- Gnso-epdp-team - lists.icann.org

Proposed Agenda for EPDP Tam Meeting #3 (Thursday 9 August at 13.00 UTC)
by Marika Konings Aug. 8, 2018

Aug. 8, 2018

Dear All, Please find below the proposed agenda for the next EPDP Team meeting which is scheduled for Thursday 9 August at 13.00 UTC. Best regards, Caitlin, Berry and Marika ==================== EPDP Meeting #3 Agenda Thursday, 9 August 2018 1. Roll Call & SOI Updates 1. Welcome and Updates from EPDP Team Chair 1. Summary of responses to EPDP Input Survey Part 1 - Results for Appendix A – Registration Data Directory Services 1. Substantive Discussion of Temporary Specification (beginning with Section 4.4.6 – 4.4.13, 4.5 and Appendix A - Registration Data Directory Services) – see updated spreadsheet attached. * Part 1 of the Survey can be found at https://www.surveymonkey.com/r/CC6F9F8 1. Wrap and confirm next meeting to be scheduled for Tuesday 14 August at 13.00 UTC. (Part 2 Survey results due Friday, 10 August by close of business.) Marika Konings Vice President, Policy Development Support – GNSO, Internet Corporation for Assigned Names and Numbers (ICANN) Email: marika.konings(a)icann.org<mailto:marika.konings@icann.org> Follow the GNSO via Twitter @ICANN_GNSO Find out more about the GNSO by taking our interactive courses<http://learn.icann.org/courses/gnso> and visiting the GNSO Newcomer pages<http://gnso.icann.org/sites/gnso.icann.org/files/gnso/presentations/policy-…>.

3 2

Notes and action items from today's EPDP Team Meeting - 7 August 2018
by Caitlin Tubergen Aug. 8, 2018

