<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:131218332;
mso-list-template-ids:120597248;}
@list l0:level1
{mso-level-start-at:2;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level3
{mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level4
{mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level5
{mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level6
{mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level7
{mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level8
{mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level9
{mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1
{mso-list-id:131797094;
mso-list-template-ids:-231843252;}
@list l1:level1
{mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level3
{mso-level-start-at:9;
mso-level-number-format:bullet;
mso-level-text:-;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Calibri",sans-serif;
mso-fareast-font-family:"Times New Roman";}
@list l1:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l1:level5
{mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level6
{mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level7
{mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level8
{mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level9
{mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l2
{mso-list-id:651103045;
mso-list-template-ids:809301380;}
@list l2:level1
{mso-level-start-at:5;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l2:level2
{mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l2:level3
{mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l2:level4
{mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l2:level5
{mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l2:level6
{mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l2:level7
{mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l2:level8
{mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l2:level9
{mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3
{mso-list-id:1730762272;
mso-list-template-ids:-1856715840;}
@list l3:level1
{mso-level-start-at:4;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3:level3
{mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3:level4
{mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3:level5
{mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3:level6
{mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3:level7
{mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3:level8
{mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l3:level9
{mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l4
{mso-list-id:1903755270;
mso-list-template-ids:966562680;}
@list l4:level1
{mso-level-start-at:3;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l4:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l4:level3
{mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l4:level4
{mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l4:level5
{mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l4:level6
{mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l4:level7
{mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l4:level8
{mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l4:level9
{mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style>
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt">Dear RDA Scoping Team Members,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Please find below the notes and action items from today’s meeting.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><br>
The next meeting will be Thursday, 26 May at 14:00 UTC.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><br>
Best regards,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Marika, Berry, and Caitlin<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">-- <o:p></o:p></span></p>
<p class="MsoNormal"><b><u><span style="font-size:11.0pt">Action Items<o:p></o:p></span></u></b></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">1. Brian G. to inquire with ICANN org colleagues if there is any update or further information that can be provided regarding the status of the DPA during the next meeting on
<b>Thursday, 26 May</b>.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2. Scoping Team members to provide an update to their respective stakeholders group with respect to today's discussion about the draft EDPB communication, particularly with respect to scenario 2 and a data
protection impact assessment (DPIA) of Scenario 2. Please provide any proposed updates by
<b>Friday, 27 May</b>. <a href="https://docs.google.com/document/d/1rCBaQ175p_VrP6DtxLUuuoO9Uv5C2qp_/edit">
https://docs.google.com/document/d/1rCBaQ175p_VrP6DtxLUuuoO9Uv5C2qp_/edit</a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">3. Policy Support Staff to incorporate changes agreed to during today's call into the write-up of assignments 1 and 2 by
<b>Friday, 20 May</b>.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">4. Scoping Team members to review all comments received on the write-up and propose compromise language in comments form (where applicable) in advance of next week's call (by
<b>Wednesday, 25 May</b>). <a href="https://docs.google.com/document/d/13sP-2z7rusEYrDyntrgm-tcIavPMJndU/edit">
https://docs.google.com/document/d/13sP-2z7rusEYrDyntrgm-tcIavPMJndU/edit</a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">5. Scoping Team members to review the newly-circulated write up of C.2.2 and propose edits/comments in comment form by Wednesday, 25 May.
