<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p>Apologies All for so many comments. This is the last one and then
I am off to enjoy NamesCon. Hope you enjoying LA.<br>
</p>
<p>Farzi,</p>
<p>In an earlier email, you insightfully asked: "I don't want Law
Enforcement be viewed as legitimate force globally and you know
where I am from. Does Eco model address my worry?" We have to dig
deeper, but this is where the ECO Model seems to shine. <br>
</p>
<p>What I fear is the ICANN Models, if adopted, asking the GAC and
ICANN Community to very rapidly come up with the law enforcement
disclosure models. Knowing their work, I fear they will focus on
the laws that protect us from disclosure to foreign law
enforcement -- the GDPR laws that would protect European citizens
and residents from disclosure to foreign governments who they are
criticizing legally and fully from their current locations. Ditto
for the pro-democracy groups in the US -- disclosure of their
names and addresses to Chinese or other anti-democracy countries
whether their writings (either neutral or anti-China) may be
viewed as a violation of law. They may still have families in
these countries! (This is not a hypothetical, but real world
situations I have work with). ICANN does not have a history of
differentiating between countries and law enforcement - all are
likely to wind up equal in our interim (and final solution) and
that concerns me more deeply than I can tell you. <br>
</p>
<p>For the Interim Solution that we need so quickly, as you point
out, the ECO Model will ground it under EU laws and EU treaties
that are grounded in human rights, individual rights, protection
for an array of noncommercial issues, including political, moral,
social, sexual, religious, etc. That means that international law
enforcement will *not* have unlimited access to the data, but
disclosure will be more selective and more discerning.</p>
<p>For an interim model, it is one with law and precedent and
protections.</p>
<p>Best regards, Kathy<br>
</p>
<div class="moz-cite-prefix">On 1/28/2018 1:48 PM, farzaneh badii
wrote:<br>
</div>
<blockquote
cite="mid:CAN1qJvD=V9mOp_ikOS4mwOkzwBTPibRJ9S6t_yqnNFew+epefg@mail.gmail.com"
type="cite">
<div>
<div dir="auto">So i just paste this from the ECO model here: </div>
<div dir="auto"><br>
</div>
<div dir="auto">[The legal basis for disclosure to law
enforcement agencies is limited to authorities acting on the
grounds of EU law or national laws of EU member states.]<br>
</div>
<div dir="auto"><br>
</div>
<div dir="auto">What does this mean? So only EU laws and Eu
national laws can be used by law enforcement globally to have
access to data? </div>
<div dir="auto"><br>
</div>
<div dir="auto">Then we have this: </div>
<div dir="auto">[It is further proposed that certification and
handling of requests can be centralized in a Trusted Data
Clearinghouse to avoid duplicate efforts, to take off the
burden of organizational, proceduaral and financial efforts
off the controllers and requesters, to ensure consistency of
decision-making and to make the system “customer friendly”.]</div>
<div dir="auto"><br>
</div>
<div dir="auto"><br>
</div>
<div dir="auto">A trusted data clearing house. Don't know how to
feel about that. They are also in favor of thick whois data
and think it should continue. I don't think thick whois is
justified. I don't think we thought that when it was approved
either. </div>
<div dir="auto"><br>
</div>
<div dir="auto"><br>
</div>
<div dir="auto">with regards to international data transfer to
non eu law enforcement please look at page 67 </div>
<div dir="auto"><br>
</div>
<div dir="auto"><a moz-do-not-send="true"
href="https://www.icann.org/en/system/files/files/gdpr-cm3-eco-domain-industry-playbook-11jan18-en.pdf">https://www.icann.org/en/system/files/files/gdpr-cm3-eco-domain-industry-playbook-11jan18-en.pdf</a><br>
</div>
<div dir="auto"><br>
</div>
<div dir="auto">
<div dir="auto">[International Transfer of Whois Data to
Non-EU Law Enforcement Agencies</div>
<div dir="auto">According to Directive (EU) 2016/680, European
Member States should ensure that a transfer by European law
enforcement agencies to a third country or to an
international organisation takes place only if necessary for
the prevention, investigation, detection or prosecution of
criminal offences or the execution of criminal penalties,
including the safeguarding against and the prevention of
threats to public security, and that the controller in the
third country or international organisation is a competent
authority as well. Similar to the requirements for
international data transfer according to the G....]</div>
</div>
<div dir="auto"><br>
</div>
<div dir="auto"><br>
</div>
<div dir="auto">They also say they have not consulted with data
protection authorities. If I am not mistaken. </div>
<div dir="auto"><br>
</div>
<div dir="auto">ECO model could be great. I can't analyze it now
I dont agree with some things they say I don't understand
other things. </div>
<br>
<div class="gmail_quote">
<div>On Sun, Jan 28, 2018 at 3:35 PM avri doria <<a
moz-do-not-send="true" href="mailto:avri@apc.org">avri@apc.org</a>>
wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">(observer)<br>
<br>
<br>
On 28-Jan-18 11:55, Rafik Dammak wrote:<br>
> I am not familiar with the eco model<br>
<br>
<a moz-do-not-send="true"
href="https://www.icann.org/en/system/files/files/gdpr-cm3-eco-proposal-details-11jan18-en.pdf"
rel="noreferrer" target="_blank">https://www.icann.org/en/system/files/files/gdpr-cm3-eco-proposal-details-11jan18-en.pdf</a><br>
<br>
_______________________________________________<br>
NCSG-PC mailing list<br>
<a moz-do-not-send="true"
href="mailto:NCSG-PC@lists.ncsg.is" target="_blank">NCSG-PC@lists.ncsg.is</a><br>
<a moz-do-not-send="true"
href="https://lists.ncsg.is/mailman/listinfo/ncsg-pc"
rel="noreferrer" target="_blank">https://lists.ncsg.is/mailman/listinfo/ncsg-pc</a><br>
</blockquote>
</div>
</div>
<div dir="ltr">-- <br>
</div>
<div class="gmail_signature" data-smartmail="gmail_signature">
<div dir="ltr">
<div><font face="verdana, sans-serif">Farzaneh </font></div>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
NCSG-PC mailing list
<a class="moz-txt-link-abbreviated" href="mailto:NCSG-PC@lists.ncsg.is">NCSG-PC@lists.ncsg.is</a>
<a class="moz-txt-link-freetext" href="https://lists.ncsg.is/mailman/listinfo/ncsg-pc">https://lists.ncsg.is/mailman/listinfo/ncsg-pc</a>
</pre>
</blockquote>
<br>
</body>
</html>