Aug. 8, 2018

Dear All, Below, please find notes and action items from today’s EPDP Team Call. As a reminder, our next meeting will be Thursday, 9 August, 13:00UTC. Best regards, Marika, Berry, and Caitlin High-level Notes/Actions: While it is not confirmed, the likely dates for the EPDP Face-to-Face are Sept. 24 -26 (Mon – Wed) and most likely located in Los Angeles due to: cost, the headquarters’ ability to accommodate the size of the group as well as meeting team ability to organize a meeting on such short notice. Please do not book travel yet, but tentatively pencil-in these dates. Further to Rafik Dammak’s appointment as Vice-Chair, members of the EPDP team have suggested ways to escalate potential conflicts that should clear the path to his confirmation. Given the lack of consensus on most sections of the Temporary Specification, it seems beneficial to compile the triage report as soon as possible, rather than to spend time to resolve differences. That will be left to the stage of formulating the first Initial Report. The EPDP Leadership Team compiled the survey results and prepared “issue summaries” to capture the themes within the rationale reported by the Team members. These summaries are a tool to facilitate the discussion and should not be viewed as authoritative; the Team may provide feedback on the issue summaries by responding to the list. The next meeting is Thursday 9 August at 13.00 UTC. The deadline for submission of Part 2 of the survey is Friday 10 August at 19:00UTC. Questions for ICANN Org from the EPDP team: The Team seeks clarification on the exact expiry date of the Temporary Specification. In Section 3, the effective date of the Temporary Specification is 25 May 2018, but was adopted on 17 May 2018. If the Board is considering any amendments to the Temporary Specification, it would be helpful if the EPDP Team can be made aware of any proposed changes in advance. Is the Board currently considering any amendments to the Temporary Specification? To address what requirement? When ICANN refers to “security” as part of its mission - can ICANN describe what types of security are included?? With regard to the term “content,” in Section 4.4.5 - can ICANN provide context for use of the term? It is generally believed that ICANN does not see itself in the role of a content regulator but there are scenarios where use of the term “content” is appropriate in this section. All Action Items: ICANN Support Staff to capture any questions where a response is needed from ICANN Org (see above). ICANN to draft first portion of Triage document to demonstrate how information will be organized and for EPDP Team review. EPDP Team to review issue summaries and share any proposed edits/additions with the mailing list for inclusion in the triage document. EPDP team to complete the second part of the survey by Friday, 10 August, 19:00UTC. EPDP Leadership Team to look into creating a matrix (collection, uses and disclosure of data vs. the potential recipients of data) to help describe data flow scenarios. We will use the work that has already been done on this by the RDS PDP WG. These high-level notes are designed to help the EPDP Team navigate through the content of the call and are not meant as a substitute for the transcript and/or recording. The MP3, transcript, and chat are provided separately and are posted on the wiki at: https://community.icann.org/x/2IpHBQ. 1. Welcome and Updates from EPDP Chair While it is not confirmed, the likely dates for the EPDP Face-to-Face would be Sept. 24 -26 (Mon – Wed) in Los Angeles due to the headquarters’ ability to accommodate the size of the group as well as meeting team ability to organize a meeting on such short notice. Please do not book travel yet, but tentatively pencil in these dates. Requests for Early Input were sent out to all SGs/Cs/ACs. This exercise is slightly redundant with the exercise we are already doing since this team is representative, but we are obliged to follow the PDP requirements. See https://community.icann.org/x/Ag9pBQ. Further to questions or concerns about Rafik Dammak as being the Vice-Chair, the GNSO Chair has agreed to step in, or designate a representative, if there is any sort of disagreement that involves the Vice-Chair / Liaison so that the remaining issues can be resolved. One alternate for ALAC has bad connectivity and as a result has difficulty following the audiocast – would it be possible to arrange dial-out instead? 2. Roll Call & SOI Updates Roll call will be taken from Adobe Connect. 3. Overview of EPDP Input Survey Part 1 Results Part 1 of the Survey can be found at https://www.surveymonkey.com/r/CC6F9F8 Thanks to all for the feedback that went into the responses – the rationale given was helpful and will be a useful tool in carrying the conversation forward in both the triage exercise and later in the process. The leadership team attempted to collate the survey results in a meaningful way, but due to the large amount of information, it may be difficult to display. It may be helpful to look at (1) the spreadsheet of survey results, which was sent around yesterday, and (2) a copy of temporary specification separately during the conversation. Six takeaways from the survey results: There is not consensus for most sections of the Temp Spec, but the rationales provided were helpful. There were some suggestions to focus on legitimate purposes (4.4.1 – 4.4.13) first so that it will inform the discussion of other interrelated sections of the Temp Spec. Given the lack of consensus, it would be preferable to complete the triage report for the GNSO Council right away so that we can begin delving into the substance. The rationales provided in the survey will serve as the basis for the triage report. The goal for the triage report will be to create a summary of the issues detailed in the survey results. The originally-provided survey deadlines were very ambitious, and in response to feedback received, Part 2 will now be due Friday, 10 August and Parts 3 and 4 will be due Sunday, 19 August. Suggested path forward: triage is intended to be an abbreviated process that details the consensus levels of the Temporary Specification. The plan is to spend the next few meetings sharing thoughts and comments from the sections surveyed. The EPDP Leadership Team suggested some neutral wording; however, this is for discussion only, and feedback is welcome. To confirm, the EPDP Team’s next meeting will be Thursday 9 August at 13.00 UTC (as originally scheduled). The date for submission of Part 2 of the survey will be Friday 10 August at 19.00 UTC. Suggestion to reconsider the meeting schedule, as the current schedule requires a lot of hours. 