- Gdd-gnso-ppsai-impl - lists.icann.org

Privacy/Proxy RDDS labeling document attached for 14 Feb IRT call
by Amy Bivins Feb. 13, 2017

Feb. 13, 2017

Hello, All, Attached is an initial discussion proposal for Tuesday's IRT call, exploring how we could potentially implement the Final Report's recommendation that, "To the extent that this is feasible, domain name registrations involving P/P service providers should be clearly labelled as such in WHOIS." (See Final Report, p. 9) To summarize, we have explored several possible alternatives for implementing this recommendation. The attached proposes to add four new fields, but also identifies the other possible alternatives that were considered. We are seeking your feedback on any and all elements of this proposal, including (1) the specific fields to be added; (2) the location(s) of the new fields; and (3) ensuring that this can be implemented from an operational perspective (particularly if/when a provider is not affiliated with the registrar). Once we have discussed the new fields and the preferred locations for these fields, we will ensure the final product is consistent with the new CL&D requirements. On Tuesday, I'll run through the proposal briefly and also note the other alternatives that were considered but not included here. The rest of the call will be dedicated to your discussion and feedback on this. Please share any preliminary feedback on the list and I look forward to talking with you on Tuesday. Best, Amy Amy E. Bivins Registrar Policy Services Manager Registrar Services and Industry Relations Internet Corporation for Assigned Names and Numbers (ICANN) Direct: +1 (202) 249-7551 Fax: +1 (202) 789-0104 Email: amy.bivins(a)icann.org www.icann.org

4 3

FW: IRT Responses to Privacy/Proxy Operational Questions
by Amy Bivins Feb. 9, 2017

Feb. 9, 2017

Hi, All, I apologize for the repeat message to some of you, I sent to the incorrect list. Best, Amy From: Amy Bivins Sent: Thursday, February 09, 2017 9:26 AM To: gnso-ppsai-pdp-wg(a)icann.org Subject: IRT Responses to Privacy/Proxy Operational Questions Hello, All, Thanks so much to those of you who completed the operational questions survey. The attached file contains a complete list of questions and the answers we received. I plan to distribute a labeling requirements proposal for us to discuss on Tuesday's call no later than tomorrow. Best, Amy Amy E. Bivins Registrar Policy Services Manager Registrar Services and Industry Relations Internet Corporation for Assigned Names and Numbers (ICANN) Direct: +1 (202) 249-7551 Fax: +1 (202) 789-0104 Email: amy.bivins(a)icann.org <mailto:amy.bivins@icann.org> www.icann.org <http://www.icann.org>

1 0

[Response Requested by 8 Feb] PP IRT Operational Questions + New Materials for Review
by Amy Bivins Feb. 7, 2017

Feb. 7, 2017

Hello, All, I have attached updated questions related to the draft Policy sections 2, 5 and 6 for discussion on our 7 February call (attached in the table format recommended yesterday, but saved as a PDF). Please note that this document lacks the requested "staff recommendation" column-this will be added in future weeks). In addition, please complete this questionnaire no later than your end of day 8 February 2017, https://goo.gl/forms/CQLDwmbqYmOQuru63. The questionnaire includes some initial operational questions related to the implementation of this program. Please feel free to submit comments, questions and feedback on these to the list-you don't need to wait for our next call to share your feedback. Best, Amy Amy E. Bivins Registrar Policy Services Manager Registrar Services and Industry Relations Internet Corporation for Assigned Names and Numbers (ICANN) Direct: +1 (202) 249-7551 Fax: +1 (202) 789-0104 Email: amy.bivins(a)icann.org www.icann.org

2 1

Slides/Questions for tomorrow's IRT call
by Amy Bivins Jan. 31, 2017

Jan. 31, 2017

Hello, All, In advance of tomorrow's IRT call (at 15:00 UTC), I am attaching the slide deck, which includes specific questions that I'll be asking you about tomorrow. If you have any feedback on these before the call, please feel free to share it on the list. These questions are also in the comments bubbles on the relevant Policy section drafts, but are easier to read in the slides. I look forward to speaking with you tomorrow! Best, Amy Amy E. Bivins Registrar Policy Services Manager Registrar Services and Industry Relations Internet Corporation for Assigned Names and Numbers (ICANN) Direct: +1 (202) 249-7551 Fax: +1 (202) 789-0104 Email: amy.bivins(a)icann.org www.icann.org