<a href="https://docs.google.com/document/d/1CYs9mLHsKcZevmZtFrQBDXbv_nkQ5PKe/edit">
https://docs.google.com/document/d/1CYs9mLHsKcZevmZtFrQBDXbv_nkQ5PKe/edit</a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">by <b>Wednesday, 25 May</b>.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;color:black">Registration Data Accuracy Scoping Team – Meeting #30</span></b><span style="font-size:11.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black">Thursday 19 May at 14.00 UTC<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black"> <o:p></o:p></span></p>
<ol style="margin-top:0in" start="1" type="1">
<li class="MsoNormal" style="color:black;mso-list:l1 level1 lfo1"><span style="font-size:11.0pt">Welcome & Chair Updates (5 minutes)<o:p></o:p></span>
<ol style="margin-top:0in" start="1" type="a">
<li class="MsoNormal" style="color:black;mso-list:l1 level2 lfo1"><span style="font-size:11.0pt">ICANN74 tentative agenda (see <a href="https://community.icann.org/x/KRR1Cw" title="https://community.icann.org/x/KRR1Cw"><span style="color:#0563C1">https://community.icann.org/x/KRR1Cw</span></a>) &
registration for session<o:p></o:p></span>
<ul type="disc">
<li class="MsoListParagraph" style="color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">If any members plan to attend ICANN74 in person, please register and reserve your spot for the session – please check your email, as the information has been sent to the list.</span><span style="font-size:11.0pt"><o:p></o:p></span></li></ul>
</li></ol>
</li></ol>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black"> <o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:.5in;text-indent:-17.85pt"><span style="font-size:11.0pt;color:black">2. Scenarios for EDPB - see update from ICANN org (<a href="https://mm.icann.org/pipermail/gnso-accuracy-st/2022-May/000444.html" title="https://mm.icann.org/pipermail/gnso-accuracy-st/2022-May/000444.html"><span style="color:#0563C1">https://mm.icann.org/pipermail/gnso-accuracy-st/2022-May/000444.html</span></a>)
(15 minutes)<o:p></o:p></span></p>
<ol style="margin-top:0in" start="2" type="1">
<ol style="margin-top:0in" start="1" type="a">
<li class="MsoNormal" style="color:black;mso-list:l0 level2 lfo2"><span style="font-size:11.0pt">Review Scoping Team input (see <a href="https://urldefense.com/v3/__https:/docs.google.com/document/d/1rCBaQ175p_VrP6DtxLUuuoO9Uv5C2qp_/edit__;!!PtGJab4!-cQ5xs34J7SLOT_OCZ0MkPoKz0xOKPsmUfF1Dw9oYBjgVHkPxOiz1y6jXE15VFkOAH5g3ro-hMGaNH_OyK5IYe2B5xF-1AplsO3r$" title="https://urldefense.com/v3/__https://docs.google.com/document/d/1rCBaQ175p_VrP6DtxLUuuoO9Uv5C2qp_/edit__;!!PtGJab4!-cQ5xs34J7SLOT_OCZ0MkPoKz0xOKPsmUfF1Dw9oYBjgVHkPxOiz1y6jXE15VFkOAH5g3ro-hMGaNH_OyK5IYe2B5xF-1AplsO3r$"><span style="color:#0563C1">https://docs.google.com/document/d/1rCBaQ175p_VrP6DtxLUuuoO9Uv5C2qp_/edit
[docs.google.com]</span></a>) <o:p></o:p></span></li></ol>
</ol>
<ol start="1" type="1">
<ol start="1" type="a">
<ul type="disc">
<li class="MsoListParagraph" style="color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">There was a comment from ICANN org, and it seems to change the overall area for discussion and may change earlier comments from others. Can the group get clarification? Specifically, the document starts off with scenarios with
EDPB, and some of the scenarios don’t seem to need permission – that seems to change the scope of the document. The document seems to be going in two different directions – what is this document for?</span><span style="font-size:11.0pt"><o:p></o:p></span></li><li class="MsoListParagraph" style="color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">ICANN was instructed to go and think about scenarios and steps that it could take in furtherance of registration data accuracy – Org looked at what it can do under the current agreements and policies. If the group wants ICANN
to look at scenarios that are outside of what it can do under the current agreements and policies, ICANN can do that, but started with what it believes it can do.<o:p></o:p></span></li><li class="MsoListParagraph" style="color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">This does not address the concern as this was driven by the board’s request to see what could possibly be done in the future.
<o:p></o:p></span></li><li class="MsoListParagraph" style="color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">The ultimate consumer of the data is not the registrars and not ICANN org, so the gold standard is to ask the requestors what they want and need. Asking ICANN org to come up with scenarios should be a proxy for asking what the
ultimate consumers of the data should want. Looking at the contract, it’s understandable why that is a focus, but it is, at most, secondary, as it doesn’t describe what could or should be done.
