""> </span><o:p class=""></o:p></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 10.5pt;" class="">--</span></span><o:p class=""></o:p></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 10.5pt;" class="">Mr Michele Neylon</span></span><o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 10.5pt;" class="">Blacknight Solutions</span></span><o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 10.5pt;" class="">Hosting, Colocation & Domains</span></span><o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 10.5pt;" class=""><a href="https://www.blacknight.com/" target="_blank" style="color: purple; text-decoration: underline;" class="">https://www.blacknight.com</a></span></span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 10.5pt;" class=""><a href="https://blacknight.blog/" target="_blank" style="color: purple; text-decoration: underline;" class="">https://blacknight.blog</a><span class="Apple-converted-space"> </span>/</span></span><o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 10.5pt;" class=""><a href="http://ceo.hosting/" target="_blank" style="color: purple; text-decoration: underline;" class="">http://ceo.hosting/</a></span></span><o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 10.5pt;" class="">Intl.<span class="Apple-converted-space"> </span><a href="tel:+353%2059%20918%203072" target="_blank" style="color: purple; text-decoration: underline;" class="">+353 (0) 59 9183072</a></span></span><o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 10.5pt;" class="">Direct Dial:<span class="Apple-converted-space"> </span><a href="tel:+353%2059%20918%203090" target="_blank" style="color: purple; text-decoration: underline;" class="">+353 (0)59 9183090</a></span></span><o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 10.5pt;" class="">-------------------------------</span></span><o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 10.5pt;" class="">Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty</span></span><o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 10.5pt;" class="">Road,Graiguecullen,Carlow,</span></span><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 9pt; font-family: Arial, sans-serif; color: rgb(25, 25, 25); background-color: white; background-position: initial initial; background-repeat: initial initial;" class=""><span class="Apple-converted-space"> </span></span></span><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 10.5pt;" class="">R93 X265</span></span><o:p class=""></o:p></div></div></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 10.5pt;" class="">,Ireland Company No.: 370845</span></span><o:p class=""></o:p></div><div style="border-style: solid none none; border-top-width: 1pt; border-top-color: rgb(181, 196, 223); padding: 3pt 0in 0in;" class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="m7981932615346826788size"><b class=""><span lang="EN-IE" style="font-size: 12pt;" class="">From:<span class="Apple-converted-space"> </span></span></b></span><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 12pt;" class="">John Horton <<a href="mailto:john.horton@legitscript.com" target="_blank" style="color: purple; text-decoration: underline;" class="">john.horton@legitscript.com</a>></span></span><span lang="EN-IE" style="font-size: 12pt;" class=""><br class=""><span class="m7981932615346826788size"><b class="">Date:<span class="Apple-converted-space"> </span></b>Friday 16 February 2018 at 19:28</span><br class=""><span class="m7981932615346826788size"><b class="">To:<span class="Apple-converted-space"> </span></b>Michele Neylon <<a href="mailto:michele@blacknight.com" target="_blank" style="color: purple; text-decoration: underline;" class="">michele@blacknight.com</a>></span><br class=""><span class="m7981932615346826788size"><b class="">Cc:<span class="Apple-converted-space"> </span></b>"<a href="mailto:benny@nordreg.se" target="_blank" style="color: purple; text-decoration: underline;" class="">benny@nordreg.se</a>" <<a href="mailto:benny@nordreg.se" target="_blank" style="color: purple; text-decoration: underline;" class="">benny@nordreg.se</a>>, RDS PDP WG <<a href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank" style="color: purple; text-decoration: underline;" class="">gnso-rds-pdp-wg@icann.org</a>></span><br class=""><span class="m7981932615346826788size"><b class="">Subject:<span class="Apple-converted-space"> </span></b>Re: [gnso-rds-pdp-wg] Krebs On Security article RE whois and GDRP</span></span><o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-IE" class=""> </span><o:p class=""></o:p></div></div><div class=""><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="m7981932615346826788font"><span lang="EN-IE" style="font-family: Arial, sans-serif; color: rgb(68, 68, 68);" class="">Michele,</span></span><o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="m7981932615346826788font"><span lang="EN-IE" style="font-family: Arial, sans-serif; color: rgb(68, 68, 68);" class=""> </span></span><o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="m7981932615346826788font"><span lang="EN-IE" style="font-family: Arial, sans-serif; color: rgb(68, 68, 68);" class="">Let me dig in a bit on one question there -- actually