[rpd] New Version of Policy Proposal - Policy Compliance Dashboard (Draft-2) - AFPUB-2021-GEN-003-DRAFT02 (PDWG Chair)

Tue Nov 16 09:59:51 UTC 2021

Hi Paul,

Just to clarify something that I already said before.

This policy is not saying that the dashboard of each member is available to the other members. The dashboard is private to each member with its own data, so no disclosure of your status of compliance to others.

If you fail to address a compliance issue, following section 5, only then the resources subjected to incompliance will be published so everybody can see that. This is needed because before starting a reclamation, all possible means of resolving the situation must be tried, because it may happen that the resource holder has got a big trouble and can’t be contacted, customers or other colleagues may find a way to contact him, etc., etc. So sufficient chances to resolve the issue must be always tried.

Regarding your proposed text, I’m fine with that, but you shall notice that the previous version has been amended to ensure that we address the corrections suggested in the previous version IA. So going back to modify the text will depend on the new IA. If the staff can check your suggestion I’m fine, but at the same time, you should notice that what you’re asking is already done by the RSA.

Let me tell you one history which explains why we have this text in the proposal. About 3-4 years ago, it was discovered in RIPE that several members from an specific country (Russia), have used falsified documents (passports and corporate docs, if I recall correctly) and it was not just once, so it was clear that it was not a mistake. Do you think that in those cases further oportunities shall be given to the member? I will personally say not, clearly they tried to cheat the system and it is a non-trustable member. He always can restart the process to get the resources but from the beginning. Well, even in that case, the RSA already provides sufficient oportunities to the members to correct the situation.

Regards,

Jordi

@jordipalet

El 16/11/21 9:12, "Paul Hjul" <hjul.paul at gmail.com> escribió:

Regarding: https://afrinic.net/policy/proposals/2021-gen-003-d2

I've noted quite a bit of unease with the proposal stemming from information disclosures. I fear a lot of mess is created by conflating two different issues and circumstances. It is probably easiest to use an analogy of a bank. When I open a bank account my bank requires certain information from me and that information must be kept up to date. When I seek a loan I have to submit more information. Organizations divulge business plans and very sensitive commercial information all the time when seeking something from somebody. In order to apply for resources to be allocated information needs to be disclosed. Unfortunately there seems to be a culture of viewing all interactions with Afrinic as though they are seeking resources and this is misguided.

The policy proposal doesn't reinforce the question of what information ought to be maintained by Afrinic, only that a dashboard to empower members and to reduce uncertainty of when the organization will initiate an investigation.

I am of the view that consensus as to value in building such a dashboard for use by members AND as a necessary but not sufficient predicate for Afrinic to take certain steps can attain rough consensus if the participants in the working group act in good faith.

I propose the following slight alteration to  sub-article 5:

Contractual non-compliance, such as unauthorized transfers, lack of payment or document fraud, once confirmed, will cause the revocation of the services and member closure, following the RSA.

to read:

Contractual non-compliance, such as unauthorized transfers, lack of payment or document fraud, once investigated and confirmed, may cause the revocation of the services and member closure in accordance with the RSA. In determining whether to revoke services the Board shall after afford a fair hearing and consider all relevant circumstances in good faith, including whether the revocation is in the best interests of the members of the organization. 

Paul Hjul

_______________________________________________ RPD mailing list RPD at afrinic.net https://lists.afrinic.net/mailman/listinfo/rpd 

**********************************************
IPv4 is over
Are you ready for the new Internet ?
http://www.theipv6company.com
The IPv6 Company

This electronic message contains information which may be privileged or confidential. The information is intended to be for the exclusive use of the individual(s) named above and further non-explicilty authorized disclosure, copying, distribution or use of the contents of this information, even if partially, including attached files, is strictly prohibited and will be considered a criminal offense. If you are not the intended recipient be aware that any disclosure, copying, distribution or use of the contents of this information, even if partially, including attached files, is strictly prohibited, will be considered a criminal offense, so you must reply to the original sender to inform about this communication and delete it.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.afrinic.net/pipermail/rpd/attachments/20211116/7b5fd078/attachment-0001.html>