<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 12 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"Trebuchet MS";
panose-1:2 11 6 3 2 2 2 2 2 4;}
@font-face
{font-family:Georgia;
panose-1:2 4 5 2 5 4 5 2 3 3;}
@font-face
{font-family:"Arial Narrow";
panose-1:2 11 6 6 2 2 2 3 2 4;}
@font-face
{font-family:inherit;
panose-1:0 0 0 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
h1
{mso-style-priority:9;
mso-style-link:"Heading 1 Char";
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:24.0pt;
font-family:"Times New Roman","serif";
font-weight:bold;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.Heading1Char
{mso-style-name:"Heading 1 Char";
mso-style-priority:9;
mso-style-link:"Heading 1";
font-family:"Cambria","serif";
color:#365F91;
font-weight:bold;}
span.gmaildefault
{mso-style-name:gmail_default;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1632176948;
mso-list-template-ids:-281876788;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:36.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
ol
{margin-bottom:0cm;}
ul
{margin-bottom:0cm;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-family:"Calibri","sans-serif";color:#1F497D'>Dear Dave,<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Calibri","sans-serif";color:#1F497D'>I agree that there are variations in who advocates for what within the US government. And that official US policy is not necessarily very clear.<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Calibri","sans-serif";color:#1F497D'>Best,<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Calibri","sans-serif";color:#1F497D'>Richard<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><div style='border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt'><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> Dave Burstein [mailto:daveb@dslprime.com] <br><b>Sent:</b> mardi, 17. septembre 2019 11:02<br><b>To:</b> Richard Hill<br><b>Cc:</b> Christine Saegesser; ISOC Chapter Delegates<br><b>Subject:</b> Re: [Chapter-delegates] ISOC nominees must discuss ISOC's exclusion, financial support for chapters, board independence, finding waste<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><div><div><div><p class=MsoNormal><span style='font-family:"Trebuchet MS","sans-serif"'>Richard<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Trebuchet MS","sans-serif"'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Trebuchet MS","sans-serif"'>Re: I</span><span style='font-family:"Calibri","sans-serif";color:#1F497D'>SOC policies are not aligned with US policies: encryption and data protection/privacy. </span><span style='font-family:"Trebuchet MS","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Calibri","sans-serif";color:#1F497D'>Actually, the US is still allowing encryption and different officials have made different comments. As recently as June 2019, some in the US gov was considering blocking encryption but others effectively blocked them so far. </span><o:p></o:p></p></div><h1 style='margin:0cm;margin-bottom:.0001pt;box-sizing:border-box;letter-spacing:-0.02rem'><span style='font-size:10.0pt;font-family:"Arial Narrow","sans-serif";color:black'><a href="https://www.politico.com/story/2019/06/27/trump-officials-weigh-encryption-crackdown-1385306">Trump officials weigh encryption crackdown</a></span><span class=gmaildefault><span style='font-size:10.0pt;font-family:"Trebuchet MS","sans-serif";color:black'> </span></span><span class=gmaildefault><span style='font-size:10.0pt;font-family:"Trebuchet MS","sans-serif";color:black;font-weight:normal'>"</span></span><span style='font-size:10.0pt;font-family:"Arial Narrow","sans-serif";color:black;font-weight:normal'>DHS is internally divided.</span><span class=gmaildefault><span style='font-size:10.0pt;font-family:"Trebuchet MS","sans-serif";color:black;font-weight:normal'>"</span></span><span style='font-size:10.0pt;font-family:"Georgia","serif";color:black'> </span><span style='font-family:"Arial Narrow","sans-serif";color:black'><o:p></o:p></span></h1><div><p class=MsoNormal><span style='font-family:"Calibri","sans-serif";color:#1F497D'>There remain some conservative republicans who join with liberals to block legislation so far. I could have encrypted this email to you. </span><o:p></o:p></p></div><div><p class=MsoNormal><span style='font-family:"Calibri","sans-serif";color:#1F497D'>============</span><o:p></o:p></p></div><div><p class=MsoNormal><span style='font-family:"Calibri","sans-serif";color:#1F497D'>On privacy, again US (and ISOC) have deliberately ambiguous