curious about this. You indicated "</span></span><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 9.5pt; font-family: Arial, sans-serif; color: rgb(34, 34, 34); background-color: white; background-position: initial initial; background-repeat: initial initial;" class="">As an Irish company all our clients have to be handled under GDPR." So, for example, let's say that I transferred my company's domain name (obviously, we're a legal person, and we're domiciled in the US and registered here) to Blacknight. I think you'd agree we're not the intended beneficiary of the GDPR. My specific question for you is: Is there written guidance somewhere indicating that you do, in fact, have to provide me GDPR protections? That your policies have to apply to me? If there's some language out there specifically indicating that, it would be helpful to see that. I didn't see that in the Hamilton memo (perhaps I'm missing it) nor in the text of the GDPR (but again, perhaps I'm missing it). Let me know if my question doesn't make sense. </span></span><o:p class=""></o:p></div></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-IE" class=""> </span><o:p class=""></o:p></div><div class=""><div class=""><div class=""><div class=""><div class=""><div class=""><div class=""><div class=""><div class=""><div class=""><div class=""><div class=""><div class=""><div class=""><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="m7981932615346826788font"><span lang="EN-IE" style="font-family: Arial, sans-serif; color: rgb(7, 55, 99);" class="">John Horton</span></span><span lang="EN-IE" style="font-family: Arial, sans-serif; color: rgb(7, 55, 99);" class=""><br class=""><span class="m7981932615346826788font">President and CEO, LegitScript</span></span><span lang="EN-IE" class=""></span><o:p class=""></o:p></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-IE" style="border: 1pt solid windowtext; padding: 0in;" class=""><span id="cid:image001.jpg@01D3A7DE.FA2A2280"><image001.jpg></span></span><o:p class=""></o:p></div><div class=""><div class=""><div class=""><div style="margin: 0in 0in 0.0001pt;" class=""><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 9pt; font-family: Helvetica, sans-serif;" class=""> </span></span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt;" class=""><span class="m7981932615346826788size"><b class=""><span lang="EN-IE" style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(68, 68, 68);" class="">Follow</span></b></span><span class="m7981932615346826788size"><b class=""><span lang="EN-IE" style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(11, 83, 148);" class=""> </span></b></span><span class="m7981932615346826788size"><b class=""><span lang="EN-IE" style="font-size: 9pt; font-family: Helvetica, sans-serif;" class="">Legit</span></b></span><span class="m7981932615346826788size"><b class=""><span lang="EN-IE" style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(11, 83, 148);" class="">Script</span></b></span><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 9pt; font-family: Helvetica, sans-serif;" class="">: </span></span><span lang="EN-IE" class=""><a href="http://www.linkedin.com/company/legitscript-com" target="_blank" style="color: purple; text-decoration: underline;" class=""><span class="m7981932615346826788size"><span style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(204, 0, 0);" class="">LinkedIn</span></span></a></span><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 9pt; font-family: Helvetica, sans-serif;" class=""> | </span></span><span lang="EN-IE" class=""><a href="https://www.facebook.com/LegitScript" target="_blank" style="color: purple; text-decoration: underline;" class=""><span class="m7981932615346826788size"><span style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(106, 168, 79);" class="">Facebook</span></span></a></span><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 9pt; font-family: Helvetica, sans-serif;" class=""> | </span></span><span lang="EN-IE" class=""><a href="https://twitter.com/legitscript" target="_blank" style="color: purple; text-decoration: underline;" class=""><span class="m7981932615346826788size"><span style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(103, 78, 167);" class="">Twitter</span></span></a></span><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 9pt; font-family: Helvetica, sans-serif;" class=""> | </span></span><span lang="EN-IE" class=""><a href="http://blog.legitscript.com/" target="_blank" style="color: purple; text-decoration: underline;" class=""><span class="m7981932615346826788size"><span style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(17, 85, 204);" class="">Blog</span></span></a></span><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 9pt; font-family: Helvetica, sans-serif;" class=""> |</span></span><span class="m7981932615346826788colour"><span lang="EN-IE" style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(255, 153, 0);" class=""> </span></span><span lang="EN-IE" class=""><a href="http://go.legitscript.com/Subscription-Management.html" target="_blank" style="color: purple; text-decoration: underline;" class=""><span class="m7981932615346826788size"><span