June 2019 - Gnso-epdp-team - lists.icann.org

CPH comment on purposes
by Matt Serlin June 19, 2019

June 19, 2019

Hi All, Please find attached a CPH comment on the previously circulated purposes doc. Look forward to seeing many of you in Marrakech…safe travels to all headed there! Regards, Matt

2 1

**Reminder** Meeting Invitation: Observers GNSO Temp Spec gTLD RD EPDP - Phase 2 call / Thursday, 20 June 2019 at 14:00 UTC
by Julie Bisland June 19, 2019

June 19, 2019

As a result of various requests to facilitate observers to follow the EPDP Phase 2 deliberations in real time, audio cast will be made available for the EPDP plenary meetings. Staff will be monitoring audio cast attendance numbers so that the EPDP leadership can assess its usage. As a reminder, the zoom recording, mp3 recording, chat transcript and transcript of the EPDP plenary meetings will be publicly posted as soon as available on the EPDP wiki page and GNSO master calendar. Dear all, The next meeting of the GNSO Temp Spec gTLD RD EPDP – Phase 2 is scheduled on Thursday, 20 June 2019 at 14:00 UTC for 120 minutes. (calls will be scheduled for 120 minutes but aim to keep to 90 minutes) 07:00 PDT, 10:00 EDT, 16:00 Paris CEST, 19:00 Karachi PKT, 23:00 Tokyo JST, (Friday) 00:00 Melbourne AEST For other times: https://tinyurl.com/y4tk8eka [tinyurl.com]<https://urldefense.proofpoint.com/v2/url?u=https-3A__tinyurl.com_y4tk8eka&d…> Agenda Wiki: https://community.icann.org/x/IpyjBg The recordings and transcriptions of the calls are posted on the GNSO Master Calendar page: https://gnso.icann.org/en/group-activities/calendar<https://urldefense.proofpoint.com/v2/url?u=https-3A__gnso.icann.org_en_grou…> Meeting Audio Cast (for observers) To join the event, click on the link: Listen in browser: http://stream.icann.org:8000/stream02 <https://urldefense.proofpoint.com/v2/url?u=http-3A__stream.icann.org-3A8000…> Listen in application such as iTunes: http://stream.icann.org:8000/stream02.m3u <https://urldefense.proofpoint.com/v2/url?u=http-3A__stream.icann.org-3A8000…> If needed, an option to join via telephone has been added for this meeting. Passcode: EPDP Telephone numbers: Dial in numbers: Country Toll Numbers Freephone/ Toll Free Number ARGENTINA 0800-777-0519 AUSTRALIA ADELAIDE: 61-8-8121-4842 1-800-657-260 AUSTRALIA BRISBANE: 61-7-3102-0944 1-800-657-260 AUSTRALIA CANBERRA: 61-2-6100-1944 1-800-657-260 AUSTRALIA MELBOURNE: 61-3-9010-7713 1-800-657-260 AUSTRALIA PERTH: 61-8-9467-5223 1-800-657-260 AUSTRALIA