[RDS-WHOIS2-Safeguard] Draft Safeguard Report

Wed May 30 14:30:03 UTC 2018

I don't think that we can presume that all 
contracted parties have addressed GDPR, nor can 
we presume that those who have, have done it reasonably.

My intent was to ensure that we use reasonable 
standards (as indicated in the GDPR) and I do not 
believe we should presume that ICANN can do this 
internally. I have no problem including the 
target outcome to clarify though. Is that any better?

Alan

At 30/05/2018 08:07 AM, Volker Greimann wrote:

>Hi Alan,
>
>thanks for this, I have reviewed and have a few comments.
>
>Regarding the recommendation, I feel this is 
>going a bit far. Instead of asking ICANN to be 
>descriptive and determine specific requirements 
>to be placed on contracted parties, I would much 
>rather see the application of gnerally accepted 
>basic principles regarding to protection of data 
>applied on the ICANN level. For example, the 
>GDPR merely requires reasonable protection of 
>data. Drawing on Art 32 GDPR, we should rather 
>recommend that appropriate technical and 
>organisational measures to ensure a level of 
>security appropriate vis-a-vis the identified 
>risks should be required of contracted parties 
>to safeguard the relevant data. This has the 
>added charm that most contracted parties have 
>already made the required adjustments anyway as 
>part of their GDPR readiness planning and ICANN 
>does not need to take on an additional 
>regulatory function as this is already handled by DPAs.
>
>So I am suggesting that the GDPR already did the 
>work that this recommendation was intended to 
>cover for most contracted parties.
>
>Volker
>
>
>
>Am 28.05.2018 um 06:30 schrieb Alan Greenberg:
>>Team, please find attached v3 of the Safeguard 
>>report. If you could review and make comments 
>>by next Friday, that will allow me to revise 
>>and discuss on the following Monday's plenary call.
>>
>>Alan
>>
>>
>>
>>_______________________________________________
>>RDS-WHOIS2-Safeguard mailing list
>><mailto:RDS-WHOIS2-Safeguard at icann.org>RDS-WHOIS2-Safeguard at icann.org
>>https://mm.icann.org/mailman/listinfo/rds-whois2-safeguard
>
>
>--
>Bei weiteren Fragen stehen wir Ihnen gerne zur Verfügung.
>
>Mit freundlichen Grüßen,
>
>Volker A. Greimann
>- Rechtsabteilung -
>
>Key-Systems GmbH
>Im Oberen Werk 1
>66386 St. Ingbert
>Tel.: +49 (0) 6894 - 9396 901
>Fax.: +49 (0) 6894 - 9396 851
>Email: <mailto:vgreimann at key-systems.net>vgreimann at key-systems.net
>
>Web: <http://www.key-systems.net>www.key-systems.net / www.RRPproxy.net
><http://www.domaindiscount24.com>www.domaindiscount24.com 
>/ www.BrandShelter.com
>
>Folgen Sie uns bei Twitter oder werden Sie unser Fan bei Facebook:
><http://www.facebook.com/KeySystems>www.facebook.com/KeySystems
>www.twitter.com/key_systems
>
>Geschäftsführer: Alexander Siffrin
>Handelsregister Nr.: HR B 18835 - Saarbruecken
>Umsatzsteuer ID.: DE211006534
>
>Member of the KEYDRIVE GROUP
><http://www.keydrive.lu>www.keydrive.lu
>
>Der Inhalt dieser Nachricht ist vertraulich und 
>nur für den angegebenen Empfänger bestimmt. Jede 
>Form der Kenntnisgabe, Veröffentlichung oder 
>Weitergabe an Dritte durch den Empfänger ist 
>unzulässig. Sollte diese Nachricht nicht für Sie 
>bestimmt sein, so bitten wir Sie, sich mit uns 
>per E-Mail oder telefonisch in Verbindung zu setzen.
>
>--------------------------------------------
>
>Should you have any further questions, please do not hesitate to contact us.
>
>Best regards,
>
>Volker A. Greimann
>- legal department -
>
>Key-Systems GmbH
>Im Oberen Werk 1
>66386 St. Ingbert
>Tel.: +49 (0) 6894 - 9396 901
>Fax.: +49 (0) 6894 - 9396 851
>Email: <mailto:vgreimann at key-systems.net>vgreimann at key-systems.net
>
>Web: <http://www.key-systems.net>www.key-systems.net / www.RRPproxy.net
><http://www.domaindiscount24.com>www.domaindiscount24.com 
>/ www.BrandShelter.com
>
>Follow us on Twitter or join our fan community on Facebook and stay updated:
><http://www.facebook.com/KeySystems>www.facebook.com/KeySystems
>www.twitter.com/key_systems
>
>CEO: Alexander Siffrin
>Registration No.: HR B 18835 - Saarbruecken
>V.A.T. ID.: DE211006534
>
>Member of the KEYDRIVE GROUP
><http://www.keydrive.lu>www.keydrive.lu
>
>This e-mail and its attachments is intended only 
>for the person to whom it is addressed. 
>Furthermore it is not permitted to publish any 
>content of this email. You must not use, 
>disclose, copy, print or rely on this e-mail. If 
>an addressing or transmission error has 
>misdirected this e-mail, kindly notify the 
>author by replying to this e-mail or contacting us by telephone.
>
>
>
>
>Content-Type: text/plain; charset="us-ascii"
>Content-Transfer-Encoding: 7bit
>Content-Disposition: inline
>X-Microsoft-Exchange-Diagnostics:
> 
>1;YTOPR01MB0396;27:5mjqxhlXqJoUPQe7//7wCPW+/bHWFz0qEKxGeGVZwu9fucz2xLsI8O45JkEfHtgGnpXLc1WyFbp1I8A3ANOSgeu0JnbzHkf7MkmKplksue2CBxwiaX5eO1bcGZyUhwP6
>X-Microsoft-Antispam-Message-Info:
> 
>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
>
>_______________________________________________
>RDS-WHOIS2-Safeguard mailing list
>RDS-WHOIS2-Safeguard at icann.org
>https://mm.icann.org/mailman/listinfo/rds-whois2-safeguard
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mm.icann.org/pipermail/rds-whois2-safeguard/attachments/20180530/1e34e165/attachment-0001.html>