- Gnso-epdp-team - lists.icann.org

Resignation Redux
by Kurt Pritz Feb. 25, 2019

Feb. 25, 2019

Hi Everyone: I am sorry that you learned about me resigning my position as EPDP Chair by being copied on the resignation notice. It’s not good form but I thought it better to let my boss know first so that he doesn’t hear it from someone else. I am glad to have worked with you - getting to know some of you for the first time and some of you better than I did before this. I will continue to lead and aid the transition of leadership however it is required. I am also happy to chat informally about any topic. During the last several months, many of you provided signs of support - small and large, inadvertent and intentional. They were always appreciated and important to me, and never went unnoticed. I also appreciated the criticism that was offered, as it was always constructive. To the Support Team, you’ll hear more from me later. I’ll see you on the next call or in Kobe. Best regards, Kurt

10 9

Update from Council meeting
by Rafik Dammak Feb. 22, 2019

Feb. 22, 2019

Dear EPDP Team, I wanted to provide you with an update of yesterday GNSO Council discussion on the EPDP Team Final Report. After a lengthy exchange of views, the GNSO Chair decided to grant a request received from the BC and IPC for a deferral of the vote on the Final Report to allow those groups additional time to consult with their respective constituencies. As a result, the consideration by GNSO Council of the Final Report is now scheduled for Monday 4 March. For those interested in listening to the recording of the meeting, please see https://participate.icann.org/p8agqudejx6/. I would like to confirm that there are no EPDP Team meetings scheduled until that date (4th March). Further details in relation to Kobe meeting will be shared shortly but that that is still under discussion as a result of the uncertainty in relation to commencement of phase 2 (pending GNSO council instructions) as well as new chair search. Best Regards, Rafik

1 0

Resignation from EPDP
by Kurt Pritz Feb. 22, 2019

Feb. 22, 2019

Dear Keith: For a set of personal and professional reasons, I am writing to resign my post as Chair of the EPDP for Registration Data. I was honored to be selected by the GNSO Council leadership for the post and attempted to live up to the position expectations and requirements at every moment since I began in July. I will stay on for as long as it takes to find a replacement Chair and smoothly transition the responsibilities. I have several thoughts about the follow-on work that I can share for Council and EPDP Team consideration. I wish to thank the Support Team for their incredibly hard, incredibly excellent work, and the EPDP Team members for their tireless, constructive participation and willingness to compromise. I will remain available to you, the Council Leadership and the EPDP Team as necessary and at your convenience. Thanks for your and the Council Leadership’s support. Sincerely, Kurt Pritz

3 2

For your review - Final EPDP Report
by Marika Konings Feb. 21, 2019

Feb. 21, 2019

Dear Councilors, As Rafik is traveling and in the interest of time, we are hereby sending you the EPDP Team’s Final Report. Per a request from last week’s Council meeting, we are attaching two versions of the report: (1) a clean version and (2) a red-lined version, which highlights the changes from the draft final report that was sent last week. As you review the Final Report, we would like to highlight the main updates made since the last version: 1. The chair has included the consensus designations in the body of the Report. You may also review the table of consensus designations in Annex E of the Final Report. 2. The following recommendations have been edited for clarification: * Recommendation 6 - registrars may allow registered name holders to consent to publish redacted data elements * Recommendation 7 – the first table has been deleted in order to clarify which data elements are optional for registries to transfer to registrars * Recommendation 9 – the language was been edited slightly to note that Contractual Compliance may request registration data elements under the Purpose 5 table, but the requests will be narrowly-tailored and fit for purpose * Recommendation 11 – the Team notes it is expecting additional legal guidance with respect to the city field, and, accordingly, this recommendation may be revisited in Phase 2 of the Team’s work * Recommendation 12 – the text has been altered to note that publication of the Organization field is a requirement for registrars, not registries. Additionally, registrars must phase into this treatment of the Org field by no later than 29 February 2019. * Recommendation 14 – a note was added to that PPSAI is currently in implementation and it will be important to understand the interplay b/w this recommendation and the PPSAI IRT’s work. Further work may be considered in Phase 2. * Recommendation 15 – the data retention period has been changed to 15 months * Recommendation 17 – text edited for clarity * Recommendation 18 – the text has been clarified to note that registrars and registries must reasonably consider and accommodate requests for lawful disclosure and reasonable requests for disclosure must be responded to within 30 days 3. Group statements, the Minority Statement and responses to Consensus calls were submitted during the week prior to the close of deliberations. Issues raised in those submissions regarding Final Report inconsistencies, errors, and vagueness (as well as several substantive amendments) were discussed following receipt of the reports and amendments were made where the group agreed with those requested edits. Best regards, Marika Marika Konings Vice President, Policy Development Support – GNSO, Internet Corporation for Assigned Names and Numbers (ICANN) Email: marika.konings(a)icann.org<mailto:marika.konings@icann.org> Follow the GNSO via Twitter @ICANN_GNSO Find out more about the GNSO by taking our interactive courses<https://urldefense.proofpoint.com/v2/url?u=http-3A__learn.icann.org_courses…> and visiting the GNSO Newcomer pages<https://urldefense.proofpoint.com/v2/url?u=http-3A__gnso.icann.org_sites_gn…>.

