Re: [lac-discuss-en] RV: ICANN News Alert - ICANN Seeks Public Comment on 2013 RAA Data Retention Specification Data Elements and Legitimate Purposes for Collection and Retention



Excellent exposition of the issue, Aida.  Registrars in EU jurisdictions +
those with similar data protection regimes and reciprocal arrangements with
EU data protection like Uruguay are the ones most affected.

The EWG on Next Generation Registration Data Services have tackled this
issue in our deliberations and would welcome your insight and input.  I
trust you are also a member and following the At-Large Registration Issues
WG.

Kind regards,
-Carlton


==============================
Carlton A Samuels
Mobile: 876-818-1799
*Strategy, Planning, Governance, Assessment & Turnaround*
=============================


On Wed, Mar 26, 2014 at 2:55 PM, <aidanoblia@xxxxxxxxx> wrote:

>
> [[--Translated text (es -> en)--]]
>
>  Subject: Re: RV: ICANN News Alert - ICANN Seeks Public Comment on 2013
> RAA Data Retention Specification Data Elements and Legitimate Purposes for
> Collection and Retention
>  From: aidanoblia@xxxxxxxxx
>
>  Fatima, Alberto, Alejandro and all
>
>
>  Ses understand that a very important issue, and also in the complex
>  laws, I could not attend the roundtable mencionFtima is
>  You can listen any recording? is still some time for
>  comments? I am not clear what is the closing date for comments.
>
>
>  National legislation on protection of personal data are
>  rather strict, and also the right of access to information
>  pblica because ahestara the limit necessary to know what can
>  and must publish and what not, with quextensin, for how long, quines
>  they can do it, you can publish lbremente qudatos cules and require
>  free, express, written consent of the owner ...
>
>
>  In Uruguay the Law 18331 and its implementing regulations refer to the
>  protection of personal data (qualified in two types (sensitive or not)
>  As a human right protected by the constitution of the Republic. It
>  provides the owner of the personal data ARCO rights acronym that
>  level legislation includes right to access the database,
>  Corrigendum of Erroneous data or modified in reality,
>  Erroneous or correction of inaccurate data and Oposicina who does what
>  the law calls &quot;treatment&quot; of the data that is generally any use
> of
>  these express your personal information without written consent
>  holder.
>
>
>  There is a Regulatory Unit Registration and Control of such data by the
>  Agency electronic government, in the Register of the Specifications
>  contain mandatory for all personal data that has a base, and
>  is of public or private persons, controls, and procedures performed
>  auditing and punishing violators with fines and even closure of the
>  database.
>
>
>  There is a base charge and take charge of the practice by
>  account of others or their own. The law regulates their responsibilities.
>  The owner of the database, or jurdica physical person is responding by
>  use or processing of personal data to the owner of that data.
>
>
>  An when they can use or deal in certain circumstances,
>  consent of the owner or in cases of data that supports your
>  treatment without l, personal data can not be used for other
>  purposes for which the owner permitted use.
>
>
>  The base is responsible for their own or decides its use:
>  Personal data is collected for a purpose and should be
>  eliminated once cumplila purpose for which it was collected,
>  can transmit only in certain conditions .. etc.. It is that
>  responsible for the base, which can be physical or legal person to whom
> the
>  data subject can enforce penalties or
>  may correspond.
>
>
>  With variations, this is repeated in the legislation.In case of
>  international data transfer international law applies, and
>  habrque therefore analyze what is the applicable law and jurisdiction
>  competition.
>
>
>
>
>  In the case of ICANN, the owner of the database is * not * ICANN, for
>  Therefore, * is not * legally controller who is made of the
>  personal data.
>
>
>  According saw, in the system of the new agreement, the service is
> outsourced,
>  To improve it in terms of the quality of the data and also about its
>  treatment, but that does not mean the change of ownership.
>
>
>  So ICANN agrees the &quot;excencin&quot; of data retention in
>  analyzing some specific cases and by a special procedure,
>  but hurting the service is intended to improve the users by
>  this new medium.
