<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle21
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#1F497D;}
span.EmailStyle22
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Kathy,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Thanks for your helpful intervention. I especially liked your discussion of this:<o:p></o:p></span></p>
<p style="margin-bottom:12.0pt"><em><span style="font-size:10.5pt;font-family:"Arial",sans-serif">a) Is a name “personal data”?</span></em><i><span style="font-size:10.5pt;font-family:"Arial",sans-serif"><br>
<em><span style="font-family:"Arial",sans-serif">b) Is an address “personal data”?</span></em><br>
<em><span style="font-family:"Arial",sans-serif">c) Is a cell phone “personal data”?</span></em><br>
<em><span style="font-family:"Arial",sans-serif">d) Is an email “personal data”?</span></em></span></i><span style="font-size:10.5pt;font-family:"Arial",sans-serif"><br>
<br>
<span style="color:#1F497D">Thinking about this problem – what is personal data – is what led me to start modifying my position on this issue. In a digital world there is no hard, well-defined nugget of data that is “personal” and everything else is not. Your
“personality” is reflected in a lot of _<i>activity</i>_ on the net, and anyone who can gather and correlate all of those footprints knows a lot of personal info about you. True, your name and location, where you live, or your SSN or national identity number
of drivers’ license, provide a stronger basis for putting all these correlations into an actionable identity. And that data is out there in a number of places, whois is relatively small part of that problem. A very small part, in fact<o:p></o:p></span></span></p>
<p style="margin-bottom:12.0pt"><span style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#1F497D">This is one of the reasons I don’t like Stephanie’s proposed approach (I will try to answer her message separately). Instead of a simple self-designation
as legal or natural (company or individual), they want to try to force registrars into an elaborate process of eliminating personal data from the record. But anything can be personal data. OR some things that seem to be personal are not so personal. I think
such a process is going to make registering a domain complicated and expensive and ultimately will not protect much. Worse, such a process will also be a camel’s nose under the tent process in which registrars assume more and more responsibility for determining
the accuracy of registration data and for verifying the identity of everyone who registers.
<o:p></o:p></span></p>
<p style="margin-bottom:12.0pt"><span style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#1F497D">Let’s keep it simple and under the registrants’ control. The more you involve third party rules and regulations in the registration process, the more
complicated and expensive it becomes, and the privacy gains of such processes are miniscule, they are mostly hypothetical and theoretical.<o:p></o:p></span></p>
<p style="margin-bottom:12.0pt"><span style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#1F497D">So I think it is simplest to just say to the registrant, if you’re a company and don’t mind (or even want) your data to be published, check this box.
If you’re not, or you do mind, don’t check it. <o:p></o:p></span></p>
</div>
</body>
</html>