August 2018 - Gnso-epdp-team

Face-to-face meeting attendance
by Kurt Pritz Aug. 22, 2018

Aug. 22, 2018

Hi Everyone: Here is where I am on attendance at the face-to face meeting (and for discussion tomorrow). I have given this considerable thought, writing a 1400+ word memo / analysis of the different options to the GNSO leadership. Then, I re-thought all of that to come up with an alternative approach. I believe that the best option is: Members are invited and will be provided travel support. If a member cannot attend in person, an alternate can attend and be provided travel support. If this is the case, the alternate should be designated to the Support Team as soon as possible. In example(2) above, if the absent member wished to participate remotely of a portion of the meeting, then she can do that and the alternate can only participate when the member is unavailable to participate. If an attending member is, in good faith, reasonably certain that s/he will be absent for a period of time where attendance by an alternate is desired, then: that member and the alternate can attend the full meeting but only one will be designated as a participant at any one time the alternate will not be given travel support I think this is the best option for several reasons: It provides travel support commensurate with membership It allows alternates, when needed, to keep up with the proceedings It is economical compared to other solutions It will be easy to manage who participates and when Will not materially impact the meeting room size or planning by the ICANN Meetings Team Thinking of other options: If alternate participation is curtailed beyond this, team effectiveness might be hobbled. If alternative participation is expanded beyond this, meeting costs might escalate and logistics would become complicated. My second choice would be to make the meeting completely open. In this case there would be two sets of attendees: members and observers. The separation would be easy to manage The goal of keeping alternates up to speed could be realised. Openness and transparency would be assured. However, costs and logistic support requirements would increase, taking budget from more important needs Thanks and regards, Kurt

3 2

ICANN Procedure for Handling WHOIS Conflicts with Privacy Law
by Marika Konings Aug. 22, 2018

Aug. 22, 2018

Dear All, Per the action item from today’s meeting, please find attached the staff assessment and next steps report on the Revised ICANN Procedure for Handling WHOIS Conflicts with Privacy Law which was published in May 2017. As there were specific questions in relation to the origin of the procedure, I’ve excerpted the background section from this document below. As noted, the GNSO Council has already agreed to form an Implementation Advisory Group to review the procedure and adopted a charter for this effort in February of this year (see https://gnso.icann.org/en/council/resolutions#201802) However, due to workload issues and the pending EPDP, the Council delayed the call for volunteers and agreed during its most recent meeting to decide when the call for volunteers should be launched following the publication of the Initial Report on the Temporary Specification by the EPDP Team. Best regards, Caitlin, Berry and Marika ============================ Background (from https://www.icann.org/en/system/files/files/whois-privacy-conflicts-procedu…) In November 2005, the GNSO concluded a policy development process<https://gnso.icann.org/en/issues/whois-privacy/council-rpt-18jan06.htm> (PDP) on Whois conflicts with privacy law which recommended that “In order to facilitate reconciliation of any conflicts between local/national mandatory privacy laws or regulations and applicable provisions of the ICANN contract regarding the collection, display and distribution of personal data via the gTLD Whois service, ICANN should: 1. Develop and publicly document a Procedure for dealing with the situation in which a registrar or registry can credibly demonstrate that it is legally prevented by local/national privacy laws or regulations from fully complying with applicable provisions of its ICANN contract regarding the collection, display and distribution of personal data via Whois. 2. Create goals for the procedure which include: * Ensuring that ICANN staff is informed of a conflict at the earliest appropriate juncture; * Resolving the conflict, if possible, in a manner conducive to ICANN's Mission, applicable Core Values, and the stability and uniformity of the Whois system; * Providing a mechanism for the recognition, if appropriate, in circumstances where the conflict cannot be otherwise resolved, of an exception to contractual obligations to those registries/registrars to which the specific conflict applies with regard to collection, display and distribution of personally identifiable data via Whois; and * Preserving sufficient flexibility for ICANN staff to respond to particular factual situations as they arise”. The ICANN Board of Directors adopted the recommendations in May 2006 and directed staff to develop such a Procedure. A draft Procedure was posted for public comment, and input was specifically solicited from the Governmental Advisory Committee (GAC). The GAC recommended adding a provision, which was included as section 1.4 in the procedure, urging a registrar or registry to work with relevant national governments to ensure adherence to domestic and international law, as well as applicable international conventions. If the Whois requirements require changes that ICANN determines prevent compliance with contractual Whois obligations, ICANN may refrain, on a provisional basis, from taking enforcement action for non-compliance, while ICANN prepares a public report and recommendation and submits it to the ICANN Board for a decision. Given that to date no registrar or registry operator has formally invoked the Whois Procedure, and yet numerous concerns have arisen from contracted parties and the wider community, ICANN launched a review in 2014, as provided in the Whois Procedure’s final clause. Marika Konings Vice President, Policy Development Support – GNSO, Internet Corporation for Assigned Names and Numbers (ICANN) Email: marika.konings(a)icann.org<mailto:marika.konings@icann.org> Follow the GNSO via Twitter @ICANN_GNSO Find out more about the GNSO by taking our interactive courses<http://learn.icann.org/courses/gnso> and visiting the GNSO Newcomer pages<http://gnso.icann.org/sites/gnso.icann.org/files/gnso/presentations/policy-…>.

