Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

ICANN-accredited registrars and ICANN commenced a series of direct bilateral negotiations to amend and update the current Registrar Accreditation Agreement (RAA) in November, 2011.   These negotiations are currently underway.'

Pre-Toronto Update

Since the Prague meeting,   ICANN and the Registrars have engaged in six additional negotiation sessions, including two all-day, in-person meetings held in Washington D.C. (one of which was attended by Governmental Advisory Committee members and law enforcement representatives).  The sessions have been supplemented by information and document exchanges between discussions. The negotiations since Prague have largely focused on the key areas of Whois verification and data retention, which are part of the 12 GAC/law enforcement recommendations.  ICANN and the registrars have also continued discussion on the GNSO recommendations and specific requests by ICANN and the registrars, such as supporting DNSSEC and IPv6. More details are available on the individual meeting reports posted on the WIKIregistrar negotiation teams have concluded their negotiations.    The ICANN Board of Directors approved the new 2013 RAA on 27 June  2013.

Negotiation Goals/Objectives 

...

The Registrars Stakeholder Group and ICANN announced in Dakar the immediate commencement of negotiations on the RAA. 

Update:

 

ICANN published the Proposed Final 2013 Registrar Accreditation Agreement for public comment at:

http://www.icann.org/en/news/announcements/announcement-22apr13-en.htm

For a detailed overview of the improvements to the Proposed Final 2013 RAA, please listen to  the webinar recording   or view the slides from the webinar conducted by ICANN Staff on April 30th 

ICANN and the Registrar Negotiating Team commenced negotiation on amendments to the RAA in October 2011. Since the 7 March 2013 version was posted, ICANN and the Registrars (through the Registrar Negotiating Team) continued to reach agreement on the proposed text of the 2013 RAA, which was posted for community comment on April 22, 2013.   These

...

include:

The Proposed Specifications and Addendums:

Section IV: Additional Information: 

A Report of the Public Comments submitted in response to the 7 March 2013 posting of the RAA is available here [PDF, 178 KB].

Documents related to the revisions of the WHOIS Bulk Access provisions (Section 3.3.6 of the RAA):

  • Letter to Kurt Pritz from Demand Media  6 May 2011
  • Letter to Kurt Prtiz from Network Solutions, 23 January 2010
  • Summary of Economic Analysis performed by Joshua Wright, Professor, George Mason University School of Law and Department of Economics

Documents related to the GNSO policy development process (PDP) to commence on the "remaining issues" left unresolved at the conclusion of the negotiations:

 


 

Archive


Archive of Documents Related to the Beijing Meeting:

In advance of the Beijing Meeting, on   ICANN posted a group of documents on the status of negotiation of amendments to the Registrar Accreditation Agreement (RAA). These include:

More information iis available by reviewing the archives of the Beijing Session.

Archive of Documents Related to the Toronto Meeting:

In

Current Status  

 In advance of the Toronto Meeting, on 24 September 2012,  ICANN posted a group of documents on the status of negotiation of amendments to the Registrar Accreditation Agreement (RAA). These include:

More information is available by reviewing the Transcript and recording of the Toronto Update on the RAA Session.

  Archive of Documents Posted Prior to the Prague Meeting:

...

Community Consultation in Toronto

...

...

 _________________________________________________

AGENDA FOR PUBLIC MEETING

Key Areas for Community Input

Below we provide some key questions and points of information in advance of community discussions in Toronto – some of which are the same as we posed to the community in Prague. We seek community input on these points.  We also seek to continue discussion on how to assure that, when the new RAA is eventually approved, all Registrars will move to the new agreement.

Specific questions and points to help pinpoint the issues are:

...

