[Gnso-sc-budget] Travel Reports Now Meaningless, as Useful Data has been Redacted

Mon Aug 13 08:54:43 UTC 2018

I would certainly like to see the Privacy Impact Assessment that was undertaken to better understand ICANN’s concerns here.

I note that the Independent Parliamentary Standards Authority in the UK, which compiles and publishes the expense reports for elected members of Parliament, is continuing to publish expense reports. It updated its [publication policy](http://www.theipsa.org.uk/media/184882/ccs0718117668-001_ipsa-publication-scheme_web-accessible-3.pdf) in July 2018, and in this document it outlines what it will and will not publish. It will not publish “specific details of any disability assistance”, for instance, but it will publish the total claimed by the MP annually from the disability assistance budget.

So I do think ICANN could find a way to publish more complete travel reports.

I also note that, in the response to the recent consultation on the future of the fellowship program, [ICANN wrote](https://www.icann.org/en/system/files/files/report-comments-fellowship-proposal-10aug18-en.pdf)  "For reasons relating to privacy and data protection, suggestions relating to publishing biographies of selected fellows … [are not] feasible.”

I think this was an over-reaction; surely a bio (written by the fellow themselves, containing the information they would like others to know about them) can be published.

I raise this because I am concerned that the GDPR is being over-applied by ICANN (and not being applied where it should be…) to the detriment of ICANN’s bylaw-mandated principles of accountability and transparency.