5 7

***REMINDER*** Meeting Invitation / Alternates & Observers / GNSO Temp Spec gTLD RD EPDP call / Thursday, 23 August 2018 at 13:00 UTC
by Julie Bisland Aug. 22, 2018

Aug. 22, 2018

Dear all, Non-members can follow the EPDP call taking place on Tuesday's and Thursday's at 13:00 UTC via the audio cast or view only Adobe Connect room. As requested and discussed on Tuesday's (14 August 2018) meeting, please note that an additional Adobe Connect room has been created for use by interested alternates and observers to be able to view-only the main EPDP Team Adobe Connect room. The view-only room will also broadcast the audio of the EPDP Team AC room, however, those in the view-only room will not be heard. Note that the audio cast stream will also remain available for now for those that prefer to use that option to listen live to the EPDP Team meeting. View-Only Adobe Connect room for alternates and observers: https://participate.icann.org/gnso-epdp-observers Meeting Audio Cast (for alternates and observers) To join the event, click on the link: Listen in browser: http://stream.icann.org:8000/stream01 [stream.icann.org]<https://urldefense.proofpoint.com/v2/url?u=http-3A__stream.icann.org-3A8000…> Listen in application such as iTunes: http://stream.icann.org:8000/stream01.m3u [stream.icann.org]<https://urldefense.proofpoint.com/v2/url?u=http-3A__stream.icann.org-3A8000…> Agenda wiki page: https://community.icann.org/x/TRhpBQ Kind Regards, Andrea Glandon

1 0

Re: [Gnso-epdp-team] For your review - EPDP Team Communications Plan
by Marika Konings Aug. 21, 2018

Aug. 21, 2018

Not having seen any further comments or suggestions, staff will move forward with the implementation of this plan as proposed. Of course, suggestions will remain welcome. Best regards, Marika From: Gnso-epdp-team <gnso-epdp-team-bounces(a)icann.org> on behalf of Marika Konings <marika.konings(a)icann.org> Date: Wednesday, August 15, 2018 at 10:09 To: "gnso-epdp-team(a)icann.org" <gnso-epdp-team(a)icann.org> Subject: [Gnso-epdp-team] For your review - EPDP Team Communications Plan Dear All, Following yesterday’s meeting, please find attached for your review the proposed EPDP Team Communications Plan that has been developed with the support of our colleague Arial Liang. You are encouraged to provide any suggestions, comments and/or input you may have. Thanks, Caitlin, Berry and Marika Marika Konings Vice President, Policy Development Support – GNSO, Internet Corporation for Assigned Names and Numbers (ICANN) Email: marika.konings(a)icann.org<mailto:marika.konings@icann.org> Follow the GNSO via Twitter @ICANN_GNSO Find out more about the GNSO by taking our interactive courses<http://learn.icann.org/courses/gnso> and visiting the GNSO Newcomer pages<http://gnso.icann.org/sites/gnso.icann.org/files/gnso/presentations/policy-…>.

