[Gnso-epdp-team] Additional Information -- Topics related to Consent

[Margie Milam]

Hi  –
Per our discussion, here is information to frame our discussion related to a few of the additional topics we raised:


  1.  Registrant Consent to Publication -

Scope:  The EPDP Charter (Part 1(f)) relates to publication of data.

Issue:  Whether registrars should give the registrant the option to opt in to having their WHOIS Contact Data be published rather than be redacted.   This is an issue that would be available to both natural persons and legal persons.

Temporary Specification: The Temporary Specification 7.2.1/ Appendix C – Section 2.3 contains this requirement:

As soon as commercially reasonable, Registrar MUST provide the opportunity for the Registered Name Holder to provide its Consent to publish the additional contact information outlined in Section 2.3 of Appendix A for the Registered Name Holder.

Proposed Policy:  Confirm this requirement

Rationale:   Registrants such as corporations conducting online business may wish to display their information to ensure that their customers can confirm the authenticity of their website and prevent phishing and other impersonations.   Domainers may wish to be easily contactable in order to solicit interest in secondary sales of their domain names.   Enabling the consent feature is consistent with the accountability principles laid out in GDPR.
EPDP Initial Report:  Silent on the issue of consent

GDPR Legal Basis – Article 7 of GDPR


  1.  Consent by the Registrant to Publish and/or Disclose for technical contact -

Scope:  The EPDP Charter (Part 1(f)) relates to publication of data.

Issue:  Whether registrars should seek consent from those listed as additional contacts (admin/tech) to having their information as reflected in the Contact data be published rather than be redacted.   This is an issue that would be available to both natural persons and legal persons.

Temporary Specification: The Temporary Specification 7.2.1/ Appendix C – Section 2.3 contains this requirement:
Registrar MAY provide the opportunity for the Admin/Tech and/or other contacts to provide Consent to publish additional contact information outlined in Section 2.4 of Appendix A.

EPDP Initial Report:  Silent on the issue of consent

GDPR Legal Basis – Article 7 of GDPR

Proposed Policy:  Confirm this requirement

Rationale:   To avoid inadvertently publishing personal data, this option should be available to registrars.

Have a great weekend!

All the best,

Margie


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mm.icann.org/pipermail/gnso-epdp-team/attachments/20181208/cf9cc373/attachment.html>