- Gnso-epdp-team - lists.icann.org

Re: [Gnso-epdp-team] Proposed Agenda - EPDP Team Meeting #68 - Tuesday 30 June at 14.00 UTC
by Marika Konings June 30, 2020

June 30, 2020

Dear EPDP Team, For agenda items #4 and #6, please see attached the outstanding issues/questions that have been flagged for discussion during today’s meeting. As noted below, for any issues that were deemed non-substantive or which were of a clarifying nature, a proposed approach / clarification has been suggested by the staff support team for your review (in bold), based on deliberations to date and/or feedback that has been provided by team members. If this has resulted in any ‘CANNOT LIVE WITH’ items, please flag this by the end of today (Tuesday 30 June) so that these can be further considered. Please provide your rationale for why this is a ‘cannot live with’ item and specific suggestions for how the concern can be addressed. Best regards, Caitlin, Berry and Marika From: Gnso-epdp-team <gnso-epdp-team-bounces(a)icann.org> on behalf of Marika Konings <marika.konings(a)icann.org> Date: Monday, June 29, 2020 at 17:07 To: "gnso-epdp-team(a)icann.org" <gnso-epdp-team(a)icann.org> Subject: [Gnso-epdp-team] Proposed Agenda - EPDP Team Meeting #68 - Tuesday 30 June at 14.00 UTC Dear EPDP Team, Please find below the proposed agenda for the next EPDP Team meeting which has been scheduled for Tuesday 30 June at 14.00 UTC. As a reminder: 1. EPDP Team to provide input on remaining outstanding items<https://docs.google.com/document/d/1gSdkEf4EyBM7z3YXAzGjTb-AULxOrDeC/edit> (starting at item 63) by Monday, 29 June at the latest. 2. EPDP Team to review other groups’ input and updates made in Rec. 6<https://docs.google.com/document/d/1F0wmMEh6gopJVsDFDF5pe5mGAUHhr9CV/edit> (CP Authorization) and note if proposed updated text by other groups cannot be accepted by Monday, 29 June. 3. EPDP Team to review updated recommendation #19 (mechanism)<https://docs.google.com/document/d/17gGzz6K-zKuSK71FluHCowZo3p6tFEd3/edit> and provide input by Monday 29 June at the latest. For agenda items 4, 5 and 6, in view of the limited time remaining, the order of the discussion of outstanding items / questions will be reorganized so that the group can focus first on any items that are mission critical and/or specifically focused on SSAD requirements. Of course, as per action item 1, input is still welcome on items that do not fall into that category which the staff support team will use as guidance to finalize the report for EPDP Team review. Best regards, Caitlin, Berry and Marika ========== EPDP Phase 2 - Meeting #68 Proposed Agenda Tuesday 30 June 2020 at 14.00 UTC 1. Roll Call & SOI Updates (5 minutes) 2. Confirmation of agenda (Chair) 3. Welcome and housekeeping issues (Chair) (5 minutes) 1. Proposed timeline for next steps: i. 30 June / 1-2 July: finalize review of outstanding cannot live with items, rec #6 (CP Authorization), rec #7/16 (automation) and rec #19 (mechanism). ii. 5 July: distribution of updated draft Final Report. iii. 6 - 10 July: silent week – opportunity for EPDP Team to review draft Final Report and flag any minor edits (no reopening of previously discussed & addressed issues). iv. 14 July: tentative EPDP Team meeting to address any issues that may require EPDP Team input / guidance. v. 17 July: distribution of Final Report and consensus designations. As a reminder, the Chair will make an evaluation of the support achieved for the recommendations and publish its designation for the group to review. vi. 20 - 24 July: opportunity for EPDP Team to respond to consensus designations, review by Chair of input received, if any, confirmation by Chair of designation. vii. 24 July: deadline for minority statements. viii. At the latest by 31 July: submission of Final Report to the GNSO Council 4. Consider outstanding items / questions in relation to recommendation #6 – Contracted Party Authorization<https://docs.google.com/document/d/1F0wmMEh6gopJVsDFDF5pe5mGAUHhr9CV/edit> 1. Review outstanding items / questions 2. EPDP Team Feedback 3. Confirm next steps 5. Consider outstanding items / questions in relation to recommendation #19 – Mechanism<https://docs.google.com/document/d/17gGzz6K-zKuSK71FluHCowZo3p6tFEd3/edit> 1. Review outstanding items / questions 2. EPDP Team Feedback 3. Confirm next steps 6. Continue run through of yellow items<https://docs.google.com/document/d/1gSdkEf4EyBM7z3YXAzGjTb-AULxOrDeC/edit> (items identified for further discussion / clarification) 1. Consider yellow items identified for recommendations (continuing with rec #15 and moving down the list) 2. EPDP Team feedback 3. Confirm next steps 7. Wrap and confirm next EPDP Team meeting (5 minutes): 1. Wednesday 1 July at 14.00 UTC. Topics to be addressed: Recommendation #7/16 (automation), any remaining items. 2. Confirm action items 3. Confirm questions for ICANN Org, if any

