2024-11-09 Transfer Policy Review PDP Working Group - ICANN81

Agenda:

1. Welcome and Chair Updates
2. Continue Discussion of Recs 25-28 (Change of Registrant Data) using Public Comment Review Tool [docs.google.com]
3. Review Draft Revisions to Recs 3, 12-24, 25-28 using Public Comment Review Tool [docs.google.com]
4. Begin Discussion of Recs 29-33 using Public Comment Review Tool [docs.google.com]
5. AOB

Documents: 

1. Link to Public Comment Review Tool (PCRT):https://docs.google.com/spreadsheets/d/1lyX27uECA5bNKRw-UOIH2bAaTRvec1YkX1EKjtHCsAQ/edit?usp=sharing [docs.google.com]
2. Link to Rec Drafting Guide: https://docs.google.com/document/d/1YODFe-aZOi1AQ3c8f2-y8MXtcUU4PjzsByFzk-dpAD4/edit?usp=sharing [docs.google.com]

Action Item: Assignment 5 – Rec #34 – 47 (Group 2 ICANN-approved transfers + BTAPPA)       - Deadline:11/25/2024

1. Welcome and Chair Updates
2. Recommendation 27 (Change of Registrant Data Notifications)
   1. 27.2 – Time Period for Registrant Actions Discussion centered on whether to define a time limit for registrants to act on notifications regarding unauthorized changes. Adding a time constraint might unnecessarily restrict registrant flexibility. A time frame could prevent outdated or irrelevant disputes. No need to add a specific time limit.
   2. 27.5 – Material Changes and Notifications Comment: Clarify if changes in phone numbers and addresses, in conjunction with name/organization changes, must trigger notifications. Concerns raised about mixed language (“may” vs. “must”) within the recommendation. Agreed to refine language, possibly referencing existing definitions from Recommendation 25.
   3. 27.6 – Consolidated Notifications Comments addressed the potential issue of registrants receiving overwhelming notifications for bulk domain updates. Security concerns raised about displaying all affected domains in notifications, especially for SMS alerts with character limits. WG members suggested consolidated notifications should be allowed. Specific details (e.g., list of domains) should be accessible through secure systems rather than included in notifications.
   4. 27.8 – Participants suggested clearer wording on remedial action. Chair suggested to review RAA for overlap with existing requirements.
3. Recommendation 28
   1. Participants discussed concerns about complexity and risk of compromised accounts enabling opt-outs.
   2. Security for Opt-Outs Suggestion to mandate two-factor authentication (2FA) for registrants opting out of notifications.