<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
        {font-family:"Cambria Math";
        panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
        {font-family:Consolas;
        panose-1:2 11 6 9 2 2 4 3 2 4;}
@font-face
        {font-family:"Helvetica Neue";
        panose-1:0 0 0 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0in;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman",serif;}
h1
        {mso-style-priority:9;
        mso-style-link:"Heading 1 Char";
        mso-margin-top-alt:auto;
        margin-right:0in;
        mso-margin-bottom-alt:auto;
        margin-left:0in;
        font-size:24.0pt;
        font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:blue;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:purple;
        text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
        {mso-style-priority:99;
        mso-style-link:"Plain Text Char";
        margin:0in;
        margin-bottom:.0001pt;
        font-size:11.0pt;
        font-family:"Calibri",sans-serif;}
pre
        {mso-style-priority:99;
        mso-style-link:"HTML Preformatted Char";
        margin:0in;
        margin-bottom:.0001pt;
        font-size:10.0pt;
        font-family:"Courier New";}
span.HTMLPreformattedChar
        {mso-style-name:"HTML Preformatted Char";
        mso-style-priority:99;
        mso-style-link:"HTML Preformatted";
        font-family:Consolas;}
span.Heading1Char
        {mso-style-name:"Heading 1 Char";
        mso-style-priority:9;
        mso-style-link:"Heading 1";
        font-family:"Calibri Light",sans-serif;
        color:#2E74B5;}
span.apple-tab-span
        {mso-style-name:apple-tab-span;}
span.EmailStyle22
        {mso-style-type:personal-reply;
        font-family:"Calibri",sans-serif;
        color:#1F497D;}
span.PlainTextChar
        {mso-style-name:"Plain Text Char";
        mso-style-priority:99;
        mso-style-link:"Plain Text";
        font-family:"Calibri",sans-serif;}
.MsoChpDefault
        {mso-style-type:export-only;
        font-size:10.0pt;}
@page WordSection1
        {size:8.5in 11.0in;
        margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
        {page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Dear Team<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoPlainText">As an update.  KC had a crazy two weeks but we have locked in time on Friday to review this and come to some agreed text we can share.<o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<div>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="0" style="width:7.5in;margin-left:4.2pt">
<tbody>
<tr>
<td width="117" valign="top" style="width:82.5pt;padding:4.2pt 4.2pt 4.2pt 4.2pt">
<p class="MsoNormal"><a href="http://www.oas.org/"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;text-decoration:none"><img border="0" width="106" height="137" id="_x0000_i1028" src="http://www.oas.org/en/sms/signature_images/oas.png" alt="OAS.org"></span></a><span style="font-family:"Calibri",sans-serif;color:#1F497D"><o:p></o:p></span></p>
</td>
<td width="12" valign="top" style="width:7.5pt;padding:4.2pt 4.2pt 4.2pt 4.2pt">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><img border="0" width="1" height="130" id="_x0000_i1027" src="http://www.oas.org/en/sms/signature_images/vbar.png" alt="http://www.oas.org/en/sms/signature_images/vbar.png"></span><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p></o:p></span></p>
</td>
<td width="591" valign="top" style="width:6.25in;padding:4.2pt 4.2pt 4.2pt 4.2pt">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#1B4CA0">Sincerely<o:p></o:p></span></b></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#1B4CA0">Kerry-Ann Barrett</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">
<br>
</span><span style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#686361">Cybersecurity Program Officer<br>
Secretariat of the Inter-American Committee against Terrorism (CICTE)<br>
Secretariat for Multidimensional Security (SMS)<br>
</span><b><span style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#F37B3C">Organization of American States</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><br>
</span><span style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#686361">1889 F Street NW Washington D.C. 20006<br>
</span><span style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#686361"><img border="0" width="10" height="10" id="_x0000_i1026" src="http://www.oas.org/en/sms/signature_images/phone.png" alt="http://www.oas.org/en/sms/signature_images/phone.png"></span><span style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#686361"> 
 (202) 370 4675 - </span><span style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#686361"><img border="0" width="10" height="10" id="_x0000_i1025" src="http://www.oas.org/en/sms/signature_images/fax.png" alt="http://www.oas.org/en/sms/signature_images/fax.png"></span><span style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#686361"> (202)
 458 3857  </span><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><br>
</span><span style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><a href="http://www.oas.org/cyber">www.oas.org/cyber</a></span><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><br>
</span><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#0070C0"><a href="https://twitter.com/KerryOAS">@KerryOAS</a>|