1 0

Notes and action items from today's EPDP Team Meeting - 21 August 2018
by Marika Konings Aug. 21, 2018

Aug. 21, 2018

Dear All, Below, please find notes and action items from today’s EPDP Team Call. As a reminder, our next meeting will be Thursday, 23 August, 13:00 UTC. Best regards, Caitlin, Berry, and Marika =============== EPDP Team Meeting #6 Tuesday, August 21, 2018 Notes and Action Items High-level Notes/Actions: * Triage Report is first deliverable of the EPDP Team. Please review the latest version but keep in mind that this is intended to reflect the outcome of triage – it does not include any recommendations or agreements, nor is it intended to prejudice future deliberations. Questions for ICANN Org from the EPDP Team: 1. Can an update be provided on the status of the reconfirmation of the Temporary Specification by the ICANN Board? Response: There is a board meeting planned for later today (21 August). No changes to the Temporary Specification are being proposed. 2. Has the WHOIS Conflicts with local laws procedure been used and successfully used to date? Please indicate the instances where the procedure was invoked and the outcome. Were any specific issues identified with the use of this procedure? 3. Regarding data disclosures concerning LEA requests: does GDPR compel a report of those disclosures to be made to the data subject? Please provide analysis of “in-jurisdiction” and “out-of-jurisdiction” requests. All Action items: * Action item #1: Kurt to follow up with an email outlining the plan for attendees at the F2F meeting. * Action item #2: EPDP Team to review the draft triage report and provide any initial feedback by Friday, 24 August at 19:00 UTC. (Earlier feedback strongly encouraged.) * Action item #3 - Team Support to send to the Team information concerning the PDP that was the basis for the WHOIS Conflicts with Local Law Procedure. * Action item #4 - Thomas and Emily to work on a framework to outlines the controller designations between ICANN and Contracted Parties for EPDP Team review / consideration. These high-level notes are designed to help the EPDP Team navigate through the content of the call and are not meant as a substitute for the transcript and/or recording. The MP3, transcript, and chat are provided separately and are posted on the wiki at: https://community.icann.org/x/2IpHBQ. 1. Roll Call & SOI Updates · Attendance will be taken from Adobe Connect · Remember to mute your microphones when not speaking and state your name before speaking for transcription purposes. · Please remember to review your SOIs on a regular basis and update as needed. Updates are required to be shared with the EPDP Team. 2. Welcome and Updates from EPDP Team Chair · The hope is to wrap up discussions on triage effort during today's meeting. Appreciate all the work that has gone into this, recognizing the short turnaround time. Triage document aims to capture outcome of triage effort. · F2F Meeting - set for 24 - 26 of September. See proposal circulated by Kurt to the mailing list for how to deal with alternates. Recommend working in accordance with the first proposal: 1. Members are invited and will be provided travel support. 2. If a member cannot attend in person, an alternate can attend and be provided travel support. If this is the case, the alternate should be designated to the Support Team as soon as possible. 3. In example (2) above, if the absent member wished to participate remotely of a portion of the meeting, then she can do that and the alternate can only participate when the member is unavailable to participate. 4. If an attending member is, in good faith, reasonably certain that s/he will be absent for a period of time where attendance by an alternate is desired, then: 1. that member and the alternate can attend the full meeting but only one will be designated as a participant at any one time 2. the alternate will not be given travel support · Comments: 3) may be difficult to enforce. Suggest making it either / or. If it is not enforced properly it could give some groups more voices. The scenario envisioned here is that a member could attend for 2 days but not 3 so alternate would come in for one day, or for half a day. It shouldn't be a case of people walking in and out every 5 minutes. · Some expressed support for option 2 - trust that alternates understand their role. · Need to factor in the distinction between members and alternates as outlined in the charter. See proposed modification sent to the list by Ayden to ensure balance in the room. · Remote participation will be available, that is not in question. · Leadership to further consider input received but is leaning towards going with option 1. Action item #1: Kurt to follow up with an email outlining the path forward for the F2F meeting. Triage document · See updated version shared with the