To answer the question “What steps are needed to protect data and privacy?” for each purpose, the the PDP should be informed by available inputs dealing with privacy.
The privacy sub-team considered this charter question, starting with key inputs identified in the PDP Issue Report and WG Charter, identified additional key inputs, and summarized them in the following document:
Summary of Key Inputs on Privacy - Final Template PDF
Those key inputs on privacy (including data protection) include:
– National Laws (2003- Working Party Letters (2003-2014Directive, 1995 |
International Working Group on Data Protection in Telecommunications and Media Documents |
- Common Position relating to Reverse Directories (Hong Kong, 15.04.1998) |
- Common Position on Privacy and Data Protection aspects of the Registration of Domain Names on the Internet (Crete, 4./5.05.2000) |
- Common Position on Privacy and Data Protection aspects of the Publication of Personal Data contained in publicly available documents on the Internet (Crete, 4./5.05.2000) |
- Common Position on Incorporation of telecommunications-specific principles in multilateral privacy agreements: Ten Commandments to protect Privacy in the Internet World (Berlin, 13/14.09.2000) |
- Common Position on data protection aspects in the Draft Convention on cyber-crime of the Council of Europe (Berlin, 13/14.09.2000) |
NORC Study of WHOIS Privacy/Proxy Prevalence (2010) |
EWG Recommendations for a Next-Generation RDS, especially - Section 6a, Data Protection Principles - Section 6b, Principles for Data Access by Law Enforcement - Section 7, Improving Registrant Privacy - Annex H, Model for Relay and Reveal |
EWG Research: Data Protection Considerations Applicable to Collection of gTLD Reg Data Memo |
EWG Research: WHOIS Privacy and Proxy Service Provider Practices Survey |
EWG Tutorial Pages 28-30 |
3-Phase Approach detailed on Page 9, Row 5 |
Human Rights Council - Report by the UN Special Rapporteur on the right to privacy |
Judgement on preliminary ruling under Article 267 TFEU from Audiencia Nacional (Spain) |
| Judgement on preliminary ruling under Article 267 TFEU from the Oberster Gerichtshof (Supreme Court, Austria) |
Judgment on preliminary ruling under Article 267 TFEU, from the Bundesgerichtshof (Federal Court of Justice, Germany) |
Africa Union Convention on Cybersecurity and Personal Data Protection |
National Laws or Court Rulings that may apply to gTLDs, including - U.S. Supreme Court Case - McIntyre v. Ohio Elections Commission, 514 U.S. 334 (1995) - The Constitution of the State of California (USA): Article 1, Section 1 - Massachusetts (USA) Right of Privacy, MGL c.214, s.1B - U.S. Judicial Redress Act of 2015 - U.S. Federal Communications Commission Proposed Rule FCC 16-39: Protecting the Privacy of Customers of Broadband and Other Telecommunications Services - Ghana Protection Act, 2012 - South Africa’s Act No. 4 of 2013: Protection of Personal Information Act |
Book: Global Tables of Data Privacy Laws and Bills (Greenleaf, 4rd Edition, January 2015) |
Article: Global data privacy laws 2015: 109 countries, with European laws now a minority (Greenleaf) |
WorldLII Database of National Data Privacy Legislation |
Pew Research Center Surveys on Privacy:
- Anonymity, Privacy, and Security Online (2013)
- What Americans Think About Privacy (2014)
- Teens, Social Media, and Privacy (2013) TRUSTe, Ipsos, and National Cybersecurity Alliance Survey on Privacy: - eMarketer Article: Who Do Great Britain's Internet Users Trust with Data? (2016) |
See also Public Comments on Issue Report for input to be considered by PDP WG
.