Draft RIPE Code of Conduct: Process and Consequences v2

Status of This Document

This is a draft document prepared by the Code of Conduct Task Force for review by the RIPE community. It is based on similar documents developed by the Python and Mozilla communities.

Introduction

This document describes the process to be followed by the Code of Conduct (CoC) Team when handling reports. The same process applies equally to everyone who participates within the RIPE community.

How the Code of Conduct Team Relates to the Rest of the RIPE Community

Everyone who organises activities or fills a role within the RIPE community has a responsibility to make sure that people understand what is appropriate behaviour. However, only the CoC Team is responsible for handling reports and making decisions about outcomes.

Working Group chairs are responsible for their respective mailing lists and WG sessions in a proactive way. In contrast, the role of the CoC Team is a reactive one – it will only act once a report has been submitted. If a WG chair thinks someone has breached the CoC in one of their sessions, they will report this to the CoC Team. The WG Chair Collective and the CoC Team will liaise as needed and the two groups will maintain a cooperative relationship.

Process Steps

This section describes the steps the CoC Team will take when handling reports.

1. Report is Submitted

People can submit reports [electronically] or by speaking with a member of the CoC Team in-person at an event. RIPE NCC staff can also help people to contact the CoC Team if needed. 

When someone makes a report, they will get confirmation that it has been received and is being reviewed by the CoC Team. When a report is made in-person, a member of the CoC Team will take notes and make sure it is properly entered into the system.

Electronic reports can also be submitted anonymously. In this case, the person making the report will not receive a confirmation or be notified of any outcomes.

The member of the CoC Team who receives a report will be responsible for forming an assessment group to handle the report. The purpose of this triage step is to make sure the report is not seen by more people than necessary.

2. Assessment Group is Formed

The assessment group will be formed within one week of a report being made. In practice, this will often need to happen much faster, especially during an event. This smaller group should consist of at least two members of the CoC Team and one RIPE NCC staff member who is appropriately qualified. The member of the CoC Team who initially received the report would preferably be one of the members of this group.

Before assessing a report, CoC Team members will consider whether there are potential conflicts of interest. Reviewing the names of the people involved should be enough to determine whether this is the case. Any members of the assessment group who see a potential conflict of interest will recuse themselves so that someone else can take their place.

3. Report is Assessed

Depending on the nature of the report, elements of the assessment process may include (but are not limited to):

• Contacting the subject of the report to hear their side of the story
• Obtaining reports from witnesses
• Reviewing any relevant materials (photos, videos, screenshots, messages, emails, etc)
• Consultation with others as appropriate
• Group discussion and assessment of the evidence

The role of the RIPE NCC staff member in the group is to provide administrative and legal support to the volunteers on the CoC Team as needed. Members of the CoC Team will do their best to be discreet when assessing reports.

4. Decision is Made

Once the assessment group feels that it properly understands the reported incident, it will decide whether this represents a breach of the Code of Conduct. If the group believes that a breach has taken place, it will agree on a course of action.

When deciding on appropriate outcomes, the group will consider a range of factors, such as the severity of the breach, its impact on others, any past incidents involving the same person, and the potential for future harm to members of the community.

Actions taken by the CoC Team can be understood as ‘minor’ or ‘serious’ outcomes. An example of a minor outcome would be giving someone a warning and asking them not to repeat certain behaviour. Serious outcomes are where the RIPE NCC needs to implement an action, such as revoking someone’s RIPE Meeting badge, banning them from future meetings, or removing them from a mailing list. 

In cases where the group believes that serious outcomes should be applied, such as expelling someone from a RIPE Meeting, it may notify or seek input from other parties, such as the RIPE NCC’s Events Team or Legal Department. However, while it might seek input from other parties, only the assessment group is responsible for making a final decision.

If the group decides that serious outcomes are required, it will inform the RIPE Chair Team and the RIPE NCC before any next steps are taken.

Once the group has made its decision, the relevant parties will be notified of the outcome as appropriate. In all cases, both the person who made the report and the subject of the report should be informed. Where possible, this notification should happen before any outcomes are applied. 

5. Outcomes are Applied

Once the assessment group has decided on outcomes, it will arrange for them to be applied as soon as is practical and appropriate. Depending on the outcome, the RIPE NCC may need to take certain actions and the staff member who supported the assessment group will be responsible for making sure this is done. They will report back to the CoC Team as appropriate.

