FYI – staff will make this update accordingly in the final version for posting unless there are any concerns. Best regards, Caitlin, Berry and Marika From: "Rosette, Kristina" <rosettek@amazon.com> Date: Tuesday, November 20, 2018 at 3:55 PM To: Marika Konings <marika.konings@icann.org> Cc: Thomas Rickert <epdp@gdpr.ninja> Subject: RE: [Ext] Re: [Gnso-epdp-team] Proposed Revised Rec. 21 Hi! Thomas and I are both fine with staff’s proposed change. K From: Marika Konings [mailto:marika.konings@icann.org] Sent: Tuesday, November 20, 2018 3:17 PM To: Rosette, Kristina <rosettek@amazon.com> Subject: Re: [Ext] Re: [Gnso-epdp-team] Proposed Revised Rec. 21 Kristina, any further feedback on this? For now, staff has not made any update to your original language, but if this is considered a minor change, it could still be applied before publication. Thanks for your feedback. Best regards, Marika From: "Rosette, Kristina" <rosettek@amazon.com<mailto:rosettek@amazon.com>> Date: Tuesday, November 20, 2018 at 7:51 AM To: Marika Konings <marika.konings@icann.org<mailto:marika.konings@icann.org>> Cc: Trang Nguyen <trang.nguyen@icann.org<mailto:trang.nguyen@icann.org>>, "gnso-epdp-team@icann.org<mailto:gnso-epdp-team@icann.org>" <gnso-epdp-team@icann.org<mailto:gnso-epdp-team@icann.org>> Subject: [Ext] Re: [Gnso-epdp-team] Proposed Revised Rec. 21 Still considering it On Nov 20, 2018, at 8:16 AM, Marika Konings <marika.konings@icann.org<mailto:marika.konings@icann.org>> wrote: Dear EPDP Team, Are there any concerns about this proposed change? If yes, it can be discussed during the upcoming meeting. If not, staff will go ahead and make this modification. Best regards, Caitlin, Berry and Marika From: Gnso-epdp-team <gnso-epdp-team-bounces@icann.org<mailto:gnso-epdp-team-bounces@icann.org>> on behalf of Trang Nguyen <trang.nguyen@icann.org<mailto:trang.nguyen@icann.org>> Date: Monday, November 19, 2018 at 6:31 PM To: "Rosette, Kristina" <rosettek@amazon.com<mailto:rosettek@amazon.com>>, "gnso-epdp-team@icann.org<mailto:gnso-epdp-team@icann.org>" <gnso-epdp-team@icann.org<mailto:gnso-epdp-team@icann.org>> Subject: Re: [Gnso-epdp-team] Proposed Revised Rec. 21 Dear Kristina and EPDP Team, Thank you for the revised recommendation 21 language. ICANN org suggests that the EPDP Team consider removing the word “the” from the language “…ICANN Org enters into the required agreements…” This word presupposes that ICANN must enter into an agreement with every entity “involved in registration data processing” when it has not been determined who all the parties involved in registration data processing are and whether an agreement will be required in all cases. For example, as mentioned this morning, some data escrow providers believe that they are controllers. Dan and Trang ICANN org liaisons From: Gnso-epdp-team <gnso-epdp-team-bounces@icann.org<mailto:gnso-epdp-team-bounces@icann.org>> on behalf of "Rosette, Kristina via Gnso-epdp-team" <gnso-epdp-team@icann.org<mailto:gnso-epdp-team@icann.org>> Reply-To: "Rosette, Kristina" <rosettek@amazon.com<mailto:rosettek@amazon.com>> Date: Monday, November 19, 2018 at 8:51 AM To: "gnso-epdp-team@icann.org<mailto:gnso-epdp-team@icann.org>" <gnso-epdp-team@icann.org<mailto:gnso-epdp-team@icann.org>> Subject: [Gnso-epdp-team] Proposed Revised Rec. 21 All, Thomas and I developed proposed revised Rec. 21 language. I posted it in chat, but copy it below for convenience: Rec. 21: The EPDP Team recommends that ICANN Org enters into the required agreements such as a Data Processing Agreement (GDPR Art. 28) or Joint Controller Agreement (Art. 26), as appropriate, with the non-Contracted Party entities involved in registration data processing such as data escrow providers and EBERO providers. These agreements are expected to set out the relationship obligations and instructions for data processing between the different parties. Kristina Rosette Senior Corporate Counsel, IP – Domains rosettek@amazon.com<mailto:rosettek@amazon.com> | 703.407.1354