Today, the Internet Corporation for Assigned Names and Numbers (ICANN) published the Registration Data Policy. The Registration Data Policy is a consensus policy based on recommendations made by the Generic Names Supporting Organization that allows domain name registries and registrars to comply with global data protection laws. The policy outlines the requirements for collection, transfer, publication, and retention of domain name registration data. It will go into effect on 21 August 2025, with a transition period from 21 August 2024 through 20 August 2025 for contracted parties. Once in full effect, the policy will replace the Interim Registration Data Policy. ICANN will send a formal notice to contracted parties in the coming days.
The Registration Data Policy is the result of broad community efforts to develop registration data policy requirements that can be implemented in compliance with applicable law. Like the Temporary Specification, the policy allows contracted parties to collect and provide registration data in a consistent manner, while adhering to privacy regulations. The Registration Data Policy implements a total of 34 policy recommendations from three ICANN Board resolutions and includes updates to 20 impacted policies and procedures as well as the Registration Data Access Protocol Profile. For more information on the Registration Data Policy and community work involved, read Sally Costerton's related blog.