3 2

BC and IPC Statement on EPDP Phase 1 Final Report
by Mark Svancarek (CELA) Feb. 21, 2019

Feb. 21, 2019

Dear Colleagues- Based on outcome of meetings this week, the BC and IPC members are able to share our revised response to the consensus call following today's updates as reflected in the Final Report for EPDP Phase 1<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Furldefens…> that is to be voted on shortly by the GNSO Council. The attached response is less than one page long, and reflects the exceptional collaboration of the EPDP team this week. Only a single blocking item remains. We are grateful for your support and look forward to working with you on Phase 2. All the best, Margie Milam and Mark Svancarek BC Representatives on the EPDP

2 2

Recordings, Attendance & AC Chat / GNSO Temp Spec gTLD RD EPDP / Wednesday, 20 February 2019
by Julie Bisland Feb. 21, 2019

Feb. 21, 2019

Dear all, Please find the attendance and AC chat attached to this email, and the MP3 and AC recording below from the GNSO Temp Spec gTLD RD EPDP call held on Wednesday, 20 February 2019 at 14:00 UTC. These have also been posted on the agenda wiki page: https://community.icann.org/x/FoU2Bg MP3: https://audio.icann.org/gnso/gnso-epdp-gtld-registration-data-specs-20feb19… AC Recording: https://participate.icann.org/p8l3knhesg9/<https://participate.icann.org/p8l3knhesg9/?OWASP_CSRFTOKEN=9c9b742509a1b3f0…> ** Please let me know if your name has been left off the list ** Mailing list archives of the GNSO Temp Spec gTLD RD EPDP : https://mm.icann.org/pipermail/gnso-epdp-team/ Main wiki page for the working group: https://community.icann.org/x/IYEpBQ Thank you. Kind Regards, Andrea Glandon

1 0

Re: [Gnso-epdp-team] For your review - Final EPDP Report
by Matt Serlin Feb. 20, 2019