8 8

Re: [Gdd-gnso-ppsai-impl] Slides/Questions for tomorrow's IRT call
by Sara Bockey Jan. 31, 2017

Jan. 31, 2017

Agree that this would be very helpful! Sara From: <gdd-gnso-ppsai-impl-bounces(a)icann.org> on behalf of "Metalitz, Steven" <met(a)msk.com> Reply-To: "gdd-gnso-ppsai-impl(a)icann.org" <gdd-gnso-ppsai-impl(a)icann.org> Date: Tuesday, January 31, 2017 at 9:53 AM To: "gdd-gnso-ppsai-impl(a)icann.org" <gdd-gnso-ppsai-impl(a)icann.org> Subject: Re: [Gdd-gnso-ppsai-impl] Slides/Questions for tomorrow's IRT call Hi Amy and colleagues, Thanks for soliciting process and presentation suggestions to try to minimize the confusion expressed by several of us on today’s call. One problem is that the questions are coming to the IRT through multiple channels – the “comment bubbles” on the word doc, via free-standing e-mail from staff, in the slides, and then formulated orally by staff on the call. These questions are not always the same. Could staff prepare a unified chart that, for each issue, contains (1) the relevant PDP report text; (2) the specific issue identified as a concern for implementation; (3) the specific question you would like IRT feedback on (in most cases, this could be in yes-or-no format, though in some cases additional options might be needed); and (4) (where feasible) a recommendation from the staff on how to handle? If that could be distributed well in advance of the weekly call, we might be able to dispose of some questions on the list, and in any case this might facilitate the discussion and ultimate recommendation on the call. Steve Metalitz [mage001] Steven J. Metalitz | Partner, through his professional corporation T: 202.355.7902 | met(a)msk.com<mailto:met@msk.com> Mitchell Silberberg & Knupp LLP | www.msk.com<http://www.msk.com/> 1818 N Street NW, 8th Floor, Washington, DC 20036 THE INFORMATION CONTAINED IN THIS E-MAIL MESSAGE IS INTENDED ONLY FOR THE PERSONAL AND CONFIDENTIAL USE OF THE DESIGNATED RECIPIENTS. THIS MESSAGE MAY BE AN ATTORNEY-CLIENT COMMUNICATION, AND AS SUCH IS PRIVILEGED AND CONFIDENTIAL. IF THE READER OF THIS MESSAGE IS NOT AN INTENDED RECIPIENT, YOU ARE HEREBY NOTIFIED THAT ANY REVIEW, USE, DISSEMINATION, FORWARDING OR COPYING OF THIS MESSAGE IS STRICTLY PROHIBITED. PLEASE NOTIFY US IMMEDIATELY BY REPLY E-MAIL OR TELEPHONE, AND DELETE THE ORIGINAL MESSAGE AND ALL ATTACHMENTS FROM YOUR SYSTEM. THANK YOU. From: gdd-gnso-ppsai-impl-bounces(a)icann.org [mailto:gdd-gnso-ppsai-impl-bounces@icann.org] On Behalf Of Amy Bivins Sent: Monday, January 30, 2017 1:14 PM To: gdd-gnso-ppsai-impl(a)icann.org Subject: [Gdd-gnso-ppsai-impl] Slides/Questions for tomorrow's IRT call Hello, All, In advance of tomorrow’s IRT call (at 15:00 UTC), I am attaching the slide deck, which includes specific questions that I’ll be asking you about tomorrow. If you have any feedback on these before the call, please feel free to share it on the list. These questions are also in the comments bubbles on the relevant Policy section drafts, but are easier to read in the slides. I look forward to speaking with you tomorrow! Best, Amy Amy E. Bivins Registrar Policy Services Manager Registrar Services and Industry Relations Internet Corporation for Assigned Names and Numbers (ICANN) Direct: +1 (202) 249-7551 Fax: +1 (202) 789-0104 Email: amy.bivins(a)icann.org<mailto:amy.bivins@icann.org> www.icann.org<http://www.icann.org>

