<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div class="">I’m a director of a web hosting business so I made enquires of the CAC as part of keeping myself informed about the industry.</div><div class=""><br class=""></div><div class="">The advice I received from the CAC was that _they_ couldn’t determine if the business providing only web hosting was an ISP because that is administered by the ACMA and Department of Communication and that I would need legal advice to determine if we are. That means they will require advice too since they’ve stated they can’t work it out by themselves.</div><div class=""><br class=""></div><div class="">We’re not members of the TIO and don’t provide an Internet carriage service to the public a logical reading of the amended Intercept Act is that we’re not actually obliged to comply and that we are in fact an “end user” not an ISP. We don’t do any of the ISP compliance things like file an ICP or submit responses under any Record Keeping Rule.</div><div class=""><br class=""></div><div class="">Naturally we will continue to retain relevant data but of interest my reading of the FAQ and the comments from the CAC seem to suggest that retaining the web access logs is not permitted. That’s a pity because I am aware from media reports that web server logs have been used by law enforcement in the past.</div><div class=""><br class=""></div><div class="">What a mess. It’s such poor drafting. They could have trivially made the amended Act include “Content Service Providers” in the definition and all would have been crystal clear.</div><div class=""><br class=""></div><div class="">I wrote a long piece on this here:</div><div class=""><br class=""></div><div class=""><a href="http://blog.lindsaystrategic.com/2015/07/31/how-data-retention-affects-web-hosting-service-providers/" class="">http://blog.lindsaystrategic.com/2015/07/31/how-data-retention-affects-web-hosting-service-providers/</a></div><div class=""><br class=""></div><div class="">where I go through the logical steps to come to the conclusion.</div><div class=""><br class=""></div><div class="">It’s pretty obvious that you can find lawyers who will agree and lawyers who will disagree.</div><div class=""><br class=""></div><div class="">Cheers,</div><br class=""><div apple-content-edited="true" class="">
<div class="">John Lindsay</div><div class=""><a href="mailto:johnslindsay@mac.com" class="">johnslindsay@mac.com</a></div><div class="">+61403577711</div>
</div>
<br class=""><div><blockquote type="cite" class=""><div class="">On 27 Aug 2015, at 12:23 pm, Chad Kelly <<a href="mailto:chad@cpkws.com.au" class="">chad@cpkws.com.au</a>> wrote:</div><br class="Apple-interchange-newline"><div class="">On 8/27/2015 11:25 AM, <a href="mailto:ausnog-request@lists.ausnog.net" class="">ausnog-request@lists.ausnog.net</a> wrote:<br class=""><blockquote type="cite" class="">Data Retention Issues<br class="">We are confident that Intervolve will not presently be caught by the legislation as drafted. We have also had a look around for any hints as to future declarations. Estimating costs is extremely difficult should such a declaration ever be made. We have used the estimate from PwC that were given to the government to give some sort of guidance. We have also included guidance on creating a data retention plan.<br class="">Do the metadata retention laws apply to Intervolve?<br class=""></blockquote>Have you spoken to the AGD directly?<br class="">Your advice in this review is similar to the advice i've been given by a few other hosting providers. But the advice through the AGD and the CAC varies considerably.<br class="">But this review also varies from the departments own advice given in the May version of the Frequently asked questions, which were produced to clarify the previous concerns over the unclear nature of the previous FAQ.<br class="">Long story short, the latest FAQ doesn't seam to exclude hosting providers at all, in fact it seams to include both hosts and resellers of infrastructure and both providers with and without their own networks.<br class="">Most of the concern with people who rent infrastructure appears to be around the storage of email data.<br class="">Most of us have been talking about this over the last few months, just not all publicly.<br class="">Regards Chad.<br class=""><br class=""><br class=""><br class="">-- <br class="">Chad Kelly<br class="">Manager<br class="">CPK Web Services<br class="">web <a href="http://www.cpkws.com.au" class="">www.cpkws.com.au</a><br class="">phone 03 9013 4853<br class=""><br class="">_______________________________________________<br class="">AusNOG mailing list<br class=""><a href="mailto:AusNOG@lists.ausnog.net" class="">AusNOG@lists.ausnog.net</a><br class="">http://lists.ausnog.net/mailman/listinfo/ausnog<br class=""></div></blockquote></div><br class=""></body></html>