mailing list, including proposed annexes. · Triage Report, per the Charter, is EPDP Team’s first deliverable · The report represents the results from the triage surveys, Part 1 - 4 · Report includes: · an executive summary · operating methodology · the summary table of inputs · the issue summaries that were created for each section · an appendix with all written comments · The report does not represent any group’s final opinion on any issue - all groups should feel free to revise their input during the course of the EPDP Team’s work Action item #2: EPDP Team to review the draft triage report and provide any initial feedback by Friday, 24 August at 19:00UTC. 3. Summary of responses to EPDP Input Survey Part 4 - Results for Section 8: Miscellaneous; Appendix C: Data Processing Requirements · See high level summary 'heat map' in the presentation · As before, green sometimes means conditional support, while red sometimes means objection to only certain parts but not the whole section, so the 'heat map' should be taken with a grain of salt. 4. Substantive Discussion of Temporary Specification: Part 4 of the Survey can be found at https://www.surveymonkey.com/r/9KD5K79 Section 8: Miscellaneous Appendix C: Data Processing Requirements Issue Summary: The following questions and issues were raised with respect to Section 8: 1. As Sections 8.2 and 8.3 are relevant to the Temp Spec only, will this language need to be amended or removed in the next iteration? 2. Regarding Section 8.2, should the next iteration reference GNSO processes for any subsequent modifications (or just removed entirely)? 3. Should the text be modified to reflect the relevant relationships, e.g., Joint Controller, Controller, Processor, and relevant flows of registration data, once the EPDP Team discusses these topics? 4. In reference to the referral of GAC advice in Section 8.2, should the language: (1) be modified to include all relevant GAC advice or (2) require further clarification? 5. In reference to Section 8.1, should the text be amended to reflect (a) that third party obligations will not be created outside of what is required for minimum GDPR compliance? (b) the other third-party obligations will arise? · Is dynamic modification possible? Are any one off modifications foreseen? If so, what impact would this have on the effective date? Board meets periodically so changes could only be taken up then. Is within remit to make changes - out of hands of EPDP Team. How to convert Temporary Specification into GNSO policy recommendations that is the role of the EPDP Team. Once that has happened, any changes would go through the GNSO rules so this section on changes may no longer be relevant. Note that there is also the WHOIS conflicts with local law procedure that could be used for any potential changes, once the temporary specification is converted into a consensus policy. · No third-party beneficiaries is part of most ICANN agreements. · Should the text be modified to reflect the relevant relationships, e.g., Joint Controller, Controller, Processor, and relevant flows of registration data, once the EPDP Team discusses these topics? There are different flows of registration data some of which have a data processing relationship others have a joint-controller relationship. Different agreements need to be in place depending on the relationship. Action item #3 - Staff to send to the mailing list information concerning the PDP that was the basis for the WHOIS Conflicts with Local Law Procedure. Action item #4 - Thomas and Emily to work on a framework to outlines the controller designations between ICANN and Contracted Parties or EPDP Team review / consideration. Appendix C - Preamble The following questions and issues were raised with respect to the preamble of Appendix C: 1. Is this inclusion of language, which is based on but not exactly the same as articles of the GDPR, strictly necessary? 2. Should this language be amended to broadly refer to general data protection principles instead of specific references to the GDPR? 3. Should language be examined using the domain name lifecycle as a reference, i.e., should the EPDP team examine all of the processes at different stages by different parties for collection, updating, publication, access and retention, for both purpose and conformity to the GDPR? 4. Should this language be modified as it currently only references some, but not all, of the bases for processing personal data? 5. Should we replace “...such access will at all times comply with the requirements of the GDPR.” with “...such access will comply with the requirements of the GDPR, as applicable”? 6. Should "EBERO" be a party instead of an activity? 