In Toronto, community input is sought on:

  • Should the process of registering domain names be changed to perform Whois verification before domain names are allowed to resolve? (As the agreement currently stands, validation of would take place prior to resolution.) As part of an agreement to support a post-resolution verification model, the negotiation teams have agreed in principle to a review of the Whois verification specification after 12 months of registrar adoption, to determine the effectiveness of the new verification obligations, as well as the launch of work to investigate a pilot program for pre-resolution verification.  In addition, the registrars have proposed the creation of a cross-stakeholder working group to collect data and inform further enhancements and/or policy development.
  • Should registrants be required to have and publish a phone number? (Currently the registrar only has to publish telephone numbers for the administrative and technical contacts, not for the Registered Name Holder.) How else might this impact registrants?
  • What are the actual technical and financial burdens for Registrars and the Community in verifying phone numbers and/or email addresses or in conducting such verification before resolution of the domain name? 
  • What are the costs associated with a requirement to verify both telephone and email contact data, and will such a requirement have a meaningful impact on deterring or combating illegal activity?

Re-verification

The GAC/law enforcement proposal requires some form of re-verification of registrant information. The Whois Reminder Policy has limited effect on Whois accuracy, and some in the community argue that it should be augmented with a re-verification requirement. Conversations have now turned to defining the types of events that should trigger a Registrar obligation to re-verify the certain registrant WHOIS information.  Some suggestions of this trigger are:  transfers, bounced emails sent by the registrar, a Whois Data Problem Report Service notification, renewal and if registrar has any information suggesting that the contact information is incorrect. 

Community input is sought on:

  • Should re-verification of Whois information be required on a periodic (e.g., annual) basis as opposed to being event driven?  How much of a burden would annual verification impose on legitimate registrants, including those registering large numbers of names?
  • Is it appropriate to require registrars to suspend a domain name registration if the annual re-verification is not completed?  Are the possible unintended consequences, including liability associated with such suspensions, disproportionate? 
  • What are other possible events that should trigger a requirement to re-verify registrant Whois data?
  • What benefits will re-verification achieve?
  •  

...

Law enforcement representatives appear to be willing to accept a dual-tiered retention schedule, requiring some elements such as transaction data to be retained for a minimum of six months (not six months after the expiration of the domain name), while other kinds of data would be kept for two years past the life of the registration.  This addresses a key registrar concern that imposing a universal two-year retention requirement would obligate registrars to retain data for longer than it is useable, impose new data retention costs, and create an uneven obligation among registrars, as the data protection/privacy regimes in some jurisdictions would not allow for all data to be maintained for that length of time.  The two-tiered schedule is proposed as a schedule that is more likely to be permitted under various data protection regimes, and to assure a consistent application of obligations under the RAA. 

The possibility, however, always remains that some registrars may find their data retention obligations to be prohibited by even more restrictive laws.  As a result, ICANN and the registrars have discussed various processes under which a registrar might seek a waiver of certain elements of the data retention requirements to the extent that they are in conflict with laws applicable to the registrar.  With the assistance of the Governmental Advisory Committee, ICANN and the registrars are evaluating possible modification of the existing “ICANN Procedure For Handling WHOIS Conflicts with Privacy Law” (at http://archive.icann.org/en/processes/icann-procedure-17jan08.htm) as a basis for this process.  There is concern, however, that as currently drafted, the procedure may only be invoked where a legal proceeding against the registrar has been initiated.  The parties believe that in appropriate circumstances it would be preferable to permit a registrar to invoke the waiver process, and for ICANN to consider a waiver request prior to the initiation of a regulatory or judicial proceeding.

  • Is the use of a process like the ICANN Procedure for Handling Whois Conflicts with Privacy Law helpful to identify when registrars should be relieved from certain data retention obligations?  If no, what process should be used?
  • What standards could be imposed to invoke the process, short of requiring the initiation of a formal legal or regulatory process?

 Universal Adoption of RAA

 The Registrar Negotiating Team has requested, and ICANN agrees, that it is essential to consider how to require and/or incentivize universal adoption of this new RAA. The accreditation model is based upon the principle of uniformity of contracts for all ICANN-accredited Registrars.   ICANN and the registrars recognize that those moving to the new RAA will face many new obligations and associated implementation costs.  ICANN and the Registrars are striving to create a globally acceptable improved RAA.  Accordingly, the discussion continues on how can global implementation be best achieved.

Some ideas that have been suggested and ICANN seeks community input on these suggestions:

...

If you have general feedback you'd like to provide, please provide them by submitting comments below.

...