style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(255, 153, 0);" class="">Newsletter</span></span></a></span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt;" class=""><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 9pt; font-family: Helvetica, sans-serif;" class=""> </span></span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt;" class=""><span lang="EN-IE" style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(255, 153, 0); border: 1pt solid windowtext; padding: 0in;" class=""><span id="cid:image002.jpg@01D3A7DE.FA2A2280"><image002.jpg></span><span id="cid:image003.jpg@01D3A7DE.FA2A2280"><image003.jpg></span></span><o:p class=""></o:p></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div><div class=""><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-IE" class=""> </span><o:p class=""></o:p></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-IE" class="">On Fri, Feb 16, 2018 at 11:15 AM, Michele Neylon - Blacknight <<a href="mailto:michele@blacknight.com" target="_blank" style="color: purple; text-decoration: underline;" class="">michele@blacknight.com</a>> wrote:</span><o:p class=""></o:p></div><blockquote style="border-style: none none none solid; border-left-width: 1pt; border-left-color: rgb(204, 204, 204); padding: 0in 0in 0in 6pt; margin: 5pt 0in 5pt 4.8pt;" class="" type="cite"><div class=""><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class="">John</span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class=""> </span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class="">There are two distinct discussions here which seem to be getting mixed together.</span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class=""> </span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class="">During the proxy / privacy discussion some people wanted there to be a distinction between who could avail of proxy / privacy services. Some wanted a prohibition on letting “commercial” have the ability to use proxy / privacy.<span class="Apple-converted-space"> </span></span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class=""> </span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class="">The discussions here and elsewhere around collection and publication of data in light of GDPR are very different.<span class="Apple-converted-space"> </span></span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class=""> </span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class="">Nobody is disputing that there is a distinction between private individuals and corporations when it comes to GDPR. However there are risks associated with the processing of personal information, which may be tied into corporate information. And the “commercial” vs “non-commercial” distinction won’t work.<span class="Apple-converted-space"> </span></span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class=""> </span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class="">Where there is a clear difference is between treatment of registrants based on geography.<span class="Apple-converted-space"> </span></span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class="">As an Irish company all our clients have to be handled under GDPR. The same would be true of any other provider based in the EU.</span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class=""> </span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class="">I cannot speak to nor will I get involved in debates around what various non-EU based operators may currently be doing or plan to do in the future – there are enough of them on this list who can do so more ably than I and without my help.</span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class=""> </span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class="">Regards</span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class=""> </span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class="">Michele</span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class=""> </span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-GB" class=""> </span><o:p class=""></o:p></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 10.5pt;" class="">--</span></span><o:p class=""></o:p></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 10.5pt;" class="">Mr Michele Neylon</span></span><o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 10.5pt;" class="">Blacknight Solutions</span></span><o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 10.5pt;" class="">Hosting, Colocation & Domains</span></span><o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-IE" class=""><a href="https://www.blacknight.com/" target="_blank" style="color: purple; text-decoration: underline;" class=""><span class="m7981932615346826788size"><span style="font-size: 10.5pt;" class="">https://www.blacknight.com</span></span></a></span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-IE" class=""><a href="https://blacknight.blog/" target="_blank" style="color: purple; text-decoration: underline;" class=""><span class="m7981932615346826788size"><span style="font-size: 10.5pt;" class="">https://blacknight.blog</span></span></a></span><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 10.5pt;" class=""><span class="Apple-converted-space"> </span>/</span></span><o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-IE" class=""><a href="http://ceo.hosting/" target="_blank" style="color: purple; text-decoration: underline;" class=""><span class="m7981932615346826788size"><span style="font-size: 10.5pt;" class="">http://ceo.hosting/</span></span></a></span><o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 10.5pt;" class="">Intl.