7. Within the table, for Public RDDS/WHOIS field, should the language "performance of a contract" be added as a legal justification for Registrar/Registry/ICANN? · Is the intention of the table to be all-inclusive, or not? If it is, the row specific to "Public RDDS/WHOIS" needs to show specifically as a "Performance of a Contract" as this must be done and the publicly available WHOIS is not based on legitimate interest. If it is not all-inclusive, maybe there should be a clarification included? · Is contractual obligation a legal justification? · There may not be as much dissent as reflected in the chart - CPs need to abide by the law. This is very GDPR specific - there are also privacy laws in the works in other countries that may have an impact. Not ideal to quote a summary of legal obligations, better to reference it directly. · All obligations are subject to applicable law. Concern that the language in this section seems to circumvent requirements and create uncertainty. Nullifying consensus policy should be done elsewhere. Need an effective conflicts with local laws procedure. It is a strange concept for CPs to ask ICANN for permission to comply with applicable laws. Could a strengthened version of the procedure serve as a safety valve? Note that the GNSO Council has already agreed to commence a review of the procedure. The following questions and issues were raised in reference to Appendix C, Section 1: 1. Should the reference to "obligations to applicable laws and regulation" be deleted in deference to providing certainty and the already existing, WHOIS conflicts with local laws policy? 2. Should the language be amended as it may be misleading since Art.6 of the GDPR is not the only legal basis that can be applied to processing? 3. Is this paragraph describing principles useful as it does not describe specific data handling practices, or their monitoring? 4. Should Section 1 be modified to reference data protection principles more broadly, noting that if the GDPR is updated or amended, the language would need to change? The following questions and issues were raised in reference to Appendix C, Section 2: 1. Does the term "legitimate interest" require further clarity? 2. Does the clause "except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of Personal Data" need further qualification, as not all data disclosures (e.g., to LEA) are subject to this balancing test? 3. Should the EPDP consider submitting the group's agreed-upon legitimate interests (when agreed) as part of an Article 40 Code of Conduct referral to ensure a greater degree of certainty? 4. Should this language be modified since it only references some, but not all, of the bases for processing personal data? Should the singular reference to children be deleted as it is not possible to tell whether a data subject is a child in current registration data? 5. Does this paragraph add value or should it be deleted? 6. Should the identity of the data controller for WHOIS be identified? · Need a clear definition of legitimate purpose · What is a code of conduct referral? Need to outline what would be the basis for our processing? Our state in legitimate interest, the legal basis, etc. could be outlined by the DNS industry which could then be referred to the EDPB to review it as a code of conduct per the GDPR. Code of Conduct should be considered but is not easily achieved. However, if EPDP Team wants to bend what is possible under GDPR, it should get that approval via a Code of Conduct. Should this be part of the discussion of UAM instead of here? · Are legitimate interests not overridden by privacy rights lawful? Some have now been overridden by privacy rights and as such and no longer considered lawful? It is not only LEAs that have legitimate interests. Also need to further consider ICANN's mission in this regard - fundamental difference in perspectives of what the purpose for collecting data in the first place is. · Is this group able to determine what is legitimate? Is input from an external authority needed such as EDPB or court cases to provide clarity? Not for ICANN either to make this determination. The following issues and questions were raised in reference to Appendix C, Section 3.1: 1. Are all parties included in this section about informing data subjects about processing, e.g., ICANN, data escrow agents, and emergency backend registry operators? 2. Should the text be modified to reflect the relevant relationships, e.g., Joint Controller, Controller, Processor, and relevant flows of registration data, once the EPDP Team discusses these topics? 3. With respect to Section 3.1.2, do the terms "necessary and appropriate" require further clarity? 4. With respect to Section 3.1.5, how is this testing to be achieved? 5. Should Section 1, et.seq. be modified to reference data protection principles more broadly, to address changes in GDPR or introduction of other privacy regimes? The following issues and questions were raised in reference to Appendix C, Section 3.2 - 3.7: 1. Are all parties included in this section about informing data subjects about processing, e.g., ICANN, data escrow agents, and emergency backend registry operators? 