<html><head></head><body><div class="">The GNSO Council’s Standing Committee on Budget and Operations had a brief discussion on this issue earlier in the week. As part of that discussion I noted that the Independent Parliamentary Standards Authority in the UK, which compiles and publishes the expense reports for elected members of Parliament, has been able to continue publishing its expense reports post-GDPR. Per its publication guidelines it will not publish “specific details of any disability assistance”, for instance, but it will publish the total claimed by the MP or a member of their staff annually from the disability assistance budget. So while ICANN might need to make some changes to its reports, I do think ICANN could find a way to publish more complete travel reports than it is today. </div><div class=""><br class=""/></div><div class="">And as part of such a change it may make more sense for ICANN to publish more details around how it handles travel exemptions and bookings in premium cabins. Because it isn’t just those who have medical needs who have an entitlement to travel in a premium cabin; there seem to be a wide range of reasons. </div><div class=""><br class=""/></div><div class="">It isn’t the role of the community to interrogate community members or to question the legitimacy or validity of a medical exemption, and I’m sorry you encountered this James. I’d be taking such a comment to the Ombudsperson if they were directed at me.</div><div class=""><br class=""/></div><div class="">(And we could probably avoid this whole issue of potential inference of a medical condition by having a consistent and fair travel policy; <i class="">no one</i> arrives off a long haul flight in economy able to productively contribute to policy work.)</div><div class=""><br class=""/></div><div class="">Best wishes, Ayden</div><div class=""></div><div><br class=""/><blockquote type="cite" class=""><div class="">On 15 Aug 2018, at 21:18, James Gannon <<a href="mailto:james@CYBERINVASION.NET" class="">james@CYBERINVASION.NET</a>> wrote:</div><br class="Apple-interchange-newline"/><div class="">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" class=""/>
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
I would say that publishing information that has sufficient supporting info to single out people who have medical issues can be classed as PII.
<div class=""><br class=""/>
</div>
<div class="">And Im not sure what more info you want me to elaborate on on the 2nd point, I have been subject to intense questioning from members of the community over the fact that while on SSR2 I had a medical exemption for long haul flights and what was
wrong with me, “I look fine, I look healthy” etc. All because said info was published in the travel reports.<br class=""/>
<div class=""><br class=""/>
<blockquote type="cite" class="">
<div class="">On 15 Aug 2018, at 19:44, Michael Karanicolas <<a href="mailto:mkaranicolas@gmail.com" class="">mkaranicolas@gmail.com</a>> wrote:</div>
<br class="Apple-interchange-newline"/>
<div class="">
<div dir="ltr" class="">Would you care to elaborate on either point (or both...)?
<div class=""><br class=""/>
</div>
<div class=""><br class=""/>
</div>
<div class="">
<div class="gmail_extra"><br class=""/>
</div>
<div class="gmail_extra"><br class=""/>
<div class="gmail_quote">On Wed, Aug 15, 2018 at 2:18 PM, James Gannon <span dir="ltr" class="">
<<a href="mailto:james@cyberinvasion.net" target="_blank" class="">james@cyberinvasion.net</a>></span> wrote:<br class=""/>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div style="word-wrap:break-word;line-break:after-white-space" class="">I would disagree as would some case law.
<div class="">Having been the subject of near interrogation over the same topic I speak from experience.
