Dear SSR2 Review Team,

Some clarification is sought on the below question. Would volunteers from the group asking the question please review the below request and provide further guidance?

Review Team volunteers: Eric, Norm, Laurin, Kerry-Ann, Noorul

Workstream: Future Challenges

Topic: Privacy protections (DNS over TLS / over HTTPS; Circular dependencies between WebPKI and DNSSEC; Impact on Proactive anti-abuse and investigations)

Q: How will ICANN continue to follow up on the GDPR and related decisions?

Clarification requested from ICANN org:

In providing our response:

Is there an expectation for us to look into each of the technical topics, i.e.:

· DNS over TLS/over HTTPS;

· Circular dependencies between WebPKI and DNNSEC; and

· Impact on Proactive anti-abuse and investigations.

Is the SSR2 RT looking for a more general, broad response i.e. what ICANN is doing re: GDPR; and how ICANN will continue to follow up/keep abreast on GDPR developments.

What does GDPR and “related decisions” specifically mean in this context?

Thank you,
Jennifer

Jennifer Bryce

Senior Reviews Coordinator

Internet Corporation for Assigned Names and Numbers (ICANN)

Email: jennifer.bryce@icann.org

Skype: jennifer.bryce.icann