policies. </span><o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal><span style='font-family:"Calibri","sans-serif";color:#1F497D'>The US government under both Obama and Trump supported and signed "</span>the Organisation for Economic Co-operation and Development (OECD) 2013 Privacy Guidelines," (below) a typical political document that has not changed things. It's as close to an official US position on privacy as I could find. Richard, does ISOC strongly disagree? <o:p></o:p></p></div><div><p class=MsoNormal> <o:p></o:p></p></div><div><p class=MsoNormal>Every Trump Republican I've read is strongly in favour of privacy, including some close to ISOC. <span style='font-family:"Calibri","sans-serif";color:#1F497D'>From the Trump Presidential platform</span><o:p></o:p></p></div><div><p class=MsoNormal><span style='font-family:"Calibri","sans-serif";color:#1F497D'>"</span>We intend to advance policies that protect data privacy" "In recent years, technology companies have responded to market demand for products and services that protect the privacy of customers through increasingly sophisticated encryption technology. These increased privacy protections have become crucial to the digital economy." "We applaud the advance of technology in electronic medical records while affirming patient privacy and ownership of personal health information"<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>To make a difference on privacy, we need to get past the hypocrisy even if that will anger our government and corporate allies. What we have is a lot of talk and pr, not action.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>I just read <a href="https://www.internetsociety.org/policybriefs/privacy/" target="_blank">https://www.internetsociety.org/policybriefs/privacy/</a> and some of ISOC's other statements. They do not read very differently than the official government statements. High order principles that everyone can agree with but almost no specific government or private/collective actions that would make much difference. Not merely are they so vague as to be meaningless, <b>it actually turns out ISOC's official policy is based on on the US government approved OECD </b><o:p></o:p></p></div><div><p class=MsoNormal><a href="https://www.internetsociety.org/policybriefs/privacy/"><br></a><o:p></o:p></p></div><div><p class=MsoNormal><a href="https://www.internetsociety.org/policybriefs/privacy/">Quote</a><o:p></o:p></p></div><div><p style='mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:22.5pt;margin-left:0cm;vertical-align:baseline;box-sizing:border-box'><span style='font-size:16.0pt;font-family:"Helvetica","sans-serif";color:#0C1C2C'>The following principles are derived from the Organisation for Economic Co-operation and Development (OECD) 2013 Privacy Guidelines, and are widely recognized as providing a good foundation for developing online privacy policies and practices:<o:p></o:p></span></p><p class=MsoNormal style='margin-left:30.0pt;text-indent:-18.0pt;mso-list:l0 level1 lfo1;vertical-align:baseline'><![if !supportLists]><span style='font-size:10.0pt;font-family:Symbol;color:#0C1C2C'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><b><span style='font-size:16.0pt;font-family:"inherit","serif";color:#0C1C2C;border:none windowtext 1.0pt;padding:0cm'>Collection limitation</span></b><span style='font-size:16.0pt;font-family:"Helvetica","sans-serif";color:#0C1C2C'>. There should be limits to the collection of personal data. Any such data should be obtained by lawful and fair means and, where appropriate, with the knowledge or consent of the data subject.<o:p></o:p></span></p><p class=MsoNormal style='margin-left:30.0pt;text-indent:-18.0pt;mso-list:l0 level1 lfo1;vertical-align:baseline'><![if !supportLists]><span style='font-size:10.0pt;font-family:Symbol;color:#0C1C2C'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><b><span style='font-size:16.0pt;font-family:"inherit","serif";color:#0C1C2C;border:none windowtext 1.0pt;padding:0cm'>Data quality</span></b><span style='font-size:16.0pt;font-family:"Helvetica","sans-serif";color:#0C1C2C'>. Personal data should be relevant to the purposes for which they are to be used, and, to the extent necessary for those purposes, should be accurate, complete, and kept up-to-date.