[council] Motions passed by the GNSO Council on 20 July 2006

["GNSO.SECRETARIAT@xxxxxxxxxxxxxx" <gnso.secretariat@xxxxxxxxxxxxxx>]

[To: council[at]gnso.icann.org]

Dear All,

Ahead of the GNSO Council minutes, Council passed the following motions 
at its meeting on 20 July, 2006.
Motion One on the WHOIS service
===============================


"The GNSO Council notes that the WHOIS definition approved by the GNSO
Council on 18 April 06, as a working definition to allow the WHOIS task
force to proceed with its work, is related to the service that provides
public access to some of the data collected by registrars.   It is not a
definition of the purpose of the data collected by the registrars in the
course of registering a domain name for their customers.

In response to the extensive community and Government input on the
definition of the purpose of WHOIS, the GNSO Council agrees to undertake
the following steps:

(1)  Any Council member who voted in favour of the definition may
provide a brief explanation of the reason for supporting the resolution
and their understanding of its meaning.

(2) The ICANN staff will provide a summary of the other interpretations
of the definition that have been expressed during the public comment
period, and subsequently in correspondence from the public and
Governments.

(3) The GNSO Council requests that the WHOIS task force continue with
their work as specified in the terms of reference taking into account
the recent input that has been provided.

(4)  The GNSO Council will take the Final Report (as specified in clause
9(c) of the GNSO PDP process) from the WHOIS task force after the task
force finishes its work on all the terms of reference, engage in further
dialogue with the Advisory Committees (including the GAC, SSAC and
ALAC), and consider improving the wording of the WHOIS service
definition so that it is broadly understandable.

Note that the WHOIS Task force will produce a Task Force Report (as
specified in clause 7(e) of the GNSO PDP process)
http://www.icann.org/general/archive-bylaws/bylaws-28feb06.htm#AnnexA 
later in 2006 that addresses all terms of reference. This report will be 
subject to a further public comment process, and the output of this 
public comment will be incorporated into the Final Report.
Note that the previous clause (3) in the motion posted on 13 July 2006
that related to the purposes for collecting data is now the subject of a
separate motion (see below)."



Motion 2 relating to the data that is collected by registrars
==============================================================

"The GNSO Council notes that, consistent with generally accepted privacy
principles, Registrars are required under clause 3.7.7.4 of the
Registrar Accreditation Agreement to provide notice to each new or
renewed Registered Name Holder stating:

(i) The purposes for which any Personal Data collected from the
applicant are intended;

(ii) The intended recipients or categories of recipients of the data
(including the Registry Operator and others who will receive the data
from Registry Operator);

(iii) Which data are obligatory and which data, if any, are voluntary;
and

(iv) How the Registered Name Holder or data subject can access and, if
necessary, rectify the data held about them.

To further understand the range of purposes for which data is intended,
the GNSO proposes the following steps:

(1) The ICANN staff will review a representative sample of registrar
agreements with Registered Name Holders, taking into account the issues
of geographical diversity and rule of law variances, to identify some of
the purposes for which registrars collect Personal Data in the course of
registering a domain name for their customers.

(2) The ICANN staff will review a representative sample of cctld
registry or cctld registrar agreements with registrants, taking into
account the issues of geographical diversity and rule of law variances,
to identify some of the purposes for which these organisations collect
Personal Data from registrants.

(3) The ICANN staff will summarise the current material that has
resulted from WHOIS discussions since 2002 that document the current
uses and abuses of the Personal Data that is currently made public
through the WHOIS service.

(4) Supported by the material produced in steps (1), (2) and (3) above,
the Council will undertake a dialogue with the ICANN Advisory
Committee's, such as the GAC, SSAC and ALAC, regarding the purposes for
collecting Personal Data, and discuss whether any policy development is
required in this area consistent with ICANN's mission and core values.

The dialogue should seek to examine and understand consumer protection,
privacy/data protection and law enforcement perspectives."

Kind regards,
Glen
--
Glen de Saint Géry
GNSO Secretariat - ICANN
gnso.secretariat[at]gnso.icann.org
http://gnso.icann.org