Feb. 20, 2019

I’d like to echo Marc’s sentiments below and especially thank the ICANN staff and all support staff who assisted us in this effort along the way under very condensed timeframes and additional pressure not normally associated with these sorts of things. To those traveling to Kobe, safe travels and look forward to seeing you there. Matt From: Gnso-epdp-team <gnso-epdp-team-bounces(a)icann.org> on behalf of "Anderson, Marc via Gnso-epdp-team" <gnso-epdp-team(a)icann.org> Reply-To: "Anderson, Marc" <mcanderson(a)verisign.com> Date: Wednesday, February 20, 2019 at 2:10 PM To: "marika.konings(a)icann.org" <marika.konings(a)icann.org>, "gnso-epdp-team(a)icann.org" <gnso-epdp-team(a)icann.org> Subject: Re: [Gnso-epdp-team] For your review - Final EPDP Report Congratulations to staff, fellow working group members, Kurt and the leadership team on reaching this milestone. From: Gnso-epdp-team <gnso-epdp-team-bounces(a)icann.org> On Behalf Of Marika Konings Sent: Wednesday, February 20, 2019 3:57 PM To: council(a)gnso.icann.org Cc: gnso-epdp-team(a)icann.org Subject: [EXTERNAL] [Gnso-epdp-team] For your review - Final EPDP Report Dear Councilors, As Rafik is traveling and in the interest of time, we are hereby sending you the EPDP Team’s Final Report. Per a request from last week’s Council meeting, we are attaching two versions of the report: (1) a clean version and (2) a red-lined version, which highlights the changes from the draft final report that was sent last week. As you review the Final Report, we would like to highlight the main updates made since the last version: 1. The chair has included the consensus designations in the body of the Report. You may also review the table of consensus designations in Annex E of the Final Report. 2. The following recommendations have been edited for clarification: * Recommendation 6 - registrars may allow registered name holders to consent to publish redacted data elements * Recommendation 7 – the first table has been deleted in order to clarify which data elements are optional for registries to transfer to registrars * Recommendation 9 – the language was been edited slightly to note that Contractual Compliance may request registration data elements under the Purpose 5 table, but the requests will be narrowly-tailored and fit for purpose * Recommendation 11 – the Team notes it is expecting additional legal guidance with respect to the city field, and, accordingly, this recommendation may be revisited in Phase 2 of the Team’s work * Recommendation 12 – the text has been altered to note that publication of the Organization field is a requirement for registrars, not registries. Additionally, registrars must phase into this treatment of the Org field by no later than 29 February 2019. * Recommendation 14 – a note was added to that PPSAI is currently in implementation and it will be important to understand the interplay b/w this recommendation and the PPSAI IRT’s work. Further work may be considered in Phase 2. * Recommendation 15 – the data retention period has been changed to 15 months * Recommendation 17 – text edited for clarity * Recommendation 18 – the text has been clarified to note that registrars and registries must reasonably consider and accommodate requests for lawful disclosure and reasonable requests for disclosure must be responded to within 30 days 3. Group statements, the Minority Statement and responses to Consensus calls were submitted during the week prior to the close of deliberations. Issues raised in those submissions regarding Final Report inconsistencies, errors, and vagueness (as well as several substantive amendments) were discussed following receipt of the reports and amendments were made where the group agreed with those requested edits. Best regards, Marika Marika Konings Vice President, Policy Development Support – GNSO, Internet Corporation for Assigned Names and Numbers (ICANN) Email: marika.konings(a)icann.org<mailto:marika.konings@icann.org> Follow the GNSO via Twitter @ICANN_GNSO Find out more about the GNSO by taking our interactive courses<https://urldefense.proofpoint.com/v2/url?u=http-3A__learn.icann.org_courses…> and visiting the GNSO Newcomer pages<https://urldefense.proofpoint.com/v2/url?u=http-3A__gnso.icann.org_sites_gn…>.

2 1

Consensus Designations
by Kurt Pritz Feb. 20, 2019

Feb. 20, 2019

Hi Everyone: Attached is the consensus designation table that will be included as an Annex in the Final Report. Please let me know of questions or corrections. Thx & regards, Kurt

1 0

Notes and action items from EPDP Team Meeting #47
by Caitlin Tubergen Feb. 20, 2019