4. Substantive discussion of Temporary Specification In the interest of time, the EPDP Leadership Team grouped the issues for discussion. As an example of an issue summary, please note in Section 1 (Scope), may found the clause beginning with “unless ICANN determines…” to be problematic. In Section 3, the effective date of the Temp Spec is 25 May 2018, but was adopted on 17 May 2018, but can the Team get clarification on the exact expiry date of the Temp Spec? Action Item: ICANN Org to confirm precise expiry date of the Temp Spec. If the Board is considering any amendments to the Temp Spec, it would be helpful if the EPDP Team can be made aware of any proposed changes in advance. Action: EPDP Policy Support staff to capture questions in writing and send to the ICANN Org for response. EPDP discussion: GDPR is not the only data protection system, and national data protection systems should not be subordinated by the GDPR. It appears the EPDP Team has consensus on the removal of “unless ICANN determines in its reasonable discretion” clause. EPDP Team can “put a pin” in this and confirm if this can be removed this from the next iteration. The Temp Spec has various timelines within it (in 30 days, 90 days, etc.), and the team needs to pay attention to implementation timeline dates and how these might be affected if changes are made to the Policy Effective Date following the adoption of the policy recommendations. The next quadrant for discussion includes 4.1 – 4.4.2. Question: before we begin discussion, would it be possible to determine which determinations of lawfulness we can determine on our own, and which will be determined for us, i.e., in court cases? Do we have an agreed upon approach to how we find whether something is lawful? We do not yet have an agreed upon approach or a determination of what authority we have. At this state, however, we would like to summarize the rationales and compile the triage report. Ultimately the arbiter of what is a legitimate purpose will be determined by case law, so the EPDP Team should deal with the rationale of 4.4. The NCSG objected to facilitation for all kinds of third party interests. While the NCSG has agreed to access of certain data in the survey, it did this by looking at ICANN’s mission and role of security and stability of the DNS, rather than third party interests. Several responses indicated that the team should consider looking at the uses of the data first. Others suggested that rather than looking at uses, the team should first look at the ICANN’s mission and purpose. What type of security are we talking about when we refer to ICANN’s mission – network security? Who determines that a purpose is legitimate? What is personal data? Is there anywhere to find the list of personal data? The RDS PDP WG failed to resolve these issues of purposes, and a post mortem on this would be very valuable as to why the RDS PDP WG went in circles. Since the RDS PDP WG discussions, ICANN has received more input from DPAs. It would be useful to consolidate the advice ICANN has received and cut short the items where the EPDP Team is conflating the issue. EPDP Team has to figure out how the DPAs have already opined on some of these issues. Security is within ICANN’s remit – unless data is collected, it cannot be made available to other people. There are provisions in the GDPR that consider third party needs. If something is clearly not supported by the law, the group would be foolish to try to include it in the policy, but no court is ever going to add more purposes. Rather, the courts will chip away at purposes in certain jurisdictions. The EDPB letter is asking ICANN to clearly note its purposes for collecting data. There is availability to process data that is already collected. Action item: consider creating table of data elements – what data elements are necessary for ICANN, how it is used, and what data elements are needed for third parties? Article 6 of GDPR does allow legitimate interest of controller or third party. A sweeping statement has been made about what happens if ICANN no longer has a mandate of collection and disclosure of data – how does the group envision that happening if ICANN is no longer in the picture? The above question reveals a misunderstanding – with a domain name registration, the registrar will always collect information, and law enforcement can always collect this information from the registrar, rather than from ICANN. ICANN will collect data for its own purposes, law enforcement will follow its process, but ICANN’s purpose is not to be law enforcement on the internet. In response to some of the questions raised on today’s call – it may be helpful to have trainings on the GDPR. Putting ICANN aside for a moment, when we leave from this room, law enforcement will make requests from Registrars/Registries, and businesses and trademark owners will do the same. The purpose of the team working together is not to work on validation of ICANN, but rather, work out mechanisms where legitimate purposes that meet the relevant threshold are accommodated in an economical and transparent way. The Temporary Specification is here, and there will be future requests for data: we need to find a way to evaluate the purposes and decide as a group how to accommodate them. Is ICANN Org and the Board hoping the EPDP Team will build the legal argument as to what legitimate purposes are? If there is internal work happening, this is crucial to the work to understand this. Outside the United States, due process in flawed. The process can take anywhere from 3-12 months. The group’s purpose here is not to replace WHOIS with something identical, but please be mindful of saying there are other mechanisms, because those mechanisms do not always work well. This is a two-step process: what are legitimate purposes, and which ones are not overridden by the GDPR? We are deep into the discussion that happens after the triage discussion. The slide on the screen shows summaries of the issues noted in the survey responses. Question: if we do not believe that the issue summarization text is necessarily complete, how can we best address this? Red lines? Flagged during the call? Action item: EPDP Team to review issue summaries and share any proposed edits/additions with the mailing list for inclusion in the triage document. In sections 4.4.1 and 4.4.2, law enforcement needs to pass the relevant threshold – legitimate interest not overridden by fundamental rights. 