Thanks. I agree with Matthias. I had not heard of this G7 group before, I assume its a law enforcement cooperation body? If so, then the letter is not just a non-substantive lobbying effort, but an IMO quite harmful statement as it says: 'In view of the importance of ensuring access to Whois data for law enforcement authorities, the G7 members call on ICANN to quickly implement a unified access solution that would make non-public Whois data accessible to third parties with legitimate purposes’. Article 6. 1 GDPR states a.o.: 'Processing shall be lawful only if and to the extent that at least one of the following applies: (…) (f.) processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.' And the there is the note: 'Point (f) of the first subparagraph shall not apply to processing carried out by public authorities in the performance of their tasks.' That means the G7 group cannot base their, and other law enforcement agencies’, interest to acces non-public WHOIS data on article 6.1 (f). The legislator is to provide by law for the legal basis for public authorities to process personal data. regards Bastiaan *** Please note that this communication is confidential, legally privileged, and subject to a disclaimer: https://www.ams-ix.net/ams/email-disclaimer ***

On 3 Jul 2019, at 16:30, Matthias M. Hudobnik <matthias@hudobnik.at> wrote:

Signed PGP part Dear Joanna,

Thank you for sharing this with us ;-). This seems like a very general letter with no real substantive content just repeating what the GAC (https://www.icann.org/en/system/files/correspondence/ismail-to-chalaby-24apr... NTIA (https://www.icann.org/en/system/files/correspondence/redl-to-chalaby-04apr19...) already said. I even enjoyed the statement from the EC (https://mm.icann.org/pipermail/comments-epdp-recs-04mar19/attachments/201904...) more because the content of it was in a much more substantive manner.

By the way - if anybody is interested, I wrote my entire diploma thesis about this topic (The Future of WHOIS - An analysis of the Policy Development Process under the GDPR with a focus on the litigation ICANN v. EPAG): https://unipub.uni-graz.at/download/pdf/3703735

Have a nice day! Best, Matthias

_________________________ Ing. Mag. Matthias M. Hudobnik matthias@hudobnik.at http://www.hudobnik.at

Von: At-Large [mailto:at-large-bounces@atlarge-lists.icann.org] Im Auftrag von Joanna Kulesza Gesendet: Mittwoch, 03. Juli 2019 13:19 An: at-large@atlarge-lists.icann.org Betreff: [At-Large] G7 GAC and WHOIS - protecting end users

Dear all,

thought this might be of interest to better understand and substantiate user interests in the WHOIS/GDPR/UAM debate: https://www.icann.org/en/system/files/correspondence/green-to-chalaby-21jun1...

Looking forward to hearing your thoughts.

-- Kind regards, Joanna Kulesza ------------------- Joanna Kulesza, PhD University of Lodz, Poland ALAC / EURALO / Capacity Building Working Group Co-Chair SOI: https://community.icann.org/display/atlarge/Joanna+Kulesza+SOI TT: @KuleszaJ

Problem is that not only do the 7 richest countries in the world an UAM solution quickly, but they also want a solution that they are happy with. Sometimes those demands are hard to reconcile, and "speedy" and "consensus" are often somewhat incompatible. Julf On 03-07-19 23:42, Joanna Kulesza wrote:

Thanks guys! Really helpful. 

My reading of this is that the 7 richest countries in the world are concerned with Icann taking too long on the UAM. Would be great if we as AtLarge could attend to that challenge and lead towards a speedy and effective solution.  

Looking forward to hearing what others think.

P.s. Congrats on the thesis Matt!

Best J.

Śr., 3 lip 2019, 16:59 użytkownik Bastiaan Goslings <bastiaan.goslings@ams-ix.net <mailto:bastiaan.goslings@ams-ix.net>> napisał:

Thanks. I agree with Matthias.

I had not heard of this G7 group before, I assume its a law enforcement cooperation body? If so, then the letter is not just a non-substantive lobbying effort, but an IMO quite harmful statement as it says:

'In view of the importance of ensuring access to Whois data for law enforcement authorities, the G7 members call on ICANN to quickly implement a unified access solution that would make non-public Whois data accessible to third parties with legitimate purposes’.

Article 6. 1 GDPR states a.o.:

'Processing shall be lawful only if and to the extent that at least one of the following applies:

(…)

(f.)  processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.'

And the there is the note:

'Point (f) of the first subparagraph shall not apply to processing carried out by public authorities in the performance of their tasks.'

That means the G7 group cannot base their, and other law enforcement agencies’, interest to acces non-public WHOIS data on article 6.1 (f). The legislator is to provide by law for the legal basis for public authorities to process personal data.

regards Bastiaan

***  Please note that this communication is confidential, legally privileged, and subject to a disclaimer: https://www.ams-ix.net/ams/email-disclaimer  ***

> On 3 Jul 2019, at 16:30, Matthias M. Hudobnik <matthias@hudobnik.at <mailto:matthias@hudobnik.at>> wrote: > > Signed PGP part > Dear Joanna, > > Thank you for sharing this with us ;-). This seems like a very general letter with no real substantive content just repeating what the GAC (https://www.icann.org/en/system/files/correspondence/ismail-to-chalaby-24apr... NTIA (https://www.icann.org/en/system/files/correspondence/redl-to-chalaby-04apr19...) already said. I even enjoyed the statement from the EC (https://mm.icann.org/pipermail/comments-epdp-recs-04mar19/attachments/201904...) more because the content of it was in a much more substantive manner. > > By the way - if anybody is interested, I wrote my entire diploma thesis about this topic (The Future of WHOIS - An analysis of the Policy Development Process under the GDPR with a focus on the litigation ICANN v. EPAG): https://unipub.uni-graz.at/download/pdf/3703735 > > Have a nice day! > Best, > Matthias > > _________________________ > Ing. Mag. Matthias M. Hudobnik > matthias@hudobnik.at <mailto:matthias@hudobnik.at> > http://www.hudobnik.at > > Von: At-Large [mailto:at-large-bounces@atlarge-lists.icann.org <mailto:at-large-bounces@atlarge-lists.icann.org>] Im Auftrag von Joanna Kulesza > Gesendet: Mittwoch, 03. Juli 2019 13:19 > An: at-large@atlarge-lists.icann.org <mailto:at-large@atlarge-lists.icann.org> > Betreff: [At-Large] G7 GAC and WHOIS - protecting end users > > Dear all, > > thought this might be of interest to better understand and substantiate user interests in the WHOIS/GDPR/UAM debate: > https://www.icann.org/en/system/files/correspondence/green-to-chalaby-21jun1... > > Looking forward to hearing  your thoughts. > > -- > Kind regards, > Joanna Kulesza > ------------------- > Joanna Kulesza, PhD > University of Lodz, Poland > ALAC / EURALO / Capacity Building Working Group Co-Chair > SOI: https://community.icann.org/display/atlarge/Joanna+Kulesza+SOI > TT: @KuleszaJ

_______________________________________________ At-Large mailing list At-Large@atlarge-lists.icann.org https://atlarge-lists.icann.org/mailman/listinfo/at-large

At-Large Official Site: http://atlarge.icann.org _______________________________________________ By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.