SYDNEY: 61-2-8205-8129 1-800-657-260 AUSTRIA 43-1-92-81-113 0800-005-259 BELGIUM 32-2-400-9861 0800-3-8795 BRAZIL RIO DE JANEIRO: 55-21-40421490 0800-7610651 BRAZIL SAO PAULO: 55-11-3958-0779 0800-7610651 CHILE 1230-020-2863 CHINA CHINA A: 86-400-810-4789 10800-712-1670 CHINA CHINA B: 86-400-810-4789 10800-120-1670 COLOMBIA 01800-9-156474 CROATIA 080-08-06-309 CZECH REPUBLIC 420-2-25-98-56-64 800-700-177 DENMARK 45-7014-0284 8088-8324 ESTONIA 800-011-1093 FINLAND 358-9-5424-7162 0-800-9-14610 FRANCE LYON: 33-4-26-69-12-85 080-511-1496 FRANCE MARSEILLE: 33-4-86-06-00-85 080-511-1496 FRANCE PARIS: 33-1-70-70-60-72 080-511-1496 GERMANY 49-69-2222-20362 0800-664-4247 GREECE 30-80-1-100-0687 00800-12-7312 HONG KONG 852-3001-3863 800-962-856 HUNGARY 36-1-700-8856 06-800-12755 INDIA INDIA A: 000-800-852-1268 INDIA INDIA B: 000-800-001-6305 INDIA INDIA C: 1800-300-00491 INDONESIA 001-803-011-3982 IRELAND 353-1-246-7646 1800-992-368 ISRAEL 1-80-9216162 ITALY MILAN: 39-02-3600-6007 800-986-383 ITALY ROME: 39-06-8751-6018 800-986-383 ITALY TORINO: 39-011-510-0118 800-986-383 JAPAN OSAKA: 81-6-7878-2631 0066-33-132439 JAPAN TOKYO: 81-3-6868-2631 0066-33-132439 LATVIA 8000-3185 LUXEMBOURG 352-27-000-1364 8002-9246 MALAYSIA 1-800-81-3065 MEXICO GUADALAJARA (JAL): 52-33-3208-7310 001-866-376-9696 MEXICO MEXICO CITY: 52-55-5062-9110 001-866-376-9696 MEXICO MONTERREY: 52-81-2482-0610 001-866-376-9696 NETHERLANDS 31-20-718-8588 0800-023-4378 NEW ZEALAND 64-9-970-4771 0800-447-722 NORWAY 47-21-590-062 800-15157 PANAMA 011-001-800-5072065 PERU 0800-53713 PHILIPPINES 63-2-858-3716 1800-111-42453 POLAND 00-800-1212572 PORTUGAL 8008-14052 ROMANIA 40-31-630-01-79 RUSSIA 8-10-8002-0144011 SAUDI ARABIA 800-8-110087 SINGAPORE 65-6883-9230 800-120-4663 SLOVAK REPUBLIC 421-2-322-422-25 0800-002066 SOUTH AFRICA 080-09-80414 SOUTH KOREA 82-2-6744-1083 00798-14800-7352 SPAIN 34-91-414-25-33 800-300-053 SWEDEN 46-8-566-19-348 0200-884-622 SWITZERLAND 41-44-580-6398 0800-120-032 TAIWAN 886-2-2795-7379 00801-137-797 THAILAND 001-800-1206-66056 TURKEY 00-800-151-0516 UNITED ARAB EMIRATES 8000-35702370 UNITED KINGDOM BIRMINGHAM: 44-121-210-9025 0808-238-6029 UNITED KINGDOM GLASGOW: 44-141-202-3225 0808-238-6029 UNITED KINGDOM LEEDS: 44-113-301-2125 0808-238-6029 UNITED KINGDOM LONDON: 44-20-7108-6370 0808-238-6029 UNITED KINGDOM MANCHESTER: 44-161-601-1425 0808-238-6029 URUGUAY 000-413-598-3421 USA 1-517-345-9004 866-692-5726 VENEZUELA 0800-1-00-3702 VIETNAM 120-11751 Thank you. Kind Regards, Terri