<o:p></o:p></span></li><li class="MsoListParagraph" style="color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">Not suggesting that ICANN should act beyond its current remit – the document was confusing because there is a number of scenarios, and there are scenarios for processing of non-personal data, but it’s good to understand that only
the scenarios that involve the processing of personal data would be sent to the EDPB. The second scenario seems the most relevant here.<o:p></o:p></span></li><li class="MsoListParagraph" style="color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">There are 4 scenarios in the document: <o:p></o:p></span>
<ul type="disc">
<li class="MsoListParagraph" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level4 lfo1">
<span style="font-size:11.0pt;color:black">Scenario 1: Analyze publicly available registration data for syntactical and operational accuracy (as was done previously in the WHOIS ARS program).</span><span style="font-size:11.0pt"><o:p></o:p></span></li><li class="MsoListParagraph" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level4 lfo1">
<span style="font-size:11.0pt;color:black">Scenario 2: Analyze a sample of full registration data provided by registrars to ICANN org.</span><span style="font-size:11.0pt"><o:p></o:p></span></li><li class="MsoListParagraph" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level4 lfo1">
<span style="font-size:11.0pt;color:black">Scenario 3: Proactive Contractual Compliance audit of registrar compliance with registration data validation and verification requirements.</span><span style="font-size:11.0pt"><o:p></o:p></span></li><li class="MsoListParagraph" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level4 lfo1">
<span style="font-size:11.0pt;color:black">Scenario 4: Registrar registration data accuracy survey (voluntary).</span><span style="font-size:11.0pt"><o:p></o:p></span></li></ul>
</li><li class="MsoListParagraph" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt;color:black">Do any members believe there are any scenarios missing from this list?</span><span style="font-size:11.0pt"><o:p></o:p></span></li><li class="MsoListParagraph" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt;color:black">Two scenarios were added by a member:</span><span style="font-size:11.0pt"><o:p></o:p></span>
<ul type="disc">
<li class="MsoListParagraph" style="color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level4 lfo1;vertical-align:baseline">
<i><span style="font-size:11.0pt">Restarting the ARS with the same sampling methodolgy as before, but requiring Registrars to provide the full set of contact information (clearly in an automated way). ICANN would have to specify how long the information would
be kept and in detail how and by whom it would be processed.<o:p></o:p></span></i></li><li class="MsoListParagraph" style="color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level4 lfo1;vertical-align:baseline">
<i><span style="font-size:11.0pt">A complete or partial retrieval of contact info on a registrar by registra basis (essentially an accuracy audit) with anaylsis similar to that used in the ARS.<o:p></o:p></span></i></li></ul>
</li><li class="MsoListParagraph" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">These example scenarios that were added seem to fall under Scenario 2. The first is ARS and the second is similar to ARS – both involve ICANN processing data that is sent to it.<o:p></o:p></span></li><li class="MsoListParagraph" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">One scenario the group had talked about is instead of doing a survey of all of the data, the group talked about doing a survey on domain names that are subject to DAAR reporting. If the group does not provide the specificity of
a sample of registration data, the EDPB may say that ICANN trying to survey all 200+ MM names would probably not suffice under Art. 6; however, if there is a narrower scoping, that may be more acceptable. There could be more scoping on the sampling.
<o:p></o:p></span></li><li class="MsoListParagraph" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">Supportive of ICANN meeting its compliance needs, but concerned with the group getting too in the weeds with what ICANN needs to do to meet its needs, and the community does not direct ICANN compliance – ICANN needs to evaluate
its own legitimate interests. The group should be careful about telling ICANN what it needs to do since these are questions from ICANN, not the community.
<o:p></o:p></span></li><li class="MsoListParagraph" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">It would be shortsighted to miss the opportunity to ask questions of the EDPB based upon work and subject matter that this group has been deliberating for the last eight months.