4.4.2 seems to be a catch-all provision – this may address the GAC’s concern that the Temp Spec limits the number of legitimate purposes. In section 4.4, the balancing test is important, but some types of processing fall outside this scope and are not subject to the balancing test, so we need to understand that it’s not always the case that the balancing test is required. 4.4.2 does not entirely cure the problem – a legitimate interest is just one basis under GDPR, and there are other data protection sources that we are not gathering at the moment in different jurisdictions that will not be covered by 4.4.1 – 4.4.13. The best path forward may be to create the triage report on the sections we have reviewed so that the group can see what the triage report would look like. 4.4.1 is fine for the NCSG – this data needs to be collected for the purpose of the registration. 4.4.2 is an odd construct – the purpose is to provide access to the data. This statement is circular. 4.4.2 seems to say that anyone who wants the data can get it – this is begging the question – ICANN is in no position to determine what is legal. 4.4.2 opens the door that if you pass the GDPR test, you can add use of the data to this list, but there may be a better way of doing this. What we are missing here is that the WHOIS system provides a public service. Through the Temp Spec, we need to recognize the public interest served by WHOIS. As a whole, when you step back – we’re talking about ICANN’s role in the public interest that supports this directory service. The legitimate interest is not for the people trying to access the data, but rather, the legitimate interest of the processor of the data. The collection and publication of RDS data is done in the public interest and is not necessary for registrars to communicate with their customers. It is not necessary for registrars: WHOIS data is collected over and above the data registrars already have. How do you collect information of the registrant without name, address, etc.? The directory is necessary to establish the registrant’s right in the domain name. This is a legitimate and unassailable interest in ICANN requiring the collection of this data. Collection of data for purposes of publication in a directory is not needed to serve the customers or to register a domain name. There is no public interest definition in ICANN’s publication of a directory service. The legitimate interest does not only reference the controller. See Article 6(f) of the GDPR. It is important to note that third parties are considered in the GDPR in Article 6. What is a legitimate purpose? Can we get some criteria definitions around this? Registrars may also comply with other data protection law or where commercially necessary. This is a fundamental question. How far can this exercise as an EPDP go? In a temporary specification, you can attempt to comply with other laws, although we’re only focused on the GDPR at the moment, but it seems nonsensical to allow this where commercially feasible – it appears like we are only concerned with laws that have heavy financial penalties. The situation could be remedied by adding something like “since GDPR appears to be leading the world in data protection as a model, parties should comply with the GDPR in other jurisdictions as required.” There are a number of national privacy laws that are proposed or in the works – it is impossible to predict where the landscape is going, so we’ll have to treat that as a known unknown – that the future laws will be mostly or entirely compatible with GDPR, or service providers. 4.4.3 appears to be a header for the next four sections since all have to do with registrants. Each purpose needs to be justified and compliant with GDPR. It is hard to know what precise amendment to propose because the level of principle is not reflected in the draft. Another important point for contracted parties is necessity of collection of data, while it may be necessary to collect, it may not be necessary to publish. We should go through collection, use, and disclosure. As referenced earlier, we could create a list of the data and how it’s used. It could be a matrix. The RDS PDP WG already did something similar so maybe that could serve as a basis? Section 4.4.5 should be read very carefully because ICANN does not regulate content. Knowing the term content raises red flags, there must have been some sort of reason why this included – let’s capture this question. Question for ICANN Org – is there a reason for the inclusion of the term content in section 4.4.5? In 4.4.3, we are talking about the reliability, but in 4.4.4. and 4.4.5 does not mention reliable. We need to define who defines reliable; however, this word should be kept. SSAC believes content should stay in 4.4.5. If your domain name is infected, it may be spewing out spam at high rates, and it is helpful to contact you with respect of that content. Rather than the type of content, it is talking about content more generally. It would be helpful to hear from the team how we can best conduct these discussions to best get through the triage period. We propose to finish the rest of the surveys and assemble that material unless members have alternate suggestions. 5. Wrap and confirm next meeting to be scheduled for Thursday 9 August at 13.00 UTC