>
>
>  This is done at the request of the records to be released from their
>  liability because by not having to keep the data in accordance with
>  According to ICANN no longer have to answer to the law for their
>  conservation, damage, misuse, etc..It emphasizes the need for the
>  good faith by the owner or holder of the database (check in)
>  which contains the data, though this good faith is a matter of difficult
>  certain proof.
>
>
>  Also, to not keep such data prevents any possibility
>  fulfill the functions of ICANN in such cases, with respect to the
> prevention of
>  damages that may result from misuse of domain names and
>  similar.
>
>
>
>
>  The issue in each case is to analyze these requests, if you really
>  retention of such data is necessary for the service prestacin
>  to Travs registry is provided or if it constitutes a violation of the
>  law. The blog that cases can be referred to and do not appear
>  so rare. And the position of registrars is clearly find that
>  facilitate their task. but in this case may be against the effectiveness
> and
>  completeness of the service provided by ICANN. From what has already been
> given and can
>  see on the web, it seems that security prevails.But the ms allde
>  presentation requirements of having the case (with reports of attorney,
> etc.
>  ) Should be studied very well in that case is given rather than presumed
>  good faith as a way to resolve these cases.
>
>
>  Otherwise give an endorsement by the owners of the Records
>  released from liability, affect the risk of compliance
>  other obligations, affect all other obligations of the
>  Register and its owner as dueoo who treats data.
>
>
>  As decan seems a matter of interest.
>
>
>
>
>  Regards
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>  3/22/2014 20:59 GMT-03: 00 Alberto Soto <asoto@xxxxxxxxxxxxxxxxxxx> :
>  >
>  >
> > Fátima, solo serán las 04:00 AM en Buenos Aires... Pero prometo
> participar.
> >
> > Gracias!!
> >
> >
> >
> > Alberto Soto
> >
> >
> >
> > De: Fatima Cambronero [mailto:fatimacambronero@xxxxxxxxx]
> > Enviado el: sábado, 22 de marzo de 2014 08:54 p.m.
> > Para: Alberto Soto
> > CC: Dr. Alejandro Pisanty Baruch; LACRALO Español
> > Asunto: Re: [lac-discuss-es] RV: [ALAC-Announce] ICANN News Alert --
> ICANN
> > Seeks Public Comment on 2013 RAA Data Retention Specification Data
> Elements
> > and Legitimate Purposes for Collection and Retention
> >
> >
> >
> > Alejandro, Alberto,
> >
> >
> >
> > Comparto la opinión de que estamos frente a un tema interesante que
> > deberíamos poder analizar y pronunciarnos desde nuestra región.
> >
> >
> >
> > El día lunes 24 a las 15 hs. local de Singapur está prevista una Mesa
> > Redonda sobre Servicios de Directorio de Registro: presente y futuro. Si
> > bien este tema concretamente no está incluido en la agenda de la reunión,
> > es
> > un tema muy relacionado que quizás aparezca en los debates.
> >
> >
> >
> > Sería bueno participar en esta Mesa Redonda para escuchar y discutir los
> > comentarios que pueda haber al respecto. Entiendo que en el horario de
> > nuestros países queda en una franja un poco complicada. Yo voy a estar
> > atendiendo a dicha reunión. Si hay algún comentario o consulta que
> quieran
> > hacer llegar, me ofrezco para transmitirlos.
> >
> >
> >
> > Este es el enlace a la agenda de esta Mesa Redonda:
> >
> >
> https://community.icann.org/display/atlarge/At-Large+Roundtable+on+Registrat
> > ion+Directory+Services%3A+Now+and+the+Future+-+2014.03.24+-+Singapore
> >
> >
> >
> > Aquí el enlace al Adobe Connect:
> https://icann.adobeconnect.com/sin49-vip/
> > (este es el mismo para todas las reuniones de At-Large de la semana).
