<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
h2
{mso-style-priority:9;
mso-style-link:"Heading 2 Char";
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:18.0pt;
font-family:"Times New Roman","serif";
font-weight:bold;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.Heading2Char
{mso-style-name:"Heading 2 Char";
mso-style-priority:9;
mso-style-link:"Heading 2";
font-family:"Cambria","serif";
color:#4F81BD;
font-weight:bold;}
span.apple-style-span
{mso-style-name:apple-style-span;}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Is there any way that EPIC or other privacy organizations with litigation experience can advise us on or European colleagues on how to sue ICANN to show that
it does have legal effect?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div style="border:none;border-left:solid blue 1.5pt;padding:0in 0in 0in 4.0pt">
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> NCSG-Discuss [mailto:NCSG-DISCUSS@LISTSERV.SYR.EDU]
<b>On Behalf Of </b>Marc Rotenberg<br>
<b>Sent:</b> Monday, July 15, 2013 1:12 PM<br>
<b>To:</b> NCSG-DISCUSS@LISTSERV.SYR.EDU<br>
<b>Subject:</b> Re: [NCSG-Discuss] ICANN Thumbs Its Nose at National Data Protection Authorities - Refuses to Comply with Privacy Laws Protecting Citizens<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Yes. Agreed.<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Regards to all.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Marc Rotenberg.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">On Jul 15, 2013, at 11:08 AM, Robin Gross wrote:<o:p></o:p></p>
</div>
<p class="MsoNormal"><br>
<br>
<o:p></o:p></p>
<div>
<div>
<p class="MsoNormal">Wow. I was wondering how ICANN would try to circumvent the data protection authorities of Europe, but it really takes some brass for this private corporation (ICANN) to claim Article 29WP lacks the competent legal authority to interpret
their own laws (and protect the rights of their citizens). ICANN's continued flouting of the privacy laws in many parts of the world is particularly troubling
<i>these</i> days.... <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><a href="http://domainincite.com/13724-icann-says-article-29-letter-does-not-give-eu-registrars-privacy-opt-out">http://domainincite.com/13724-icann-says-article-29-letter-does-not-give-eu-registrars-privacy-opt-out</a><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<h2 style="margin:0in;margin-bottom:.0001pt"><span style="font-size:11.5pt;font-family:"Arial","sans-serif";color:blue"><a href="http://domainincite.com/13724-icann-says-article-29-letter-does-not-give-eu-registrars-privacy-opt-out"><span style="font-size:14.0pt;text-decoration:none">ICANN
says Article 29 letter does not give EU registrars privacy opt-out</span></a><o:p></o:p></span></h2>
<div style="margin-bottom:6.0pt">
<p class="MsoNormal"><span style="font-size:7.5pt;font-family:"Arial","sans-serif";color:gray"><a href="http://domainincite.com/about"><span style="text-decoration:none">Kevin Murphy</span></a>, July 15, 2013, 09:24:30 (UTC), <a href="http://domainincite.com/category/domain-policy" title="View all posts in Domain Policy"><span style="text-decoration:none">Domain
Policy</span></a><o:p></o:p></span></p>
</div>
<p style="margin:0in;margin-bottom:.0001pt;line-height:20.4pt"><strong><span style="font-size:10.5pt;font-family:"Arial","sans-serif"">Registrars based in the European Union won’t immediately be able to opt out of “illegal” data retention provisions in the
new 2013 Registrar Accreditation Agreement, according to ICANN.</span></strong><span style="font-size:10.5pt;font-family:"Arial","sans-serif""><o:p></o:p></span></p>
<p style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;line-height:20.4pt">
<span style="font-size:10.5pt;font-family:"Arial","sans-serif"">ICANN VP Cyrus Namazi on Saturday told the Governmental Advisory Committee that a recent letter from the Article 29 Working Party, which comprises the data protection authorities of EU member states,
is “not a legal authority”.<o:p></o:p></span></p>
<p style="margin:0in;margin-bottom:.0001pt;line-height:20.4pt"><span style="font-size:13.5pt;font-family:"Arial","sans-serif"">Article 29 told ICANN last month that the RAA’s provisions requiring registrars to hold registrant data for two years after the domain
expires </span><span class="apple-style-span"><span style="font-size:13.5pt;font-family:"Helvetica","sans-serif""><a href="http://domainincite.com/13645-2013-raa-is-illegal-says-eu-privacy-watchdog" title="DI"><span style="text-decoration:none">were “illegal”</span></a>.</span></span><span style="font-family:"Arial","sans-serif""><o:p></o:p></span></p>
<p style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;line-height:20.4pt">
<span style="font-size:10.5pt;font-family:"Arial","sans-serif"">While the RAA allows registrars to opt out of clauses that would be illegal for them to comply with, they can only do so with the confirmation of an adequate legal opinion.<o:p></o:p></span></p>
<p style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;line-height:20.4pt">
<span style="font-size:10.5pt;font-family:"Arial","sans-serif"">The Article 29 letter was designed to give EU registrars that legal opinion across the board.<o:p></o:p></span></p>
<p style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;line-height:20.4pt">
<span style="font-size:10.5pt;font-family:"Arial","sans-serif"">But according to Namazi, the letter does not meet the test. In response to a question from the Netherlands, he told the GAC:<o:p></o:p></span></p>
<blockquote style="border:solid #E0E0E0 1.0pt;padding:8.0pt 8.0pt 4.0pt 8.0pt;margin-left:0in;margin-right:0in;margin-bottom:7.5pt">
<p style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;line-height:20.4pt;background:#EEEEEE">
<span style="font-size:10.5pt;font-family:"Arial","sans-serif"">We accept it from being an authority, but it’s not a legal authority, is our interpretation of it. That it actually has not been adopted into legislation by the EU. When and if it becomes adopted
then of course there are certain steps to ensure that our contracted parties are in line with — in compliance with it. But we look at them as an authority but not a legal authority at this stage.<o:p></o:p></span></p>
</blockquote>
<p style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;line-height:20.4pt">
<span style="font-size:10.5pt;font-family:"Arial","sans-serif"">It seems that when the privacy watchdogs of the entire European Union tell ICANN that it is in violation of EU privacy law, that’s not taken as an indication that it is in fact in violation of
EU privacy law.<o:p></o:p></span></p>
<p style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:7.5pt;margin-left:0in;line-height:20.4pt">
<span style="font-size:10.5pt;font-family:"Arial","sans-serif"">The European Commission representative on the GAC expressed concern about this development during Saturday’s session, which took place at ICANN 47 in Durban, South Africa.<o:p></o:p></span></p>
</div>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</div>
</body>
</html>