1 0

The final stretch
by Janis Karklins June 30, 2020

June 30, 2020

Dear Team members, I hope that you have recovered from the ICANN 68. This message is to remind that we are at an important juncture - to finalize a compromise agreement or to acknowledge the failure to agree. It is of utmost importance to provide comments on suggested recs - Automation and mechanism - by end of today. So far no reaction has been received. It would allow us to understand whether agreement is in the reach or not really. As you know my availability ends on 30 June. I am prepared to add two additional meetings this week if the objective is attainable and everyone is committed to work towards a consensus proposal. Otherwise, I will propose to stop consideration of the Report and to acknowledge the lack of agreement and failure of the Team with all subsequent consequences. I am in your hands, dear Team members. Best regards JK

7 8

Proposed Agenda - EPDP Team Meeting #68 - Tuesday 30 June at 14.00 UTC
by Marika Konings June 29, 2020

June 29, 2020

Dear EPDP Team, Please find below the proposed agenda for the next EPDP Team meeting which has been scheduled for Tuesday 30 June at 14.00 UTC. As a reminder: 1. EPDP Team to provide input on remaining outstanding items<https://docs.google.com/document/d/1gSdkEf4EyBM7z3YXAzGjTb-AULxOrDeC/edit> (starting at item 63) by Monday, 29 June at the latest. 2. EPDP Team to review other groups’ input and updates made in Rec. 6<https://docs.google.com/document/d/1F0wmMEh6gopJVsDFDF5pe5mGAUHhr9CV/edit> (CP Authorization) and note if proposed updated text by other groups cannot be accepted by Monday, 29 June. 3. EPDP Team to review updated recommendation #19 (mechanism)<https://docs.google.com/document/d/17gGzz6K-zKuSK71FluHCowZo3p6tFEd3/edit> and provide input by Monday 29 June at the latest. For agenda items 4, 5 and 6, in view of the limited time remaining, the order of the discussion of outstanding items / questions will be reorganized so that the group can focus first on any items that are mission critical and/or specifically focused on SSAD requirements. Of course, as per action item 1, input is still welcome on items that do not fall into that category which the staff support team will use as guidance to finalize the report for EPDP Team review. Best regards, Caitlin, Berry and Marika ========== EPDP Phase 2 - Meeting #68 Proposed Agenda Tuesday 30 June 2020 at 14.00 UTC 1. Roll Call & SOI Updates (5 minutes) 2. Confirmation of agenda (Chair) 3. Welcome and housekeeping issues (Chair) (5 minutes) 1. Proposed timeline for next steps: * 30 June / 1-2 July: finalize review of outstanding cannot live with items, rec #6 (CP Authorization), rec #7/16 (automation) and rec #19 (mechanism). * 5 July: distribution of updated draft Final Report. * 6 - 10 July: silent week – opportunity for EPDP Team to review draft Final Report and flag any minor edits (no reopening of previously discussed & addressed issues). * 14 July: tentative EPDP Team meeting to address any issues that may require EPDP Team input / guidance. * 17 July: distribution of Final Report and consensus designations. As a reminder, the Chair will make an evaluation of the support achieved for the recommendations and publish its designation for the group to review. * 20 - 24 July: opportunity for EPDP Team to respond to consensus designations, review by Chair of input received, if any, confirmation by Chair of designation. * 24 July: deadline for minority statements. * At the latest by 31 July: submission of Final Report to the GNSO Council 4. Consider outstanding items / questions in relation to recommendation #6 – Contracted Party Authorization<https://docs.google.com/document/d/1F0wmMEh6gopJVsDFDF5pe5mGAUHhr9CV/edit> 1. Review outstanding items / questions 2. EPDP Team Feedback 3. Confirm next steps 5. Consider outstanding items / questions in relation to recommendation #19 – Mechanism<https://docs.google.com/document/d/17gGzz6K-zKuSK71FluHCowZo3p6tFEd3/edit> 1. Review outstanding items / questions 2. EPDP Team Feedback 3. Confirm next steps 6. Continue run through of yellow items<https://docs.google.com/document/d/1gSdkEf4EyBM7z3YXAzGjTb-AULxOrDeC/edit> (items identified for further discussion / clarification) 1. Consider yellow items identified for recommendations (continuing with rec #15 and moving down the list) 2. EPDP Team feedback 3. Confirm next steps 7. Wrap and confirm next EPDP Team meeting (5 minutes): 1. Wednesday 1 July at 14.00 UTC. Topics to be addressed: Recommendation #7/16 (automation), any remaining items. 2. Confirm action items 3. Confirm questions for ICANN Org, if any

