November 2018 - Gdd-gnso-ppsai-impl

Re: [Gdd-gnso-ppsai-impl] PP IRT: Next Steps
by Michele Neylon - Blacknight 02 Nov '18

02 Nov '18

Amy While I’m sure many of us appreciate the update I’m not sure that scheduling meetings for updates is of much value. The email updates should be enough unless there is something very substantive to be discussed. Regards Michele -- Mr Michele Neylon Blacknight Solutions Hosting, Colocation & Domains https://www.blacknight.com/ https://blacknight.blog/ Intl. +353 (0) 59 9183072 Direct Dial: +353 (0)59 9183090 Personal blog: https://michele.blog/ Some thoughts: https://ceo.hosting/ ------------------------------- Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty Road,Graiguecullen,Carlow,R93 X265,Ireland Company No.: 370845 From: Gdd-gnso-ppsai-impl <gdd-gnso-ppsai-impl-bounces(a)icann.org> on behalf of Amy Bivins <amy.bivins(a)icann.org> Reply-To: "gdd-gnso-ppsai-impl(a)icann.org" <gdd-gnso-ppsai-impl(a)icann.org> Date: Friday 2 November 2018 at 14:16 To: "gdd-gnso-ppsai-impl(a)icann.org" <gdd-gnso-ppsai-impl(a)icann.org> Subject: [Gdd-gnso-ppsai-impl] PP IRT: Next Steps Dear Colleagues, Following up on our discussions at ICANN63, I want to provide some additional context around next steps for the Privacy/Proxy IRT. As noted during several discussions in Barcelona, ICANN org believes that there is currently a significant amount of uncertainty around interpreting the data processing requirements of GDPR related to this type of proposed accreditation agreement. Until we gain enough certainty to address this, we don’t believe it’s prudent to move forward at our prior pace. Areas of uncertainty include, but are not limited to: * The purposes of gTLD registration data, including contact data that is protected by a privacy or proxy service; * The lawful bases for processing of gTLD registration data, including: * Collection; * Retention; * Transfer of data to third parties, including data escrow agents and third-party requestors; * Allocation of controller/processor obligations w/r/t gTLD registration data; and * The expected solution for third-party access to non-public registration data (and whether this might be applied to PP customer data, which would impact implementation of the PP accreditation program). Many of these issues will be considered in the Expedited PDP on the Temporary Specification for gTLD Registration Data and continued ICANN org discussions with the European Data Protection Board. As a result, we believe we should continue to monitor this work as we proceed to finalize other, unrelated aspects of the proposed program requirements. IRT Action Items During meetings in Barcelona, many IRT members had questions about the IRT’s status. If you have additional questions or comments about next steps, please send them to the list. In addition, if you have suggestions for items that you believe should be discussed now, please also send those to the list. I’ll continue to update you via the list on work being done on this project by ICANN org. We plan to schedule meetings periodically (every 4-6 weeks) to ensure that you have the opportunity to raise questions or issues you would like to discuss with the group. During these meetings, we can also discuss progress made in other parallel efforts, and potential impacts that these efforts may have on proposed PP accreditation requirements. Regards, Amy Amy E. Bivins Registrar Services and Engagement Senior Manager Registrar Services and Industry Relations Internet Corporation for Assigned Names and Numbers (ICANN) Direct: +1 (202) 249-7551 Fax: +1 (202) 789-0104 Email: amy.bivins(a)icann.org<mailto:amy.bivins@icann.org> www.icann.org<http://www.icann.org>

