Background Documents

Relevant Procedures

• Annex A-1 GNSO Expedited Policy Development Process of the ICANN Bylaws

• Expedited GNSO PDP Manual

• GNSO Working Group Guidelines

EPDP Initiation and Charter

• EPDP Initiation Request

• EPDP Charter

Temporary Specification

• Temporary Specification for gTLD Registration Data

• Advisory Statement: Temporary Specification for gTLD Registration Data

• Interim Model for Compliance with ICANN Agreements and Policies in Relation to the European Union’s General Data Protection Regulation

• Summary of the Temporary Specification for gTLD Registration Data Webinar

Contracts

• 2013 Registrar Accreditation Agreement

• Base Registry Agreement – Updated 31 July 2017

• ICANN Temporary Specification Model Registry-Registrar Agreement Amendment Terms

EU Data Protection and Privacy Laws and Legal Analysis

• General Data Protection Regulation 2016/679 (GDPR)

• EC guidance on the direct application of the GDPR as of 25 May 2018

• 2018 reform of EU data protection rules

• EC guidance on data transfers outside the EU

• Working Paper on Privacy and Data Protection Issues with Regard to Registrant data and the WHOIS Directory at ICANN (Paris, 27/28.11.2017)

• GDPR Legal Analysis Memoranda and Related Inputs

• Responses to RDS PDP WG Questions on Data Protection and Privacy Laws

Purposes for Processing Registration Data

• Temporary Specification, Section 4:
  Lawfulness and Purposes of Processing gTLD Registration Data

• gTLD Registration Dataflow Matrix and Information

• Consolidated Outputs produced by RDS PDP Purpose Drafting Teams

• GAC Principles Regarding gTLD WHOIS Services

• A29 Opinion 03/2013 on purpose limitation

• EDPS Toolkit: Assessing the necessity of measures that limit the fundamental right to the protection of personal data (2017)

• EPDB Letter from Andrea Jelinek to Göran Marby [5 July 2018] and related correspondence

• Statement from the EDPB Regarding ICANN/WHOIS [May 2018]

Required Data Processing Activities

• Temporary Specification, Sections 5-7,
  Appendix B: Supplemental Data Escrow Requirements
  Appendix C: Data Processing Requirements

• EPDB Letter from Andrea Jelinek to Göran Marby [5 July 2018] and related correspondence

• EC guidance on data transfers outside the EU

• OECD Guidelines on the Protection of Privacy and Transborder Flows of Personal Data

• Transfer Policy

• Registrar Data Escrow Program

• Emergency Back-end Registry Operator FAQ and Providers

• RDAP Operational Profile for Registries and Registrars (2016)

• RDS/WHOIS Data Retention Specification Waiver and Discussion Document

Data Processing Terms

• Temporary Specification
  Section 5. Requirements Applicable to Registry Operators and Registrars
  Section 6. Requirements Applicable to Registry Operators Only
  Section 7. Requirements Applicable to Registrars Only

• EC guidance on GDPR Obligations

Other Consensus Policies

• Uniform Rapid Suspension (URS) Policy and URS Rules

• URS High Level Technical Requirements for Registries and Registrars

• Uniform Domain Name Dispute Resolution Policy and UDRP Rules

• Transfer Policy

• Registration Data Directory Services Consistent Labeling and Display Policy

• Privacy & Proxy Services Accreditation Issues (PPSAI) PDP and Final Report

System for Standardized Access to Non-Public Registration Data

• ICANN-Proposed Framework for Unified Access Model for Continued Access to Full WHOIS Data

• Unified Access Model for Continued Access to Full WHOIS Data - Comparison of Elements of Models Submitted by the Community – Working Draft

• A29 Opinion 2/2003 on the application of the data protection principles to the Whois directories- WP 76

• EWG Report Section 4c, RDS User Accreditation Principles

• EWG Research: RDS User Accreditation RFI

Correspondence 

• ICANN Org Data Protection/Privacy Correspondence

ICANN64 RDAP Sessions

• Part 1: How It Works: RDAP - 10 March 2019

• Part 2: Understanding RDAP and the Role it can Play in RDDS Policy - 13 March 2019