1 0

**Reminder** Meeting Invitation | Observers | GNSO Temp Spec gTLD RD EPDP-P2 call | Tuesday, 30 June 2020
by Julie Bisland June 29, 2020

June 29, 2020

As a result of various requests to facilitate observers to follow the EPDP Phase 2 deliberations in real time, zoom webinar room will be made available for the EPDP plenary meetings. As a reminder, the zoom recording, audio recording, chat transcript and transcript of the EPDP plenary meetings will be publicly posted as soon as available on the EPDP wiki page and GNSO master calendar. Dear all, The next meeting of the GNSO Temp Spec gTLD RD EPDP – Phase 2 is scheduled on Tuesday, 30 June 2020 at 14:00 UTC for 2 hours. Zoom room information: Main Zoom Webinar link: please join via this link: https://icann.zoom.us/j/98917212893?pwd=dTRQaEMwK0tweStXTVhpVERsVjdhZz09 [icann.zoom.us]<https://urldefense.proofpoint.com/v2/url?u=https-3A__icann.zoom.us_j_989172…> Password: 953887 Going forward, observers will now join via zoom webinar room vs audio cast. Observers will have ability to view member chat and information shared in the zoom webinar room. Observers will not be able to use chat or raise hands. Before joining the call: Please send dial out requests to gnso-secs(a)icann.org<mailto:gnso-secs@icann.org> only Please be sure you have read the Please be sure you have read the Expected Standards of Behavior [icann.org]<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_resource…> Visit the Wiki agenda page: https://community.icann.org/x/fwgdC Check your time zone: https://tinyurl.com/y7j7wrgk [tinyurl.com]<https://urldefense.proofpoint.com/v2/url?u=https-3A__tinyurl.com_y7j7wrgk&d…> The recordings and transcriptions of the calls are posted on the GNSO Master Calendar page: https://gnso.icann.org/en/group-activities/calendar<https://urldefense.proofpoint.com/v2/url?u=https-3A__gnso.icann.org_en_grou…> If you are joining via audio only: iPhone one-tap : US: +16699006833,,98917212893#,,#,953887# or +13462487799,,98917212893#,,#,953887# Dial in directly with your chosen number [icann.zoom.us]<https://urldefense.proofpoint.com/v2/url?u=https-3A__icann.zoom.us_u_acwzlz…> and provide the following information: Webinar ID: 989 1721 2893 Thank you. Kind regards, Terri

1 0

Reminder of outstanding action items
by Marika Konings June 26, 2020

June 26, 2020

Dear EPDP Team, Here is a reminder of the outstanding action items: 1. EPDP Team to provide input on remaining outstanding items<https://docs.google.com/document/d/1gSdkEf4EyBM7z3YXAzGjTb-AULxOrDeC/edit> (starting at item 63) by Monday, 29 June at the latest. 2. EPDP Team to review other groups’ input and updates made in Rec. 6<https://docs.google.com/document/d/1F0wmMEh6gopJVsDFDF5pe5mGAUHhr9CV/edit> (CP Authorization) and note if proposed updated text by other groups cannot be accepted by Monday, 29 June. 3. EPDP Team to review updated recommendation #19 (mechanism)<https://docs.google.com/document/d/17gGzz6K-zKuSK71FluHCowZo3p6tFEd3/edit> and provide input by Monday 29 June at the latest. Best regards, Caitlin, Berry and Marika

1 0

Review of input received on recommendation #6 - CP authorization
by Marika Konings June 24, 2020