<o:p></o:p></span></li><li class="MsoListParagraph" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">The group needs to appreciate its roles and responsibilities as parties – there is a lot of work going on these types of issues. Not saying not to ask questions; rather, thank you, ICANN, for asking these questions. However, this
seems to be an ICANN internal risk evaluation. This group can say what we think ICANN’s role is and what is needed to process data properly, but wanted to make the point that ICANN should be careful about saying what Compliance’s job is. (in other words, support
this outreach, without directing)<o:p></o:p></span></li><li class="MsoListParagraph" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">What happens if we, this team, agree on a set of questions the team would like asked? If we forward these to ICANN org as part of their engagement with the EPDB but not presupposing on behalf of ICANN org, and ICANN org chooses
not to include them. The question is – is ICANN not including the questions, does this team send its own communication to the EDPB?
<o:p></o:p></span></li><li class="MsoListParagraph" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">Perhaps deal with this if it happens. This is a confrontation b/w the team, ICANN org, and the GNSO. ARS is not a compliance issue, so we are not looking at this from a compliance perspective. GDPR does not allow ICANN to do what
it did before. Four years into this process, ICANN org has chosen not to go to the EPDB to see if it can continue its work is its choice. We should ask these questions.<o:p></o:p></span></li><li class="MsoListParagraph" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">We are still dealing with the same data from registrars, and now we are looking at a small subset of what we are doing to discuss the data. ICANN is meant to specify business processes. It is unclear what role ICANN wants to play.
EDPB will likely give ICANN the same response – do your homework – write up the processes and your role. EPDB is not legal counsel for ICANN. These are questions for ICANN to answer, and those who believe we should not direct ICANN to answer specific questions
are spot on. <o:p></o:p></span></li><li class="MsoListParagraph" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">As part of the last guidance of “do your homework,” do you believe having a DPA b/w ICANN and CPs is a prerequisite to that homework assignment before the EPDB can further opine?<o:p></o:p></span></li><li class="MsoListParagraph" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">The first thing that would need to be done is to do a DPIA, and would ask ICANN org if there is a DPIA.<o:p></o:p></span></li><li class="MsoListParagraph" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">Within this communication, ICANN notes it is planning to do a DPIA on at least one of the scenarios – scenario 2
<o:p></o:p></span></li><li class="MsoListParagraph" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">Given the discussion about the broad breadth of scenario 2, could ICANN consult with the community about the specificity of scenario 2 before a DPIA is undertaken?<o:p></o:p></span></li><li class="MsoListParagraph" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">In sending this request to this team, ICANN is looking for this team’s input on these scenarios. Hoping to get some input or specific links to compliance would be helpful to include.
<o:p></o:p></span></li><li class="MsoListParagraph" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">Believe the two added scenarios are very different – one is a sample based on randomness or DAAR and the other is a registrar audit that could, in theory, request all of the data. The terms that would ultimately have to go into
the RAA to allow those would be quite different. The group will have to a lot of homework on this. Because the impacts on privacy may be different depending on what the group does, the group will need to be very specific.
<o:p></o:p></span></li><li class="MsoListParagraph" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">The group has veered from the assignment – focus on the scenarios that ICANN has requested input on and not get into too much detail here. A DPIA would be great, but that is a different assignment than reviewing scenarios that
are to be sent to the EDPB. <o:p></o:p></span></li><li class="MsoListParagraph" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">Perhaps the group pause on this analysis today and each group go back with respect to Scenario 2 with a further level of detail, acknowledging that ICANN org is doing a DPIA on Scenario 2<o:p></o:p></span></li><li class="MsoListParagraph" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">It could also be useful to know the status with respect to controllership agreements – that could change the whole picture. We know there is supposed to be negotiations with respect to the Phase 1 implementations and this would
be useful in understanding the overall picture. <o:p></o:p></span></li><li class="MsoListParagraph" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">Action Item: ICANN org to report back on the status of the DPA negotiations.
<o:p></o:p></span></li><li class="MsoListParagraph" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">This seems tangential to the discussion of accuracy. Controllership is not relevant to accuracy. This does not give the group a picture of the status of accuracy. Who the controller is does not inform on the accuracy levels –
these two questions should be separate. <o:p></o:p></span></li><li class="MsoListParagraph" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">If the group is going to look at what actions ICANN org can take, then the controllership questions are relevant to the EDPB.