Feb. 20, 2019

EPDP Meeting #47 20 February 2019 High-level Notes/Actions The Support Team will send a clean and red-lined version of the Final Report to the Team and the GNSO Council shortly. Notes & Action items These high-level notes are designed to help the EPDP Team navigate through the content of the call and are not meant as a substitute for the transcript and/or recording. The MP3, transcript, and chat are provided separately and are posted on the wiki at: https://community.icann.org/x/ZwPVBQ. 1. Roll Call & SOI Updates · Attendance will be taken from Adobe Connect · Remember to mute your microphones when not speaking and state your name before speaking for transcription purposes. · Please remember to review your SOIs on a regular basis and update as needed. Updates are required to be shared with the EPDP Team. 2. Discussion of items for amendment and final discussion: · If there is not broad support for a change, we will move on to the next item. · There seemed to be rough consensus around 30 days for disclosure requests for rec. 18. · 30 days may be acceptable, but a substantially shorter timeline will apply for urgent disclosure requests · It doesn't make sense to have a contractual requirement without knowing the volume of requests that will come in. · There could be a scheme that is developed later about how to deal with this. To attach a number at this stage in the game is premature because the number we pick is likely wrong. · Addressing this later does not address the bad actors. · There needs to be a way to block unreasonable requests. · The language that registrars must respond reasonably helps solve the concern with bad actors. The language proposed by Thomas would be acceptable. e. Recommendation 9 – Contractual Compliance – consider clarification (30 minutes) · Add "if needed" to the recommendation and note the current language in the contracts addresses this already. · This change may not fully address the RySG comments. · From a Ry perspective, the group looked at the Charter question, specifically e1. The contract language is fine as is and does not require any changes. · The footnote for Rec. 9 notes the request must be narrowly-tailored to meet the request. · It may be important to keep the data set provided by Compliance in the recommendation. Why is OK to eliminate this? · The existing contracts do not have this enumerated, so why is this enumerated in the report? The data elements are out of place here. · If this is a full list, why does it need to be delineated? · Is it OK with everyone to delete the table, retain the footnote and note what Alan G. just said? · Concerning registration data elements - ry and rrs are required to transmit to ICANN org any WHOIS elements that are requested for Purpose 5. · Add a note, "it doesn't preclude CC from getting other data that are in the compliance processing activities doc" f. Recommendation 12 – Organization field – consider clarification (30 minutes) · Clarification offered by Rrs/Rys to show the org phase-in approach is a registrar obligation, and for registries to publish is optional. · Will registries publish the org field once the phase-in period is complete? · Getting consent requires flags for getting consent and flags for withdrawal of consent. This seems complicated for registries to know if the requisite consent was given. · Transfer of consent is not a simple issue. It's a technical challenge as well as a GDPR challenge. · Registry has to decide or not whether it wants the data, and this is based on risk. · There is not thin or thick at this point; rather, an aggregate minimum data set. Having it and using it for a justified purpose is different than publishing it. · Consent is not mentioned in the implementation advice. · Once we figure out who to transfer consent, then info will get transmitted to the registries · Who is the authoritative source, the registry or the registrar? · It might be best to say the registrar is the authoritative source here. · When we say something is only available at the registrar, once we figure out how to transfer consent, it should apply to all of those fields. · Proposed updated language: This is a Registrar obligation. For a Registry to publish is optional, until such time a way has been found that allows for the transfer of consent from Registrar to Registry. · A future date certain is not certain, so clarity is needed. · The only language regarding implementation appears in Rec. 28 - Feb. 29, 2020. · This is more difficult that some make it seem. · For the period b/w the adoption of the EPDP Policy and the conclusion of the implementation effort set for on or before 29 February 2020. g. Recommendation 17 – Natural v Legal distinctions – consider clarification (30 minutes) · Ry/Rr proposed modification - the language in the parentheses is the previous language. · The updated language from Ry/Rr is meant to clarify the recommendation. · The SSAC proposal seems the opposite of what the group came to, so the disagreement will be noted. · SSAC would like to see a resolution to this = recommending as a possible path forward, in the deliberations in Phase 2. As we deliberate on this, there should be a balance on the cost to the ecosystem, not just the financial burden on contracted parties. · Consider adding a bullet that says: considers the potential benefits. · Add bullet on impact on the Internet/DNS ecosystem of not making the distinction. · It is not just about legal vs natural persons - even with legal persons, there could be personal information of natural persons. · Phase 2 is not a second bite at the apple. · IP/BC change to third bullet makes the language more committal - instead of "will discuss", it is changed to "determine and resolve". It also deletes the second sentence of the recommendation. · No objections were noted to these changes. · For rec. 18, can 30 business days be changed to 30 calendar days? · Change 30 business days to 30 days. h. NEW – Recommendation #14 – Privacy / Proxy Registrations – consider clarification and possible implementation guidance proposed (30 minutes) · One proposed change is to add "affiliated and accredited provider is used" instead of just affiliated. · Accredited