1 0

Re: [Gdd-gnso-ppsai-impl] Slides/Questions for tomorrow's IRT call
by Jennifer Gore Jan. 30, 2017

Jan. 30, 2017

Amy, Thanks for sharing the slide deck. The only minor suggestion is as follows: · Slide 3: ICANN58 IRT meeting scheduled for Saturday, 11 March, 1:45-6:30 – indicate the time into UTC. From: <gdd-gnso-ppsai-impl-bounces(a)icann.org> on behalf of Amy Bivins <amy.bivins(a)icann.org> Reply-To: "gdd-gnso-ppsai-impl(a)icann.org" <gdd-gnso-ppsai-impl(a)icann.org> Date: Monday, January 30, 2017 at 1:13 PM To: "gdd-gnso-ppsai-impl(a)icann.org" <gdd-gnso-ppsai-impl(a)icann.org> Subject: [Gdd-gnso-ppsai-impl] Slides/Questions for tomorrow's IRT call Hello, All, In advance of tomorrow’s IRT call (at 15:00 UTC), I am attaching the slide deck, which includes specific questions that I’ll be asking you about tomorrow. If you have any feedback on these before the call, please feel free to share it on the list. These questions are also in the comments bubbles on the relevant Policy section drafts, but are easier to read in the slides. I look forward to speaking with you tomorrow! Best, Amy Amy E. Bivins Registrar Policy Services Manager Registrar Services and Industry Relations Internet Corporation for Assigned Names and Numbers (ICANN) Direct: +1 (202) 249-7551 Fax: +1 (202) 789-0104 Email: amy.bivins(a)icann.org www.icann.org

2 1

Updated PP Policy Section 1
by gtheo Jan. 30, 2017

Jan. 30, 2017

Hi Amy, AB24 has not been updated yet, I do recall on the list that Roger Carney made some good suggestions here and got support on the list. Or is this still pending discussion. AB10, I think Darcy is right here on the intent. Thanks, Theo

3 3

Updated draft Section 2, questions to continue reviewing on 31 January IRT call
by Amy Bivins Jan. 27, 2017

Jan. 27, 2017

Hi, All, Per the additional comments on the list, I've updated this Section 2 document slightly, and I've incorporated additional questions into this document to continue our discussion next week. On our upcoming call on Tuesday, 31 January, at 15:00 UTC, discussion on this Section 2 document will pick up at Section II.E, Terms and Conditions. Update on ICANN58 Meeting It has been decided that we will have a half-day IRT meeting at ICANN58, on Saturday, 11 March, in the afternoon (I have requested space for the three afternoon time slots-so we will have space from 1:45-6:30). I apologize for the late notice on the approved day. As this is an official meeting day, I realize there may be conflicts, but I hope that you can attend so that we can make the most of this time. If you have questions, please let me know. Initial Discussion Question Before we dive back into Section 2 on Tuesday, I'm going to ask for your feedback about one set of recommendations. The recommendations are as follows: (see P13, item 15) A uniform set of minimum mandatory criteria that must be followed for the purpose of reporting abuse and submitting requests (including requests for the Disclosure of customer information) should be developed. Forms that may be required by individual P/P service providers for this purpose should also include space for free form text. P/P service providers should also have the ability to "categorize" reports received, in order to facilitate responsiveness. P/P service providers must also state the applicable jurisdiction in which disputes (including any arising under the Illustrative Disclosure Framework in Annex B) should be resolved on any forms used for reporting and requesting purposes. (see p.64) The WG also recommends that the use of standard forms and other mechanisms that would facilitate the prompt and accurate identification of a Relay request be explored during implementation (e.g. drop-down menus in a provider's web-based forms or fields that would require the filling in of a Requester's contact details, specifying the type of request or other basic information). These recommendations seem to indicate that this implementation should deliver (a) minimum mandatory criteria and required processes for abuse reports, information requests, and relay requests, by (b) developing a list of standard categories for requests to PP service providers and (c) identifying any specific requirements for the individual types of requests or reports. Can the IRT provide any further guidance regarding what the PDP WG intended here or confirm whether this understanding is correct? Amy E. Bivins Registrar Policy Services Manager Registrar Services and Industry Relations Internet Corporation for Assigned Names and Numbers (ICANN) Direct: +1 (202) 249-7551 Fax: +1 (202) 789-0104 Email: amy.bivins(a)icann.org www.icann.org

