<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Ant,</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
My take on this...</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<div>
<div>
<div><span><span>1: I think it would be good to keep a record of everything, yes. Securely and for the time periods mentioned, for that reason.</span><br>
</span></div>
</div>
<div><span><span><br>
</span></span></div>
<div><span><span>2: I strongly suspect the summary reports would be sufficient, because once the decision has been made the other evidence shouldn't be needed in an "original" form. Obviously time would have to be given to allow for an appeal or whatever, but
certainly I don't think it would be needed for the longer term.</span></span></div>
<div><span><span><br>
</span></span></div>
<div><span><span>Thanks,</span></span></div>
<div><span><span><br>
</span></span></div>
<div><span><span>Brian</span></span></div>
<div><br>
</div>
</div>
</div>
<div>
<div id="Signature">
<div>
<div></div>
<div id="divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:#000000; font-family:Calibri,Helvetica,sans-serif">
<p style="margin-top:0px; margin-bottom:0px">Brian Nisbet (he/him)</p>
<p style="margin-top:0px; margin-bottom:0px">Service Operations Manager</p>
<p style="margin-top:0px; margin-bottom:0px">HEAnet CLG, Ireland's National Education and Research Network</p>
<p style="margin-top:0px; margin-bottom:0px">1st Floor, 5 George's Dock, IFSC, Dublin D01 X8N7, Ireland</p>
<p style="margin-top:0px; margin-bottom:0px">+35316609040 brian.nisbet@heanet.ie www.heanet.ie</p>
<p style="margin-top:0px; margin-bottom:0px">Registered in Ireland, No. 275301. CRA No. 20036270 </p>
</div>
</div>
</div>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> coc-tf <coc-tf-bounces@ripe.net> on behalf of Antony Gollan <agollan@ripe.net><br>
<b>Sent:</b> Wednesday 6 April 2022 10:32<br>
<b>To:</b> coc-tf@ripe.net <coc-tf@ripe.net><br>
<b>Subject:</b> Re: [coc-tf] CoC Process and Next Steps</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">CAUTION[External]: This email originated from outside of the organisation. Do not click on links or open the attachments unless you recognise the sender and know the content is safe.<br>
<br>
<br>
Hi Brian, all,<br>
<br>
After getting some initial feedback from Legal, I have a couple of<br>
questions:<br>
<br>
1. From an earlier discussion, I think we said we might want to have<br>
some record of people who were the subject of a report but didn't quite<br>
cross the threshold for actions being applied.<br>
<br>
This was so the CoC Team could be aware of people who repeatedly go<br>
right up to the line without actually crossing it. Perhaps after a<br>
number of repeat reports, the CoC Team might eventually apply actions<br>
that it wouldn't have if it was an isolated case.<br>
<br>
With that in mind, would it be good to include in a line that ALL<br>
reports will be kept for a minimum period? I'm thinking this could be<br>
two RIPE Meetings (whether this ends up being 12 or 18 months) -<br>
provided this is okay in terms of the legal stuff.<br>
<br>
2. Legal has also asked whether we would keep any supporting information<br>
used for investigations (photos, video, messages) and advised that we<br>
might want to clarify this in the text.<br>
<br>
My initial thought is that once the CoC Team has finished assessing a<br>
report, it could archive a summary its decision and delete all of the<br>
supporting information - though perhaps this summary could outline what<br>
kind of evidence was used to support the CoC Team's decision.<br>
<br>
Thoughts?<br>
<br>
Cheers<br>
<br>
Ant<br>
<br>
On 06/04/2022 11:00, Brian Nisbet wrote:<br>
> Thanks Ant.<br>
><br>
> Obviously we'll discuss more on Thursday, but I think I get your current<br>
> thinking on this.<br>
><br>
> Brian<br>
><br>
> Brian Nisbet (he/him)<br>
><br>
> Service Operations Manager<br>
><br>
> HEAnet CLG, Ireland's National Education and Research Network<br>
><br>
> 1st Floor, 5 George's Dock, IFSC, Dublin D01 X8N7, Ireland<br>
><br>
> +35316609040 brian.nisbet@heanet.ie <a href="http://www.heanet.ie">www.heanet.ie</a><br>
><br>
> Registered in Ireland, No. 275301. CRA No. 20036270<br>
><br>
> ------------------------------------------------------------------------<br>
> *From:* coc-tf <coc-tf-bounces@ripe.net> on behalf of Antony Gollan<br>
> <agollan@ripe.net><br>
> *Sent:* Monday 4 April 2022 10:08<br>
> *To:* coc-tf@ripe.net <coc-tf@ripe.net><br>
> *Subject:* Re: [coc-tf] CoC Process and Next Steps<br>
> CAUTION[External]: This email originated from outside of the<br>
> organisation. Do not click on links or open the attachments unless you<br>
> recognise the sender and know the content is safe.<br>
><br>
><br>
> Hi Brian,<br>
><br>
> I've asked Legal to look at whether 18/36 months can work - I think this<br>
> ultimately boils down to whether we can provide a legally-acceptable<br>
> rationale for whatever time periods we give - and this seems to make<br>
> sense to me.<br>
><br>
> On the RIPE Chair team point, note that the current wording in the draft<br>
> (v5) is:<br>
><br>
> >If the group decides that strong actions should be taken, it will<br>
> inform the RIPE Chair Team and the RIPE NCC before they are implemented.<br>
><br>
> Also agree that we probably don't want to get stuck in the weeds in<br>
> terms of defining minor/major. I wonder if we could simply think of<br>
