<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Calibri Light";
panose-1:2 15 3 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;
font-weight:normal;
font-style:normal;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal" style="line-height:18.0pt"><span style="font-family:"Calibri Light",sans-serif;color:black">Dear RDS-WHOIS2,</span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:18.0pt;font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="font-family:"Calibri Light",sans-serif;color:black"> </span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:18.0pt;font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="font-family:"Calibri Light",sans-serif;color:black">ICANN Org has reviewed the 23 recommendations in the draft report and would like to highlight areas that would benefit from clarification, as you work toward finalizing the recommendations. The
input you will find below is not intended to discuss the merit of recommendations, but rather identifies elements for your consideration as you process public comment and shape your final recommendations. </span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:18.0pt;font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="font-family:"Calibri Light",sans-serif;color:black"> </span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:18.0pt;font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="font-family:"Calibri Light",sans-serif;color:black">We note that you have assigned priority levels to each recommendation. In absence of a definition of what these entail, we would recommend factoring the impact of EPDP, GDPR, and need for community
input etc. into the establishment of priority levels. </span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:18.0pt;font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="font-family:"Calibri Light",sans-serif;color:black"> </span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:18.0pt;font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="font-family:"Calibri Light",sans-serif;color:black">In the context of your strategic priority related recommendation 1.1, we would like to call your attention to an initiative ICANN launched in April 2018 – see </span><u><span style="font-family:"Calibri Light",sans-serif;color:#0B4CB4"><a href="https://www.icann.org/news/blog/improving-our-planning-and-preparation"><span style="color:#0B4CB4">https://www.icann.org/news/blog/improving-our-planning-and-preparation</span></a></span></u><span class="apple-converted-space"><span style="font-family:"Calibri Light",sans-serif;color:black"> </span></span><span style="font-family:"Calibri Light",sans-serif;color:black">that
seeks to “identify legislative efforts across the globe early-on to raise awareness within ICANN and consider potential impacts, including how these legislative initiatives may have unintended consequences, which may be avoided”. The reports issued to date
can be found at: </span><u><span style="font-family:"Calibri Light",sans-serif;color:#0B4CB4"><a href="https://www.icann.org/legislative-report"><span style="color:#0B4CB4">https://www.icann.org/legislative-report</span></a></span></u><u><span style="font-family:"Calibri Light",sans-serif;color:#813A5F">.</span></u><span style="font-family:"Calibri Light",sans-serif;color:black"> Additional
context can be found at:</span><span style="font-family:"Calibri Light",sans-serif;color:#813A5F"> </span><u><span style="font-family:"Calibri Light",sans-serif;color:#0B4CB4"><a href="https://www.icann.org/news/announcement-2018-08-30-en"><span style="color:#0B4CB4">https://www.icann.org/news/announcement-2018-08-30-en</span></a></span></u><u><span style="font-family:"Calibri Light",sans-serif;color:#813A5F">.</span></u><span style="font-family:"Calibri Light",sans-serif;color:black"> We
believe this may be in alignment with the improvements you suggested.</span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:18.0pt;font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="font-family:"Calibri Light",sans-serif;color:black"> </span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:18.0pt;font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="font-family:"Calibri Light",sans-serif;color:black">On recommendation 3.1 (outreach), a clarification from the review team on whether it has insights into the user requirements for web documentation and what these are would be a great addition
to the report to help determine specific needs. A review and feedback of current compliance related webpages would also be useful to evaluate any potential improvements needed.</span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:18.0pt;font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="font-family:"Calibri Light",sans-serif;color:black"> </span><span style="font-family:"Calibri Light",sans-serif;color:#FB0007"> </span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:18.0pt;font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="font-family:"Calibri Light",sans-serif;color:black">On recommendation 11.1 (common interface), based on the review team’s suggested implementation, it appears that the metrics and SLAs asked for in the recommendation are intended for use by ICANN
org as mechanisms to proactively identify compliance issues. ICANN org would like to note that there are multiple reasons queries could return blank fields, or no results. It is not possible programmatically to determine the causes of these results. Additionally,
per the Temporary Specification, gTLD registration data results could differ between registry and registrar outputs. Therefore, inconsistencies in registrar and registry gTLD registration data outputs are not necessarily compliance issues. ICANN org would
also like to inform the RDS-WHOIS2 review team that the existing WHOIS look-up tool at whois.icann.org will be updated in the coming months with a new tool built on RDAP. It is possible and intended that the new tool would function in such a way that no data