<span class="Apple-converted-space"> </span></span></span><span lang="EN-IE" class=""><a href="tel:+353%2059%20918%203072" target="_blank" style="color: purple; text-decoration: underline;" class=""><span class="m7981932615346826788size"><span style="font-size: 10.5pt;" class="">+353 (0) 59 9183072</span></span></a></span><o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 10.5pt;" class="">Direct Dial:<span class="Apple-converted-space"> </span></span></span><span lang="EN-IE" class=""><a href="tel:+353%2059%20918%203090" target="_blank" style="color: purple; text-decoration: underline;" class=""><span class="m7981932615346826788size"><span style="font-size: 10.5pt;" class="">+353 (0)59 9183090</span></span></a></span><o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 10.5pt;" class="">-------------------------------</span></span><o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 10.5pt;" class="">Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty</span></span><o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 10.5pt;" class="">Road,Graiguecullen,Carlow,</span></span><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 9pt; font-family: Arial, sans-serif; color: rgb(25, 25, 25); background-color: white; background-position: initial initial; background-repeat: initial initial;" class=""><span class="Apple-converted-space"> </span></span></span><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 10.5pt;" class="">R93 X265</span></span><o:p class=""></o:p></div></div></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 10.5pt;" class="">,Ireland Company No.: 370845</span></span><o:p class=""></o:p></div><div style="border-style: solid none none; border-top-width: 1pt; border-top-color: rgb(181, 196, 223); padding: 3pt 0in 0in;" class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="m7981932615346826788size"><b class=""><span lang="EN-IE" style="font-size: 12pt;" class="">From:<span class="Apple-converted-space"> </span></span></b></span><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 12pt;" class="">gnso-rds-pdp-wg <</span></span><span lang="EN-IE" class=""><a href="mailto:gnso-rds-pdp-wg-bounces@icann.org" target="_blank" style="color: purple; text-decoration: underline;" class=""><span class="m7981932615346826788size"><span style="font-size: 12pt;" class="">gnso-rds-pdp-wg-bounces@icann.org</span></span></a></span><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 12pt;" class="">> on behalf of John Horton via gnso-rds-pdp-wg <</span></span><span lang="EN-IE" class=""><a href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank" style="color: purple; text-decoration: underline;" class=""><span class="m7981932615346826788size"><span style="font-size: 12pt;" class="">gnso-rds-pdp-wg@icann.org</span></span></a></span><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 12pt;" class="">></span></span><span lang="EN-IE" style="font-size: 12pt;" class=""><br class=""><span class="m7981932615346826788size"><b class="">Reply-To:<span class="Apple-converted-space"> </span></b>John Horton <</span></span><span lang="EN-IE" class=""><a href="mailto:john.horton@legitscript.com" target="_blank" style="color: purple; text-decoration: underline;" class=""><span class="m7981932615346826788size"><span style="font-size: 12pt;" class="">john.horton@legitscript.com</span></span></a></span><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 12pt;" class="">></span></span><span lang="EN-IE" style="font-size: 12pt;" class=""><br class=""><span class="m7981932615346826788size"><b class="">Date:<span class="Apple-converted-space"> </span></b>Friday 16 February 2018 at 18:54</span><br class=""><span class="m7981932615346826788size"><b class="">To:<span class="Apple-converted-space"> </span></b>"</span></span><span lang="EN-IE" class=""><a href="mailto:benny@nordreg.se" target="_blank" style="color: purple; text-decoration: underline;" class=""><span class="m7981932615346826788size"><span style="font-size: 12pt;" class="">benny@nordreg.se</span></span></a></span><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 12pt;" class="">" <</span></span><span lang="EN-IE" class=""><a href="mailto:benny@nordreg.se" target="_blank" style="color: purple; text-decoration: underline;" class=""><span class="m7981932615346826788size"><span style="font-size: 12pt;" class="">benny@nordreg.se</span></span></a></span><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 12pt;" class="">></span></span><span lang="EN-IE" style="font-size: 12pt;" class=""><br class=""><span class="m7981932615346826788size"><b class="">Cc:<span class="Apple-converted-space"> </span></b>RDS PDP WG <</span></span><span lang="EN-IE" class=""><a href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank" style="color: purple; text-decoration: underline;" class=""><span class="m7981932615346826788size"><span style="font-size: 12pt;" class="">gnso-rds-pdp-wg@icann.org</span></span></a></span><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 12pt;" class="">></span></span><span lang="EN-IE" style="font-size: 12pt;" class=""><br class=""><span class="m7981932615346826788size"><b class="">Subject:<span class="Apple-converted-space"> </span></b>Re: [gnso-rds-pdp-wg] Krebs On Security article RE whois and GDRP</span></span><o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-IE" class=""> </span><o:p class=""></o:p></div></div><div class=""><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><a name="m_7981932615346826788_m_-654466622787738" class=""><span class="m7981932615346826788font"><span lang="EN-IE" style="font-family: Arial, sans-serif; color: rgb(68, 68, 68);" class="">I think quite a bit in this WG and certainly in the prior privacy/proxy PDP, and absolutely what we're seeing with GoDaddy. To make sure I'm being clear about what I mean, GoDaddy isn't only redacting Whois information (via Port 43) where it's an EU natural citizen or natural resident. The information is being redacted for....everyone. All registrants. There's simply no justification for that. </span></span></a><o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="m7981932615346826788font"><span lang="EN-IE" style="font-family: Arial, sans-serif; color: rgb(68, 68, 68);" class=""> </span></span><o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="m7981932615346826788font"><span lang="EN-IE" style="font-family: Arial, sans-serif; color: rgb(68, 68, 68);" class="">I predict you'd see (I'm not speaking for anyone here, just me) a real willingness on the security and compliance community's part to compromise and support a system where, IF a registrant is an EU natural person (yes, I know we need to define it accurately -- citizen, resident, we can get granular later) then...hey, let's set up a system in involving redaction of some fields, access to those fields in legitimate cases, etc. I want to support registrars' compliance with the GDPR. But we're seeing the registrar community say: We want to apply this globally. To all domain name registrations. Doesn't matter if the registrant is the intended beneficiary of the new law, or in scope, or not. We're going to just change global policy.</span></span><o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="m7981932615346826788font"><span lang="EN-IE" style="font-family: Arial, sans-serif; color: rgb(68, 68, 68);" class=""> </span></span><o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="m7981932615346826788font"><span lang="EN-IE" style="font-family: Arial, sans-serif; color: rgb(68, 68, 68);" class="">I think that viewpoint has been pretty repeatedly represented in this working group, but I'd love to hear from registrars that would support a more targeted solution where only the intended beneficiaries of the GDPR (that is, in-scope registrants) are covered under the policy. </span></span><o:p class=""></o:p></div></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-IE" class=""> </span><o:p class=""></o:p></div><div class=""><div class=""><div class=""><div class=""><div class=""><div class=""><div class=""><div class=""><div class=""><div class=""><div class=""><div class=""><div class=""><div class=""><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="m7981932615346826788font"><span lang="EN-IE" style="font-family: Arial, sans-serif; color: rgb(7, 55, 99);" class="">John Horton</span></span><span lang="EN-IE" style="font-family: Arial, sans-serif; color: rgb(7, 55, 99);" class=""><br class=""><span class="m7981932615346826788font">President and CEO, LegitScript</span></span><span lang="EN-IE" class=""></span><o:p class=""></o:p></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-IE" style="border: 1pt solid windowtext; padding: 0in;" class=""><span id="cid:image001.jpg@01D3A7DE.FA2A2280"><image001.jpg></span></span><o:p class=""></o:p></div><div class=""><div style="margin: 0in 0in 0.0001pt;" class=""><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 9pt; font-family: Helvetica, sans-serif;" class=""> </span></span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt;" class=""><span class="m7981932615346826788size"><b class=""><span lang="EN-IE" style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(68, 68, 68);" class="">Follow</span></b></span><span class="m7981932615346826788size"><b class=""><span lang="EN-IE" style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(11, 83, 148);" class=""> </span></b></span><span class="m7981932615346826788size"><b class=""><span lang="EN-IE" style="font-size: 9pt; font-family: Helvetica, sans-serif;" class="">Legit</span></b></span><span class="m7981932615346826788size"><b class=""><span lang="EN-IE" style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(11, 83, 148);" class="">Script</span></b></span><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 9pt; font-family: Helvetica, sans-serif;" class="">: </span></span><span lang="EN-IE" class=""><a href="http://www.linkedin.com/company/legitscript-com" target="_blank" style="color: purple; text-decoration: underline;" class=""><span