Articles
Likes on articles
I am the Chief Legal Officer at the RIPE NCC, responsible for all legal aspects of the organisation.
• 8 min read
ICP-2 - a document spelling out criteria for the establishment of new RIRs - was published all the way back in 2001. And while the requirements it lays out remain applicable to all RIRs, more recent events have revealed missing pieces that it's up to the community to fill in.
• 4 min read
We recently removed sanctions-related restrictions from 49 RIPE NCC members and End Users who can now access our services again. In this article we provide some background information to explain why this is.
• 9 min read
Since the war in Ukraine escalated, people have raised concerns about the risk of illegitimate registry update requests being submitted to the RIPE NCC. In this article, we explain what we have been doing to minimise this risk so far and look at some additional measures we could implement.
• 4 min read
After the recent adoption of EU sanctions against Russia, we’ve seen some confusion about our compliance. This article will briefly cover some of these issues and explain why the RIPE NCC is fully compliant with the latest EU sanctions.
• 8 min read
Ahead of next week’s RIPE Meeting, we thought it was worth looking at how sanctions have affected us over the past year or so, along with some of the steps we have taken in response.
• 4 min read
The increasing rate of conflicting regulatory developments across our service region has become a very real subject of concern for the RIPE NCC. In this article, Athina Fragkouli talks about the impact such developments have on our operations and the principles guiding the work being done to prepar…
• 5 min read
As the first in a series of articles aimed at exploring how policy-making institutions are reacting to challenges posed by Artificial Intelligence (AI), we look at how the Council of Europe seeks to examine the feasibility of a legal framework for the development, design and application of AI.
• 8 min read
In our third article on the GDPR, we’re looking at the legal basis for processing personal data in the RIPE Database when it refers to an individual resource holder or contact person. We will also outline the relevant obligations of the responsible parties.
• 9 min read
We’ve heard feedback that there’s a lot of interest in the way personal data is processed in the RIPE Database and how it will be affected by the GDPR implementation. Spoiler alert: our assessment indicates that current operations are in line with the legislation.
• 5 min read
This is the first in a series of articles we plan to publish on RIPE Labs over the coming weeks and months, each of which will provide details of any legal analysis we perform in the implementation of the GDPR in the RIPE Database, and any other RIPE NCC services.
Showing 10 article(s)
• 29 min read
The 13th annual meeting of the Internet Governance Forum (IGF) runs from 12-14 November 2018 in Paris. The RIPE NCC staff at the event will be liveblogging key moments and session take-aways. Check back on this page for regular updates on the issues, arguments and ideas from RIPE NCC staff and RIPE…
• 6 min read
In this article we're looking at amendments that will be needed to the RIPE Database in order to ensure GDPR compliance.
Showing 2 article(s)
“I'm not sure about the consequences. Does it mean that Afrinic could lose its accreditation?”
The goal of this work is to fortify the accountability of the RIR system and the stability of the Joint Internet Registry. To have RIRs that are able to conduct their function in a reliable manner.
“Exactly what the BETTER position is. When my honest organization had money/payment problems, the RIPE NCC threatened us to take away all resources. But an organization tainted by its involvement in international crimes can pay whenever it wants. Moreover, I repeat: RIPE NCC distributes to sanctioning organizations SURPLUS what the sanctions explicitly forbid. This is a very strange "neutrality."”
Please note that the RIPE NCC surplus is not redistributed to sanctioned members. From a practical perspective, the redistribution of the surplus is done in the form of a discount on members' yearly invoices. As mentioned in the article, although the payment obligation remains, we do not invoice sanctioned members and so we do not risk violating sanctions in this way.
“Thank you guys for the explanation, but I have a question: why OFAC restrictions matter regards to EU operation activity? I supposed ARIN is under their control, am I wrong?”
We can appreciate that this point is a little confusing. OFAC sanctions indeed are not applicable to us and do not affect our ability to provide services or resources to our members. However, they are important to our banks, as they also operate in the US. This has impacted our ability to receive payment from 68 members in Iran/Syria. We are looking for a long-term solution that will allow us to continue receiving membership fees in these cases.
“Given that section 32 adds to Article 19 to the UHDR: “The promotion, protection and enjoyment of human rights on the Internet”, can't it be argued it be under the humanitarian exemptions that exist in the law on sanctions ?”
In our request to the Dutch authorities, we did call upon humanitarian exemptions in the EU regulation. Their assessment was that the regulations did not provide legal grounds for an exemption that would be applicable in our case. Note that the UHDR is not directly enforceable to national legislation. It can only be enforceable if it is incorporated in the national (or EU) law.
“For people interested in these things, have a look at the following survey: https://ec.europa.eu/info/law/better-regulation/have-your-say/initiatives/13017-Declaration-of-Digital-Principles-the-‘European-way’-for-the-digital-society_en”
Thank you for sharing this, Jaap.
“Hello, I would like to ask what is a good practice for collecting consents from customers. I mean from network operator's position - we must collect consents from customers in order to provide them IP addresses together with our telco services. Should we sign dedicated agreement on processing personal data? Or a simple form enclosed to telco agreement is sufficient. Regards, Michal Halbsguth”
This is a very good question. It's important that network operators are clear about what obtaining the consent of their customers means in very practical terms. However, as I'm sure you'll understand, we're not able to give legal advice to third parties. My only recommendation is to seek this guidance from a lawyer that is able to speak to your particular situation. Athina Fragkouli Head of Legal RIPE NCC
Showing 6 comment(s)