> >
> >
> >
> > Saludos cordiales,
> >
> > Fatima Cambronero
> >
> >
> >
> > 2014-03-21 23:40 GMT-03:00 Alberto Soto <asoto@xxxxxxxxxxxxxxxxxxx
> > <mailto:asoto@xxxxxxxxxxxxxxxxxxx> >:
> >
> > Creo que  el interés debe ser suficiente. Es justamente uno de los temas
> > que
> > hacen a la existencia de entidades orientadas al usuario final de
> Internet,
> > es decir, NOSOTROS.
> > Con seguridad hay distintas legislaciones para cada país, al menos en
> > algunos ítems sustanciales. Aunque hay países que aún no tienen
> > legislación.
> > Hay 30 días para comentarios, es poco tiempo para  la importancia del
> tema.
> > Sugiero que muy rápidamente las respectivas ALSs de cada país de nuestra
> > Región, lea   los antecedentes de esta referencia, y luego  informen la
> > legislación vigente en su respectivo país, con comentarios. También
> sugiero
> > que para esta primera fase, la fecha límite sea el próximo viernes
> > 28/03/2014.
> > También sugiero que quienes están participando en Singapur, sean eximidos
> > de
> > participar, tienen cosas muy importante que hacer por nosotros.
> >
> > Saludos cordiales
> >
> > Alberto Soto
> >
> > -----Mensaje original-----
> > De: lac-discuss-es-bounces@xxxxxxxxxxxxxxxxxxxxxxx
> > <mailto:lac-discuss-es-bounces@xxxxxxxxxxxxxxxxxxxxxxx>
> > [mailto:lac-discuss-es-bounces@xxxxxxxxxxxxxxxxxxxxxxx
> > <mailto:lac-discuss-es-bounces@xxxxxxxxxxxxxxxxxxxxxxx> ] En nombre de
> Dr.
> > Alejandro Pisanty Baruch
> > Enviado el: viernes, 21 de marzo de 2014 11:25 p.m.
> > Para: lac-discuss-es@xxxxxxxxxxxxxxxxxxxxxxx
> > <mailto:lac-discuss-es@xxxxxxxxxxxxxxxxxxxxxxx>
> > Asunto: [lac-discuss-es] RV: [ALAC-Announce] ICANN News Alert -- ICANN
> > Seeks
> >
> > Public Comment on 2013 RAA Data Retention Specification Data Elements and
> > Legitimate Purposes for Collection and Retention
> >
> > Colegas,
> >
> > el llamado anexo puede tener implicaciones legales apreciables en nuestra
> > región. Convoquemos a los expertos en protección de datos personales y
> > otros
> > temas relacionados con la retención de datos (cómputo forense, leyes de
> > telecomunicaciones, Marco Civil en el caso particular de Brasil) para
> > conformar una opinión sólida, si hay el interés suficiente.
> >
> > Alejandro Pisanty
> >
> >
> > - - - - - - - - - - - - - - - - - - - - - - - - - - -
> >      Dr. Alejandro Pisanty
> > Facultad de Química UNAM
> > Av. Universidad 3000, 04510 Mexico DF Mexico
> >
> >
> >
> > +52-1-5541444475 FROM ABROAD
> >
> > +525541444475 DESDE MÉXICO SMS +525541444475
> > Blog: http://pisanty.blogspot.com
> > LinkedIn: http://www.linkedin.com/in/pisanty
> > Unete al grupo UNAM en LinkedIn,
> > http://www.linkedin.com/e/gis/22285/4A106C0C8614
> > Twitter: http://twitter.com/apisanty
> > ---->> Unete a ISOC Mexico, http://www.isoc.org
> > .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .
> >
> > ________________________________________
> > Desde: alac-announce-bounces@xxxxxxxxxxxxxxxxxxxxxxx
> > <mailto:alac-announce-bounces@xxxxxxxxxxxxxxxxxxxxxxx>
> > [alac-announce-bounces@xxxxxxxxxxxxxxxxxxxxxxx
> > <mailto:alac-announce-bounces@xxxxxxxxxxxxxxxxxxxxxxx> ] en nombre de
> > ICANN
> > At-Large
> > Staff [staff@xxxxxxxxxxxxxxxxx <mailto:staff@xxxxxxxxxxxxxxxxx> ]
> Enviado
> > el: viernes, 21 de marzo de 2014
> > 20:00
> > Hasta: ALAC-Announce@xxxxxxxxxxxxxxxxxxxxxxx
> > <mailto:ALAC-Announce@xxxxxxxxxxxxxxxxxxxxxxx>
> > Asunto: [ALAC-Announce] ICANN News Alert -- ICANN Seeks Public Comment on
> > 2013 RAA Data Retention Specification Data Elements and Legitimate
> Purposes
> > for Collection and Retention
> >
> > [http://www.icann.org/images/gradlogo_bow.jpg]<http://www.icann.org/>
> > News Alert
> >
> > http://www.icann.org/en/news/announcements/announcement-3-21mar14-en.htm
> >
> > ________________________________
> > ICANN Seeks Public Comment on 2013 RAA Data Retention Specification Data
> > Elements and Legitimate Purposes for Collection and Retention
> >
> > 21 March 2014
> >
> > ICANN has been in discussions with a number of Registrars regarding data
> > retention waiver requests ("Waiver Requests") submitted under the 2013
> > Registrar Accreditation Agreement (the "2013 RAA"). Some Registrars are
> > seeking an exemption from certain collection and/or retention
> requirements
> > under the Data Retention Specification (the "Specification") of the 2013
> > RAA. Section 2 of the Data Retention Specification sets forth
> requirements
> > regarding the written materials a Registrar must submit in support of its
> > good faith determination that the collection and/or retention of any data
> > element specified in the Specification violates applicable law, and
> > provides
> > that following notice to ICANN of the Waiver Request, ICANN and the
> > applicable Registrar shall discuss the matter in good faith in an effort
> to
> > reach a mutually acceptable resolution of the matter. An update on the
> 2013
> > RAA and the data retention waiver process can be found here:
> >
> >
> http://blog.icann.org/2014/02/update-on-2013-raa-and-data-retention-waiver-p
> > <
> >
> http://blog.icann.org/2014/02/update-on-2013-raa-and-data-retention-waiver-
> > process/>
> > rocess/
> >
> > ICANN understands that personal data should be treated in accordance with
> > applicable data protection laws, which generally permit gathering and
> > retention of personal data for legitimate purpose(s). ICANN also
> > understands
> > that the law may vary from country to country as to (i) what is
> considered
> > a
> > legitimate purpose, (ii) whether the personal data is adequate, relevant
> > and
> > not excessive in relation to the legitimate purpose for which they are
> > collected and (iii) for how long certain data elements may be retained.
> In
> > other words, what is considered a legitimate purpose for collection of
> > certain data in one country may not be considered a legitimate purpose in
> > another country.
> >
> > During ICANN's discussions in an effort to reach a mutually acceptable
> > resolution of the matter, some Registrars have requested that ICANN (a)
> > clarify and better define certain data elements described in the Data
> > Retention Specification that the Registrars maintain are not clearly
> > defined; and (b) describe potentially legitimate purposes for collection
> > and
> > retention of each data element that would help provide guidance for
> > Registrars both as to whether such elements may be lawfully collected,
> and,
> > if so, for how long such elements might lawfully be retained.