class="m7981932615346826788size"><span style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(204, 0, 0);" class="">LinkedIn</span></span></a></span><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 9pt; font-family: Helvetica, sans-serif;" class=""> | </span></span><span lang="EN-IE" class=""><a href="https://www.facebook.com/LegitScript" target="_blank" style="color: purple; text-decoration: underline;" class=""><span class="m7981932615346826788size"><span style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(106, 168, 79);" class="">Facebook</span></span></a></span><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 9pt; font-family: Helvetica, sans-serif;" class=""> | </span></span><span lang="EN-IE" class=""><a href="https://twitter.com/legitscript" target="_blank" style="color: purple; text-decoration: underline;" class=""><span class="m7981932615346826788size"><span style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(103, 78, 167);" class="">Twitter</span></span></a></span><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 9pt; font-family: Helvetica, sans-serif;" class=""> | </span></span><span lang="EN-IE" class=""><a href="http://blog.legitscript.com/" target="_blank" style="color: purple; text-decoration: underline;" class=""><span class="m7981932615346826788size"><span style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(17, 85, 204);" class="">Blog</span></span></a></span><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 9pt; font-family: Helvetica, sans-serif;" class=""> |</span></span><span class="m7981932615346826788colour"><span lang="EN-IE" style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(255, 153, 0);" class=""> </span></span><span lang="EN-IE" class=""><a href="http://go.legitscript.com/Subscription-Management.html" target="_blank" style="color: purple; text-decoration: underline;" class=""><span class="m7981932615346826788size"><span style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(255, 153, 0);" class="">Newsletter</span></span></a></span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt;" class=""><span class="m7981932615346826788size"><span lang="EN-IE" style="font-size: 9pt; font-family: Helvetica, sans-serif;" class=""> </span></span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt;" class=""><span lang="EN-IE" style="font-size: 9pt; font-family: Helvetica, sans-serif; color: rgb(255, 153, 0); border: 1pt solid windowtext; padding: 0in;" class=""><span id="cid:image002.jpg@01D3A7DE.FA2A2280"><image002.jpg></span><span id="cid:image003.jpg@01D3A7DE.FA2A2280"><image003.jpg></span></span><o:p class=""></o:p></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div><div class=""><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-IE" class=""> </span><o:p class=""></o:p></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-IE" class="">On Fri, Feb 16, 2018 at 10:44 AM,<span class="Apple-converted-space"> </span><a href="mailto:benny@nordreg.se" target="_blank" style="color: purple; text-decoration: underline;" class="">benny@nordreg.se</a><span class="Apple-converted-space"> </span><<a href="mailto:benny@nordreg.se" target="_blank" style="color: purple; text-decoration: underline;" class="">benny@nordreg.se</a>> wrote:</span><o:p class=""></o:p></div><blockquote style="border-style: none none none solid; border-left-width: 1pt; border-left-color: rgb(204, 204, 204); padding: 0in 0in 0in 6pt; margin: 5pt 0in 5pt 4.8pt;" class="" type="cite"><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-IE" class="">Please refer to where registrars have been unwilling to explore this option?<br class=""><br class=""><br class=""><br class="">--<br class="">Med vänliga hälsningar / Kind Regards / Med vennlig hilsen<br class=""><br class="">Benny Samuelsen<br class="">Registry Manager - Domainexpert<br class=""><br class="">Nordreg AB - ICANN accredited registrar<br class="">IANA-ID: 638<br class="">Phone:<span class="Apple-converted-space"> </span><a href="tel:%2B46.42197000" target="_blank" style="color: purple; text-decoration: underline;" class="">+46.42197000</a><br class="">Direct:<span class="Apple-converted-space"> </span><a href="tel:%2B47.32260201" target="_blank" style="color: purple; text-decoration: underline;" class="">+47.32260201</a><br class="">Mobile:<span class="Apple-converted-space"> </span><a href="tel:%2B47.40410200" target="_blank" style="color: purple; text-decoration: underline;" class="">+47.40410200</a><br class=""><br class=""><span class="m7981932615346826788m-6544666227877383717m-150974235383208381im">> On 16 Feb 2018, at 19:38, John Horton via gnso-rds-pdp-wg <</span><a href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank" style="color: purple; text-decoration: underline;" class="">gnso-rds-pdp-wg@icann.org</a><span class="m7981932615346826788m-6544666227877383717m-150974235383208381im">> wrote:</span><br class=""><span class="m7981932615346826788m-6544666227877383717m-150974235383208381im">></span><br class=""><span class="m7981932615346826788m-6544666227877383717m-150974235383208381im">> Just imagine how much of all of this could be avoided if registrars were willing to agree to a commercial/individual distinction.