1 0

Recordings, attendance & AC chat from the GNSO Temp Spec gTLD RD EPDP held Tuesday, 07 August 2018
by Terri Agnew Aug. 7, 2018

Aug. 7, 2018

Dear all, Please find the attendance and AC chat attached to this email. The MP3 and AC recording below from the GNSO Temp Spec gTLD RD EPDP call held on Tuesday, 07 August 2018 at 13:00 UTC. These have also been posted on the agenda wiki page: <https://community.icann.org/x/kgtpBQ> https://community.icann.org/x/kgtpBQ MP3: https://audio.icann.org/gnso/gnso-epdp-gtld-registration-data-specs-07aug18… AC Recording: <https://participate.icann.org/p5xqvetfsh7/?OWASP_CSRFTOKEN=14dea907460b8fed…> https://participate.icann.org/p5xqvetfsh7/ ** Please let me know if your name has been left off the list ** Mailing list archives of the GNSO Temp Spec gTLD RD EPDP : <https://mm.icann.org/pipermail/gnso-epdp-team/> https://mm.icann.org/pipermail/gnso-epdp-team/ Main wiki page for the working group: <https://community.icann.org/x/IYEpBQ> https://community.icann.org/x/IYEpBQ Thank you. With kind regards, Terri

1 0

EPDP Team - Temporary Specification Input Surveys
by Caitlin Tubergen Aug. 7, 2018

Aug. 7, 2018

Dear All: In order to facilitate the triage of the Temporary Specification as outlined in the EPDP Team Charter as the first deliverable, please work with your appointing organization team members to complete the below surveys. Please find the relevant survey links and accompanying deadlines below: Part 1, due Monday, 6 August 2018 by 23:59 UTC: https://www.surveymonkey.com/r/CC6F9F8 Part 2, due Wednesday, 8 August by 2018 23:59 UTC: https://www.surveymonkey.com/r/7BMRCNS Part 3, due Monday, 13 August 2018 by 23:59 UTC: https://www.surveymonkey.com/r/7PWQPP7 Part 4, due Sunday, 19 August 2018 by 23:59 UTC: https://www.surveymonkey.com/r/9KD5K79 Thank you. Best regards, Marika, Berry, and Caitlin

10 16

Organization and Discussion of Survey Results
by Kurt Pritz Aug. 7, 2018

Aug. 7, 2018

Hi Everyone: Thank you for your thoughtful and timely responses to the survey. The ICANN support team and I have read every one in order to gauge the landscape and present a coherent path forward. Attached are the summary spreadsheet of your survey results and a slide deck for our upcoming meeting. You will see in the slides and in the spreadsheet, we have presented sort of an issue summarization. As part of the triage report, this is intended to indicate why there is lack of consensus on certain sections of the Temporary Specification. In certain cases they indicate a path forward, e.g., prioritizing certain sections. Certainly, the summarization is only meant to indicate where and why a conflict of opinion exists and not create prejudice in any way. (You will also see that we have summarized the issues associated in Sections 1-4 of the Temporary Specification only and not the first Appendix. We will complete the task after our meeting.) As you might guess, I am keen on getting through the Triage as quickly as possible. At this stage, the Triage document is envisaged to include: A summary of responses indicating the position of each group on each section Each of the comments delivered in a matrix (spreadsheet) An issue summarization, distilling the issues raised in each section of the Temporary Specification. I think we owe the GNSO Council some type of summary such as this During the meeting, we will review and ask you to comment on the issue summaries during our meeting. (Please look at them with the mind that, so long as they don’t prejudice the ensuing discussion, we can include them in the triage.) For the meeting tomorrow, you might find it helpful to have a printed version of the Temporary Specification and have access to the attached spreadsheet as we go through the slides. Thank you again for your work on this. Best regards, Kurt

1 0

Re: [Gnso-epdp-team] RySG - alternate introductions
by Andrea Glandon Aug. 6, 2018