<o:p></o:p></span></p><p class=MsoNormal style='margin-left:30.0pt;text-indent:-18.0pt;mso-list:l0 level1 lfo1;vertical-align:baseline'><![if !supportLists]><span style='font-size:10.0pt;font-family:Symbol;color:#0C1C2C'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><b><span style='font-size:16.0pt;font-family:"inherit","serif";color:#0C1C2C;border:none windowtext 1.0pt;padding:0cm'>Purpose specification</span></b><span style='font-size:16.0pt;font-family:"Helvetica","sans-serif";color:#0C1C2C'>. The purposes for which personal data is collected should be specified. The use should be limited to those purposes or other purposes that are not incompatible.<o:p></o:p></span></p><p class=MsoNormal style='margin-left:30.0pt;text-indent:-18.0pt;mso-list:l0 level1 lfo1;vertical-align:baseline'><![if !supportLists]><span style='font-size:10.0pt;font-family:Symbol;color:#0C1C2C'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><b><span style='font-size:16.0pt;font-family:"inherit","serif";color:#0C1C2C;border:none windowtext 1.0pt;padding:0cm'>Use limitation</span></b><span style='font-size:16.0pt;font-family:"Helvetica","sans-serif";color:#0C1C2C'>. Personal data should not be disclosed, made available, or used for other purposes except with the consent of the individual or where authorised by law.<o:p></o:p></span></p><p class=MsoNormal style='margin-left:30.0pt;text-indent:-18.0pt;mso-list:l0 level1 lfo1;vertical-align:baseline'><![if !supportLists]><span style='font-size:10.0pt;font-family:Symbol;color:#0C1C2C'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><b><span style='font-size:16.0pt;font-family:"inherit","serif";color:#0C1C2C;border:none windowtext 1.0pt;padding:0cm'>Security safeguards</span></b><span style='font-size:16.0pt;font-family:"Helvetica","sans-serif";color:#0C1C2C'>. Personal data should be protected by reasonable security safeguards.<o:p></o:p></span></p><p class=MsoNormal style='margin-left:30.0pt;text-indent:-18.0pt;mso-list:l0 level1 lfo1;vertical-align:baseline'><![if !supportLists]><span style='font-size:10.0pt;font-family:Symbol;color:#0C1C2C'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><b><span style='font-size:16.0pt;font-family:"inherit","serif";color:#0C1C2C;border:none windowtext 1.0pt;padding:0cm'>Openness</span></b><span style='font-size:16.0pt;font-family:"Helvetica","sans-serif";color:#0C1C2C'>. There should be a general policy of openness about developments, practices, and policies with respect to personal data.<o:p></o:p></span></p><p class=MsoNormal style='margin-left:30.0pt;text-indent:-18.0pt;mso-list:l0 level1 lfo1;vertical-align:baseline'><![if !supportLists]><span style='font-size:10.0pt;font-family:Symbol;color:#0C1C2C'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><b><span style='font-size:16.0pt;font-family:"inherit","serif";color:#0C1C2C;border:none windowtext 1.0pt;padding:0cm'>Individual participation</span></b><span style='font-size:16.0pt;font-family:"Helvetica","sans-serif";color:#0C1C2C'>. Individuals should have the right to obtain information about personal data held by others and to have it erased, rectified, completed, or amended, as appropriate.<o:p></o:p></span></p><p class=MsoNormal style='margin-left:30.0pt;text-indent:-18.0pt;mso-list:l0 level1 lfo1;vertical-align:baseline'><![if !supportLists]><span style='font-size:10.0pt;font-family:Symbol;color:#0C1C2C'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><b><span style='font-size:16.0pt;font-family:"inherit","serif";color:#0C1C2C;border:none windowtext 1.0pt;padding:0cm'>Accountability</span></b><span style='font-size:16.0pt;font-family:"Helvetica","sans-serif";color:#0C1C2C'>. Those who collect personal data should be accountable for complying with the principles.<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Trebuchet MS","sans-serif"'><o:p> </o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><div><div><p class=MsoNormal>On Tue, Sep 17, 2019 at 3:55 AM Richard Hill via Chapter-delegates <<a href="mailto:chapter-delegates@elists.isoc.org" target="_blank">chapter-delegates@elists.isoc.org</a>> wrote:<o:p></o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm'><div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-family:"Calibri","sans-serif";color:#1F497D'>Dear Dave,</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-family:"Calibri","sans-serif";color:#1F497D'>While I agree with the gist of what you say below, I can think of at least two instances in which ISOC policies are not aligned with US policies: encryption and data protection/privacy.</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-family:"Calibri","sans-serif";color:#1F497D'>Best,</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-family:"Calibri","sans-serif";color:#1F497D'>Richard</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><o:p></o:p></p></div></div></blockquote></div></div></div></div></body></html>