1 0

For your review: next steps for Priority 2 items
by Caitlin Tubergen June 19, 2019

June 19, 2019

Dear EPDP Team, Attached, please find a summary of the next steps agreed to by the attendees of the Priority 2 worksheet calls. If you have any comments or concerns, please flag them to the Team by Friday, 28 June. Pending agreement from the Team, the Leadership Team will begin acting on the next steps identified within this document. Thank you. Best regards, Marika, Berry, and Caitlin

1 0

Re: [Gnso-epdp-team] [Ext] Re: Proposed agenda and materials for review - EPDP Team meeting Thursday 13 June at 14.00 UTC
by Marika Konings June 17, 2019

June 17, 2019

Thanks, Hadia for your feedback. If other EPDP Team members have additional suggestions or would like to share their thoughts on the approach proposed by Hadia, you are encouraged to do so in advance of tomorrow's EPDP Team meeting. Best regards, Caitlin, Berry and Marika On 6/12/19, 12:58, "Hadia Abdelsalam Mokhtar EL miniawi" <Hadia(a)tra.gov.eg> wrote: Dear Janis, Thank you for outlining the charter section that is in relation to our work, however I do not see any contradiction between what I meant and the charter's question "a1) Under applicable law, what are legitimate purposes for third parties to access registration data? The draft document circulated by staff says that the 3rd party purposes have been inspired/derived from the community responses to a request from ICANN at the end of June 2017 to identify user types and purposes of data elements required by ICANN policies and contracts. So instead of being driven by some data that was collected in 2017 which might include purposes that are not GDPR compliant, why not rely on our work that was developed in phase 1 - which actually stems from ICANN's purposes - and make this our base for identifying the users' types and purposes. Article 5 (1)b of the GDPR - Purpose limitation -says that the data needs to be collected for specified, explicit and legitimate purposes and not processed in a manner that is incompatible with those purposes Using our work as the starting point and base to identify the users and their purposes rather than previously collected data would yield to more up to date results. So yes, my below points are not quite accurate, as for sure we shall need to refer to the third parties purposes when identifying the lawful basis and the data elements. But generally speaking I would like our starting point in identifying the users of the SSAD to be our previous work in phase 1 and not previously collected data that was in relation to the retired WHOIS and was prior to the GDPR and the temp Spec and could be debated forever. I hope my thoughts are clearer this time and better organized Regards Hadia ________________________________ From: Janis Karklins <karklinsj(a)gmail.com> Sent: 12 June 2019 18:45 To: Hadia Abdelsalam Mokhtar EL miniawi Cc: Marika Konings; gnso-epdp-team(a)icann.org Subject: Re: [Gnso-epdp-team] Proposed agenda and materials for review - EPDP Team meeting Thursday 13 June at 14.00 UTC Dear Hadia, Thank you for your mail outlining your view on the scope of our task. I just checked the Charter and found the following tasks: ... (page 7) System for Standardized Access to Non-Public Registration Data Work on this topic shall begin once the gating questions above have been answered and finalized in preparation for the Temporary Specification initial report. The threshold for establishing “answered” for the gating questions shall be consensus of the EPDP Team and non-objection by the GNSO Council. (a) Purposes for Accessing Data – What are the unanswered policy questions that will guide implementation? a1) Under applicable law, what are legitimate purposes for third parties to access registration data? a2) What legal bases exist to support this access? a3) What are the eligibility criteria for access to non-public Registration data? a4) Do those parties/groups consist of different types of third-party requestors? a5) What data elements should each user/party have access to based on their purposes? a6) To what extent can we determine a set of data elements and potential scope (volume) for specific third parties and/or purposes? a7) How can RDAP, that is technically capable, allow Registries/Registrars to accept accreditation tokens and purpose for the query? Once accreditation models are developed by the appropriate accreditors and approved by the relevant legal authorities, how can we ensure that RDAP is technically capable and is ready to accept, log and respond to the accredited requestor’s token? ... How would you reconcile your view with