Aug. 6, 2018

Dear Marc, Thank you for these introductions. They have been posted on the wiki as well. https://community.icann.org/x/4IpHBQ Kind Regards, Andrea Glandon From: Gnso-epdp-team <gnso-epdp-team-bounces(a)icann.org> on behalf of "Anderson, Marc via Gnso-epdp-team" <gnso-epdp-team(a)icann.org> Reply-To: "Anderson, Marc" <mcanderson(a)verisign.com> Date: Monday, August 6, 2018 at 10:21 To: "gnso-epdp-team(a)icann.org" <gnso-epdp-team(a)icann.org> Subject: [Gnso-epdp-team] RySG - alternate introductions All, As was pointed out by Alan Greenberg, alternates can’t post to this list but may need to fill in for or even replace members at some point. As such the RySG would like to provide introductions from their alternates. Thank you, Marc -=-=-=-=-=-=-=-=-=- Arnaud Wittersheim Hello everyone, My name is Arnaud Wittersheim, one of the alternate representing the RySG in the ePDP process. I work at Nameshield, a european company specializing in intangible asset protection, as new gtlds project manager and compliance manager on topics such as GDPR. I have over fifteen years of experience in the domain name industry on registry and registrar topics and thus a rather good view of policies and contracts such as the RAA and RA. I have attended several ICANN summits as an observer, including those in Vancouver and Panama this year. This is my first participation in a consensus policy development process. I hope that my skills can be useful for the ePDP whose success I wish. Looking forward to working with you all Thank you Arnaud Wittersheim -=-=-=-=-=-=-=-=-=- Beth Bacon I have over 12 years of experience with ICANN policy and over 8 years of active participation in ICANN SO/ACs, previously in the GAC and currently with the Registries Stakeholder Group. I have been working on privacy issues for the past 5 years, first in the Department of Commerce and now at PIR as Director of Policy and Privacy. Additionally, I have several years of practical experience operationalizing privacy (especially GDPR) requirements into new and existing agreements, policies, and procedures to serve the unique business needs of Registries. Beth Bacon, Director of Policy and Privacy Public Interest Registry -=-=-=-=-=-=-=-=-=- Sebastien Ducos Hello Everyone, I am Sebastien Ducos, one of the RySG Alternates. I have a long background in Internet technologies tracing back 20+ years and in domain names specifically for the last 10. My first ICANN was in Toronto, 6 years ago. I am part of the Client Engagement team at Neustar working with generic, brand, geo and and country code TLD clients. I am also chair of the geoTLD.group which has been working on GDPR for the last 2.5 years when our members .frl and .amsterdam first came to us with the issue. Looking forward to working with all of you, albeit quietly as an Alternate. Sebastien Ducos -=-=-=-=-=-=-=-=-=-=- Marc Anderson mcanderson(a)verisign.com<mailto:mcanderson@verisign.com> Cell: 571.521.9943 Office: 703.948.3404 12061 Bluemont Way, Reston, VA 20190 Verisign.com<http://www.verisign.com/> [Description: Description: Description: Verisign™]

