February 2017 - Gdd-gnso-ppsai-impl

Re: [Gdd-gnso-ppsai-impl] Agenda and discussion question for 28 February Privacy/Proxy IRT meeting
by Darcy Southwell Feb. 28, 2017

Feb. 28, 2017

Thanks, Amy. I find the second part of item 2 (after the word “so”) to be confusing and inconsistent with the PDP WG’s intent. Depending on what is considered to be “Customer data,” the discussion was never that registrars would no longer have to “retain” or “escrow” such data. Rather the WG’s focus was (as with many other processes that we’ve discussed so far) that accredited registrars should not have to duplicate work if they are also accredited P/P providers. If that’s what we’re trying to address with item #1, then we should probably rework the language a bit. Is there some clarity that can be provided here before our meeting? Generally speaking, I think item #2 seems at odds with the very concept of an accreditation program. Thanks, Darcy From: <gdd-gnso-ppsai-impl-bounces(a)icann.org> on behalf of Amy Bivins <amy.bivins(a)icann.org> Reply-To: <gdd-gnso-ppsai-impl(a)icann.org> Date: Friday, February 24, 2017 at 6:14 AM To: "gdd-gnso-ppsai-impl(a)icann.org" <gdd-gnso-ppsai-impl(a)icann.org> Subject: [Gdd-gnso-ppsai-impl] Agenda and discussion question for 28 February Privacy/Proxy IRT meeting Hello, All, I hope you are well! This is a reminder of the Privacy/Proxy Services Accreditation IRT call scheduled for 28 February 2017 at 15:00 UTC. I hope you can attend. Our agenda is fairly short, so the call will likely not last the full 90 minutes. Attached is a document that includes background material (text of relevant RAA provisions) and a discussion question for the call. I’m repeating the question here for convenience (if you wish to share your thoughts on this before Tuesday, please feel free to do so on the list): In light of existing RAA requirements for Registrars’ retention and escrow of Privacy and Proxy Service Customer data, and in light of the discussions during the 24th January 2017 Privacy/Proxy Implementation Review Team meeting, the ICANN organization should implement data escrow and retention requirements for accredited Privacy and Proxy Service Providers as follows (choose one): 1. The data escrow and retention requirements for Registrars (with respect to Privacy/Proxy Customer data) should be superseded by new requirements for all accredited Privacy and Proxy Service Providers, so that Registrars would no longer be required to retain or escrow the underlying Customer data associated with Privacy and Proxy Service registrations offered or made available by the Registrar or its affiliates; or 2. ICANN should permit the Registrar and the accredited Privacy and Proxy Service Provider to choose whether the Registrar or the Provider will be responsible for escrow and retention of Customer data. In addition to this question, we will also discuss potential topics for our agenda at our half-day meeting at ICANN58. Best, Amy Amy E. Bivins Registrar Policy Services Manager Registrar Services and Industry Relations Internet Corporation for Assigned Names and Numbers (ICANN) Direct: +1 (202) 249-7551 Fax: +1 (202) 789-0104 Email: amy.bivins(a)icann.org www.icann.org _______________________________________________ Gdd-gnso-ppsai-impl mailing list Gdd-gnso-ppsai-impl(a)icann.org https://mm.icann.org/mailman/listinfo/gdd-gnso-ppsai-impl

6 7

Agenda and discussion question for 28 February Privacy/Proxy IRT meeting
by Winterfeldt, Brian J. Feb. 27, 2017