June 24, 2020

Dear EPDP Team, In order to facilitate your review of the input received on recommendation #6 – CP authorization, please note that the staff support team has reviewed the proposed changes and applied these as redline changes to the recommendation (see https://docs.google.com/document/d/1F0wmMEh6gopJVsDFDF5pe5mGAUHhr9CV/edit?t…) In line with the approach used for previous input, we have applied color coding to the comments provided: * Green – change applied as suggested. * Orange – change applied to address the concern expressed but either no alternative wording was provided, wording was modified to align with terminology used in other parts of the report or wording was applied as suggested by another group who flagged the same issue / sentence. * Yellow – further clarification / input sought from EPDP Team. Please review this updated version and the proposed staff support team approach for addressing the input provided. If you cannot live with updates made or the suggested approach, please flag this accordingly and provide suggestions for how the concern expressed can be addressed instead. Also, please provide your input on the comments/questions highlighted in yellow so it may be possible to identify a path forward ahead of the next call. Your input is requested at the latest by Monday 29 May. Best regards, Caitlin, Berry and Marika From: Gnso-epdp-team <gnso-epdp-team-bounces(a)icann.org> on behalf of Caitlin Tubergen <caitlin.tubergen(a)icann.org> Date: Tuesday, June 23, 2020 at 19:39 To: "gnso-epdp-team(a)icann.org" <gnso-epdp-team(a)icann.org> Subject: [Gnso-epdp-team] Notes and action items - EPDP Phase 2 Meeting #67 - 23 June 2020 Dear EPDP Team: Please find below the notes and action item’s from today’s call. The next EPDP Phase 2 meeting will be Tuesday, 30 June at 14:00 UTC. Best regards, Marika, Berry, and Caitlin Action Items 1. EPDP Team to provide input on remaining outstanding items<https://docs.google.com/document/d/1gSdkEf4EyBM7z3YXAzGjTb-AULxOrDeC/edit> (starting at item 63) by Monday, 29 June. 2. EPDP Team to provide input on Rec. 6<https://docs.google.com/document/d/1F0wmMEh6gopJVsDFDF5pe5mGAUHhr9CV/edit> (if not yet provided) by COB TODAY, 23 June. 3. EPDP Team to review other groups’ input on Rec. 6<https://docs.google.com/document/d/1F0wmMEh6gopJVsDFDF5pe5mGAUHhr9CV/edit> and note if proposed updated text by other groups can be accepted by Monday, 29 June. 4. Amr to propose alternate texts for Item 59<https://docs.google.com/document/d/1gSdkEf4EyBM7z3YXAzGjTb-AULxOrDeC/edit> (confidential requests language) by Monday, 29 June. EPDP Phase 2 - Meeting #27 Proposed Agenda Tuesday 23 June 2020 at 14.00 UTC 1. Roll Call & SOI Updates (5 minutes) 2. Confirmation of agenda (Chair) 3. Welcome and housekeeping issues (Chair) (5 minutes) 1. Status of small team deliberations on recommendation #19 (mechanism for SSAD evolution) * Support Staff has published updated Rec. 19 based on the Small Team’s conversation * There seems to be an issue on what is policy and what is implementation – some groups believe that added automation use cases are always policy and not automation * This proposal is not dead, but it is silent on too many matters * Rr alternate did not agree to this proposal * The Small Team needs to add some clarity on the Rec. 19, including the scope 4. Continue run through of yellow items (items identified for further discussion / clarification) 1. Consider yellow items identified for recommendations (continuing with rec #9 and moving down the list) Recommendation 9 SLAs * Item 45 - Can the EPDP team please confirm whether the SLAs described in this table will be the required SLAs or if these are still subject to discussion during the implementation phase, as indicated in the heading noted here? * 85% at 6 months, 90% at 12 months, and 95% at 18 months * What does the percentage apply to? * If there 100 requests, you would take the lowest 15 out, and average the other 85, and that would get you the SLA number * The confusion arises when this was first proposed - where we landed, for 1 and 2 there are percentage measurements, and for 3 – those are the ones that have the more complex computation. 1 and 2 are being calculated separately and in a different fashion than 3. * Item 47 – EPDP to confirm it meant business days as defined in CP’s jurisdiction. * There is not a clean tie b/w non-LEA priority and CP’s jurisdiction. It’s not OK for an LEA request to be subject to a four-day weekend. * For business days, some agreed that it was too long. CPs noted that without a limitation on to who can submit, they cannot accept the 24 hours, so Support Staff reverted this back to business days. * Support Staff inadvertently did not apply the 1 business day requirement. * ICANN closes its office at the end of December for a week, this would be unworkable solution for urgent requests. For a constructive suggestion – can we leave this as 24 hours? Second suggestion – if we need to somehow have this as a business day, what does the group think of the concept of a business day (but in any event no longer than one calendar day) * If you cannot control who can make the request, they have to be bound by business days, but they have already been pre-approved for submission of requests in this category. * Business days correspond with public holidays – not when your company decides to take a holiday. * The attempt at a compromise is that we would recognize business days but have a cap (not to exceed five calendar days). Some companies that will be responding to these requests are not 24/7 operators. If it is a true emergency, the requestor should team up with an entity that can make emergency requests. * Priority 1 cases are abuse cases, and registrars need to respond within 24 hours under the RAA * There is a difference b/w law enforcement request that is 24 hours and the SSAD urgent requests that is open to others * Agreement on (1 business day - not to exceed 3 calendar days) * Item 48 - Urgent request SLA - change 24 hours back to 1 business day * Item 43 – SLAs are included in the contract b/w ICANN and CPs – these SLAs will be reviewed as