<o:p></o:p></span></li><li class="MsoListParagraph" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">Encourage all members to go back to their respective stakeholder groups and update them on today’s conversation, specifically the potential DPIA on Scenario 2.
<o:p></o:p></span></li><li class="MsoListParagraph" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">The original deadline was 23 May – is more time needed, and if so, how much more time is needed?
<o:p></o:p></span></li><li class="MsoListParagraph" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">One more week would be helpful. This concept of engagement with the EDPB was introduced to the group at ICANN73.
<o:p></o:p></span></li><li class="MsoListParagraph" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">In terms of timing, the questions are being drafted and the discussion and input on the scenarios is an important part of that – goal is to submit these as soon as possible, though there is some prep work that needs to get done
so they are received in the most effective manner and that may involve conversations with members of the EC. It seems that asking the questions is part of the DPIA in a sense, but to the extent that it makes sense to go to the EDPB with a DPIA in hand is a
reasonably good suggestion and could be done rather quickly. <o:p></o:p></span></li><li class="MsoListParagraph" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">What definition of accuracy would the group like to use – is it the existing definition in the RAA or is it a new definition?
<o:p></o:p></span></li><li class="MsoListParagraph" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">Scenario 2 – the response or input we get could be broad enough to cover Org for edge or sub-scenarios<o:p></o:p></span></li><li class="MsoListParagraph" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">The DPIA should flow easily from the chosen scenario(s)<o:p></o:p></span></li></ul>
</ol>
</ol>
<p class="MsoListParagraph" style="margin-left:1.5in"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<ol style="margin-top:0in" start="2" type="1">
<ol style="margin-top:0in" start="2" type="a">
<li class="MsoNormal" style="color:black;mso-list:l0 level2 lfo2"><span style="font-size:11.0pt">Confirm next steps<o:p></o:p></span></li></ol>
</ol>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black"> <o:p></o:p></span></p>
<ol style="margin-top:0in" start="3" type="1">
<li class="MsoNormal" style="color:black;mso-list:l4 level1 lfo3"><span style="font-size:11.0pt">Write up for assignments #1 & #2 (see </span><span style="font-size:11.0pt;color:windowtext"><a href="https://urldefense.com/v3/__https:/docs.google.com/document/d/13sP-2z7rusEYrDyntrgm-tcIavPMJndU/edit__;!!PtGJab4!-cQ5xs34J7SLOT_OCZ0MkPoKz0xOKPsmUfF1Dw9oYBjgVHkPxOiz1y6jXE15VFkOAH5g3ro-hMGaNH_OyK5IYe2B5xF-1Gm4GLPy$" title="https://urldefense.com/v3/__https://docs.google.com/document/d/13sP-2z7rusEYrDyntrgm-tcIavPMJndU/edit__;!!PtGJab4!-cQ5xs34J7SLOT_OCZ0MkPoKz0xOKPsmUfF1Dw9oYBjgVHkPxOiz1y6jXE15VFkOAH5g3ro-hMGaNH_OyK5IYe2B5xF-1Gm4GLPy$"><span style="color:#0563C1">https://docs.google.com/document/d/13sP-2z7rusEYrDyntrgm-tcIavPMJndU/edit[docs.google.com]</span></a></span><span style="font-size:11.0pt">)
(30 minutes)<o:p></o:p></span>
<ol style="margin-top:0in" start="1" type="a">
<li class="MsoNormal" style="color:black;mso-list:l4 level2 lfo3"><span style="font-size:11.0pt">Review input received<o:p></o:p></span></li></ol>
</li></ol>
<ol start="1" type="1">
<ol start="1" type="a">
<ul type="disc">
<li class="MsoListParagraph" style="color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">Suggest removing “of particular relevance” </span>
<span style="font-size:11.0pt"><o:p></o:p></span></li><li class="MsoListParagraph" style="color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">No objection to removing this from the group<o:p></o:p></span></li><li class="MsoListParagraph" style="color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">Agreement to strike this comment - how certain Registry Operators as part of ICANN's compliance audit have had to provide proof of Registrant verification. If we are looking to provide a complete and accurate snapshot of our
work I think it would be prudent to include in this section<o:p></o:p></span></li><li class="MsoListParagraph" style="color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">To mirror what is found in other sections, pulling out and highlighting certain sections may place more weight on them than is intended. Viewing the information in full, on the other hand, is preferable. All of the information
from Compliance was helpful – proposal to remove bullets and cite the full compliance response.