2. Should the text be modified to reflect the relevant relationships, e.g., Joint Controller, Controller, Processor, and relevant flows of registration data, once the EPDP Team discusses these topics? 3. In reference to Section 3.7, does the language require more detail in terms of how privacy-by-design should be implemented? · What is some of this language intended for. For example, 3.5 - is this relates to the initial communication to the registrant? Not related to disclosure for LE? This is just related to general privacy notice, not day to day requests. · LE - how is LE defined, by whom are they recognised? Premature to discuss this here, but currently focused on local law enforcement. Different scenarios will need to be considered, for example what if request is made from LE in another EU country? Depending on outcome of those discussions, information requirements may need to be updated accordingly. The following issues and questions were raised in reference to Appendix C, Section 3.8 - 3.11: 1. Are all parties included in this section about informing data subjects about processing, e.g., ICANN, data escrow agents, and emergency backend registry operators? 2. Should the text be modified to reflect the relevant relationships, e.g., Joint Controller, Controller, Processor, and relevant flows of registration data, once the EPDP Team discusses these topics? 3. Should the EPDP Team further discuss the requirements for security measures to ensure the measures fit the sensitivity of the data? 4. In reference to Section 3.8, should the term "natural persons" be changed to "data subjects"? 4. Should the specific examples in Sec. 3.8.1-3.8.8 be deleted as: (1) they are not mandatory, and (2) they are overly specific and may become outdated? 5. In reference to Section 3.9, is further detail needed with respect to the roles of ICANN, the registrar, the reseller, and/or other data processors as well as the GDRP-mandated 72 notice in the event of a breach? 6. In reference to Section 3.10, does the term "international organizations" require further clarity? Other Comments · BC strongly supports the inclusion of each of the issues identified in 1-7 to be addressed in the EPDP, with the exception of the accreditation model, since that work is being pursued on a separate track. As discussed earlier, providing definition to what is meant by “continued [and]public access” falls squarely within this PDP and must be explored. For example, difference between legal and natural persons, volume limitations, anonymized email. Time should be found for talking about these issues. · RySG: These issues are not being considered in the Triage exercise. Please note specifically the Objectives & Goals of the GNSO scope document for the EPDP note that these matters are not for initial consideration and the focus of the EPDP team should remain on the Primary queries at this juncture. · IPC: Apart from the issue identified in point #1 of the annex (related to an accreditation model) which IPC supports continued discussion of the important issues enumerated in the Annex by the EPDP team. We understand that the issued address in #1 is subject to the gating questions defined in the charter. · Need to define 'reasonable' in the context of reasonable access and/or reinventing the term. 5. Overview of triage report, including timeline for review · See notes above · Nothing in the triage report should prejudice future discussions of the EPDP Team. 6. Discussion of next steps · Triage effort has provided insight into the different issues as well as suggestions made. · Issue summaries and individual comments will be used as a guide. · Leadership team working on proposed approach for discussion during Thursday's meeting Homework for next meeting · Review triage report · Review input provided on URS/UDRP/Transfer sections - possible topics for next meetings · Consider comments made in relation to redaction of data elements and further rationale that should be considered for not redacting certain data elements. 7. Confirm action items and questions for ICANN org (if any) 8. Wrap and confirm next meeting to be scheduled for Thursday 23 August at 13.00 UTC. (Initial comments on Triage Report due Friday, 25 August by 19.00 UTC) Marika Konings Vice President, Policy Development Support – GNSO, Internet Corporation for Assigned Names and Numbers (ICANN) Email: marika.konings(a)icann.org<mailto:marika.konings@icann.org> Follow the GNSO via Twitter @ICANN_GNSO Find out more about the GNSO by taking our interactive courses<http://learn.icann.org/courses/gnso> and visiting the GNSO Newcomer pages<http://gnso.icann.org/sites/gnso.icann.org/files/gnso/presentations/policy-…>.

