Thanks, Caitlin. This sounds accurate to me. Brian J. King Director of Internet Policy and Industry Affairs T +1 443 761 3726 markmonitor.com<http://www.markmonitor.com> MarkMonitor Protecting companies and consumers in a digital world From: Caitlin Tubergen <caitlin.tubergen@icann.org> Sent: Monday, February 3, 2020 12:29 PM To: King, Brian <Brian.King@markmonitor.com>; gnso-epdp-team@icann.org Subject: Re: [Gnso-epdp-team] Simple clarification proposal for the initial report. Dear EPDP Team: Taking into account the points from Milton and Brian, please review the below updated principle and let us know if this is an acceptable update: * Requests for disclosure of redacted data are made to a Centralized Gateway administered by ICANN Org. The Centralized Gateway administered by ICANN Org also accredits entities and/or individuals who wish to submit queries via the SSAD. Disclosure decisions are made by the Contracted Parties maintaining the data, except in cases where automated disclosure has been allowed for in these policy recommendations (see preliminary recommendation #7). In cases where automated disclosure has been allowed for in these policy recommendations, disclosure is directed by the Centralized Gateway without manual intervention from the Contracted Parties maintaining the data. Thank you. Best regards, Marika, Berry, and Caitlin From: Gnso-epdp-team <gnso-epdp-team-bounces@icann.org<mailto:gnso-epdp-team-bounces@icann.org>> on behalf of "King, Brian via Gnso-epdp-team" <gnso-epdp-team@icann.org<mailto:gnso-epdp-team@icann.org>> Reply-To: "King, Brian" <Brian.King@markmonitor.com<mailto:Brian.King@markmonitor.com>> Date: Sunday, February 2, 2020 at 2:42 PM To: "gnso-epdp-team@icann.org<mailto:gnso-epdp-team@icann.org>" <gnso-epdp-team@icann.org<mailto:gnso-epdp-team@icann.org>> Subject: Re: [Gnso-epdp-team] Simple clarification proposal for the initial report. Hi Milton, No objection to the principle of clearly stating what we’re considering. However, it’s not accurate to say broadly that we’re only considering decentralized decision making. The way you’ve phrased it could cause the reader to misunderstand what we’re considering. For accuracy, we should add that we’re also considering centralized, automated decision-making for some cases. We can go on to note which cases those are (the list that MarkSv sent to the list), and seek public comment on those. Brian J. King Director of Internet Policy and Industry Affairs T +1 443 761 3726 markmonitor.com [markmonitor.com]<https://urldefense.proofpoint.com/v2/url?u=http-3A__www.markmonitor.com&d=Dw...> MarkMonitor Protecting companies and consumers in a digital world From: Gnso-epdp-team <gnso-epdp-team-bounces@icann.org<mailto:gnso-epdp-team-bounces@icann.org>> On Behalf Of Mueller, Milton L Sent: Sunday, February 2, 2020 3:24 PM To: gnso-epdp-team@icann.org<mailto:gnso-epdp-team@icann.org> Subject: [Gnso-epdp-team] Simple clarification proposal for the initial report. All: I’ve been reviewing the draft report. On p 10 we are supposed to be setting out the basic principles underlying the SSAD model. In fact, we never quite do that. We need to state right there that we have adopted a hybrid model, which involves a centralized point for accreditation and for the receipt of queries, but that disclosure decisions that are made by the contracted party who is holding the data. We need to state that simply and clearly. I propose the following language for the first bullet: • Requests for redacted data are made to a centralized gateway administered by ICANN, which also accredits entities to make queries. Disclosure decisions are made by the contracted parties maintaining the data. None of the other principles make any sense until this is stated. E.g., the first bullet point talks about automation but automation of what? Queries, authorization, disclosure? The second bullet point talks about "further streamlining and standardizing of disclosure requests" but this makes no sense unless we have made it clear that the model involves a centralized point for disclosure requests and decentralized disclosure decisions. Further down on p 11, in describing the benefits, we do say that there is a single point for making requests, but the P. 10 summary is what most people will read first as the basic elements of the model, so we need to make it clear there. I think this addition is pretty noncontroversial and hope we can go ahead with it. Dr. Milton L Mueller Georgia Institute of Technology School of Public Policy
