Data Privacy

Revision as of 22:21, 23 November 2021 by JP (talk | contribs)

Data privacy concerns the handling of sensitive information, and consumer rights to privacy of their personal information.

Legislation & Regulation edit

ICANN Policy and PDPs edit

  • The ICANN Board approved the Temporary Specification for gTLD Registration Data in response to conflicts between its existing registration policies and the GDPR.[1] The specification was intended to be supplanted within a year by consensus policy developed through an Expedited Policy Development Process (see next bullet). Under these terms, the Temporary Specification expired in May 2019.[2]
  • The Expedited Policy Development Process on the Temporary Specification for gTLD Registration Data (EPDP) is concerned with enabling the provision of registration data while maintaining compliance with data protection laws. The EPDP was broken into three phases (Phase 1, Phase 2, and Phase 2A). While all of the phases have resulted in final reports to the board, the implementation of policy resulting from the EPDP is ongoing as of December 2021.
  • As part of Phase 1 of the EPDP, the Interim Registration Data Policy was approved by the board in May 2019.[3] The interim policy requires registries and registrars to comply with the Temporary Specification until the Data Registration Policy recommended by EPDP Phase 1 is implemented.[2] It was recommended by the EPDP Phase 1 team that the Data Registration Policy be rolled out by February 2020.[4]

Privacy Automation edit

Organizations & Groups edit

Global edit

Regional edit

Overlaps with Cybersecurity edit

Data security is a central theme of privacy regulations. In addition to codifying an expectation of privacy, most regulations set minimum standards for the treatment, uses, and protection of personal information. Many regulations also specify how companies and organizations should deal with data breaches. Personal information, particularly personally identifying information or financial information is a prime target of cyber criminals.

References edit

  1. ICANN.org - Temporary Specification for gTLD Registration Data, effective as of May 27, 2018
  2. 2.0 2.1 ICANN.org - Interim Registration Data Policy, May 17, 2019
  3. ICANN.org - gTLD Registries and Registrars Required to Implement New Interim Registration Data Policy, May 17, 2019
  4. Cite error: Invalid <ref> tag; no text was provided for refs named interimblog