<html><body>
<p class="MsoNormal">John
is currently on leave. His email is being monitored but if this is an urgent
issue, please contact Ron Gadeberg at <a href="mailto:rong@okpud.org">rong@okpud.org</a>
or the Broadband Dept. at <a href="mailto:network-team@okpud.org">network-team@okpud.org</a>. <o:p></o:p></p>
<br/><br/>
<div style='border: none; border-top: solid #B5C4DF 1.0pt; padding: 3.0pt 0cm 0cm 0cm'>
<p class="MsoNormal">
<b><span lang="EN-US" style='font-size: 10.0pt; font-family: "Tahoma","sans-serif"'>
From:</span></b><span lang="EN-US" style='font-size: 10.0pt; font-family: "Tahoma","sans-serif"'>
arin-ppml@arin.net
<br>
<b>Sent:</b> 2/5/2024 4:21:40 PM +00:00<br>
<b>To:</b> JohnM@okpud.org<br>
<b>Subject:</b> [Fwd: JohnM]Re: [arin-ppml] Draft Policy ARIN-2024-1: Definition of Organization ID/Org ID</span></p>
</div>
Unfortunately, legal person is also problematic as it would eliminate unincorporated business entities. <br/><br/>Suggest adding legal person as an additional term to the proposed language rather than replacing it. <br/><br/>Owen<br/><br/><br/><blockquote>On Feb 4, 2024, at 11:22, Tyler O'Meara via ARIN-PPML <<a href="mailto:arin-ppml@arin.net">arin-ppml@arin.net</a>> wrote:<br/><br/>That's an interesting point Roman, but I think that ship may have<br/>already sailed.<br/><br/>If a privacy law covers the registrant of an Org ID, presumably it also<br/>covers POC records as well, which are also published in WHOIS. Do we<br/>need to prohibit POC records from being natural persons as well<br/>(genuine question)?<br/><br/>Given we also have at least 1 known case of a natural person(s)<br/>registering as an Org ID, ARIN would also either need to revoke any<br/>existing resources granted to natural persons, force them to transfer<br/>to a juridical person, or deal with the privacy/legal implications<br/>anyways.<br/><br/>Finally, as you alluded to, RIPE does permit natural persons to receive<br/>resources despite having more jurisdictions under their purview, in<br/>addition to the GDPR to contend with.<br/><br/>I think this is probably something where ARIN legal would need to chime<br/>in, but in the absence of a compelling legal reason why supporting<br/>natural persons is prohibitively difficult, I believe that ARIN should<br/>support the registration of resources to natural persons.<br/><br/>Tyler<br/><br/><blockquote>On Sun, 2024-02-04 at 09:46 -0800, Roman Tatarnikov wrote:<br/>Oh, that's a fun case. On one side restricting everything to<br/>incorporated entities feels like creating barriers, but on the other<br/>side there are Privacy Laws.<br/><br/>Great example would be getting consent about sharing the information<br/>of a particular person, and tracking what is shared and where,<br/>ensuring that no PII was leaked out. While Europe has GDPR, in the<br/>US, as far as I remember, there were only six states with privacy<br/>laws. And a quick search shows that there has been a lot of new<br/>developments:<br/><a href="https://www.dataguidance.com/comparisons/usa-privacy-laws">https://www.dataguidance.com/comparisons/usa-privacy-laws</a> And that's<br/>just the US, where no federal law is in sight to address this. Canada<br/>has PIPEDA, and the region that ARIN covers is much larger than just<br/>those two.<br/><br/>So if we're going to allow individuals to be listed under Org ID,<br/>we'd need to ensure that RIR is tracking how it is used, where, and<br/>taking measures to comply with all those emerging and quickly<br/>changing privacy laws. It's going to be such a nightmare that I doubt<br/>it's worth the hustle. Keeping Org ID defined as it is in the<br/>proposal should avoid those issues. I believe very few individuals<br/>hold resources, and registering as a Sole-Proprietorship or DBA<br/>should be an easy work around. I am unaware of how RIPE is addressing<br/>this, but it might be one of those topics to ask them about.<br/><br/>I support the proposal as written.<br/><br/></blockquote><br/>_______________________________________________<br/>ARIN-PPML<br/>You are receiving this message because you are subscribed to<br/>the ARIN Public Policy Mailing List (<a href="mailto:ARIN-PPML@arin.net">ARIN-PPML@arin.net</a>).<br/>Unsubscribe or manage your mailing list subscription at:<br/><a href="https://lists.arin.net/mailman/listinfo/arin-ppml">https://lists.arin.net/mailman/listinfo/arin-ppml</a><br/>Please contact <a href="mailto:info@arin.net">info@arin.net</a> if you experience any issues.<br/></blockquote><br/>_______________________________________________<br/>ARIN-PPML<br/>You are receiving this message because you are subscribed to<br/>the ARIN Public Policy Mailing List (<a href="mailto:ARIN-PPML@arin.net">ARIN-PPML@arin.net</a>).<br/>Unsubscribe or manage your mailing list subscription at:<br/><a href="https://lists.arin.net/mailman/listinfo/arin-ppml">https://lists.arin.net/mailman/listinfo/arin-ppml</a><br/>Please contact <a href="mailto:info@arin.net">info@arin.net</a> if you experience any issues.<br/></body></html>