would be collected by ICANN org.</span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:18.0pt;font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="font-family:"Calibri Light",sans-serif;color:black"> </span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:18.0pt;font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="font-family:"Calibri Light",sans-serif;color:black">On law enforcement recommendations (LE.1 – LE.2), indication from the review team on what “regular” refers to would constitute helpful guidance on timing of data gathering efforts. In addition,
we would encourage the review team to refine the scope of the surveys to bring additional clarity to their purpose.</span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:18.0pt;font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="font-family:"Calibri Light",sans-serif;color:black"> </span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:18.0pt;font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="font-family:"Calibri Light",sans-serif;color:black">On safeguarding registrant data (SG.1), we would recommend clarifying how the recommended action would differ from Principle 1(f) of Article 5 of the GDPR, and whether the review team meant to
refer to baseline requirements (vs. uniform requirements). ICANN Org notes that section 3.2 of the 2013 RAA currently requires Registrars to notify ICANN within 7 days of any unauthorized access to or disclosure of registrant account information or registration
data.</span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:18.0pt;font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="font-family:"Calibri Light",sans-serif;color:black"> </span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:18.0pt;font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="font-family:"Calibri Light",sans-serif;color:black">With respect to compliance related recommendations, we would remind the review team for 4.1 and 4.2 that actions to mitigate are contracted parties’ prerogative and sanctions are unfeasible based
on the current policies/contracts. On CM.1 we also wish to flag that the WHOIS Accuracy Program Specification of the 2013 RAA states that if Registrar does not receive an affirmative response from the Registered Name Holder, the Registrar shall either verify
the applicable contact information manually or suspend the registration, until such time as Registrar has verified the applicable contact information. On CM.3, we would also would recommend using the GAC terms of “underserved regions” instead of “global south”,
as some stakeholders may view global south as not representative of their region and there are conflicting views on the use of the term Global South outside of ICANN. In addition, we believe clarifications on the following would be helpful to provide further
detail and context:</span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:24.0pt;text-indent:-24.0pt;line-height:13.0pt;font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="font-family:"Calibri Light",sans-serif;color:black">· On CM.1, How would the review team expect the determination of the best path forward to be made?</span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:24.0pt;text-indent:-24.0pt;line-height:13.0pt;font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="font-family:"Calibri Light",sans-serif;color:black">· On CM.3, What does “regions” refer to – i.e. registered domain name holder, registrar/record, or reporter? How is it anticipated that the review of registration data for a sample of
names will yield insight into awareness of reporting tools in each of the regions?</span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:24.0pt;text-indent:-24.0pt;line-height:13.0pt;font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="font-family:"Calibri Light",sans-serif;color:black">· On CM.5, what would be the envisioned timeline, form (e.g. initiated PDP), and topic a potential PDP would be expected to address? Could the review team clarify what a “risk-based approach”
refers to? What new RDS policies is the review team referring to? How would the GNSO be expected to incorporate these requirements for measurement, auditing, tracking, reporting and enforcement in all new RDS policies?</span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:18.0pt;font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="font-family:"Calibri Light",sans-serif;color:black">Per </span><u><span style="font-family:"Calibri Light",sans-serif;color:#0B4CB4"><a href="https://www.icann.org/resources/pages/governance/bylaws-en#article4.6"><span style="color:#0B4CB4">Section
4.6 </span></a></span></u><span style="font-family:"Calibri Light",sans-serif;color:black">of ICANN Bylaws, the ICANN Board has six months within receipt of the final report to consider the review team’s recommendations. We would suggest factoring this into
implementation details you include in your recommendations (see 1.1 – 1.2 – 1.3 – 15.1 – LE.1 – LE.2). </span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:18.0pt;font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="font-family:"Calibri Light",sans-serif;color:black"> </span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:18.0pt;font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="font-family:"Calibri Light",sans-serif;color:black">We hope you find this feedback helpful and welcome any follow-up questions or comments you may have. We thank you for all of your efforts in finalizing your recommendations and in supplementing
them with additional detail.</span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:18.0pt;font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="font-family:"Calibri Light",sans-serif;color:black">Thank you,</span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:18.0pt;font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="font-family:"Calibri Light",sans-serif;color:black">Best regards</span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="color:black"><o:p> </o:p></span></p>
<p class="MsoNormal" style="line-height:18.0pt"><span style="font-family:"Calibri Light",sans-serif;color:black">ICANN org<o:p></o:p></span></p>
<p class="MsoNormal" style="font-variant-caps: normal;orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<span style="color:black"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
</div>
</body>
</html>