Are ICANN going to play "legitimate interest" card
Because among the reasons under Lawful basis you can give for processing Personal information within GDPR is "legitimate interest"
It's less box-ticky than contract, opt-in permission, etc but if you can frame the processing correctly then you're in.
As ICO puts it "It is likely to be most appropriate where you use people’s data in ways they would reasonably expect and which have a minimal privacy impact, or where there is a compelling justification for the processing"
Biting the hand that feeds IT