<div class="">
<div class="h5"><br class=""/>
<div class=""><br class=""/>
<blockquote type="cite" class="">
<div class="">On 15 Aug 2018, at 19:10, Michael Karanicolas <<a href="mailto:mkaranicolas@gmail.com" target="_blank" class="">mkaranicolas@gmail.com</a>> wrote:</div>
<br class="m_263681986178929056Apple-interchange-newline"/>
<div class="">
<div dir="ltr" class="">I agree. There is a strong public interest to tracking expenses of this type. I don't consider the fact that a person has requested/received an exemption to be particularly sensitive, given that there's no need to publish any details
about the specifics underlying that exemption (the actual medical information). </div>
<div class="gmail_extra"><br class=""/>
<div class="gmail_quote">On Wed, Aug 15, 2018 at 11:56 AM, Ayden Férdeline <span dir="ltr" class="">
<<a href="mailto:icann@ferdeline.com" target="_blank" class="">icann@ferdeline.com</a>></span> wrote:<br class=""/>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="">This is a legitimate concern, but it something that can be managed. Other organisations which publish similar data (government, grant issuing agencies) have ways of managing this, which ICANN might be able to learn from.<span class="m_263681986178929056HOEnZb"><font color="#888888" class="">
<div class=""><br class=""/>
</div>
</font></span>
<div class=""><span class="m_263681986178929056HOEnZb"><font color="#888888" class="">Ayden</font></span>
<div class="">
<div class="m_263681986178929056h5"><br class=""/>
<div class=""><br class=""/>
<blockquote type="cite" class="">
<div class="">On 15 Aug 2018, at 16:41, James Gannon <<a href="mailto:james@cyberinvasion.net" target="_blank" class="">james@cyberinvasion.net</a>> wrote:</div>
<br class="m_263681986178929056m_4380416554520506994Apple-interchange-newline"/>
<div class="">
<div style="word-wrap:break-word;line-break:after-white-space" class="">The concern I know was raised previously is that it can be determined who has asked and received a medical exemption from the travel and flight policy hence may be considered for those
people personal information.<br class=""/>
<div class=""><br class=""/>
<blockquote type="cite" class="">
<div class="">On 15 Aug 2018, at 16:19, Ayden Férdeline <<a href="mailto:icann@FERDELINE.COM" target="_blank" class="">icann@FERDELINE.COM</a>> wrote:</div>
<br class="m_263681986178929056m_4380416554520506994Apple-interchange-newline"/>
<div class="">
<div class="">Hi Claire,
<div class=""><br class=""/>
</div>
<div class="">Yes, it is a balancing act, but with the exception of names, the travel report does not directly contain any personal information. It used to have the cost of a flight, for instance - but never the city of departure or any other identifying information.
Much like we expect elected representatives in government to disclose their expenses, I think it is reasonable for those who are receiving financial support from ICANN to disclose the extent of this relationship by way of documents like the travel report.
<div class=""><br class=""/>
</div>
<div class="">Best wishes, Ayden<br class=""/>
<div class="">
<div class=""><br class=""/>
<blockquote type="cite" class="">
<div class="">On 15 Aug 2018, at 15:03, Claire Craig <<a href="mailto:claireccraig@GMAIL.COM" target="_blank" class="">claireccraig@GMAIL.COM</a>> wrote:</div>
<br class="m_263681986178929056m_4380416554520506994Apple-interchange-newline"/>
<div class="">
<div dir="ltr" class="">Interesting Ayden. We really have to insist on balancing transparency and privacy otherwise, before we know it everything could be justified and private hence outside of the purview of the community.
<div class="">CCC</div>
</div>
<br class=""/>
<div class="gmail_quote">
<div dir="ltr" class="">On Tue, 14 Aug 2018 at 17:55, Ayden Férdeline <<a href="mailto:icann@ferdeline.com" target="_blank" class="">icann@ferdeline.com</a>> wrote:<br class=""/>
</div>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="">Hi Farzi,
<div class=""><br class=""/>
</div>
<div class="">While we would certainly like to see ICANN act in a more privacy-minded fashion, we would also like to see ICANN remain appropriately transparent and accountable. </div>
<div class=""><br class=""/>
</div>
<div class="">It might be worth asking to see the Privacy Impact Assessment (if any) that ICANN org conducted prior to redacting the travel reports of all meaningful data. They are now useless, as the financial information has been redacted, with ICANN org
attributing this change to “privacy laws.”