1 0

Recordings, Attendance & AC chat from the GNSO Temp Spec gTLD RD EPDP held Tuesday, 21 August 2018
by Andrea Glandon Aug. 21, 2018

Aug. 21, 2018

Dear all, Please find the attendance and AC chat attached to this email. The MP3 and AC recording below from the GNSO Temp Spec gTLD RD EPDP call held on Tuesday, 21 August 2018 at 13:00 UTC. These have also been posted on the agenda wiki page: https://community.icann.org/x/FxdpBQ MP3: https://audio.icann.org/gnso/gnso-epdp-gtld-registration-data-specs-21aug18… AC Recording: https://participate.icann.org/p27r8mt24t5/<https://participate.icann.org/p27r8mt24t5/?OWASP_CSRFTOKEN=863031ed14eb3300…> ** Please let me know if your name has been left off the list ** Mailing list archives of the GNSO Temp Spec gTLD RD EPDP : https://mm.icann.org/pipermail/gnso-epdp-team/ Main wiki page for the working group: https://community.icann.org/x/IYEpBQ [community.icann.org]<https://urldefense.proofpoint.com/v2/url?u=https-3A__community.icann.org_x_…> Thank you. Kind Regards, Andrea Glandon

1 0

Meeting Invitation / Alternates & Observers / GNSO Temp Spec gTLD RD EPDP call / Thursday, 23 August 2018 at 13:00 UTC
by Andrea Glandon Aug. 21, 2018

Aug. 21, 2018

Dear all, Non-members can follow the EPDP call taking place on Tuesday’s and Thursday’s at 13:00 UTC via the audio cast or view only Adobe Connect room. As requested and discussed on Tuesday's (14 August 2018) meeting, please note that an additional Adobe Connect room has been created for use by interested alternates and observers to be able to view-only the main EPDP Team Adobe Connect room. The view-only room will also broadcast the audio of the EPDP Team AC room, however, those in the view-only room will not be heard. Note that the audio cast stream will also remain available for now for those that prefer to use that option to listen live to the EPDP Team meeting. View-Only Adobe Connect room for alternates and observers: https://participate.icann.org/gnso-epdp-observers Meeting Audio Cast (for alternates and observers) To join the event, click on the link: Listen in browser: http://stream.icann.org:8000/stream01 [stream.icann.org]<https://urldefense.proofpoint.com/v2/url?u=http-3A__stream.icann.org-3A8000…> Listen in application such as iTunes: http://stream.icann.org:8000/stream01.m3u [stream.icann.org]<https://urldefense.proofpoint.com/v2/url?u=http-3A__stream.icann.org-3A8000…> Agenda wiki page: https://community.icann.org/x/TRhpBQ Kind Regards, Andrea Glandon

1 0

Possible Unified Access Model for community input
by Trang Nguyen Aug. 21, 2018

Aug. 21, 2018

All, ICANN org published a blog yesterday on a possible Unified Access Model for community input. https://www.icann.org/news/blog/possible-unified-access-model-published-for… Input can be sent to gdpr(a)icann.org<mailto:gdpr@icann.org>. Regards, Trang Nguyen (ICANN Org Liaison)

1 0

Triage Report - Complete Draft
by Kurt Pritz Aug. 20, 2018

Aug. 20, 2018

Hi Everyone: Please find attached a pro-forma version of the complete Triage report. It includes the issue or comment summaries of all sections of the Preliminary Specifications. There will be three appendices published as separate documents: The complete set of comments organized by group (attached here and to be reorganized by alphabetical order) The complete set of comments organized by Temporary Specification section The set of opening comments made during the first meeting. These other two appendices should be ready tomorrow. Please note the one topic of discussion, the second sentence of the second paragraph of the report, where reference to redacted data has been, for now, deleted. This report represents our first deliverable to the GNSO Council and, more importantly, represents considerable work done by this group, reflecting a thorough understanding of the issues presented by the Temporary Specification, However, it does not portray any consensus or agreement by this group - it is a required stepping stone onto more substantive work. Please review and comment on this report with that in mind. If the issue summaries disagree with your comments, they should be amended. However, non-substantive changes to this report will not affect our final work. Thank you for all your work that went into this. Best regards, Kurt

1 0

Proposed agenda + accompanying materials for EPDP Team Meeting - 21 August 2018
by Caitlin Tubergen Aug. 20, 2018

Aug. 20, 2018

Dear All, Please find below the proposed agenda for the next EPDP Team meeting, which is scheduled for Tuesday, 21 August at 13.00 UTC. Accompanying materials are also attached. Please accept our apologies for the delay. Best regards, Marika, Berry, and Caitlin EPDP Meeting #6 Agenda Tuesday, 21 August 2018 Roll Call & SOI Updates Welcome and Updates from EPDP Team Chair Summary of responses to EPDP Input Survey Part 4 - Results for Section 8: Miscellaneous; Appendix C: Data Processing Requirements Substantive Discussion of Temporary Specification: Part 4 of the Survey can be found at https://www.surveymonkey.com/r/9KD5K79 Section 8: Miscellaneous Appendix C: Data Processing Requirements Overview of triage report, including timeline for review Discussion of next steps Confirm action items and questions for ICANN org (if any) Wrap and confirm next meeting to be scheduled for Thursday 23 August at 13.00 UTC. (Initial comments on Triage Report due Friday, 25 August by 19.00 UTC)

1 0