Hello team,

Back in June of 2020, the proposed language from the Staff team was:

> ICANN, gTLD Registry Operators and accredited Registrars MUST enter into and maintain in effect data processing terms and conditions concerning personal data in Registration Data with each other and relevant third party providers, where applicable. The terms include legal bases for processing Registration Data

We had suggested a minor update:

> ICANN, gTLD Registry Operators, and accredited Registrars MUST enter into required data protection agreements, as appropriate, with each other and with relevant third party providers, where applicable. The terms may include legal bases for processing Registration Data as applicable.

Can we consider using this text for this section, rather than the new proposed version? I think it faithfully implements the recommendation, covers the necessary items, and is straightforward.

Thanks,

--

Sarah Wyld, CIPP/E

Policy & Privacy Manager

Pronouns: she/they

swyld@tucows.com

From: Dennis Chang via IRT.RegDataPolicy
Sent: July 6, 2022 9:06 AM
To: Dennis Chang via IRT.RegDataPolicy
Subject: [IRT.RegDataPolicy] IRT Task 221 Review OneDoc Section 5 DataProtection Agreement 20220718; RDAP Profile status

Dear IRT,

Please review the revised version for Section 5 of OneDoc.

221

Review OneDoc Section 5 Data Protection Agreement

20220718

As we prepare for the upcoming public comment,

we are nearing completion of OneDoc as you see and the RDAP Profile documents remain as the only deliverables.

Roger advised that while the WG was not able to complete the documents in June, they will deliver in July.

In fact, the WG scheduled an extra meeting to ensure their delivery to support our August opening of the Public Comment.

Stay tuned. I’ll let you all know as soon as they are ready.

Kind Regards,

Dennis S. Chang

GDD Programs Director

Phone: +1 213 293 7889

Sykpe: dennisSchang