task a1 of the Charter? I simply want to understand different points of view to prepare better for the team meeting tomorrow. Thank you JK On Wed, Jun 12, 2019 at 3:03 PM Hadia Abdelsalam Mokhtar EL miniawi <Hadia(a)tra.gov.eg<mailto:Hadia@tra.gov.eg>> wrote: Dear Staff, Thank you for the submitted document, however I have fundamental comments in relation to the logic through which we are handling the first topic of the SSAD that is defining the user groups and data elements • The EPDP team should be considering only ICANN purposes and not third parties' purposes, for this reason the starting point in defining the users of the system should be the ICANN purposes previously defined in phase1. Whilst purpose 2 could be considered serving the public interest by maintaining the security, stability and resiliency of the DNS in accordance to ICANN's mission and bylaws • So our starting point should be to analyze each of the 7 ICANN purposes to determine 1)who needs to access the registration data in order to fulfill this purpose 2)which parts of the data does he need to access in order to fulfil the purpose • Stemming from the above will originate all of the user groups and categories as well as the data elements, like the ones in the sheets. We must remember that third parties' purposes are not our objectives but fulfilling ICANN's purposes is our objective and in satisfying ICANN's purposes access or disclosure to certain parts of the data is required for several types of users. Kind regards Hadia From: Gnso-epdp-team [mailto:gnso-epdp-team-bounces@icann.org<mailto:gnso-epdp-team-bounces@icann.org>] On Behalf Of Marika Konings Sent: Tuesday, June 11, 2019 3:41 PM To: gnso-epdp-team(a)icann.org<mailto:gnso-epdp-team@icann.org> Subject: [Gnso-epdp-team] Proposed agenda and materials for review - EPDP Team meeting Thursday 13 June at 14.00 UTC Dear EPDP Team, Please find below the proposed agenda for the next EPDP Team meeting which is scheduled for Thursday 13 June at 14.00 UTC. For agenda item 6c, you will find attached an initial draft of the agenda for the F2F meetings at ICANN65 – if you have any comments or suggestions, you are encouraged to share these. Please also review the document for agenda item 4 in advance of the meeting. Best regards, Caitlin, Berry and Marika ====================== EPDP Phase 2 - Meeting #6 Proposed Agenda Thursday, 13 June 2019 at 14.00 UTC 1. Roll Call & SOI Updates (5 minutes) 2. Confirmation of agenda (Chair) 3. Welcome and housekeeping issues (Chair) (10 minutes) • Working definitions – confirm posting of updated version on wiki • Legal advisory group – nominations received to date • SSAD Priority 1 worksheet status 4. SSAD – Topic c: Define user groups, criteria and purposes / lawful basis per user group (Marika) (40 minutes) a. Review purpose template developed by staff support team (see attached) b. EPDP Team input c. Confirm next steps 5. Presentation by Steve Crocker (40 minutes) a. Presentation b. Q & A 6. Any other business (5 minutes) a. Priority 2 small team meetings update Reminder - Call schedule remaining priority 2 worksheets: • Monday 17 June – 13:00 – 14:30 UTC Potential OCTO Purpose Feasibility of unique contacts to have a uniform anonymized email address • TBC (post ICANN65) Accuracy and WHOIS ARS Deadline for providing input for those that were not able to attend the calls – proposed 20 June 2019. b. Confirm attendance for meeting on Thursday 13 June at 14.00 UTC c. ICANN65 EPDP Team meetings - Initial Draft Agenda (see attached) 7. Wrap and confirm next meeting to be scheduled for Thursday, 13 June at 14.00 UTC (5 minutes) a. Confirm action items b. Confirm questions for ICANN Org, if any Marika Konings Vice President, Policy Development Support – GNSO, Internet Corporation for Assigned Names and Numbers (ICANN) Email: marika.konings(a)icann.org<mailto:marika.konings@icann.org> Follow the GNSO via Twitter @ICANN_GNSO Find out more about the GNSO by taking our interactive courses<https://urldefense.proofpoint.com/v2/url?u=http-3A__learn.icann.org_courses…> and visiting the GNSO Newcomer pages<https://urldefense.proofpoint.com/v2/url?u=http-3A__gnso.icann.org_sites_gn…>. _______________________________________________ Gnso-epdp-team mailing list Gnso-epdp-team(a)icann.org<mailto:Gnso-epdp-team@icann.org> https://mm.icann.org/mailman/listinfo/gnso-epdp-team _______________________________________________ By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_privacy_… ) and the website Terms of Service (https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_privacy_… ). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.

