Private Information Handling at APNIC Database Database SIG at APNIC Open Policy Meeting October 25th , 2000 MAEMURA Akinori IP Address Working Group, JPNIC maem@nic.ad.jp

©Copyright 2000 Japan Network Information Center Contents Current situation on privacy of personal information Introduction of JPNIC’s Policy for Personal Information Handling Proposal 2019/5/23 ©Copyright 2000 Japan Network Information Center

©Copyright 2000 Japan Network Information Center Circumstances More personal/residential users are connected to the internet after cable access or ADSL got popular Even for such users, once IP address is assigned, the information about the assignee has to be registered on whois database and is made public to the Internet for operational purpose. Consequently, private information of residential assignees is disclosed without precaution Postal Address, Phone Number 2019/5/23 ©Copyright 2000 Japan Network Information Center

©Copyright 2000 Japan Network Information Center Two Standpoints Point-Of-Contact has to be looked up for the troubleshooting RFC1302 - Building a Network Information Services Infrastructure Private Information has to be handled carefully OECD Guideline, 1980 http://www.oecd.org/dsti/sti/it/secur/prod/PRIV-EN.HTM EU discussion minutes, 1995 http://europa.eu.int/eur-lex/en/lif/dat/1995/en_395L0046.html 2019/5/23 ©Copyright 2000 Japan Network Information Center

©Copyright 2000 Japan Network Information Center Trouble Occurred Several assignees of JPNIC encountered some problems related to the way of handling assignee’s private information. JPNIC stops disclosure of fields containing private information on the requested basis if it meets prerequisite defined by JPNIC 2019/5/23 ©Copyright 2000 Japan Network Information Center

©Copyright 2000 Japan Network Information Center Developing the Policy JPNIC DBPI-TF -- Database Publishing Issues Taskforce Minimizing information disclosure to those sufficient for the Internet Operation Definition and announce of the criteria and the purpose for the disclosure of information Definition of the procedure and the criteria for per-request disclosure of specific private information 2019/5/23 ©Copyright 2000 Japan Network Information Center

©Copyright 2000 Japan Network Information Center JPNIC’s Policy JPNIC Policy on the Handling of Domain Name Information and IP Address Information http://www.nic.ad.jp/en/db/dbpi/policy.html The background can be referred at http://www.nic.ad.jp/en/db/dbpi/background.html The Policy will be enforced in this November 2019/5/23 ©Copyright 2000 Japan Network Information Center

©Copyright 2000 Japan Network Information Center Minimizing information disclosure to those sufficient for the Internet Operation What we want for the purpose of Internet operation are the assignee of the IP address the information that enables the Internet operators to have a contact with the assignee’s engineer who can fix their network, when their network is down 2019/5/23 ©Copyright 2000 Japan Network Information Center

Undisclosed/disclosed items at JPNIC DB (1) Network Object Items exhibited/secured a IP Network Address Index b Network Name Disclosed F Organization J Postal Address Undisclosed M Admin-c Disclosed(JPNIC-handle) N Tech-c P Name server Y Notify-to 2019/5/23 ©Copyright 2000 Japan Network Information Center

Undisclosed/disclosed items at JPNIC DB (2) Host Object Nothing changed Items Exhibited/Secured a Host name Index B IP Address Disclosed C IPv6 address N Tech-c Disclosed(JPNIC-handle) Y Notify-to 2019/5/23 ©Copyright 2000 Japan Network Information Center

Undisclosed/disclosed items at JPNIC DB (3) Person Object Items Admin-c Tech-c a JPNIC handle Index c Name Disclosed D E-mail address G Organization J Postal Address Undisclosed L Division N Title O Phone number P Fax number Y Notify-to 2019/5/23 ©Copyright 2000 Japan Network Information Center

Comparison with other RIRs ARIN Undiscloses street addresses for residential users RIPE NCC No actions are taken for this issue 2019/5/23 ©Copyright 2000 Japan Network Information Center

Current situation with APNIC DB LIR and NIR have to send whois objects of the IP numbers they assign/allocate Documented and regulated　 APNIC exhibits the objects as they received JPNIC sends objects including hidden items. It is INCONSISTENT that the items hidden at JPNIC are exhibited at APNIC 2019/5/23 ©Copyright 2000 Japan Network Information Center

©Copyright 2000 Japan Network Information Center Proposal to APNIC Review the current policy defining the information to be disclosed Take the minimum information disclosing policy like JPNIC 2019/5/23 ©Copyright 2000 Japan Network Information Center

©Copyright 2000 Japan Network Information Center Thank you Private Information Handling at APNIC Database Database SIG at APNIC Open Policy Meeting October 25th 2000 MAEMURA Akinori IP Working Group, JPNIC maem@nic.ad.jp 2019/5/23 ©Copyright 2000 Japan Network Information Center