</span><br class=""><span class="m7981932615346826788m-6544666227877383717m-150974235383208381im">></span><br class=""><span class="m7981932615346826788m-6544666227877383717m-150974235383208381im">> John Horton</span><br class=""><span class="m7981932615346826788m-6544666227877383717m-150974235383208381im">> President and CEO, LegitScript</span><br class=""><span class="m7981932615346826788m-6544666227877383717m-150974235383208381im">></span><br class=""><span class="m7981932615346826788m-6544666227877383717m-150974235383208381im">></span><br class=""><span class="m7981932615346826788m-6544666227877383717m-150974235383208381im">> Follow LegitScript: LinkedIn | Facebook | Twitter | Blog | Newsletter</span><br class=""><span class="m7981932615346826788m-6544666227877383717m-150974235383208381im">></span><br class=""><span class="m7981932615346826788m-6544666227877383717m-150974235383208381im">></span><br class=""><span class="m7981932615346826788m-6544666227877383717m-150974235383208381im">></span></span><o:p class=""></o:p></div><div class=""><div class=""><p class="MsoNormal" style="margin: 0in 0in 12pt; font-size: 11pt; font-family: Calibri, sans-serif;"><span lang="EN-IE" class="">> On Fri, Feb 16, 2018 at 10:33 AM, John Bambenek via gnso-rds-pdp-wg <<a href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank" style="color: purple; text-decoration: underline;" class="">gnso-rds-pdp-wg@icann.org</a>> wrote:<br class="">> GDPR taken to its logical extreme very well could require us to abandon IP reputation and to emptying our firewalls. I mean, no consumer authorized me to process their IP just by attacking me, right?<br class="">><br class="">> Privacy absolutism is not the answer unless you basically want to mandate the internet backbone be converted to tor.<br class="">><br class="">> --<br class="">> John Bambenek<br class="">><br class="">> On Feb 16, 2018, at 06:09, Michele Neylon - Blacknight <<a href="mailto:michele@blacknight.com" target="_blank" style="color: purple; text-decoration: underline;" class="">michele@blacknight.com</a>> wrote:<br class="">><br class="">>> It’s an interesting read, but it has several flaws.<br class="">>><br class="">>> It refers to registrars solely and ignores registries.<br class="">>><br class="">>> It also makes it sound like issues around whois are “new”, which we all know isn’t true.<br class="">>><br class="">>> The comments about IP addresses make it sound like it’s a theoretical concern, yet there is case law eg:<br class="">>><br class="">>><span class="Apple-converted-space"> </span><a href="https://www.irishtimes.com/business/technology/european-court-of-justice-rules-ip-addresses-are-personal-data-1.2835704" target="_blank" style="color: purple; text-decoration: underline;" class="">https://www.irishtimes.com/business/technology/european-court-of-justice-rules-ip-addresses-are-personal-data-1.2835704</a><br class="">>><br class="">>><br class="">>><br class="">>><br class="">>><br class="">>><br class="">>><br class="">>> --<br class="">>><br class="">>> Mr Michele Neylon<br class="">>><br class="">>> Blacknight Solutions<br class="">>><br class="">>> Hosting, Colocation & Domains<br class="">>><br class="">>><span class="Apple-converted-space"> </span><a href="https://www.blacknight.com/" target="_blank" style="color: purple; text-decoration: underline;" class="">https://www.blacknight.com/</a><br class="">>><br class="">>><span class="Apple-converted-space"> </span><a href="http://blacknight.blog/" target="_blank" style="color: purple; text-decoration: underline;" class="">http://blacknight.blog/</a><br class="">>><br class="">>> Intl.<span class="Apple-converted-space"> </span><a href="tel:%2B353%20%280%29%2059%20%209183072" target="_blank" style="color: purple; text-decoration: underline;" class="">+353 (0) 59 9183072</a><br class="">>><br class="">>> Direct Dial:<span class="Apple-converted-space"> </span><a href="tel:%2B353%20%280%2959%209183090" target="_blank" style="color: purple; text-decoration: underline;" class="">+353 (0)59 9183090</a><br class="">>><br class="">>> Personal blog:<span class="Apple-converted-space"> </span><a href="https://michele.blog/" target="_blank" style="color: purple; text-decoration: underline;" class="">https://michele.blog/</a><br class="">>><br class="">>> Some thoughts:<span class="Apple-converted-space"> </span><a href="https://ceo.hosting/" target="_blank" style="color: purple; text-decoration: underline;" class="">https://ceo.hosting/</a><br class="">>><br class="">>> -------------------------------<br class="">>><br class="">>> Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty<br class="">>><br class="">>> Road,Graiguecullen,Carlow,R93 X265,Ireland Company No.: 370845<br class="">>><br class="">>> From: gnso-rds-pdp-wg <<a href="mailto:gnso-rds-pdp-wg-bounces@icann.org" target="_blank" style="color: purple; text-decoration: underline;" class="">gnso-rds-pdp-wg-bounces@icann.org</a>> on behalf of Dotzero <<a href="mailto:dotzero@gmail.com" target="_blank" style="color: purple; text-decoration: underline;" class="">dotzero@gmail.com</a>><br class="">>> Date: Friday 16 February 2018 at 00:07<br class="">>> To: RDS PDP WG <<a