3 2

legal advice and budget
by Greg Aaron June 17, 2019

June 17, 2019

Janis, if more budget may be needed for legal advice, can you start the process of acquiring it? Marika noted in chat today: "Do also note that there is a limited budget available - passing all these questions on may take up most of that budget which might prevent follow up on any further questions the group may have." This PDP is fundamentally about legal issues, and having access to legal advice is essential. This is a place where ICANN should be spending resources. Please see SAC104, where SSAC raised this issue to the Council last December: "2.2 Legal Advice v The EPDP has been largely about legal issues, but the EPDP team has not [always] had access to neutral, expert, outside legal advice. [Bird & Bird was not retained until late into Phase 1.] This is a notable omission given the consequences and regulatory complexity of the work. The SSAC urges the GNSO Council to re-examine this as further policy-making takes place in 2019 and beyond. This subject is a worthy place to spend ICANN budget given the priority and nature of the work, and a place to apply all the professional tools at ICANN's disposal, in order to carry out ICANN's responsibility to ensure the stable and secure operation of the Internet's unique identifier systems. . neutral legal advice would provide substantial benefit by fostering common understandings, consensus, and confidence in the deliberations and work product. In particular, it may help policy-makers understand the options available to them, given that bodies such as the European Data Protection Board and the national data commissioners are not in a position to answer many questions or evaluate policy proposals." https://www.icann.org/en/system/files/files/sac-104-en.pdf

7 7

Unique Contacts references
by Alex Deacon June 17, 2019

June 17, 2019

Hi. Based on an action I took this morning I have added the following two references to the Unique Contacts worksheet at ( https://docs.google.com/document/d/1meyuNRsq4sMOI6pefJk4jZevaKUsTkVf8_XyW1t…) - EWG Final Report Section V. pp 68-80 - https://www.icann.org/en/system/files/files/final-report-06jun14-en.pdf - Specifies a framework for Contact ID’s associated with Purpose Based Contacts. - Public Whois Attributes, Securely Hashed (WhASH) - https://www.icann.org/en/system/files/correspondence/jevans-to-marby-et-al-… - Describes a method for Hashing Point of Contact Details in Public Domain Name Whois Thanks! Alex ___________ *Alex Deacon* Cole Valley Consulting alex(a)colevalleyconsulting.com +1.415.488.6009

1 0

Recordings, Attendance & Zoom Chat / EPDP-Phase 2 - work on priority 2 worksheets / Monday, 17 June 2019 at 13:00 UTC
by Terri Agnew June 17, 2019

June 17, 2019

Dear all, Please find the attendance attached to this email, and links to the audio recording, zoom recording (audio, visual, rough transcript) and chat below from the The EPDP-Phase 2 work on priority 2 worksheets - Potential OCTO Purpose Feasibility of unique contacts to have a uniform anonymized email address held on Monday, 17 June 2019 at 13:00 UTC. These have also been posted on the agenda wiki page: https://community.icann.org/x/roejBg Audio Recording: https://icann.zoom.us/recording/play/UeuiGXKQ4ioHrNASGSCzoKnn1jzcs3SsKzwC4g… Zoom Recording (includes visual and rough transcript. To access the rough transcript, select the Audio Transcript tab): https://icann.zoom.us/recording/share/5g1yWGt_tfoPG7I_YFw5ex2uRBsoatMQzSNcz… Chat: https://icann.zoom.us/recording/download/nDHT3n00Ft2sUO-GlGllWgNhIpHIUP3Bey… ** Please let me know if your name has been left off the list ** Mailing list archives of the GNSO Temp Spec gTLD RD EPDP : https://mm.icann.org/pipermail/gnso-epdp-team/ Main wiki page for the working group: https://community.icann.org/x/IYEpBQ Thank you. Kind Regards, Terri