Feb. 27, 2017

Dear Amy and all: We would support the first of the two options below, namely: The data escrow and retention requirements for Registrars (with respect to Privacy/Proxy Customer data) should be superseded by new requirements for all accredited Privacy and Proxy Service Providers, so that Registrars would no longer be required to retain or escrow the underlying Customer data associated with Privacy and Proxy Service registrations offered or made available by the Registrar or its affiliates. We believe the second option would create inconsistency and confusion, particularly for third parties who would not immediately know whether to go to the registrar or the P/P service provider to obtain retained/escrowed customer data. We believe the accreditation policy/agreement should set one standard applicable across the board for who will retain/escrow customer data as between the registrar and P/P service provider, with the logical choice being the P/P provider because they are in direct contact with the customer whereas the registrar may only have the P/P service provider’s data as the de facto registrant. Best regards, Brian, Phil and Griffin Brian J. Winterfeldt Co-Head of Global Brand Management and Internet Practice Mayer Brown LLP bwinterfeldt(a)mayerbrown.com<mailto:bwinterfeldt@mayerbrown.com> 1999 K Street, NW Washington, DC 20006-1101 202.263.3284 direct dial 202.830.0330 fax 1221 Avenue of the Americas New York, New York 10020-1001 212.506.2345 direct dial From: gdd-gnso-ppsai-impl-bounces(a)icann.org<mailto:gdd-gnso-ppsai-impl-bounces@icann.org> [mailto:gdd-gnso-ppsai-impl-bounces@icann.org] On Behalf Of Amy Bivins Sent: Friday, February 24, 2017 9:15 AM To: gdd-gnso-ppsai-impl(a)icann.org<mailto:gdd-gnso-ppsai-impl@icann.org> Subject: [Gdd-gnso-ppsai-impl] Agenda and discussion question for 28 February Privacy/Proxy IRT meeting Hello, All, I hope you are well! This is a reminder of the Privacy/Proxy Services Accreditation IRT call scheduled for 28 February 2017 at 15:00 UTC. I hope you can attend. Our agenda is fairly short, so the call will likely not last the full 90 minutes. Attached is a document that includes background material (text of relevant RAA provisions) and a discussion question for the call. I’m repeating the question here for convenience (if you wish to share your thoughts on this before Tuesday, please feel free to do so on the list): In light of existing RAA requirements for Registrars’ retention and escrow of Privacy and Proxy Service Customer data, and in light of the discussions during the 24th January 2017 Privacy/Proxy Implementation Review Team meeting, the ICANN organization should implement data escrow and retention requirements for accredited Privacy and Proxy Service Providers as follows (choose one): 1. The data escrow and retention requirements for Registrars (with respect to Privacy/Proxy Customer data) should be superseded by new requirements for all accredited Privacy and Proxy Service Providers, so that Registrars would no longer be required to retain or escrow the underlying Customer data associated with Privacy and Proxy Service registrations offered or made available by the Registrar or its affiliates; or 2. ICANN should permit the Registrar and the accredited Privacy and Proxy Service Provider to choose whether the Registrar or the Provider will be responsible for escrow and retention of Customer data. In addition to this question, we will also discuss potential topics for our agenda at our half-day meeting at ICANN58. Best, Amy Amy E. Bivins Registrar Policy Services Manager Registrar Services and Industry Relations Internet Corporation for Assigned Names and Numbers (ICANN) Direct: +1 (202) 249-7551 Fax: +1 (202) 789-0104 Email: amy.bivins(a)icann.org<mailto:amy.bivins@icann.org> www.icann.org<http://www.icann.org> __________________________________________________________________________ This email and any files transmitted with it are intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. If you are not the named addressee you should not disseminate, distribute or copy this e-mail.

2 1

Re: [Gdd-gnso-ppsai-impl] Agenda and discussion question for 28 February Privacy/Proxy IRT meeting
by Chris Pelling Feb. 24, 2017

