Relevant Procedures
- Annex A-1 GNSO Expedited Policy Development Process of the ICANN Bylaws
- Expedited GNSO PDP Manual
- GNSO Working Group Guidelines
EPDP Initiation and Charter
Temporary Specification
- Temporary Specification for gTLD Registration Data
- Advisory Statement: Temporary Specification for gTLD Registration Data
- Interim Model for Compliance with ICANN Agreements and Policies in Relation to the European Union’s General Data Protection Regulation
- Summary of the Temporary Specification for gTLD Registration Data Webinar
Contracts
- 2013 Registrar Accreditation Agreement
- Base Registry Agreement – Updated 31 July 2017
- ICANN Temporary Specification Model Registry-Registrar Agreement Amendment Terms
EU Data Protection and Privacy Laws and Legal Analysis
- General Data Protection Regulation 2016/679 (GDPR)
- EC guidance on the direct application of the GDPR as of 25 May 2018
- 2018 reform of EU data protection rules
- EC guidance on data transfers outside the EU
- Working Paper on Privacy and Data Protection Issues with Regard to Registrant data and the WHOIS Directory at ICANN (Paris, 27/28.11.2017)
- GDPR Legal Analysis Memoranda and Related Inputs
- Responses to RDS PDP WG Questions on Data Protection and Privacy Laws
Purposes for Processing Registration Data
- Temporary Specification, Section 4:
Lawfulness and Purposes of Processing gTLD Registration Data - gTLD Registration Dataflow Matrix and Information
- Consolidated Outputs produced by RDS PDP Purpose Drafting Teams
- GAC Principles Regarding gTLD WHOIS Services
- A29 Opinion 03/2013 on purpose limitation
- EDPS Toolkit: Assessing the necessity of measures that limit the fundamental right to the protection of personal data (2017)
- EPDB Letter from Andrea Jelinek to Göran Marby [5 July 2018] and related correspondence
- Statement from the EDPB Regarding ICANN/WHOIS [May 2018]
Required Data Processing Activities
- Temporary Specification, Sections 5-7,
Appendix B: Supplemental Data Escrow Requirements
Appendix C: Data Processing Requirements - EPDB Letter from Andrea Jelinek to Göran Marby [5 July 2018] and related correspondence
- EC guidance on data transfers outside the EU
- OECD Guidelines on the Protection of Privacy and Transborder Flows of Personal Data
- Transfer Policy
- Registrar Data Escrow Program
- Emergency Back-end Registry Operator FAQ and Providers
- RDAP Operational Profile for Registries and Registrars (2016)
- RDS/WHOIS Data Retention Specification Waiver and Discussion Document
Data Processing Terms
- Temporary Specification
Section 5. Requirements Applicable to Registry Operators and Registrars
Section 6. Requirements Applicable to Registry Operators Only
Section 7. Requirements Applicable to Registrars Only - EC guidance on GDPR Obligations
Other Consensus Policies
- Uniform Rapid Suspension (URS) Policy and URS Rules
- URS High Level Technical Requirements for Registries and Registrars
- Uniform Domain Name Dispute Resolution Policy and UDRP Rules
- Transfer Policy
- Registration Data Directory Services Consistent Labeling and Display Policy
- Privacy & Proxy Services Accreditation Issues (PPSAI) PDP and Final Report
System for Standardized Access to Non-Public Registration Data
- ICANN-Proposed Framework for Unified Access Model for Continued Access to Full WHOIS Data
- Unified Access Model for Continued Access to Full WHOIS Data - Comparison of Elements of Models Submitted by the Community – Working Draft
- A29 Opinion 2/2003 on the application of the data protection principles to the Whois directories- WP 76
- EWG Report Section 4c, RDS User Accreditation Principles
- EWG Research: RDS User Accreditation RFI
