Chris Disspain, CEO, auDA,
                       
                                    
In light of recent list discussions in relation to information held on
the AUNIC database hosted for auDA by the commercial entity
NetRegistry Pty Ltd, may I refer to the following reference:

INFORMATION PRIVACY ACT 2000
"PART 11A--INFORMATION PRIVACY ACT 2000 SCHEDULE 1
THE INFORMATION PRIVACY PRINCIPLES
4. Principle 4--Data Security
4.1 An organisation must take reasonable steps to protect the personal
information it holds from misuse and loss and from unauthorised
access, modification or disclosure.

Clarification is required by community members and sought from you as
CEO of auDA with respect to the following:

1. Kindly advise the specific reasonable steps auDA have taken to
comply with the Information Privacy Act 2000 in protecting data held
on the AUIC database from misuse, loss, or unauthorised access. 

2. In their capacity as host is it possible that NetRegistry have
access to bulk current consumer details residing on the AUNIC data
base over and above that which is publically available via interfaces
such as whois and aunicstatus ?

3. As registrant and registrar of au.com was any possible conflict of
interest investigated prior to acceptance by auDA of the AUNIC hosting
tender put forward by the commercial entity NetRegistry Pty Ltd?

Furthermore, regarding your investigation following Josh Rowe's
correspondence dated 16th August 2001, has such an investigation
reached completion? and is there a time frame as to when publication
of the resultant outcome may be expected? Did NetRegistry obtain AUNIC
data in an improper manner and use it for advertising purposes
including, but not limited to, unsolicited emails? In fairness to
NetRegistry and all .au registrants one would expect this issue to be
clarified and documented by auDA as soon as practicable.

A point of reference: 
"Key Objectives of auDA Interim Board Version 1.1"
Preamble of the au Domain Administration
Taking the view that the Internet Domain Name System is a public
asset, and that the .au ccTLD is under the sovereign control of the
Commonwealth of Australia, auDA will administer the .au ccTLD for the
benefit of the Australian community.


Cheers,

Peter Ostenberg





__________________________________________________________________
Get your free Australian email account at http://www.start.com.au