US, Tech Firms Warn Against ICANN’s Privacy Tightening

Internet Corporation for Assigned Names and Numbers (Icann), the global body that oversees internet domain names, is preparing a significant tightening of its privacy standards in response to new European Union policies. The US government and some major American tech businesses warn the move, which is expected to be adopted within the next couple of months, will threaten their ability to track down bad actors on the internet. Investigators have long used the online tracking information to determine where malevolent activity on the internet originates. The information, known as Whois data, is routinely collected by companies that run internet registries when people register a website. The data typically includes names, addresses and email contacts for people responsible for a site. It has been publicly available since the beginning of the internet. The expected change is a response by Icann, to a new European Union privacy rule, which takes effect May 25. The EU rule is aimed at protecting people’s online data from indiscriminate use. That includes Whois data. In response to the EU privacy rule, Icann has floated plans that would limit the public’s access to only the most basic information about a website, such as general location data. Icann’s plans also would set up a new system allowing access to more detailed data for people who are accredited—a group that potentially would include law enforcement, cybersecurity experts and business brand-protection investigators. But even many basic elements of the new accreditation system have yet to be determined. Meanwhile, the EU’s law will take effect on May 25, forcing the companies that register websites and collect the data to figure out what to do next. Failure to comply with the EU directive could expose them to large new fines, and many are feeling pressure to shut down access, internet experts say.