1 0

Specifics related to PP IRT discussion on data escrow/retention on 1/24 IRT call
by Amy Bivins Jan. 25, 2017

Jan. 25, 2017

Hello, All, I reviewed yesterday's call recording to compile a full summary of the input we received from you related to the questions related to possible requirements on data escrow and retention. At the outset of our discussion on data escrow and data retention (beginning around 25:30 on the call), there was some hesitation by some in the room to discussing potential requirements for PP service providers. However, as we got further into the discussion, there seemed to be support for exploring proposals on these topics, but only to ensure that the requirements are the same for PP service providers regardless of whether or not the provider is Affiliated with a registrar (and ensuring no duplicate requirements for registrars). There are documented PDP WG discussions on data escrow. I have not located any WG discussion specifically on data retention. However, there are existing RAA requirements for retention of PP customer contact information. This, coupled with PDP WG discussions about ensuring that customers are protected to the extent possible if an accredited PP service is terminated or goes out of business, seems to imply that such a requirement-retaining a limited set of Customer information (name, email, address, telephone number) to ensure that these Customers can be contacted in this situation-may fall within the intent of the PDP WG recommendations. This interpretation seemed to be supported by many on the call yesterday, including Theo, Chris, Steve and Susan. As a result, based on the discussion yesterday, we will proceed with drafting proposals on these topics to be discussed with the IRT, unless there is a continuing question regarding whether this was within the intent of the PDP WG. If anyone on the IRT wishes to comment on this, specifically on whether you believe this is within or beyond the intent of the PDP WG, please do so by replying to this thread. The current RAA requirements are noted below. Specification on Privacy and Proxy Registrations (expires 1 January 2018): "2.5 Escrow of P/P Customer Information. Registrar shall include P/P Customer contact information in its Registration Data Escrow deposits required by Section 3.6 of the Agreement. P/P Customer Information escrowed pursuant to this Section 2.5 of this Specification may only be accessed by ICANN in the event of the termination of the Agreement or in the event Registrar ceases business operations." Note-this requirement to escrow PP customer contact information will expire with the interim specification RAA 3.6 Data Escrow. During the Term of this Agreement, on a schedule, under the terms, and in the format specified by ICANN, Registrar shall submit an electronic copy of the data described in Subsections 3.4.1.2 through 3.4.1.5 to ICANN or, at Registrar's election and at its expense, to a reputable escrow agent mutually approved by Registrar and ICANN, such approval also not to be unreasonably withheld by either party. The data shall be held under an agreement among Registrar, ICANN, and the escrow agent (if any) providing that (1) the data shall be received and held in escrow, with no use other than verification that the deposited data is complete, consistent, and in proper format, until released to ICANN; (2) the data shall be released from escrow upon expiration without renewal or termination of this Agreement; and (3) ICANN's rights under the escrow agreement shall be assigned with any assignment of this Agreement. The escrow shall provide that in the event the escrow is released under this Subsection, ICANN (or its assignee) shall have a non-exclusive, irrevocable, royalty-free license to exercise (only for transitional purposes) or have exercised all rights necessary to provide Registrar Services. (NOTE-this is a data retention requirement-the same data that is required to be retained is required to be escrowed) 3.4.1.5 the name, postal address, e-mail address, and voice telephone number provided by the customer of any privacy service or licensee of any proxy registration service, in each case, offered or made available by Registrar or its Affiliates in connection with each registration. Effective on the date that ICANN fully implements a Proxy Accreditation Program established in accordance with Section 3.14, the obligations under this Section 3.4.1.5 will cease to apply as to any specific category of data (such as postal address) that is expressly required to be retained by another party in accordance with such Proxy Accreditation Program (emphasis added). Best, Amy Amy E. Bivins Registrar Policy Services Manager Registrar Services and Industry Relations Internet Corporation for Assigned Names and Numbers (ICANN) Direct: +1 (202) 249-7551 Fax: +1 (202) 789-0104 Email: amy.bivins(a)icann.org www.icann.org