</span><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:navy"><a href="https://twitter.com/OEA_Cyber">@OEA_Cyber</a></span><u><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:blue"><o:p></o:p></span></u></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:navy"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><u><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black"><a href="http://oas.us11.list-manage.com/subscribe?u=353ff0663258ae5a775d460db&id=10adfc04db">Register to our distribution list here!</a><o:p></o:p></span></u></b></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black"> <o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
</div>
<div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal">Begin forwarded message:<o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><b><span style="font-family:"Helvetica Neue",serif">From: </span>
</b><span style="font-family:"Helvetica Neue",serif">k claffy <<a href="mailto:kc@caida.org">kc@caida.org</a>></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><b><span style="font-family:"Helvetica Neue",serif">Subject: Re: [Ssr2-review] Call summary: SSR2 Plenary - 29 July 2020</span></b><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><b><span style="font-family:"Helvetica Neue",serif">Date: </span>
</b><span style="font-family:"Helvetica Neue",serif">August 22, 2020 at 9:53:42 PM EDT</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><b><span style="font-family:"Helvetica Neue",serif">To: </span>
</b><span style="font-family:"Helvetica Neue",serif">"<a href="mailto:ssr2-review@icann.org">ssr2-review@icann.org</a>" <<a href="mailto:ssr2-review@icann.org">ssr2-review@icann.org</a>></span><o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal"><br>
Trying to catch up, I see on this call (that i missed)<br>
that Recommendation #29 was reviewed and approved.<br>
<a href="https://docs.google.com/document/d/1MJrPzXTngRCrdXLuiyPf7SeZsuPvwjjFGFoooQsT62U/edit">https://docs.google.com/document/d/1MJrPzXTngRCrdXLuiyPf7SeZsuPvwjjFGFoooQsT62U/edit#</a><br>
<span class="apple-tab-span">            </span>(p68). The team generally agreed to the text, with a minor change<br>
<span class="apple-tab-span">            </span>to 29.4, which was made on the call and is reflected in the<br>
<span class="apple-tab-span">            </span>document.<br>
<br>
when i look at the document, i see problems:<br>
<br>
first, why is it called "Privacy and SSR Measurements"<br>
There is no measurement referred to in this recommendation.<br>
I'm confused. <br>
<br>
(1) 29.1: Why is DOH stuck into the same recommendation as <br>
access to registration data, which has been a topic of<br>
interminable debate for decades?  Access to registration <br>
data merits its own recommendation, given that we've now<br>
spent 2 years on an "EPDP" to try to make progress on<br>
this topic.<br>
<br>
(2) Why is this recommendation not even referring to the<br>
EPDP, which has been going on for two years and its final<br>
report came out 2 days after this meeting, and SSAC has<br>
already published a quite adversarial comment on the EPDP<br>
draft report that came out back in the spring?<br>
( SSAC is about to publish a similar comment on the final<br>
report, but we should at least have considered the SSAC<br>
comment on the draft report..)<br>
<br>
I don't see how this recommendation can completely ignore<br>
the EPDP work.<br>
<br>
(3) Why is this recommendation using the term WHOIS, which<br>
the community is replacing with RDAP? <br>
<br>
(4) 29.3.2 [god help us if we end up with sub-sub-recommendation<br>
numbering!] basically says "ICANN should not break privacy law".<br>
Explain to me why this is needed?  I claim ICANN is already <br>
aware they should not break the law, and already has lawyers<br>
monitoring this area.<br>
<br>
(5) 29.3.3:  develop a policy for *who* to protect PII?<br>
ICANN is not in charge of how registrars in Germany protect<br>
their PII.  I don't understand this subrecommendation, what<br>
known problem it's aimed at solving, and how SSR3 will <br>
know it's been implemented.  <br>
<br>
(6) 29.3.4:  We want ICANN to audit registrars around the world?<br>
Like in China, to make sure that Chinese registrars are following<br>
Chinese registrar law?  I don't see this happening.   I think<br>
we have to be realistic here.  What problem are we trying <br>
to solve, and how will SSR3 know that progress has occurred?<br>
<br>
(7) 29.4:  What's a DPO? it's not yet been mentioned in this<br>
document.  "provide guidance to managers and stakeholders" --<br>
which managers and stakeholders?  whkich "relevant technical<br>
developments".  I have no idea what problem this subrecommendation<br>
is trying to solve.<br>
<br>
there also seem to be entire paragraphs in the 'Rationale and<br>
Finding' for this recommendation that have nothing to do with<br>
privacy, but are focused rather on accuracy of WHOIS information.<br>
the text uses WHOIS and RDAP in different places without <br>
explaining why.  Are we supposed to be reviewing recommendation<br>
text but not the accompanying text on Rationale and Findings?<br>
<br>
struggling,<br>
k<br>
<br>
_______________________________________________<br>
Ssr2-review mailing list<br>
<a href="mailto:Ssr2-review@icann.org">Ssr2-review@icann.org</a><br>
<a href="https://mm.icann.org/mailman/listinfo/ssr2-review">https://mm.icann.org/mailman/listinfo/ssr2-review</a><br>
<br>
_______________________________________________<br>
By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (<a href="https://www.icann.org/privacy/policy">https://www.icann.org/privacy/policy</a>)
 and the website Terms of Service (<a href="https://www.icann.org/privacy/tos">https://www.icann.org/privacy/tos</a>). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery
 or disabling delivery altogether (e.g., for a vacation), and so on.<o:p></o:p></p>
</div>
</div>
</blockquote>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</body>
</html>