we learn through the mechanism. * Clarifying point – re: Rec. 19 – the mechanism can trigger a bilateral negotiation b/w ICANN and the contracted parties but the mechanism cannot change the SLAs in order to respect the picket fence. “as updated from time to time per the process described in Rec. 19.” * The SLA matrix is a template that is supposed to be used b/w ICANN org and the CPs to implement in a negotiation w/CPs. This won’t be binding b/c it can still be negotiated. * The Team thinks this is what the SLAs should be – if it not sufficient, it will be changed through the mechanism * Not comfortable how SLAs are being ported over to Registrars and ICANN where other groups will not have a say – there is a big issue over the affordability of the SSAD * Misunderstanding re: picket fence and what is within it. Section 1.2.2 of the RAA – functional and performance specifications of registrar services. Do not need separate negotiations to change the SLA. Once the SLAs are part of the policy, it becomes part of the contract. * The definition of picket fence in the contract has changed. * Is it the Team’s agreement making these SLAs binding as a matter of policy, but it seems the Team is saying go negotiate this separately as part of the policy. * ICANN org should do whatever is needed in terms of existing processes * Understanding and intent is different – the numbers here are the policy and these will be the SLAs as soon as these are adopted by the board, and future changes will happen as part of the rec. 19 process (and subsequent bilateral negotiations) * SLAs are implementation, not policy * Now understand that these requirements will be binding as a matter of policy * We have initial SLA values that are in the policy and they can’t be changed in the implementation, and there is a negotiation process for future changes * Recommendation 10 – 12 – 14 * SSAD terms and conditions may need to be updated – suggestion was to add text that SSAD terms and conditions may be updated through the mechanism. * RySG noted that Rec. 19 may not be right place for these updates. * Is there general agreement that these terms and conditions can change over time? * This comment came from the BC and Rys responded. Perhaps pose the Ry question to the BC. * This might be outside of the MfE, and the flexibility of the SSAD operator is different than that * No objection to terms being added by ICANN * Recommendation 11 – Disclosure Requirements * CPs and SSAD – Org notes that SSAD must comply with requirements for c, d, e, f – could the Team clarify what applies to whom? * Does this mean we are negotiating the terms and conditions of the co-controller agreements, or is this deferred to implementation? * Working assumption that ICANN org and CPs are joint controllers and they would negotiate the joint controller agreement among themselves * ICANN is asking if by SSAD we mean the CGM, and the other part is they are looking for clarification on do the parts of the recommendation really all apply to SSAD or just to contracted parties * What ICANN is trying to understand – some requirements seem odd if they apply to the identity provider to the accreditation authority * SSAD should be the central gateway manager * If the Team means more than the CGM, it should say so * Item 59 – changes around how confidential requests are dealt with – this language was developed by a small team that the group helped review * The goal of this was to add normative language, and this resulted in a change. Not wedded to this language, but still looking to insert normative language * Prefer language proposed by IPC/BC * This is something Chris and James worked out and this looks like a material change to what was agreed upon * Can “CAN” be changed to “MAY”? * There are cases where even where the LEA requests it to be anonymous, the data subject’s rights trump that. * Object to MUST at the end of the sentence. If under your local law, you don’t have data protection legislation at the national level? This does not make sense. * Item 60 – any concerns deleting footnote 49? * No – agreement to delete. * Item 61 – how could this be implemented? * If it’s not a cannot live with item, suggest not spending additional time on this. * Item 62 – what is expected in terms of redress – is this a reexamination request? RrSG – agree that this is similar to reexamination requests. * This text is about when a requesting entity is flagged as submitting abusive requests – if a determination is made to throttle that user, the user can seek recourse, but this recourse is not the same as a reexamination request in Rec. 6 * Item 63 – there should be a similar recommendation that applies to CPs – must not reject requests that have not been flagged as abusive by the SSAD * Until the Team sees the co-controller agreement, it cannot put coercive language in the text * Keeping original text – no update accepted. * Item 64 – what does appropriate access mean? * Everyone should be able to see their own numbers – there is no reason for one requestor to see another requestor’s stats, or discloser to see another discloser’s stats, except in an aggregate. * Could Volker say – I want to see all the requests sent to James? Who can see what on the CP side? * Common sense – you can see your own data, but not other people’s data * When envisioning seeing the data, it was meant to see your own data (requestor’s can see their data, and CPs can see their own data) * This should be included in the last two items on the next call (63-64) 1. EPDP Team feedback 2. Confirm next steps 5. Wrap and confirm next EPDP Team meeting (5 minutes): 1. Tuesday 30 June at 14.00 UTC. Topics to be addressed: continue run through of yellow items. 2. Confirm action items * EPDP Team to provide input on remaining outstanding items by Monday, 29 June. * EPDP Team to provide input on Rec. 6 (if not yet provided) by COB TODAY, 23 June. * EPDP Team to review other groups’ input on Rec. 6 and note if proposed updated text by other groups can be accepted by Monday, 29 June. * Amr to propose alternate texts for Item 59 by Monday, 29 June. 1. Confirm questions for ICANN Org, if any

