FWIW, the EDPB has issued its work program for the next two years. You could extract a few topics of broad interest that intersect the ICANN agenda: - The interplay between GDPR and the ePrivacy - Guidance on the use of contractual necessity as a legal basis for processing - Guidance on individual rights pertaining access, erasure, restrictions, objections and the limitations on these rights - Further clarifications on the concepts of [data] processor and controller With all this in the air for the authoritative framework, the ePDPD outcomes may just be hoisted with its own petard. See it here: https://edpb.europa.eu/sites/edpb/files/files/file1/edpb-2019-02-12plen-2.1e... -Carlton ============================== *Carlton A Samuels* *Mobile: 876-818-1799Strategy, Process, Governance, Assessment & Turnaround* =============================