is added so that when the policy goes into effect, this language will future-proof the policy. · The second bullet asks for the implementation to be completed within 90 days after the adoption of the EPDP policy recommendations by the board. · It seems tough for this Team to put an implementation date certain on another IRT. · The expansion of accredited is inappropriate at this late stage. · If there is some way to convey to the Council that this work should be done in an expedited manner, that would be preferred. · Isn't the onus on the P/P provider to provide the data, and not the registrar? · Not sure we're in a position to guarantee an implementation date. · Our job is not to future proof - we are looking at the status of things as they are now. We should defer to the competence of the other WGs/IRTs for the future work. · Support staff to put a note that PPSAI is an approved policy that is currently going through implementation. It will be important to understand the interplay between the display of information of affiliated vs. accredited privacy / proxy providers. Based on feedback received on this topic from the PPSAI IRT, the EPDP Team may consider this further in phase 2. Data Retention - Rec. 15 · Add 15 months to account for complaints filed on the 365th date to ensure data is not deleted on Day 366 Recommendation 7 · Small group looked through the workbooks · In the latest version of transfer of data from the registrar to the registry. There are two versions of this - there is one for TLDs where URS applies and where URS does not apply. This was put in the annex due to a previously-raised concern. · The current language of Rec. 7 is problematic b/c it creates an obligation that is not necessary and conflates the URS with the transfer of data from the registrar to the registry unnecessarily. · Proposed solution: requires transfer of registrant fields from a registrar to a registry with URS. Transfer of those fields should be optional based on registry policy (O-CPH). The table of required elements should be changed. URS does not create an obligation to transfer data. Remove the first table and leave the second table. And remove the reference to URS. · URS contemplates the data comes from the registries. Accordingly, there should be a recommendation that the data should come from the registrar. · The URS is not a consensus policy, it is a contractual obligation since the 2012 round. There is not distinction of whether a provider should contact the registry or registrar. As part of the Temp Spec implementation from Annex D, there are specific additional requirements for the Registry Operator and for the registrar. Because data elements would be redacted, in some cases, the provider would contact the registry to retrieve the RNH data. The rationale for doing that is that in today's URS environment, providers contact the registry and not the registrar. · The workbooks are not binding, they are illustrative. 3. NEW - Confirm groups for any recommendations that are designated as having ‘strong support, significant opposition’ as this information is to be included in the Final Report. (15 minutes) (see latest version of Consensus Designations document) · The consensus designations in red are the ones that have changed. · For the org field, we can call that consensus. · What is important to the leadership team - identify the groups that are not supporting the consensus recommendations. · Generally speaking, there are notations within the report that recommendations have consensus/full consensus unless designated differently. The groups who disagree will be noted in the report. We could consider adding this table as an annex. · Action item is that the groups who do not support recommendations are denoted correctly so that everything is accurately documents. For consensus designations, there is no requirement to designate opposition. · When we refer to BC and IPC, but it should be clarified parenthetically that it is 2/3 of one stakeholder group. (2/3 of CSG) · We have a consistency problem with divergence and SS/SO for Rec. 2 and Rec. 16 – these should be the same designation. · Is ISPCP opposed to Rec. 2? The ISPCP has not objected to any recommendations but has recorded some concerns. · For 16 – opposition – IPC, BC, ALAC, SSAC · Council rules apply when voting, but within a WG, we are not viewed within our stakeholder group. · The chart does not reflect the comment about the BC/IPC that they are not able to support the report without the requested changes. This dissent should be captured in a footnote on this chart. · On Rec. 5 – there should be a note about divergence with the tech contact being optional. · Does contact information include tech contact? If it does not, then ALAC would oppose the recommendation. · This is how the consent rec currently reads: "The EPDP Team recommends that, as soon as commercially reasonable, Registrar must provide the opportunity for the Registered Name Holder to provide its Consent to publish redacted contact information, as well as the email address, in the RDS for the sponsoring registrar" · Should contact be removed to address the problem? · ACs should be treated the same as SGs to respect the participation of the groups. · BC/IPC would like to include their statement as an annex/minority statement to the report. 4. Confirm next Steps (15 minutes) 20 February 2019Final Report Submit Final Report or confirm that version submitted on 11 February should be considered finalStaff Support Team / Council Liaison 21 February 2019Consider Final Report for adoptionGNSO Council 4 March 2019Consider Final Report for adoption (if needed)GNSO Council

1 0

Modified GAC Statement
by Heineman, Ashley Feb. 20, 2019

Feb. 20, 2019

Hello all. My sincerest apologies for any potential confusion, but please find a mildly revised version of the GAC Statement to the Final Phase 1 Report. This attempts to clarify some confusion around our concerns pertaining to the organization field as well as to update where we stand on Recommendation 18 in light of today's call. EPDP support staff, please kindly use this version for including in the report and apologies again for sending in a revised version.

1 0