2 1

Re: [Gdd-gnso-ppsai-impl] Updated draft PP Policy Section 2, updates from today's Privacy/Proxy IRT call
by Darcy Southwell Jan. 25, 2017

Jan. 25, 2017

Hi, Amy. Thanks for the quick turnaround on this draft. Just to clarify – we didn’t discuss that all uses of “should” would be changed to “shall” in a blanket fashion. Just the paragraphs we discussed/voted on. Were additional changes made that we didn’t discuss? As we discussed today regarding II(C), in order to avoid duplication of messaging to registrants, this paragraph should also include an exception, similar in nature to II(D)(ii), that a P/P services does not have to send this if the registrar it is affiliated with has also done this. I know we plan to come back to Section E (Privacy and Proxy Terms of Service) later on, but I wanted to point out something about the II(E)(vii) – per the footnote, the PDP did not indicate that the terms of service had to include pricing, but that the pricing had to be displayed to customers. This is also similar to Consensus Policies registrars must follow. I don’t believe the intent was for the pricing to be a part of the terms of service. We didn’t discuss AB25 today regarding II(I) but I wanted to add a comment for discussion. Based on the footnote and my memory, I don’t think this is for reports of all abuse “involving Registered Names that are registered through the Privacy and/or Proxy provider.” Domains are registered with the registrar or registrar’s reseller and the registrar is responsible for investigating abuse. I think the PDP’s intent was for P/P providers to maintain a contact for abuse relating to the P/P services only. Thanks, Darcy From: <gdd-gnso-ppsai-impl-bounces(a)icann.org> on behalf of Amy Bivins <amy.bivins(a)icann.org> Reply-To: <gdd-gnso-ppsai-impl(a)icann.org> Date: Tuesday, January 24, 2017 at 9:45 AM To: "gdd-gnso-ppsai-impl(a)icann.org" <gdd-gnso-ppsai-impl(a)icann.org> Subject: [Gdd-gnso-ppsai-impl] Updated draft PP Policy Section 2, updates from today's Privacy/Proxy IRT call Hello, All, Thanks so much for your active participation on the Privacy/Proxy IRT call today—we had a very productive meeting. I’m attaching an updated version of Section 2 of the draft Policy document, which reflects our discussion on the call today. To summarize, instances of “SHOULD” in the document have been changed to “SHALL” pursuant to discussion on the call about what the PDP WG intended—that these would be requirements, not best practices. Nearly everyone who participated in the “green check/red x” ask seemed to agree with this, with the exception of Volker. Volker, if you would like to share any additional thoughts or reasoning surrounding the WG’s intent here and if anyone else feels strongly about this, please comment on the list. We want a full record and to ensure that we have interpreted the WG’s intent accurately, so we encourage everyone to please speak up (on this and always!). I’ve also made some updates to the “data reminders” and “terms of service” section. And we will pick up on the ToS section next week. Materials from the call will be posted on the wiki shortly. If anyone has questions or comments in the interim please reply to the list, and I will share any new materials with you as they are available. Best, Amy Amy E. Bivins Registrar Policy Services Manager Registrar Services and Industry Relations Internet Corporation for Assigned Names and Numbers (ICANN) Direct: +1 (202) 249-7551 Fax: +1 (202) 789-0104 Email: amy.bivins(a)icann.org www.icann.org _______________________________________________ Gdd-gnso-ppsai-impl mailing list Gdd-gnso-ppsai-impl(a)icann.org https://mm.icann.org/mailman/listinfo/gdd-gnso-ppsai-impl

2 1