<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
First of all, I want to say that I like the way discussions take
place within this group. We all have an opinion based on our
experience and day to day job which really help adressing the issue
thru its various ways.<br>
<br>
regarding warrant, that I hear a lot, you have to bear in mind that
there is nothing such an international warrant. We are working
within UE in order to somehow get one, meaning a way for LEA to
adress a request to a company or someone living in another european
country than the one the investigator is working. Question remains
about how to deal with a no answer.<br>
Anyway, today, the only way for an investigator to get answers to
its question is by asking his judge to send a Mutual Legal
Assistance Request or European Investigative Order to his fellow
magistrate in the other country so the police forces will open a
case just to get the information back. It may take some months til
the request is sent and answered. unfortunatly, it doesn't fit with
the need of speed while working cybercrime such as CP where data is
moved one month to another.<br>
<br>
So one question might also be : would you agree answering an
official request coming directly from a foreign LEA ?<br>
<br>
It will help for sure if the answer is yes but it won't change the
issue that is global cartography of a network as we speak. <br>
<br>
Who should I turn to in order to be assured that John Doe, renting
this server I am asking you about, isn't renting another server
providing exactly the same thing in another country? You might
answer RIPE NCC <i>(that might have to hire people to deal with
more legal request, and maybe raise the contract fees, who knows)</i>.
Sure but we are now facing registrants that are not providing the
data at all to the registries.<br>
<br>
I know my writing is going way beyond sara's question (sorry about
that) but I'm just trying to explain what our issues are. We just
need help from all stakeholders in order to find the best and proper
way to work.<br>
<br>
stephane<br>
<div class="moz-signature"><br>
<img src="cid:part1.07080900.03010805@interieur.gouv.fr"
border="0"></div>
<br style="line-height: 0pt;"><div style="border-top: 2px solid
rgb(48, 145, 71); display: inline-block; color: rgb(48, 145, 71);
font-size: x-small; padding: 5px; margin: 10px auto; font-family:
Arial,Garamond,Times New Roman,Times,serif;"
class="signature_ecolo_classname"><div>Pour une administration
exemplaire, préservons l'environnement.
</div><div>N'imprimons que si nécessaire.
</div></div><br>
-------- Message original --------<br>
<b>Sujet: </b>[INTERNET] Re: [ncc-services-wg] legal adress<br>
<b>De : </b><a class="moz-txt-link-abbreviated" href="mailto:netravnen+lists@gmail.com">netravnen+lists@gmail.com</a><br>
<b>Pour : </b><a class="moz-txt-link-abbreviated" href="mailto:stephane.robinot@interieur.gouv.fr">stephane.robinot@interieur.gouv.fr</a>,
<a class="moz-txt-link-abbreviated" href="mailto:ncc-services-wg@ripe.net">ncc-services-wg@ripe.net</a><br>
<b>Date : </b>10/10/2018 12:20<br>
<blockquote
cite="mid:cc2aa46f-3050-0e31-d337-a37824c68315@gmail.com"
type="cite">
<pre wrap="">
On 10/10/2018 11:23 AM, ROBINOT Stephane DCPJ SDLC wrote:
</pre>
<blockquote type="cite">
<pre wrap="">But here is my question : If, to you, the legal address is a personal
data, are you also thinking the same way about the telephone number
which is so far kept for registrar abuse contact phone ?
</pre>
</blockquote>
<pre wrap="">
If phone number is registered in company name/RegID. Definitely not.
</pre>
<blockquote type="cite">
<pre wrap="">Speaking about sole trader, if I understand well your point and go
beyond, the name by itself might also be considered as a personal data
as it is also a way to identify the person.
</pre>
</blockquote>
<pre wrap="">
Hard to argue for or against.
In its core essence. I will say Yes.
</pre>
<blockquote type="cite">
<pre wrap="">To me, legal address is just a way to be assured that the official
request are sent to the correct place
</pre>
</blockquote>
<pre wrap="">
Idea: Publish link to local business registry instead.
Alternative: as Hessler wrote. 'get a warrant'
Duplicate data results: If data is re-entered into the RIPE NCC
Database. When they are often accessible from local business registry.
It does not _really_ make sense.
As previously mentioned. Down-going rate in data quality is definitely
unavoidable over time.
</pre>
</blockquote>
<br>
</body>
</html>