Feb. 24, 2017

Whilst it might be a "great email" and thank you Amy for checking, I'll need to check if this meeting clashes with the EU Data commissioners coming to RDS, if it does, I may well have to be in the RDS meeting. Thanks, Chris Sent from Chris on the move! On Fri, Feb 24, 2017 at 6:02 PM +0000, "Jennifer Gore" <jennifer.gore(a)icann.org> wrote: Great email. That is all you can do... On Feb 24, 2017, at 12:58 PM, Amy Bivins <amy.bivins(a)icann.org> wrote: Hi Chris, Theo and All, This conflict is unfortunate, but I don’t think we can avoid it. I double-checked with Mary and there are multiple reasons why the WG meetings on Saturday are scheduled in this order, and they can’t be moved. I’ll post an agenda (with approximate times noted) for you ahead of time. And, in addition to posting all of the materials and the recordings, I’ll send around notes of key action items/points raised to ensure that anyone not in attendance can easily note significant developments. I hope this helps! Have a great weekend, everyone. Amy From: gdd-gnso-ppsai-impl-bounces(a)icann.org [mailto:gdd-gnso-ppsai-impl-bounces@icann.org] On Behalf Of Chris Pelling Sent: Friday, February 24, 2017 11:07 AM To: gdd-gnso-ppsai-impl(a)icann.org Subject: Re: [Gdd-gnso-ppsai-impl] Agenda and discussion question for 28 February Privacy/Proxy IRT meeting I agree with Theo here, this is rather problematic for those of us on both RDS and PPSAI, we could use the T.A.R.D.I.S. do PPSAI and go back to do RDS. :p Kind regards, Chris From: "theo geurts" <gtheo(a)xs4all.nl> To: gdd-gnso-ppsai-impl(a)icann.org Sent: Friday, 24 February, 2017 15:13:40 Subject: Re: [Gdd-gnso-ppsai-impl] Agenda and discussion question for 28 February Privacy/Proxy IRT meeting Hi Amy, This looks good, so we should be able to cover this pretty quick. ICANN 58. The RDS WG and the PPSAI IRT run in parallel on Saturday? Am I the only one who finds this slightly problematic? If there are cloning facilities at the venue, then there is no problem ;) Best Theo On 24-2-2017 15:14, Amy Bivins wrote: Hello, All, I hope you are well! This is a reminder of the Privacy/Proxy Services Accreditation IRT call scheduled for 28 February 2017 at 15:00 UTC. I hope you can attend. Our agenda is fairly short, so the call will likely not last the full 90 minutes. Attached is a document that includes background material (text of relevant RAA provisions) and a discussion question for the call. I’m repeating the question here for convenience (if you wish to share your thoughts on this before Tuesday, please feel free to do so on the list): In light of existing RAA requirements for Registrars’ retention and escrow of Privacy and Proxy Service Customer data, and in light of the discussions during the 24th January 2017 Privacy/Proxy Implementation Review Team meeting, the ICANN organization should implement data escrow and retention requirements for accredited Privacy and Proxy Service Providers as follows (choose one): 1. The data escrow and retention requirements for Registrars (with respect to Privacy/Proxy Customer data) should be superseded by new requirements for all accredited Privacy and Proxy Service Providers, so that Registrars would no longer be required to retain or escrow the underlying Customer data associated with Privacy and Proxy Service registrations offered or made available by the Registrar or its affiliates; or 2. ICANN should permit the Registrar and the accredited Privacy and Proxy Service Provider to choose whether the Registrar or the Provider will be responsible for escrow and retention of Customer data. In addition to this question, we will also discuss potential topics for our agenda at our half-day meeting at ICANN58. Best, Amy Amy E. Bivins Registrar Policy Services Manager Registrar Services and Industry Relations Internet Corporation for Assigned Names and Numbers (ICANN) Direct: +1 (202) 249-7551 Fax: +1 (202) 789-0104 Email: amy.bivins(a)icann.org www.icann.org _______________________________________________ Gdd-gnso-ppsai-impl mailing list Gdd-gnso-ppsai-impl(a)icann.org https://mm.icann.org/mailman/listinfo/gdd-gnso-ppsai-impl _______________________________________________ Gdd-gnso-ppsai-impl mailing list Gdd-gnso-ppsai-impl(a)icann.org https://mm.icann.org/mailman/listinfo/gdd-gnso-ppsai-impl _______________________________________________ Gdd-gnso-ppsai-impl mailing list Gdd-gnso-ppsai-impl(a)icann.org https://mm.icann.org/mailman/listinfo/gdd-gnso-ppsai-impl

1 0

Agenda and discussion question for 28 February Privacy/Proxy IRT meeting
by Amy Bivins Feb. 24, 2017

Feb. 24, 2017

Hello, All, I hope you are well! This is a reminder of the Privacy/Proxy Services Accreditation IRT call scheduled for 28 February 2017 at 15:00 UTC. I hope you can attend. Our agenda is fairly short, so the call will likely not last the full 90 minutes. Attached is a document that includes background material (text of relevant RAA provisions) and a discussion question for the call. I'm repeating the question here for convenience (if you wish to share your thoughts on this before Tuesday, please feel free to do so on the list): In light of existing RAA requirements for Registrars' retention and escrow of Privacy and Proxy Service Customer data, and in light of the discussions during the 24th January 2017 Privacy/Proxy Implementation Review Team meeting, the ICANN organization should implement data escrow and retention requirements for accredited Privacy and Proxy Service Providers as follows (choose one): 1. The data escrow and retention requirements for Registrars (with respect to Privacy/Proxy Customer data) should be superseded by new requirements for all accredited Privacy and Proxy Service Providers, so that Registrars would no longer be required to retain or escrow the underlying Customer data associated with Privacy and Proxy Service registrations offered or made available by the Registrar or its affiliates; or 2. ICANN should permit the Registrar and the accredited Privacy and Proxy Service Provider to choose whether the Registrar or the Provider will be responsible for escrow and retention of Customer data. In addition to this question, we will also discuss potential topics for our agenda at our half-day meeting at ICANN58. Best, Amy Amy E. Bivins Registrar Policy Services Manager Registrar Services and Industry Relations Internet Corporation for Assigned Names and Numbers (ICANN) Direct: +1 (202) 249-7551 Fax: +1 (202) 789-0104 Email: amy.bivins(a)icann.org www.icann.org