4 3

Re: [Gdd-gnso-ppsai-impl] PP IRT: Next Steps
by Chris Pelling 02 Nov '18

02 Nov '18

Totally agree with Michele Sent by Chris on the move. -------- Original message --------From: Michele Neylon - Blacknight <michele(a)blacknight.com> Date: 02/11/2018 14:25 (GMT+00:00) To: gdd-gnso-ppsai-impl(a)icann.org Subject: Re: [Gdd-gnso-ppsai-impl] PP IRT: Next Steps Amy While I’m sure many of us appreciate the update I’m not sure that scheduling meetings for updates is of much value. The email updates should be enough unless there is something very substantive to be discussed. Regards Michele -- Mr Michele Neylon Blacknight Solutions Hosting, Colocation & Domains https://www.blacknight.com/ https://blacknight.blog/ Intl. +353 (0) 59 9183072 Direct Dial: +353 (0)59 9183090 Personal blog: https://michele.blog/ Some thoughts: https://ceo.hosting/ ------------------------------- Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty Road,Graiguecullen,Carlow,R93 X265,Ireland Company No.: 370845 From: Gdd-gnso-ppsai-impl <gdd-gnso-ppsai-impl-bounces(a)icann.org> on behalf of Amy Bivins <amy.bivins(a)icann.org> Reply-To: "gdd-gnso-ppsai-impl(a)icann.org" <gdd-gnso-ppsai-impl(a)icann.org> Date: Friday 2 November 2018 at 14:16 To: "gdd-gnso-ppsai-impl(a)icann.org" <gdd-gnso-ppsai-impl(a)icann.org> Subject: [Gdd-gnso-ppsai-impl] PP IRT: Next Steps Dear Colleagues, Following up on our discussions at ICANN63, I want to provide some additional context around next steps for the Privacy/Proxy IRT. As noted during several discussions in Barcelona, ICANN org believes that there is currently a significant amount of uncertainty around interpreting the data processing requirements of GDPR related to this type of proposed accreditation agreement. Until we gain enough certainty to address this, we don’t believe it’s prudent to move forward at our prior pace. Areas of uncertainty include, but are not limited to: The purposes of gTLD registration data, including contact data that is protected by a privacy or proxy service; The lawful bases for processing of gTLD registration data, including: Collection; Retention; Transfer of data to third parties, including data escrow agents and third-party requestors; Allocation of controller/processor obligations w/r/t gTLD registration data; and The expected solution for third-party access to non-public registration data (and whether this might be applied to PP customer data, which would impact implementation of the PP accreditation program). Many of these issues will be considered in the Expedited PDP on the Temporary Specification for gTLD Registration Data and continued ICANN org discussions with the European Data Protection Board. As a result, we believe we should continue to monitor this work as we proceed to finalize other, unrelated aspects of the proposed program requirements. IRT Action Items During meetings in Barcelona, many IRT members had questions about the IRT’s status. If you have additional questions or comments about next steps, please send them to the list. In addition, if you have suggestions for items that you believe should be discussed now, please also send those to the list. I’ll continue to update you via the list on work being done on this project by ICANN org. We plan to schedule meetings periodically (every 4-6 weeks) to ensure that you have the opportunity to raise questions or issues you would like to discuss with the group. During these meetings, we can also discuss progress made in other parallel efforts, and potential impacts that these efforts may have on proposed PP accreditation requirements. Regards, Amy Amy E. Bivins Registrar Services and Engagement Senior Manager Registrar Services and Industry Relations Internet Corporation for Assigned Names and Numbers (ICANN) Direct: +1 (202) 249-7551 Fax: +1 (202) 789-0104 Email: amy.bivins(a)icann.org www.icann.org

1 0

PP IRT: Next Steps
by Amy Bivins 02 Nov '18

02 Nov '18

Dear Colleagues, Following up on our discussions at ICANN63, I want to provide some additional context around next steps for the Privacy/Proxy IRT. As noted during several discussions in Barcelona, ICANN org believes that there is currently a significant amount of uncertainty around interpreting the data processing requirements of GDPR related to this type of proposed accreditation agreement. Until we gain enough certainty to address this, we don't believe it's prudent to move forward at our prior pace. Areas of uncertainty include, but are not limited to: * The purposes of gTLD registration data, including contact data that is protected by a privacy or proxy service; * The lawful bases for processing of gTLD registration data, including: * Collection; * Retention; * Transfer of data to third parties, including data escrow agents and third-party requestors; * Allocation of controller/processor obligations w/r/t gTLD registration data; and * The expected solution for third-party access to non-public registration data (and whether this might be applied to PP customer data, which would impact implementation of the PP accreditation program). Many of these issues will be considered in the Expedited PDP on the Temporary Specification for gTLD Registration Data and continued ICANN org discussions with the European Data Protection Board. As a result, we believe we should continue to monitor this work as we proceed to finalize other, unrelated aspects of the proposed program requirements. IRT Action Items During meetings in Barcelona, many IRT members had questions about the IRT's status. If you have additional questions or comments about next steps, please send them to the list. In addition, if you have suggestions for items that you believe should be discussed now, please also send those to the list. I'll continue to update you via the list on work being done on this project by ICANN org. We plan to schedule meetings periodically (every 4-6 weeks) to ensure that you have the opportunity to raise questions or issues you would like to discuss with the group. During these meetings, we can also discuss progress made in other parallel efforts, and potential impacts that these efforts may have on proposed PP accreditation requirements. Regards, Amy Amy E. Bivins Registrar Services and Engagement Senior Manager Registrar Services and Industry Relations Internet Corporation for Assigned Names and Numbers (ICANN) Direct: +1 (202) 249-7551 Fax: +1 (202) 789-0104 Email: amy.bivins(a)icann.org<mailto:amy.bivins@icann.org> www.icann.org<http://www.icann.org>

1 0