[Gnso-epdp-team] [Ext] Purpose O (Research) - informal small group

[Benedict Addis]

* Team copied *

Dear Thomas,

Thank you for speaking with me yesterday about the Research purpose. In answer to your second question, I have clarified in the document that the registry will pseudonymise registration data before it is transmitted to ICANN.

Regarding your first question, I have spoken to both current and former members of the OCTO team. They have provided the following additional input:

"Octo used registration data as part of LE [Law Enforcement] training.

Like other opsec [operational security] practitioners we used reg[istration] data when collaborating with public/private sector investigators.

We also used it when we were invited to work with Compliance on a particular complaint."

and

"[we] used full whois when we initiated our own investigations but that activity was self-directed not explicitly part of SSR role and remit. I also used whois to report phishing and brand infringements against ICANN.

Lastly I used whois as part of research into bulk registrations and other consensus policy or registrar practices that had undesirable or unintended consequences."

I should note that prior to 25th May, OCTO used public whois data. Since then, this work is on hold.

Lastly, I’m sorry that this document is reaching you at the 11th hour. I have been waiting for guidance from ICANN before sending it, which was requested over a month ago.

Best,
Benedict.




> On 5 Nov 2018, at 21:36, Thomas Rickert <thomas at rickert.net> wrote:
> 
> Thanks, Benedict!
> 
> Let me reiterate my input, which I think needs to make its way into the document or in a covering note. To be clear, I am not questioning that we need to look into ways to enable ICANN to do research, but I am still unclear as to what their requirements are do to research. 
> 
> *
> More input from those conducting the research is required, especially on the questions:
> What data is actually required for research purposes?
> Would it not be sufficient to have pseundonymized data? 
> *
> 
> Best,
> Thomas
> 
> 
>> Am 05.11.2018 um 22:29 schrieb Berry Cobb <mail at berrycobb.com <mailto:mail at berrycobb.com>>:
>> 
>> Hi Benedict, <>
>>  
>> Thank you for the update.  I think it will be important to get this to the list for the full group’s consideration.  Afterwards, I’ll make a few cosmetic updates and post on the wiki.
>>  
>> Thank you.
>>  
>> B
>>  
>>  
>> Berry Cobb
>> GNSO Policy Consultant
>> @berrycobb
>>  
>> From: Benedict Addis [mailto:bee at theale.co.uk <mailto:bee at theale.co.uk>] 
>> Sent: Monday, November 5, 2018 15:38
>> To: Berry Cobb
>> Cc: farzaneh badii; Marika Konings; Thomas Rickert; Anderson, Marc; Emily Taylor; matt at brandsight.com <mailto:matt at brandsight.com>; Amr Elsadr; Kurt Pritz; Caitlin Tubergen
>> Subject: Re: [Ext] Purpose O (Research) - informal small group
>>  
>> Dear Berry,
>>  
>> Thanks for your message, and thank you everyone for your time.
>>  
>> I’ve updated the workbook to incorporate the feedback from Farzaneh and Thomas.
>>  
>> Essentially, I have clarified that the registry will pseudoymise registration data before it is transmitted to ICANN.
>>  
>> Best,
>> Benedict.
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mm.icann.org/pipermail/gnso-epdp-team/attachments/20181116/13d540cc/attachment-0002.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Purpose O - Data_Elements_Processing_Workbook - 5 November 2018_clean.docx
Type: application/vnd.openxmlformats-officedocument.wordprocessingml.document
Size: 45580 bytes
Desc: not available
URL: <http://mm.icann.org/pipermail/gnso-epdp-team/attachments/20181116/13d540cc/PurposeO-Data_Elements_Processing_Workbook-5November2018_clean-0001.docx>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mm.icann.org/pipermail/gnso-epdp-team/attachments/20181116/13d540cc/attachment-0003.html>