3 2

RySG - alternate introductions
by Anderson, Marc Aug. 6, 2018

Aug. 6, 2018

All, As was pointed out by Alan Greenberg, alternates can't post to this list but may need to fill in for or even replace members at some point. As such the RySG would like to provide introductions from their alternates. Thank you, Marc -=-=-=-=-=-=-=-=-=- Arnaud Wittersheim Hello everyone, My name is Arnaud Wittersheim, one of the alternate representing the RySG in the ePDP process. I work at Nameshield, a european company specializing in intangible asset protection, as new gtlds project manager and compliance manager on topics such as GDPR. I have over fifteen years of experience in the domain name industry on registry and registrar topics and thus a rather good view of policies and contracts such as the RAA and RA. I have attended several ICANN summits as an observer, including those in Vancouver and Panama this year. This is my first participation in a consensus policy development process. I hope that my skills can be useful for the ePDP whose success I wish. Looking forward to working with you all Thank you Arnaud Wittersheim -=-=-=-=-=-=-=-=-=- Beth Bacon I have over 12 years of experience with ICANN policy and over 8 years of active participation in ICANN SO/ACs, previously in the GAC and currently with the Registries Stakeholder Group. I have been working on privacy issues for the past 5 years, first in the Department of Commerce and now at PIR as Director of Policy and Privacy. Additionally, I have several years of practical experience operationalizing privacy (especially GDPR) requirements into new and existing agreements, policies, and procedures to serve the unique business needs of Registries. Beth Bacon, Director of Policy and Privacy Public Interest Registry -=-=-=-=-=-=-=-=-=- Sebastien Ducos Hello Everyone, I am Sebastien Ducos, one of the RySG Alternates. I have a long background in Internet technologies tracing back 20+ years and in domain names specifically for the last 10. My first ICANN was in Toronto, 6 years ago. I am part of the Client Engagement team at Neustar working with generic, brand, geo and and country code TLD clients. I am also chair of the geoTLD.group which has been working on GDPR for the last 2.5 years when our members .frl and .amsterdam first came to us with the issue. Looking forward to working with all of you, albeit quietly as an Alternate. Sebastien Ducos -=-=-=-=-=-=-=-=-=-=- Marc Anderson mcanderson(a)verisign.com<mailto:mcanderson@verisign.com> Cell: 571.521.9943 Office: 703.948.3404 12061 Bluemont Way, Reston, VA 20190 Verisign.com<http://www.verisign.com/>

2 1

Reminder - survey part 1 due Monday 6 August by 19.00 UTC
by Marika Konings Aug. 6, 2018

Aug. 6, 2018

Reminder – Part 1 of the survey is due Monday 6 August 2018 by 19.00 UTC: https://www.surveymonkey.com/r/CC6F9F8. Also, please remember that the survey is ONLY for EPDP Team members who are expected to fill out the survey on behalf of their appointing organizations. If you are not sure about your status, please check: https://community.icann.org/x/4IpHBQ. Best regards, Marika, Berry, and Caitlin

1 0

Rafik as Vice-Chair
by Alan Greenberg Aug. 4, 2018

Aug. 4, 2018

I asked for time to consult with my colleagues and have done so. We have no problem with Rafik being named Vice-Chair of the EPDP based on the following presumptions/conditions: 1. There is a direct conflict with Rafik acting as the first level handling of a complaint about a leadership decision (a Liaison responsibility) and serving in that leadership. If the GNSO Chair chooses to act in his place in that role (any complaint that stands would go to the Chair next in any case), or to appoint someone else who is will be closely following the proceedings (and agrees not to launch a compliant!), the conflict goes away. 2. Our assumption is that the role of Vice-Chair will be purely to on occasion act as the Chair of a meeting when Kurt is not available, or to handle other administrative tasks. In this case, we see no conflict. If, on the other hand, he and Kurt would take on the role that other Chairs/Co-Chairs/Vice-Chairs teams have and strategize on to how to overcome conflicts or impasses within the work team, then there is a direct conflict as it puts one of the EPDP constituent groups in a privileged position. Although Rafik is not one of the formal members of the NCSG contingent on the EPDP, as a possible incoming NCSG Chair and a key member of the NCSG Policy Committee, he cannot disassociate himself completely from being involved. Alan

4 5

IPC's Introduction Statement
by Alex Deacon Aug. 4, 2018

Aug. 4, 2018

Hi All, As requested here is the (or something close to the) intro statement of the IPC I made on our first call. My name is Alex Deacon. Both myself and Diane will be representing the IPC in this EPDP. Diane is an experienced IP lawyer and expert in matters relating to privacy including the GDPR. As for myself my experience is in internet technology policy and Infrastructure including DNS, authentication authorization identity and encryption. Diane and I bring set of skills that is not only wide and deep but also relevant to the task at hand. Our goals here are simple. It is to participate actively, constructively and respectfully toward the definition of an consensus policy for a global RDS system that meets the needs of the IP community in a GDPR compliant way. Lastly, and to repeat something Diane eloquently said in her intro to the list yesterday, we both look forward to listening, learning, contributing and working collaboratively with the team to find solutions that achieve the important mission of this group. Thanks! Alex -- ___________ *Alex Deacon* Cole Valley Consulting alex(a)colevalleyconsulting.com +1.415.488.6009

1 0