[Gnso-epdp-legal] Notes and action items - EPDP Phase 2 Legal Committee Meeting #3

[Margie Milam]

Hi-
Following up on the action items from Tuesday’s call -  I added the use case we discussed on yesterday’s call to Question 11.

Updated Question 11: Can legal counsel be consulted to determine whether GDPR prevents fast automated, and non-rate limited responses (as described in SSAC 101) to nonpublic WHOIS data with regards to the SSAC use case (Overarching Purpose: Crime and abuse investigation by non-law enforcement parties) for properly credentialed security practitioners (as defined in SSAC 101), who have agreed on appropriate safeguards?  If such access is not prohibited, can counsel provide examples of safeguards (such as pseudonymization) that should be considered? (BC)

All the best,

Margie

From: Gnso-epdp-legal <gnso-epdp-legal-bounces at icann.org> on behalf of Caitlin Tubergen <caitlin.tubergen at icann.org>
Date: Tuesday, August 6, 2019 at 11:07 AM
To: "gnso-epdp-legal at icann.org" <gnso-epdp-legal at icann.org>
Subject: [Gnso-epdp-legal] Notes and action items - EPDP Phase 2 Legal Committee Meeting #3

Updated Question 11: Can legal counsel be consulted to determine whether GDPR prevents fast automated, and non-rate limited responses (as described in SSAC 101) to nonpublic WHOIS data for properly credentialed security practitioners (as defined in SSAC 101), who have agreed on appropriate safeguards?  If such access is not prohibited, can counsel provide examples of safeguards (such as pseudonymization) that should be considered? (BC)

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mm.icann.org/pipermail/gnso-epdp-legal/attachments/20190809/3e8cd0d1/attachment.html>