href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank" style="color: purple; text-decoration: underline;" class="">gnso-rds-pdp-wg@icann.org</a>><br class="">>> Subject: [gnso-rds-pdp-wg] Krebs On Security article RE whois and GDRP<br class="">>><br class="">>><br class="">>><br class="">>><br class="">>><span class="Apple-converted-space"> </span><a href="https://krebsonsecurity.com/2018/02/new-eu-privacy-law-may-weaken-security/" target="_blank" style="color: purple; text-decoration: underline;" class="">https://krebsonsecurity.com/2018/02/new-eu-privacy-law-may-weaken-security/</a><br class="">>><br class="">>> Michael Hammer<br class="">>><br class="">>> _______________________________________________<br class="">>> gnso-rds-pdp-wg mailing list<br class="">>><span class="Apple-converted-space"> </span><a href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank" style="color: purple; text-decoration: underline;" class="">gnso-rds-pdp-wg@icann.org</a><br class="">>><span class="Apple-converted-space"> </span><a href="https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg" target="_blank" style="color: purple; text-decoration: underline;" class="">https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg</a><br class="">><br class="">> _______________________________________________<br class="">> gnso-rds-pdp-wg mailing list<br class="">><span class="Apple-converted-space"> </span><a href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank" style="color: purple; text-decoration: underline;" class="">gnso-rds-pdp-wg@icann.org</a><br class="">><span class="Apple-converted-space"> </span><a href="https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg" target="_blank" style="color: purple; text-decoration: underline;" class="">https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg</a><br class="">><br class="">> _______________________________________________<br class="">> gnso-rds-pdp-wg mailing list<br class="">><span class="Apple-converted-space"> </span><a href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank" style="color: purple; text-decoration: underline;" class="">gnso-rds-pdp-wg@icann.org</a><br class="">><span class="Apple-converted-space"> </span><a href="https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg" target="_blank" style="color: purple; text-decoration: underline;" class="">https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg</a></span><o:p class=""></o:p></p></div></div></blockquote></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-IE" class=""> </span><o:p class=""></o:p></div></div></div></div></div></div></blockquote></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-IE" class=""> </span><o:p class=""></o:p></div></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span lang="EN-IE" class=""> </span><o:p class=""></o:p></div></div></div></div></div></div></blockquote></div></div></div></blockquote><blockquote style="margin-top: 5pt; margin-bottom: 5pt;" class="" type="cite"><div class=""><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">_______________________________________________<o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">gnso-rds-pdp-wg mailing list<o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><a href="mailto:gnso-rds-pdp-wg@icann.org" target="_blank" style="color: purple; text-decoration: underline;" class="">gnso-rds-pdp-wg@icann.org</a><o:p class=""></o:p></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><a href="https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg" target="_blank" style="color: purple; text-decoration: underline;" class="">https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg</a><o:p class=""></o:p></div></div></div></blockquote></div></blockquote><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""> <o:p class=""></o:p></div></div></div></div></div></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><br class="">_______________________________________________<br class="">gnso-rds-pdp-wg mailing list<br class=""><a href="mailto:gnso-rds-pdp-wg@icann.org" style="color: purple; text-decoration: underline;" class="">gnso-rds-pdp-wg@icann.org</a><br class=""><a href="https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg" target="_blank" style="color: purple; text-decoration: underline;" class="">https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg</a><o:p class=""></o:p></div></blockquote></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div></div></div><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">_______________________________________________</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">gnso-rds-pdp-wg mailing list</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><a href="mailto:gnso-rds-pdp-wg@icann.org" style="color: purple; text-decoration: underline; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">gnso-rds-pdp-wg@icann.org</a><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><a href="https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg" style="color: purple; text-decoration: underline; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">https://mm.icann.org/mailman/listinfo/gnso-rds-pdp-wg</a></div></blockquote></div><br class=""></div></body></html>