1 0

Notes and action items - EPDP Phase 2 Meeting #67 - 23 June 2020
by Caitlin Tubergen June 23, 2020

June 23, 2020

Dear EPDP Team: Please find below the notes and action item’s from today’s call. The next EPDP Phase 2 meeting will be Tuesday, 30 June at 14:00 UTC. Best regards, Marika, Berry, and Caitlin Action Items 1. EPDP Team to provide input on remaining outstanding items<https://docs.google.com/document/d/1gSdkEf4EyBM7z3YXAzGjTb-AULxOrDeC/edit> (starting at item 63) by Monday, 29 June. 2. EPDP Team to provide input on Rec. 6<https://docs.google.com/document/d/1F0wmMEh6gopJVsDFDF5pe5mGAUHhr9CV/edit> (if not yet provided) by COB TODAY, 23 June. 3. EPDP Team to review other groups’ input on Rec. 6<https://docs.google.com/document/d/1F0wmMEh6gopJVsDFDF5pe5mGAUHhr9CV/edit> and note if proposed updated text by other groups can be accepted by Monday, 29 June. 4. Amr to propose alternate texts for Item 59<https://docs.google.com/document/d/1gSdkEf4EyBM7z3YXAzGjTb-AULxOrDeC/edit> (confidential requests language) by Monday, 29 June. EPDP Phase 2 - Meeting #27 Proposed Agenda Tuesday 23 June 2020 at 14.00 UTC 1. Roll Call & SOI Updates (5 minutes) 2. Confirmation of agenda (Chair) 3. Welcome and housekeeping issues (Chair) (5 minutes) 1. Status of small team deliberations on recommendation #19 (mechanism for SSAD evolution) * Support Staff has published updated Rec. 19 based on the Small Team’s conversation * There seems to be an issue on what is policy and what is implementation – some groups believe that added automation use cases are always policy and not automation * This proposal is not dead, but it is silent on too many matters * Rr alternate did not agree to this proposal * The Small Team needs to add some clarity on the Rec. 19, including the scope 4. Continue run through of yellow items (items identified for further discussion / clarification) 1. Consider yellow items identified for recommendations (continuing with rec #9 and moving down the list) Recommendation 9 SLAs * Item 45 - Can the EPDP team please confirm whether the SLAs described in this table will be the required SLAs or if these are still subject to discussion during the implementation phase, as indicated in the heading noted here? * 85% at 6 months, 90% at 12 months, and 95% at 18 months * What does the percentage apply to? * If there 100 requests, you would take the lowest 15 out, and average the other 85, and that would get you the SLA number * The confusion arises when this was first proposed - where we landed, for 1 and 2 there are percentage measurements, and for 3 – those are the ones that have the more complex computation. 1 and 2 are being calculated separately and in a different fashion than 3. * Item 47 – EPDP to confirm it meant business days as defined in CP’s jurisdiction. * There is not a clean tie b/w non-LEA priority and CP’s jurisdiction. It’s not OK for an LEA request to be subject to a four-day weekend. * For business days, some agreed that it was too long. CPs noted that without a limitation on to who can submit, they cannot accept the 24 hours, so Support Staff reverted this back to business days. * Support Staff inadvertently did not apply the 1 business day requirement. * ICANN closes its office at the end of December for a week, this would be unworkable solution for urgent requests. For a constructive suggestion – can we leave this as 24 hours? Second suggestion – if we need to somehow have this as a business day, what does the group think of the concept of a business day (but in any event no longer than one calendar day) * If you cannot control who can make the request, they have to be bound by business days, but they have already been pre-approved for submission of requests in this category. * Business days correspond with public holidays – not when your company decides to take a holiday. * The attempt at a compromise is that we would recognize business days but have a cap (not to exceed five calendar days). Some companies that will be responding to these requests are not 24/7 operators. If it is a true emergency, the requestor should team up with an entity that can make emergency requests. * Priority 1 cases are abuse cases, and registrars need to respond within 24 hours under the RAA * There is a difference b/w law enforcement request that is 24 hours and the SSAD urgent requests that is open to others * Agreement on (1 business day - not to exceed 3 calendar days) * Item 48 - Urgent request SLA - change 24 hours back to 1 business day * Item 43 – SLAs are included in the contract b/w ICANN and CPs – these SLAs will be reviewed as we learn through the mechanism. * Clarifying point – re: Rec. 19 – the mechanism can trigger a bilateral negotiation b/w ICANN and the contracted parties but the mechanism cannot change the SLAs in order to respect the picket fence. “as updated from time to time per the process described in Rec. 19.” * The SLA matrix is a template that is supposed to be used b/w ICANN org and the CPs to implement in a negotiation w/CPs. This won’t be binding b/c it can still be negotiated. * The Team thinks this is what the SLAs should be – if it not sufficient, it will be changed through the mechanism * Not comfortable how SLAs are being ported over to Registrars and ICANN where other groups will not have a say – there is a big issue over the affordability of the SSAD * Misunderstanding