—Ayden

> On 9 Aug 2018, at 13:01, Stephanie Perrin <stephanie.perrin at mail.utoronto.ca> wrote:
>
> I think the basic answer to that question is the inference potential.  If I spent over 4000 on a flight to Brussels, (which I did) either:  I needed a visa and was really late getting it (raises questions re citizenship) or I am flying business class (raises questions about health issues, since that is one of the few criteria which ICANN accepts as rationale to fly anything other than economy.  So one could potentiallyidentify the individual from this data in some cases.
>
> They most probably are being protective of any of the folks flying business for medical reasons, because of the categorization of health data as sensitive in the EU.  Just a guess.
>
> cheers SP
>
> On 2018-08-08 14:05, Ayden Férdeline wrote:
>
>> I’m struggling to understand what even is personal data here.
>>
>> We are not disclosing the supported traveler’s passport number or even their city of departure, just the cost of their flight…
>>
>> Ayden
>>
>>> On 8 Aug 2018, at 20:02, Michele Neylon - Blacknight <michele at blacknight.com> wrote:
>>>
>>> Stephanie
>>>
>>> I don’t think it’s unreasonable to make disclosure a condition of receiving funding. Every funded traveller gets an email from ICANN when they’re approved for a meeting so including something there that gets them to sign off on the consent might work?
>>>
>>> I’ve no idea what the case law etc., is around this in the EU, but it shouldn’t be hard to find out.
>>>
>>> Regards
>>>
>>> Michele
>>>
>>> --
>>>
>>> Mr Michele Neylon
>>>
>>> Blacknight Solutions
>>>
>>> Hosting, Colocation & Domains
>>>
>>> [https://www.blacknight.com](https://www.blacknight.com/)
>>>
>>> [https://blacknight.blog](https://blacknight.blog/) /
>>>
>>> http://ceo.hosting/
>>>
>>> Intl. +353 (0) 59  9183072
>>>
>>> Direct Dial: +353 (0)59 9183090
>>>
>>> -------------------------------
>>>
>>> Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty
>>>
>>> Road,Graiguecullen,Carlow, R93 X265
>>>
>>> ,Ireland  Company No.: 370845
>>>
>>> From: Gnso-sc-budget <gnso-sc-budget-bounces at icann.org> on behalf of Stephanie Perrin <stephanie.perrin at mail.utoronto.ca>
>>> Date: Wednesday 8 August 2018 at 17:51
>>> To: "gnso-sc-budget at icann.org" <gnso-sc-budget at icann.org>
>>> Subject: Re: [Gnso-sc-budget] Travel Reports Now Meaningless, as Useful Data has been Redacted
>>>
>>> I am inclined to think they are over-complying here, but that opinion is based on our own law which has a specific exemption for personal info when you are receiving a grant or benefit from the government....private sector is different.  I think they could make funding conditional on disclosure (so based on consent)....but there may be precedents in Europe to stop that kind of tied consent.  I think it is worth a try though.....
>>>
>>> cheers SP
>>>
>>> On 2018-08-08 12:43, Ayden Férdeline wrote:
>>>
>>>> Yes, that’s correct Michele. We also no longer know the class of travel that each supported traveler travelled in.
>>>>
>>>> Ayden
>>>>
>>>> On Wed, Aug 8, 2018 at 18:19, Michele Neylon - Blacknight <michele at blacknight.com> wrote:
>>>>
>>>>> So the names are listed but not the spend per person?
>>>>>
>>>>> Just the spend per "bucket"?
>>>>>
>>>>> --
>>>>>
>>>>> Mr Michele Neylon
>>>>>
>>>>> Blacknight Solutions
>>>>>
>>>>> Hosting, Colocation & Domains
>>>>>
>>>>> https://www.blacknight.com/
>>>>>
>>>>> http://blacknight.blog/
>>>>>
>>>>> Intl. +353 (0) 59  9183072
>>>>>
>>>>> Direct Dial: +353 (0)59 9183090
>>>>>
>>>>> Personal blog: https://michele.blog/
>>>>>
>>>>> Some thoughts: https://ceo.hosting/
>>>>>
>>>>> -------------------------------
>>>>>
>>>>> Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty
>>>>>
>>>>> Road,Graiguecullen,Carlow,R93 X265,Ireland  Company No.: 370845
>>>>>
>>>>> From: Gnso-sc-budget [<gnso-sc-budget-bounces at icann.org>](mailto:gnso-sc-budget-bounces at icann.org) on behalf of Ayden Férdeline [<icann at ferdeline.com>](mailto:icann at ferdeline.com)
>>>>> Reply-To: Ayden Férdeline [<icann at ferdeline.com>](mailto:icann at ferdeline.com)
>>>>> Date: Wednesday 8 August 2018 at 15:56
>>>>> To: ["gnso-sc-budget at icann.org"](mailto:gnso-sc-budget at icann.org) [<gnso-sc-budget at icann.org>](mailto:gnso-sc-budget at icann.org)
>>>>> Subject: [Gnso-sc-budget] Travel Reports Now Meaningless, as Useful Data has been Redacted
>>>>>
>>>>> Sharing this for information purposes, and because it may be of interest to subscribers of this list—
>>>>>
>>>>> The travel reports that ICANN org publishes are now meaningless, because all the relevant information has been redacted.
>>>>>
>>>>> The explanation that was provided for this change is as follows:
>>>>>
>>>>>> In light of recent changes in privacy regulations, ICANN Travel Support is making enhancements to the Travel Reports that are published for every meeting for our funded travelers. Moving forward, ICANN will publish the overall cost per group and will be redacting the individual cost per traveler. This change will be reflected on ICANN62 Travel Report and subsequent reports moving forward.
>>>>>
>>>>> Source:https://community.icann.org/display/trvlconstit/Travel+Report
>>>>>
>>>>> Presumably the ‘privacy regulations’ this refers to is the GDPR, which does not actually require that this data be redacted.
>>>>>
>>>>> Per page 19, it cost USD 24,804.03 to bring five NextGen Ambassadors to Panama, which at an average of $4,960 a traveler, was substantially more than the average cost per GNSO traveler (which was $2,518/traveler). Without additional data it is difficult to understand why the average cost was so much higher. Was it one traveler whose airfare was disproportionately expensive, or is it something more systematic?
>>>>>
>>>>> I would like to see the travel reports continue to be published in a way that is meaningful, while all of course compliant with the GDPR. If anyone has some suggestions as to how this issue could be taken forward, I would appreciate hearing from you.
>>>>>
>>>>> Many thanks,
>>>>>
>>>>> Ayden
>>>>
>>>> _______________________________________________
>>>>
>>>> Gnso-sc-budget mailing list
>>>>
>>>> Gnso-sc-budget at icann.org
>>>>
>>>> https://mm.icann.org/mailman/listinfo/gnso-sc-budget
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mm.icann.org/pipermail/gnso-sc-budget/attachments/20180813/75f0e7bf/attachment-0001.html>