People who dispute the outcome of a report can contact the CoC Team to make an appeal. An appeal must be initiated within one month of being informed of the outcome. In this instance, a different group of CoC Team members must review the case. The request for an appeal will probably not prevent certain consequences from being applied. For example, someone who is ordered to leave the RIPE Meeting will not be able to remain at the meeting while their appeal is being considered.

6. Decision is Recorded 

The RIPE NCC will maintain a record of all assessments made by the CoC Team. Any personal data contained in these assessments will be stored and processed according to the relevant European data protection regulations.

Data Protection Information 

Assessments by the CoC Team will contain the personal data (for example: name, email and/or phone number) of the following people: 

• The person named in the report 
• The person who submitted the report
• Any witnesses or others included in the report

Personal data will be processed for the following purposes:

• For the RIPE NCC to maintain records that allow it to implement actions as instructed by the CoC Team
• For the CoC Team to consider past behaviour and context when investigating reports 
• For the CoC Team to inform the relevant parties of any outcomes 
• To inform the relevant parties and request additional information in the event of an appeal 

In line with the definitions of ‘minor’ and ‘serious’ outcomes (see section 4 above), the personal data of everyone included in an assessment will be retained for the following periods: 

• 18 months for minor outcomes or reports that are not considered a breach of the CoC.
• 36 months for serious outcomes. If the RIPE NCC needs to apply a ban or similar outcome for longer than 36 months, it will retain only the data of the person named in the report for the corresponding period.

All personal data will be removed from assessments once the relevant periods have expired. Assessments can then be stored indefinitely. This will allow the CoC Team to identify trends and review actions taken in previous cases. 

Statistics and Reporting

The CoC Team will share anonymised statistics and update the RIPE community on its work and identify areas for improvement at least once each year. Statistics might include the number of reports submitted over a certain period, categories of reports, number of reports that were valid, and a summary of actions taken on the basis of reports. 

Potential Consequences of Breaching the CoC

This section outlines some of the possible outcomes that may result from breaching the RIPE Code of Conduct. It is important to be clear that these are all examples and are not definitive lists. This is especially the case as not every form of participation is described, such as interactions via instant messaging or at virtual events. Both lists are ordered on a scale from least to most serious.

When deciding where on this scale a specific case belongs, the Code of Conduct Team will consider a number of different factors, such as whether that person has done anything similar in the past and how they have affected others. The CoC Team are empowered by the RIPE community to apply their best judgement when selecting a consequence for an action.

Meeting Sessions and Social Events

1. Told not to repeat a certain kind of behaviour
2. Removed from the room for a period of time to allow emotions to settle
3. Removed from the room for the remainder of a session
4. Removed from the meeting venue for the day
5. Removed from the social event for the remainder of the event
6. Removed from the meeting venue for the remainder of the meeting
7. Not allowed to attend future events for a period of time
8. Permanently banned from attending RIPE events

Note: in the case of virtual events, consequences would roughly correspond to their real-world equivalent. For example, someone might be asked to leave a conference call to calm down rather than leaving a physical room.

Mailing List

1. Publicly told not to repeat a kind of post
2. Temporary ban from posting to the list
3. Permanent ban from posting to the list
4. Temporary ban from posting to any RIPE mailing list
5. Permanent ban from posting to any RIPE mailing list

Loss of Community Role

The procedures to remove people from various roles within the community are covered in the relevant RIPE Documents. The CoC Team does not have any additional powers in this regard, and so this is not an outcome it can apply. However, it may be the case that a person is no longer able to carry out their role after other consequences have been applied following a serious breach of the CoC, such as being banned from mailing lists or prevented from attending RIPE events.

Appendix - About the Code of Conduct TF

The Code of Conduct Task Force was formed after RIPE 80 to finalise the updated RIPE Code of Conduct documents. It was chartered to create three documents:

1. An updated RIPE Code of Conduct (now published as ripe-766)
2. A process for selecting the Code of Conduct Team
3. This document

The TF has four community members and is supported by two RIPE NCC staff members. The TF’s web page provides more details and links to mailing list archives, where meeting minutes are published.