> >
> > In response to these requests from some Registrars, ICANN is posting for
> > public comment a document seeking to clarify what is meant by certain
> data
> > elements described in the Data Retention Specification and describing
> > potentially legitimate purposes for collection and retention of those
> data
> > elements. That document can be found
> > here<
> > http://www.icann.org/en/resources/registrars/raa/draft-data-retention-s
> > <
> >
> http://www.icann.org/en/resources/registrars/raa/draft-data-retention-spec-
> > elements-21mar14-en.pdf>
> > pec-elements-21mar14-en.pdf> [PDF, 116 KB]. The document will be posted
> for
> > a period of thirty (30) days to seek feedback and input from the
> community
> > on (i) whether the data elements are appropriately described, (ii)
> whether
> > the cited purposes for collection and retention are appropriate and
> > legitimate, and (iii) whether there are other potentially legitimate
> > purposes for collection and retention of such data elements. After the
> > thirty (30) day period following this posting has expired, ICANN will
> > consider all feedback and input received in connection with ICANN's
> ongoing
> > discussions to reach a mutually acceptable resolution of Waiver Requests.
> > In
> > the interim, ICANN will continue its ongoing discussions to reach a
> > mutually
> > acceptable resolution of Waiver Requests with individual Registrars with
> > the
> > goal of granting additional Waiver Requests as and when appropriate.
> >
> > A public comment period will remain open until 23:59 p.m. PDT/California,
> > 21
> > April 2014. Public comments will be available for consideration by ICANN
> > staff and the ICANN Board.
> >
> >  *   Comments can be posted to:
> > comments-retention-21mar14@xxxxxxxxx
> > <mailto:comments-retention-21mar14@xxxxxxxxx>
> > <mailto:comments-retention-21mar14@icann
> > <mailto:comments-retention-21mar14@icann>
> > .org>
> >  *   Comments can be viewed at:
> > http://forum.icann.org/lists/comments-retention-21mar14/
> >
> > _______________________________________________
> > ALAC-Announce mailing list
> > ALAC-Announce@xxxxxxxxxxxxxxxxxxxxxxx
> > <mailto:ALAC-Announce@xxxxxxxxxxxxxxxxxxxxxxx>
> > https://atlarge-lists.icann.org/mailman/listinfo/alac-announce
> >
> > At-Large Official Site: http://www.atlarge.icann.org
> > _______________________________________________
> > lac-discuss-es mailing list
> > lac-discuss-es@xxxxxxxxxxxxxxxxxxxxxxx
> > <mailto:lac-discuss-es@xxxxxxxxxxxxxxxxxxxxxxx>
> > https://atlarge-lists.icann.org/mailman/listinfo/lac-discuss-es
> >
> > http://www.lacralo.org
> >
> > _______________________________________________
> > lac-discuss-es mailing list
> > lac-discuss-es@xxxxxxxxxxxxxxxxxxxxxxx
> > <mailto:lac-discuss-es@xxxxxxxxxxxxxxxxxxxxxxx>
> > https://atlarge-lists.icann.org/mailman/listinfo/lac-discuss-es
> >
> > http://www.lacralo.org
> >
> >
> >
> >
> > --
> >
> > Fatima Cambronero
> > Abogada-Argentina
> >
> > Phone: +54 9351 5282 668
> > Twitter: @facambronero
> > Skype: fatima.cambronero
> >
> > Join the LACRALO/ICANN discussions:
> > https://atlarge-lists.icann.org/mailman/listinfo/lac-discuss-es
> >
> > Join the Diplo Internet Governance Community discussions:
> > http://www.diplointernetgovernance.org/
> >
> > Join to the Internet Society (ISOC): http://www.internetsociety.org/
> >
> > _______________________________________________
> > lac-discuss-es mailing list
> > lac-discuss-es@xxxxxxxxxxxxxxxxxxxxxxx
> > https://atlarge-lists.icann.org/mailman/listinfo/lac-discuss-es
> >
> > http://www.lacralo.org
> >
>
>
>
>
>
>
>  Aida Noblia
>  _______________________________________________
>
>
>
> [[--Original text (es)
> http://mm.icann.org/transbot_archive/e752f06712.html
> --]]
>
>
>
> _______________________________________________
> lac-discuss-en mailing list
> lac-discuss-en@xxxxxxxxxxxxxxxxxxxxxxx
> https://atlarge-lists.icann.org/mailman/listinfo/lac-discuss-en
>
>
_______________________________________________