re: picket fence and what is within it. Section 1.2.2 of the RAA – functional and performance specifications of registrar services. Do not need separate negotiations to change the SLA. Once the SLAs are part of the policy, it becomes part of the contract. * The definition of picket fence in the contract has changed. * Is it the Team’s agreement making these SLAs binding as a matter of policy, but it seems the Team is saying go negotiate this separately as part of the policy. * ICANN org should do whatever is needed in terms of existing processes * Understanding and intent is different – the numbers here are the policy and these will be the SLAs as soon as these are adopted by the board, and future changes will happen as part of the rec. 19 process (and subsequent bilateral negotiations) * SLAs are implementation, not policy * Now understand that these requirements will be binding as a matter of policy * We have initial SLA values that are in the policy and they can’t be changed in the implementation, and there is a negotiation process for future changes * Recommendation 10 – 12 – 14 * SSAD terms and conditions may need to be updated – suggestion was to add text that SSAD terms and conditions may be updated through the mechanism. * RySG noted that Rec. 19 may not be right place for these updates. * Is there general agreement that these terms and conditions can change over time? * This comment came from the BC and Rys responded. Perhaps pose the Ry question to the BC. * This might be outside of the MfE, and the flexibility of the SSAD operator is different than that * No objection to terms being added by ICANN * Recommendation 11 – Disclosure Requirements * CPs and SSAD – Org notes that SSAD must comply with requirements for c, d, e, f – could the Team clarify what applies to whom? * Does this mean we are negotiating the terms and conditions of the co-controller agreements, or is this deferred to implementation? * Working assumption that ICANN org and CPs are joint controllers and they would negotiate the joint controller agreement among themselves * ICANN is asking if by SSAD we mean the CGM, and the other part is they are looking for clarification on do the parts of the recommendation really all apply to SSAD or just to contracted parties * What ICANN is trying to understand – some requirements seem odd if they apply to the identity provider to the accreditation authority * SSAD should be the central gateway manager * If the Team means more than the CGM, it should say so * Item 59 – changes around how confidential requests are dealt with – this language was developed by a small team that the group helped review * The goal of this was to add normative language, and this resulted in a change. Not wedded to this language, but still looking to insert normative language * Prefer language proposed by IPC/BC * This is something Chris and James worked out and this looks like a material change to what was agreed upon * Can “CAN” be changed to “MAY”? * There are cases where even where the LEA requests it to be anonymous, the data subject’s rights trump that. * Object to MUST at the end of the sentence. If under your local law, you don’t have data protection legislation at the national level? This does not make sense. * Item 60 – any concerns deleting footnote 49? * No – agreement to delete. * Item 61 – how could this be implemented? * If it’s not a cannot live with item, suggest not spending additional time on this. * Item 62 – what is expected in terms of redress – is this a reexamination request? RrSG – agree that this is similar to reexamination requests. * This text is about when a requesting entity is flagged as submitting abusive requests – if a determination is made to throttle that user, the user can seek recourse, but this recourse is not the same as a reexamination request in Rec. 6 * Item 63 – there should be a similar recommendation that applies to CPs – must not reject requests that have not been flagged as abusive by the SSAD * Until the Team sees the co-controller agreement, it cannot put coercive language in the text * Keeping original text – no update accepted. * Item 64 – what does appropriate access mean? * Everyone should be able to see their own numbers – there is no reason for one requestor to see another requestor’s stats, or discloser to see another discloser’s stats, except in an aggregate. * Could Volker say – I want to see all the requests sent to James? Who can see what on the CP side? * Common sense – you can see your own data, but not other people’s data * When envisioning seeing the data, it was meant to see your own data (requestor’s can see their data, and CPs can see their own data) * This should be included in the last two items on the next call (63-64) 1. EPDP Team feedback 2. Confirm next steps 5. Wrap and confirm next EPDP Team meeting (5 minutes): 1. Tuesday 30 June at 14.00 UTC. Topics to be addressed: continue run through of yellow items. 2. Confirm action items * EPDP Team to provide input on remaining outstanding items by Monday, 29 June. * EPDP Team to provide input on Rec. 6 (if not yet provided) by COB TODAY, 23 June. * EPDP Team to review other groups’ input on Rec. 6 and note if proposed updated text by other groups can be accepted by Monday, 29 June. * Amr to propose alternate texts for Item 59 by Monday, 29 June. 1. Confirm questions for ICANN Org, if any