<o:p></o:p></span></li><li class="MsoListParagraph" style="color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">Agree that the full document should be cited; however, an obscure pointer to the document is unhelpful – it’s preferred to include the salient references.
<o:p></o:p></span></li><li class="MsoListParagraph" style="color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">Could the group consider leaving the bullets as they are but including the full compliance response as an annex, rather than just a link?
<o:p></o:p></span></li><li class="MsoListParagraph" style="color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">The language should be high-level – there is a reference in the second bullet to V1 and V2 – these should be stricken for the sake of readability<o:p></o:p></span></li><li class="MsoListParagraph" style="color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">Are there any objections to striking references to V1 and V2?<o:p></o:p></span></li><li class="MsoListParagraph" style="color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">There may be confusion here since V1 and V2 may come from the original question that was asked. Perhaps removing these references may be sufficient to avoid this confusion.
<o:p></o:p></span></li><li class="MsoListParagraph" style="color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">Suggestion to keep the word willfully as that is part of the RAA.<o:p></o:p></span></li><li class="MsoListParagraph" style="color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">Suggestion to defer this discussion until next week.<o:p></o:p></span></li><li class="MsoListParagraph" style="color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">Please look at the document and weigh in before the next call, particularly if there is a middle ground proposal.<o:p></o:p></span></li><li class="MsoListParagraph" style="color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l1 level3 lfo1">
<span style="font-size:11.0pt">Also shared a write up for C.2.2. – please put questions or concerns in the form of comments.
<o:p></o:p></span></li></ul>
</ol>
</ol>
<ol style="margin-top:0in" start="3" type="1">
<ol style="margin-top:0in" start="2" type="a">
<li class="MsoNormal" style="color:black;mso-list:l4 level2 lfo3"><span style="font-size:11.0pt">Confirm next steps<o:p></o:p></span></li></ol>
</ol>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black"> <o:p></o:p></span></p>
<ol style="margin-top:0in" start="4" type="1">
<li class="MsoNormal" style="color:black;mso-list:l3 level1 lfo4"><span style="font-size:11.0pt">Write up for Section 2.1.2 – Measurement of whether current goals are met (see
</span><u><span style="font-size:11.0pt;color:#0563C1"><a href="https://docs.google.com/document/d/1CYs9mLHsKcZevmZtFrQBDXbv_nkQ5PKe/edit%20%5bdocs.google.com%5d">https://docs.google.com/document/d/1CYs9mLHsKcZevmZtFrQBDXbv_nkQ5PKe/edit [docs.google.com]</a></span></u><span style="font-size:11.0pt">)
(15 minutes)<o:p></o:p></span>
<ol style="margin-top:0in" start="1" type="a">
<li class="MsoNormal" style="color:black;mso-list:l3 level2 lfo4"><span style="font-size:11.0pt">Review input received<o:p></o:p></span></li><li class="MsoNormal" style="color:black;mso-list:l3 level2 lfo4"><span style="font-size:11.0pt">Confirm next steps<o:p></o:p></span></li></ol>
</li></ol>
<p class="MsoNormal" style="text-align:justify"><span style="font-size:11.0pt;color:black"> <o:p></o:p></span></p>
<ol style="margin-top:0in" start="5" type="1">
<li class="MsoNormal" style="color:black;mso-list:l2 level1 lfo5"><span style="font-size:11.0pt">Confirm action items & next meeting (Thursday 26 May at 14.00 UTC)<o:p></o:p></span></li></ol>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
</div>
</body>
</html>