Thanks, Ashley.

In terms of process—ICANN org will propose language to incorporate into the existing materials for IRT discussion and feedback. The timing will depend on how long it takes to draft and discuss the language. In terms of drafting, if we stick closely to the existing language in the Temp Spec as a starting point, the initial drafting should be relatively quick—I’d expect we would have material to discuss ready in a matter of weeks; taking a different approach would likely take longer.

This is also against the backdrop of the pending GDPR review—if additional items for discussion are identified there, that might extend this process.

I hope this helps! Please let me know, Ashley or anyone else, if you have further questions or feedback.

Amy

Amy E. Bivins

Registrar Services and Engagement Senior Manager

Registrar Services and Industry Relations

Internet Corporation for Assigned Names and Numbers (ICANN)

Direct: +1 (202) 249-7551

Fax: +1 (202) 789-0104

Email: amy.bivins@icann.org

www.icann.org

From: Gdd-gnso-ppsai-impl [mailto:gdd-gnso-ppsai-impl-bounces@icann.org] On Behalf Of Heineman, Ashley
Sent: Friday, July 13, 2018 2:26 PM
To: gdd-gnso-ppsai-impl@icann.org
Subject: Re: [Gdd-gnso-ppsai-impl] PP IRT status update; no meeting Tuesday

Thanks for this information Amy. Quick question, what does the addition of the data processing actually entail in terms of process and timing?

From: Gdd-gnso-ppsai-impl <gdd-gnso-ppsai-impl-bounces@icann.org> on behalf of Amy Bivins <amy.bivins@icann.org>
Sent: Thursday, July 12, 2018 3:13 PM
To: gdd-gnso-ppsai-impl@icann.org
Subject: [Gdd-gnso-ppsai-impl] PP IRT status update; no meeting Tuesday

Dear Colleagues,

We will not have a PP IRT meeting on Tuesday, 17 July. Our next meeting is scheduled for Tuesday, 24 July.

The Legal review of the current PPAA draft is not yet complete. However, I do have an update on the GDPR-related work.

We believe that we will likely need to add data processing provisions in the PP materials—potentially in the policy document. We are planning to begin drafting this, for discussion with you, using Section 4 of the Temporary Specification as a model for adaptation. If you have other ideas or recommendations for this initial drafting exercise, please let us know. We can discuss this at our next meeting. A data processing addendum may also be needed for the PPAA.

In addition, we are also considering how to address data processing in data escrow agreements. I should have more to share on that with you by our next meeting.

Best,