4 4

Cancelled: Privacy/Proxy IRT meeting scheduled 21 Feb 2017
by Amy Bivins Feb. 16, 2017

Feb. 16, 2017

Hello, All, I hope you are well. Next week's Privacy/Proxy Implementation Review Team meeting (scheduled for 21 February 2017 at 15:00 UTC) has been canceled, because new materials are not ready to distribute to the IRT for discussion. For those of you who could not attend the IRT meeting on 2/14, I encourage you to listen to the recording, which is available on the wiki page, https://community.icann.org/display/IRT/14+February+2017. If anyone has further input on the RDDS labeling proposal that was distributed last week and discussed on Tuesday, please send it to the list this week. Best, Amy Amy E. Bivins Registrar Policy Services Manager Registrar Services and Industry Relations Internet Corporation for Assigned Names and Numbers (ICANN) Direct: +1 (202) 249-7551 Fax: +1 (202) 789-0104 Email: amy.bivins(a)icann.org www.icann.org

1 0

Privacy/Proxy RDDS labeling document attached for 14 Feb IRT call
by Amy Bivins Feb. 13, 2017

Feb. 13, 2017

Hello, All, Attached is an initial discussion proposal for Tuesday's IRT call, exploring how we could potentially implement the Final Report's recommendation that, "To the extent that this is feasible, domain name registrations involving P/P service providers should be clearly labelled as such in WHOIS." (See Final Report, p. 9) To summarize, we have explored several possible alternatives for implementing this recommendation. The attached proposes to add four new fields, but also identifies the other possible alternatives that were considered. We are seeking your feedback on any and all elements of this proposal, including (1) the specific fields to be added; (2) the location(s) of the new fields; and (3) ensuring that this can be implemented from an operational perspective (particularly if/when a provider is not affiliated with the registrar). Once we have discussed the new fields and the preferred locations for these fields, we will ensure the final product is consistent with the new CL&D requirements. On Tuesday, I'll run through the proposal briefly and also note the other alternatives that were considered but not included here. The rest of the call will be dedicated to your discussion and feedback on this. Please share any preliminary feedback on the list and I look forward to talking with you on Tuesday. Best, Amy Amy E. Bivins Registrar Policy Services Manager Registrar Services and Industry Relations Internet Corporation for Assigned Names and Numbers (ICANN) Direct: +1 (202) 249-7551 Fax: +1 (202) 789-0104 Email: amy.bivins(a)icann.org www.icann.org

4 3

FW: IRT Responses to Privacy/Proxy Operational Questions
by Amy Bivins Feb. 9, 2017

Feb. 9, 2017

Hi, All, I apologize for the repeat message to some of you, I sent to the incorrect list. Best, Amy From: Amy Bivins Sent: Thursday, February 09, 2017 9:26 AM To: gnso-ppsai-pdp-wg(a)icann.org Subject: IRT Responses to Privacy/Proxy Operational Questions Hello, All, Thanks so much to those of you who completed the operational questions survey. The attached file contains a complete list of questions and the answers we received. I plan to distribute a labeling requirements proposal for us to discuss on Tuesday's call no later than tomorrow. Best, Amy Amy E. Bivins Registrar Policy Services Manager Registrar Services and Industry Relations Internet Corporation for Assigned Names and Numbers (ICANN) Direct: +1 (202) 249-7551 Fax: +1 (202) 789-0104 Email: amy.bivins(a)icann.org <mailto:amy.bivins@icann.org> www.icann.org <http://www.icann.org>

1 0

[Response Requested by 8 Feb] PP IRT Operational Questions + New Materials for Review
by Amy Bivins Feb. 7, 2017

Feb. 7, 2017

Hello, All, I have attached updated questions related to the draft Policy sections 2, 5 and 6 for discussion on our 7 February call (attached in the table format recommended yesterday, but saved as a PDF). Please note that this document lacks the requested "staff recommendation" column-this will be added in future weeks). In addition, please complete this questionnaire no later than your end of day 8 February 2017, https://goo.gl/forms/CQLDwmbqYmOQuru63. The questionnaire includes some initial operational questions related to the implementation of this program. Please feel free to submit comments, questions and feedback on these to the list-you don't need to wait for our next call to share your feedback. Best, Amy Amy E. Bivins Registrar Policy Services Manager Registrar Services and Industry Relations Internet Corporation for Assigned Names and Numbers (ICANN) Direct: +1 (202) 249-7551 Fax: +1 (202) 789-0104 Email: amy.bivins(a)icann.org www.icann.org

2 1