1 0

**Update / Change in permissions for Google Doc worksheets
by Terri Agnew June 14, 2019

June 14, 2019

Hello EPDP Team, We are missing a handful of google account email addresses for some team members/ alternates, please send off list to gnso-secs(a)icann.org<mailto:gnso-secs@icann.org> to be added. For those team members/ alternates who provided their google account email address, we have adjusted from view only to comments. Have a lovely weekend, Terri From: Gnso-epdp-team <gnso-epdp-team-bounces(a)icann.org> on behalf of Marika Konings <marika.konings(a)icann.org> Date: Friday, June 14, 2019 at 7:36 AM To: "gnso-epdp-team(a)icann.org" <gnso-epdp-team(a)icann.org> Subject: [Gnso-epdp-team] Change in permissions for Google Doc worksheets Dear EPDP Team, As noted during yesterday’s meeting, we are having issues with non-EPDP Team members making changes to the google docs that are out for review. As a result, we have now switched all worksheets to view only until we have been able to add your google account information individually. This means that for now you are not able to see any edits or comments (in view only mode, these are not visible) but if needed, we can pull down the latest version and post it as a pdf on the wiki page. We hope to have comment settings restored shortly. If you have not done so yet, please send your google account email address off-list to gnso-secs(a)icann.org<mailto:gnso-secs@icann.org>. Best regards, Caitlin, Berry and Marika Marika Konings Vice President, Policy Development Support – GNSO, Internet Corporation for Assigned Names and Numbers (ICANN) Email: marika.konings(a)icann.org<mailto:marika.konings@icann.org> Follow the GNSO via Twitter @ICANN_GNSO Find out more about the GNSO by taking our interactive courses<https://urldefense.proofpoint.com/v2/url?u=http-3A__learn.icann.org_courses…> and visiting the GNSO Newcomer pages<https://urldefense.proofpoint.com/v2/url?u=http-3A__gnso.icann.org_sites_gn…>.

1 0

Change in permissions for Google Doc worksheets
by Marika Konings June 14, 2019

June 14, 2019

Dear EPDP Team, As noted during yesterday’s meeting, we are having issues with non-EPDP Team members making changes to the google docs that are out for review. As a result, we have now switched all worksheets to view only until we have been able to add your google account information individually. This means that for now you are not able to see any edits or comments (in view only mode, these are not visible) but if needed, we can pull down the latest version and post it as a pdf on the wiki page. We hope to have comment settings restored shortly. If you have not done so yet, please send your google account email address off-list to gnso-secs(a)icann.org<mailto:gnso-secs@icann.org>. Best regards, Caitlin, Berry and Marika Marika Konings Vice President, Policy Development Support – GNSO, Internet Corporation for Assigned Names and Numbers (ICANN) Email: marika.konings(a)icann.org<mailto:marika.konings@icann.org> Follow the GNSO via Twitter @ICANN_GNSO Find out more about the GNSO by taking our interactive courses<https://urldefense.proofpoint.com/v2/url?u=http-3A__learn.icann.org_courses…> and visiting the GNSO Newcomer pages<https://urldefense.proofpoint.com/v2/url?u=http-3A__gnso.icann.org_sites_gn…>.

1 0

For your review: updated Priority 2 worksheets
by Caitlin Tubergen June 13, 2019

June 13, 2019

Dear EPDP Team: Thank you to those of you who attended the Priority 2 worksheet calls. For those of you who were unable to attend, please review the updates made to the worksheets and note any concerns with the proposed edits by Thursday, 20 June. Thus far, we have reviewed the following worksheets: Display of information of affiliated vs. accredited privacy/proxy providers: https://docs.google.com/document/d/1izpX2C-RrfAdRgRDwBO9tQuJIBA9Xt38p1MTJgQ… Legal vs. Natural: https://docs.google.com/document/d/1vEetjWuRlf2uvCCUREHf9G7ac5z2hk_sgGiOSJC… Redaction of City Field: https://docs.google.com/document/d/1rdtRLaNm5DiWR_EPei4Oi64FaDauIXEQhnF2Lm_… Data retention: https://docs.google.com/document/d/1xlw1N7omlgPKjag_FnOy03NRvByol8IaJma5zNP… As a result of the review of the legal vs. natural worksheet, the small group agreed to pose the following question to ICANN org: Can ICANN org please provide a list of the current notices registrars are required to provide to registrants? If you have any objection to the above question, please respond to the list by Thursday, 20 June. Best regards, Marika, Berry, and Caitlin

1 0