1 0

Post Call | GNSO Temp Spec gTLD RD EPDP – Phase 2 | Tuesday, 23 June 2020 at 14:00 UTC
by Terri Agnew June 23, 2020

June 23, 2020

Dear all, All recordings for the GNSO Temp Spec gTLD RD EPDP – Phase 2 held on Tuesday, 23 June 2020 at 14:00 UTC can be found on the agenda wiki page <https://community.icann.org/x/fQgdC> (attendance included) and the GNSO Master calendar <https://urldefense.proofpoint.com/v2/url?u=http-3A__gnso.icann.org_en_group…> . These include: * Attendance (please let me know if your name has been left off the attendance list) * Audio recording * Zoom chat archive * Zoom recording (including audio, visual, rough transcript) * Transcript As a reminder only members and alternates can join the call as panelist, observers can join as an attendee to listen. For additional information, you may consult the mailing list archives <https://mm.icann.org/pipermail/gnso-epdp-team/> and the main wiki page<https://community.icann.org/x/IYEpBQ>. Thank you. With kind regards, Terri

1 0

Meeting Invitation | Observers | GNSO Temp Spec gTLD RD EPDP-P2 call | Tuesday, 30 June 2020
by Terri Agnew June 23, 2020

June 23, 2020

As a result of various requests to facilitate observers to follow the EPDP Phase 2 deliberations in real time, zoom webinar room will be made available for the EPDP plenary meetings. As a reminder, the zoom recording, audio recording, chat transcript and transcript of the EPDP plenary meetings will be publicly posted as soon as available on the EPDP wiki page and GNSO master calendar. Dear all, The next meeting of the GNSO Temp Spec gTLD RD EPDP – Phase 2 is scheduled on Tuesday, 30 June 2020 at 14:00 UTC for 2 hours. Zoom room information: Main Zoom Webinar link: please join via this link: https://icann.zoom.us/j/98917212893?pwd=dTRQaEMwK0tweStXTVhpVERsVjdhZz09 Password: 953887 Going forward, observers will now join via zoom webinar room vs audio cast. Observers will have ability to view member chat and information shared in the zoom webinar room. Observers will not be able to use chat or raise hands. Before joining the call: Please send dial out requests to gnso-secs(a)icann.org<mailto:gnso-secs@icann.org> only Please be sure you have read the Please be sure you have read the Expected Standards of Behavior [icann.org]<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.icann.org_resource…> Visit the Wiki agenda page: https://community.icann.org/x/fwgdC Check your time zone: https://tinyurl.com/y7j7wrgk The recordings and transcriptions of the calls are posted on the GNSO Master Calendar page: https://gnso.icann.org/en/group-activities/calendar<https://urldefense.proofpoint.com/v2/url?u=https-3A__gnso.icann.org_en_grou…> If you are joining via audio only: iPhone one-tap : US: +16699006833,,98917212893#,,#,953887# or +13462487799,,98917212893#,,#,953887# Dial in directly with your chosen number [icann.zoom.us]<https://urldefense.proofpoint.com/v2/url?u=https-3A__icann.zoom.us_u_acwzlz…> and provide the following information: Webinar ID: 989 1721 2893 Thank you. Kind regards, Terri

1 0

Alternative recommendation #19 posted for review
by Marika Konings June 23, 2020

June 23, 2020

Dear EPDP Team, Following the small team deliberations, an alternative recommendation #19 has now been posted for your review and consideration: https://drive.google.com/file/d/17gGzz6K-zKuSK71FluHCowZo3p6tFEd3/view?usp=…. Please identify any cannot live with items by Monday 29 June at the latest. Best regards, Caitlin, Berry and Marika

2 2