<div class=""><br class=""/>
</div>
<div class="">Best wishes,</div>
<div class=""><br class=""/>
</div>
<div class="">Ayden Férdeline <br class=""/>
<div class=""><br class=""/>
<blockquote type="cite" class="">
<div class="">On 14 Aug 2018, at 23:49, farzaneh badii <<a href="mailto:farzaneh.badii@GMAIL.COM" target="_blank" class="">farzaneh.badii@GMAIL.COM</a>> wrote:</div>
<br class="m_263681986178929056m_4380416554520506994m_-1075295728516076111Apple-interchange-newline"/>
<div class="">
<div dir="ltr" class="">
<div style="font-family:verdana,sans-serif" class="">Dear members</div>
<div style="font-family:verdana,sans-serif" class=""><br class=""/>
</div>
<div style="font-family:verdana,sans-serif" class="">I will have a meeting with the CEO on Friday the 17th. The issues that I have in mind to discuss with him are:</div>
<div style="font-family:verdana,sans-serif" class=""><br class=""/>
</div>
<div style="font-family:verdana,sans-serif" class="">Unified Access Model and NCSG perspective. (we had some preliminary discussions on the list about it, hopefully, we will have some common positions which I can relay on Friday.)</div>
<div style="font-family:verdana,sans-serif" class=""><br class=""/>
</div>
<div style="font-family:verdana,sans-serif" class="">Cross Community Sessions and dominance of the organizer</div>
<div style="font-family:verdana,sans-serif" class=""><br class=""/>
</div>
<div style="font-family:verdana,sans-serif" class="">The need to have a more privacy-minded ICANN org and community </div>
<div style="font-family:verdana,sans-serif" class=""><br class=""/>
</div>
<div style="font-family:verdana,sans-serif" class=""><br class=""/>
</div>
<div style="font-family:verdana,sans-serif" class=""><br class=""/>
</div>
<div style="font-family:verdana,sans-serif" class="">This is quite a full agenda and he would want to also talk about issues. </div>
<div style="font-family:verdana,sans-serif" class=""><br class=""/>
</div>
<div style="font-family:verdana,sans-serif" class="">Please comment on the current issues by tomorrow and let me know if you have any other topic you would like to be discussed. </div>
<div style="font-family:verdana,sans-serif" class=""><br class=""/>
</div>
<div style="font-family:verdana,sans-serif" class="">Best regards</div>
<div style="font-family:verdana,sans-serif" class=""><br class=""/>
</div>
<div style="font-family:verdana,sans-serif" class=""><br class=""/>
</div>
<div style="font-family:verdana,sans-serif" class=""><br class=""/>
</div>
<div style="font-family:verdana,sans-serif" class=""><br class=""/>
</div>
<div style="font-family:verdana,sans-serif" class=""><br class=""/>
</div>
<div class="">
<div dir="ltr" class="m_263681986178929056m_4380416554520506994m_-1075295728516076111m_3426295598322987840gmail_signature" data-smartmail="gmail_signature">
<div dir="ltr" class="">
<div class=""><font face="verdana, sans-serif" class="">Farzaneh </font></div>
</div>
</div>
</div>
</div>
</div>
</blockquote>
</div>
<br class=""/>
</div>
</div>
</div>
</blockquote>
</div>
</div>
</blockquote>
</div>
<br class=""/>
</div>
</div>
</div>
</div>
</div>
</blockquote>
</div>
<br class=""/>
</div>
</div>
</blockquote>
</div>
<br class=""/>
</div>
</div>
</div>
</div>
</blockquote>
</div>
<br class=""/>
</div>
</div>
</blockquote>
</div>
<br class=""/>
</div>
</div>
</div>
</div>
</blockquote>
</div>
<br class=""/>
</div>
</div>
</div>
</div>
</blockquote>
</div>
<br class=""/>
</div>
</div>
</div></blockquote></div><br class=""/></body></html>