> "major" in terms of "does the RIPE NCC have to implement something?" (a<br>
> mailing list ban, taking someone's meeting badge, etc).<br>
><br>
> Looking at the consequences in the current draft, that would look like<br>
> this (below). At first glance this seems about right - if someone was<br>
> kicked out of the RIPE Meeting for a day, you'd probably want something<br>
> like a 24-36 month "probation period" (in terms of having a record of<br>
> that event).<br>
><br>
> Cheers<br>
><br>
> Ant<br>
><br>
> ***<br>
><br>
> Meeting Sessions and Social Events<br>
><br>
> MINOR<br>
> 1. Asked to apologise<br>
> 2. Removed from the room for a period of time to allow emotions to settle<br>
> 3. Removed from the room for the remainder of a session<br>
><br>
> MAJOR<br>
> 4. Removed from the meeting venue for the day<br>
> 5. Removed from the social event for the remainder of the event<br>
> 6. Removed from the meeting venue for the remainder of the meeting<br>
> 7. Not allowed to attend future events for a period of time<br>
> 8. Permanently banned from attending RIPE events<br>
><br>
> Mailing List<br>
><br>
> MINOR<br>
> 1. Asked to apologise<br>
> 2. Publicly told not to repeat a kind of post<br>
><br>
> MAJOR<br>
> 3. Temporary ban from posting to the list<br>
> 4. Permanent ban from posting to the list<br>
> 5. Temporary ban from posting to any RIPE mailing list<br>
> 6. Permanent ban from posting to any RIPE mailing list<br>
><br>
><br>
> On 04/04/2022 10:38, Brian Nisbet wrote:<br>
>> Leo,<br>
>><br>
>> On timings... my justification here is that the dates of meetings aren't<br>
>> set, so there's a twofold problem, really. I would like the record to be<br>
>> kept for at least the two meetings *following* the event at which the<br>
>> CoC was breached (and yes, I'm assuming that most of our breaches will<br>
>> happen at meetings). Furthermore, if one autumn meeting happens in<br>
>> October and the next in November, that means the information may, in<br>
>> some circumstances, only be held for one meeting.<br>
>><br>
>> On the major and minor, I'm not saying we should determine them, rather<br>
>> I'm saying that classification in general might not be a great idea.<br>
>><br>
>> Brian<br>
>><br>
>> Brian Nisbet (he/him)<br>
>><br>
>> Service Operations Manager<br>
>><br>
>> HEAnet CLG, Ireland's National Education and Research Network<br>
>><br>
>> 1st Floor, 5 George's Dock, IFSC, Dublin D01 X8N7, Ireland<br>
>><br>
>> +35316609040 brian.nisbet@heanet.ie <a href="http://www.heanet.ie">www.heanet.ie</a> <<a href="http://www.heanet.ie">http://www.heanet.ie</a>><br>
>><br>
>> Registered in Ireland, No. 275301. CRA No. 20036270<br>
>><br>
>> ------------------------------------------------------------------------<br>
>> *From:* Leo Vegoda <leo@vegoda.org><br>
>> *Sent:* Friday 1 April 2022 15:26<br>
>> *To:* Brian Nisbet <brian.nisbet@heanet.ie><br>
>> *Cc:* coc-tf@ripe.net <coc-tf@ripe.net>; chair-team@ripe.net<br>
>> <chair-team@ripe.net><br>
>> *Subject:* Re: [coc-tf] CoC Process and Next Steps<br>
>> CAUTION[External]: This email originated from outside of the<br>
>> organisation. Do not click on links or open the attachments unless you<br>
>> recognise the sender and know the content is safe.<br>
>><br>
>><br>
>> Hi Brian,<br>
>><br>
>> On Fri, Apr 1, 2022 at 1:37 AM Brian Nisbet <brian.nisbet@heanet.ie> wrote:<br>
>>><br>
>>> Leo,<br>
>>><br>
>>> Great stuff, thank you!<br>
>>><br>
>>> The data protection piece is fair, albeit I'd love to expand that to 18 and 36 months to guarantee it covering 3 meetings to more easily spot patterns, but Athina is the expert here.<br>
>><br>
>> We didn't spend a long time discussing the specific periods. I suppose<br>
>> there are two questions:<br>
>><br>
>> - What advantage do we get from retaining records for 50% longer?<br>
>> - How difficult would it be to change the record retention policy, if<br>
>> the Code of Conduct Team wanted to do so?<br>
>><br>
>>> Under 4 we still say: "In all cases, the RIPE Chair Team and the RIPE NCC will be informed of a decision by the CoC Team before it is implemented." Is it intended to change that language to reflect only major (you said significant, but if we're using minor/major
language elsewhere, I'm assuming significant = major) breaches will be<br>
>> informed prior to implementation?<br>
>><br>
>> You are right. That needs to be adjusted before we publish the draft.<br>
>><br>
>>> My biggest concern is that we now have to create broad classifications of what a minor or major breach is, which I'll admit I'd been hoping we could avoid.<br>
>><br>
>> Can we not leave that to the Code of Conduct Team, when they are<br>
>> selected? We have given non-exhaustive examples in the lists. If we<br>
>> try to define major and minor we'll still need the Code of Conduct<br>
>> Team to apply their good sense when something different happens.<br>
>> Perhaps it is simplest for them to take account of each individual<br>
>> situation and set a category accordingly?<br>
>><br>
>> Thanks,<br>
>><br>
>> Leo<br>
>><br>
><br>
> --<br>
> coc-tf mailing list<br>
> coc-tf@ripe.net<br>
> <a href="https://mailman.ripe.net/">https://mailman.ripe.net/</a><br>
> <<a href="https://mailman.ripe.net/">https://mailman.ripe.net/</a>><br>
<br>
--<br>
coc-tf mailing list<br>
coc-tf@ripe.net<br>
<a href="https://mailman.ripe.net/">https://mailman.ripe.net/</a><br>
</div>
</span></font></div>
</body>
</html>