[gnso-rds-pdp-wg] List topics for this week

[Denny Watson]

On 6/14/2017 10:16 PM, Rob Golding wrote:
> On 2017-06-14 22:09, allison nixon wrote:
>> Alright. I want to discuss the customer education process, because it
>> does seem to underlie a point of misunderstanding and I want to
>> understand better:
>> -Are customers notified that WHOIS data is made public when they buy
>> domains?
> 
> It doesn't matter whether someone has it explained that this will be
> 'public' or not - the distribution / storage / control / audit /
> accountability levels required are simply not in place at the moment.
> 
> "even after personal data are made public, they are still personal and
> as a consequence the data subjects can not be deprived of the protection
> they are entitled to as regards the processing of their data."
> http://ec.europa.eu/justice/data-protection/article-29/documentation/opinion-recommendation/files/2003/wp76_en.pdf
> 

Scroll up to the top of that document...

"The Working Party is conscious of the growing importance of the Whois
discussion as more and more individuals (private persons) are
registering their own domain names and there have been complaints about
improper use of the Whois data in several countries. The registration of
domain names by individuals raises different legal considerations than
that of companies or other legal persons registering domain names, as it
will be explained more in detail later on in this opinion."

Notice here how this is concerning "private persons" and not corporate
entities.  Please correct me if I'm wrong, but it appears that you are
not making a distinction here and lumping specific fields as identifying
private information about private persons (I often use the term "natural
persons") ... This is not always the case as these field can, and most
often do, contain data that is of a corporate nature.